deps: next 16.3.3, react 19.2.8

next.config.ts

@@ -1,8 +1,12 @@
 import type { NextConfig } from "next";
 
 const nextConfig: NextConfig = {
-  /* config options here */
   output: "standalone",
+  // App uses Chakra Image (plain <img> to /public). Next Image Optimization
+  // is unused and is the GHSA-2xp9-vwfh-vxw4 AVIF RCE surface.
+  images: {
+    unoptimized: true,
+  },
   experimental: {
     optimizePackageImports: ["@chakra-ui/react"],
   },

package.json

@@ -12,10 +12,10 @@
   "dependencies": {
     "@chakra-ui/react": "^3.32.0",
     "@emotion/react": "^11.14.0",
-    "next": "16.1.6",
+    "next": "16.3.3",
     "next-themes": "^0.4.6",
-    "react": "19.2.3",
-    "react-dom": "19.2.3",
+    "react": "19.2.8",
+    "react-dom": "19.2.8",
     "react-icons": "^5.5.0"
   },
   "devDependencies": {
@@ -24,8 +24,11 @@
     "@types/react": "^19",
     "@types/react-dom": "^19",
     "eslint": "^9",
-    "eslint-config-next": "16.1.6",
+    "eslint-config-next": "16.3.3",
     "tailwindcss": "^4",
     "typescript": "^5"
+  },
+  "overrides": {
+    "yaml": "1.10.3"
   }
 }