[Snyk] Security upgrade next from 16.2.11 to 16.3.0

[karlhorky]

Snyk has created this PR to fix 3 vulnerabilities in the pnpm dependencies of this project.

Snyk changed the following file(s):

• package.json

⚠️ Warning

Failed to update the pnpm-lock.yaml, please update manually before merging.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Directory Traversal SNYK-JS-POSTCSS-18512282	****
	Directory Traversal SNYK-JS-POSTCSS-18313036	506
	Directory Traversal SNYK-JS-POSTCSS-18313038	506

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Directory Traversal

[karlhorky]

This is a minor version upgrade from next@16.2.11 to next@16.3.0. Based on the preview release notes, this version focuses on new features and performance improvements rather than breaking changes.

Key Changes:

• Instant Navigations: A new feature to make navigations feel instantaneous, similar to a single-page application (SPA). This is controlled by feature flags (cacheComponents: true, partialPrefetching: true) and should not break existing behavior.
• AI & Developer Experience: Introduces AI-native development tools, structured diagnostics, and improvements to the DevTools MCP server to assist AI coding agents.
• Turbopack Improvements: The bundler receives significant performance enhancements, focusing on reducing memory usage and speeding up build times.
• Partial Prefetching: Instead of prefetching an entire route, the framework now prefetches a reusable layout shell and streams dynamic content on navigation to save bandwidth.

No breaking API changes are documented for this minor release. The changes are primarily additive features and performance optimizations.

Source: Next.js 16.3 Preview Release Notes

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[Copilot]

Pull request overview

Updates the project’s Next.js dependency version to address Snyk-reported vulnerabilities in transitive pnpm dependencies.

Changes:

• Bump next from 16.2.11 to 16.3.0 in package.json.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.