Upgrade the next version to 16.0.7 and react to 19.2.7 to fix the CVE-2025-55182 issue (#110)

Author: HUAHUAI23

.github/workflows/docker-build-push.yml

@@ -145,7 +145,7 @@ jobs:
             body += `| Build Status | ${buildSuccess ? '✅ Passed' : '❌ Failed'} |\n`;
             body += `| Platforms | linux/amd64 (PR validation) |\n`;
             body += `| Push to Registry | ⚠️ No (PR build only) |\n`;
-            body += `| Framework | Next.js 15 + Prisma |\n`;
+            body += `| Framework | Next.js 16 + Prisma |\n`;
             body += `| Base Image | node:current-alpine |\n\n`;
 
             if (buildSuccess) {

eslint.config.mjs

@@ -1,48 +1,74 @@
-import { FlatCompat } from "@eslint/eslintrc"
+import { defineConfig, globalIgnores } from "eslint/config"
+import nextVitals from "eslint-config-next/core-web-vitals"
+import nextTs from "eslint-config-next/typescript"
+import eslintConfigPrettier from "eslint-config-prettier"
 import simpleImportSort from "eslint-plugin-simple-import-sort"
-import { dirname } from "path"
-import { fileURLToPath } from "url"
 
-const __filename = fileURLToPath(import.meta.url)
-const __dirname = dirname(__filename)
+const eslintConfig = defineConfig([
+  ...nextVitals,
+  ...nextTs,
+  // Override default ignores of eslint-config-next.
 
-const compat = new FlatCompat({
-  baseDirectory: __dirname,
-})
-
-const eslintConfig = [
-  ...compat.extends("next/core-web-vitals", "next/typescript", "prettier"),
+  // Custom plugins and rules
   {
     plugins: {
       "simple-import-sort": simpleImportSort,
     },
     rules: {
+      // Simple import sort rules
       "simple-import-sort/imports": [
         "error",
         {
           groups: [
+            // React and external packages
             ["^react", "^@?\\w"],
+            // Internal packages
             ["^(@|components)(/.*|$)"],
+            // Side effect imports
             ["^\\u0000"],
+            // Parent imports
             ["^\\.\\.(?!/?$)", "^\\.\\./?$"],
+            // Other relative imports
             ["^\\./(?=.*/)(?!/?$)", "^\\.(?!/?$)", "^\\./?$"],
+            // Style imports
             ["^.+\\.?(css)$"],
           ],
         },
       ],
       "simple-import-sort/exports": "error",
+
+      // TypeScript rule adjustments
+      "@typescript-eslint/no-explicit-any": "off",
+      "@typescript-eslint/no-unused-vars": [
+        "warn",
+        {
+          argsIgnorePattern: "^_",
+          varsIgnorePattern: "^_",
+          caughtErrorsIgnorePattern: "^_",
+        },
+      ],
+
+      // React hooks rules adjustments
+      "react-hooks/set-state-in-effect": "warn", // Downgrade from error to warning
     },
   },
-  {
-    ignores: [
-      "node_modules/**",
-      ".next/**",
-      "out/**",
-      "build/**",
-      "next-env.d.ts",
-      "components/ui/**",
-    ],
-  },
-]
+
+  // Prettier config should be last to override conflicting rules
+  eslintConfigPrettier,
+
+  globalIgnores([
+    // Default ignores of eslint-config-next:
+    "node_modules/**",
+    ".next/**",
+    "out/**",
+    "build/**",
+    "next-env.d.ts",
+    "components/ui/**",
+    "components/animate-ui/**",
+    "lib/api-client.examples.ts",
+    "lib/api-usage-examples.ts"
+  ]),
+])
 
 export default eslintConfig
+

package.json

@@ -1,10 +1,10 @@
 {
-  "name": "Fulling",
+  "name": "fulling",
   "version": "0.4.1",
   "private": true,
   "scripts": {
     "prepare": "prisma generate",
-    "dev": "next dev -H 0.0.0.0 -p 3000 --turbo",
+    "dev": "next dev -H 0.0.0.0 -p 3000",
     "build": "prisma generate && next build",
     "start": "next start -H 0.0.0.0 -p 3000",
     "lint": "eslint .",
@@ -40,38 +40,38 @@
     "jsonwebtoken": "^9.0.2",
     "lucide-react": "^0.545.0",
     "nanoid": "^5.1.6",
-    "next": "15.5.4",
+    "next": "16.0.7",
     "next-auth": "^5.0.0-beta.29",
     "next-themes": "^0.4.6",
     "pino": "^10.1.0",
     "prisma": "^6.17.1",
-    "react": "19.1.0",
-    "react-dom": "19.1.0",
+    "react": "19.2.1",
+    "react-dom": "19.2.1",
     "sonner": "^2.0.7",
     "tailwind-merge": "^3.3.1",
     "tus-js-client": "^4.3.1",
     "zod": "^4.1.12"
   },
   "devDependencies": {
-    "@eslint/eslintrc": "^3.3.1",
     "@tailwindcss/postcss": "^4",
     "@types/jsonwebtoken": "^9.0.10",
     "@types/node": "^20",
-    "@types/react": "^19",
-    "@types/react-dom": "^19",
+    "@types/react": "19.2.7",
+    "@types/react-dom": "19.2.3",
     "eslint": "^9",
-    "eslint-config-next": "15.5.4",
+    "eslint-config-next": "16.0.7",
     "eslint-config-prettier": "^10.1.8",
     "eslint-plugin-simple-import-sort": "^12.1.1",
-    "prettier": "^3.6.2",
     "tailwindcss": "^4",
     "tw-animate-css": "^1.4.0",
     "typescript": "^5"
   },
   "pnpm": {
     "overrides": {
       "whatwg-url": "^13.0.0",
-      "tr46": "^4.1.1"
+      "tr46": "^4.1.1",
+      "@types/react": "19.2.7",
+      "@types/react-dom": "19.2.3"
     }
   },
   "packageManager": "pnpm@10.20.0",