feat: caching and upstream sync (#34)

* chore: upgrade Next.js to 15.6.0-canary.58 (CVE-2025-55182) (vercel#1507)

* chore: upgrade Next.js to 15.6.0-canary.58 (CVE-2025-55182)

* chore: upgrade Next.js to 15.6.0-canary.58 (CVE-2025-55182)

* Fix React Server Components CVE vulnerabilities (vercel#1510)

Updated dependencies to fix Next.js and React CVE vulnerabilities.

The fix-react2shell-next tool automatically updated the following packages to their secure versions:
- next
- react-server-dom-webpack
- react-server-dom-parcel  
- react-server-dom-turbopack

All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory.

Co-authored-by: Vercel <vercel[bot]@users.noreply.github.com>

* Fix React Server Components CVE vulnerabilities (vercel#1511)

Updated dependencies to fix Next.js and React CVE vulnerabilities.

The fix-react2shell-next tool automatically updated the following packages to their secure versions:
- next
- react-server-dom-webpack
- react-server-dom-parcel  
- react-server-dom-turbopack

All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory.

Co-authored-by: Vercel <vercel[bot]@users.noreply.github.com>

* fix: suspense and revalidate issues from updating next.js (vercel#1514)

* fix: product provider without suspense

ProductProvider was using useSearchParams without a Suspense. But since it wraps the complete page it'd break the fallback shell, so I got rid of it and just access the search params directly within each component. That way you keep individual suspenses. I had to run prettier so changes are huge.

* fix: also remove useProduct from add-to-cart

* fix: try adding use cache: private to getCart()

* fix: router refresh

* fix: use updateTag instead of router.refresh()

* chore: update lint configuration to oxlint and oxfmt

Replace eslint with oxlint and add oxfmt formatter configuration.
Update pre-commit hook and apply formatting across the codebase.

* test: update e2e tests and dependencies

Update Playwright to v1.58, update test dependencies, add tsconfig.
Improve add-to-cart test reliability with retry logic.

* chore: update template dependencies and configuration

Update Next.js, React, and other dependencies.
Update tsconfig and next.config settings.

* refactor: sync upstream changes

Sync component, lib, and API type changes from upstream.
Includes cart improvements, variant selector updates, API retry
enhancements, and gallery/opengraph updates.

* fix: address PR review feedback

- Add fallback to use handle as direct ID when seoUrl lookup fails
- Use find() instead of filter() for cart item lookup
- Add missing await in requestContext

---------

Co-authored-by: Chris Tate <chris@ctate.dev>
Co-authored-by: vercel[bot] <35613825+vercel[bot]@users.noreply.github.com>
Co-authored-by: Vercel <vercel[bot]@users.noreply.github.com>
Co-authored-by: Boris Besemer <borisbesemer@gmail.com>

Author: 4 people

.eslintrc.json

@@ -23,8 +23,8 @@ jobs:
       - uses: actions/setup-node@v3
         with:
           node-version: 22
-          cache: 'pnpm'
-          cache-dependency-path: '**/pnpm-lock.yaml'
+          cache: "pnpm"
+          cache-dependency-path: "**/pnpm-lock.yaml"
 
       - name: Install e2e-tests dependencies
         run: cd e2e-tests && pnpm install --no-frozen-lockfile --prefer-offline

.github/workflows/e2e-tests.yml

@@ -1,2 +1,2 @@
-pnpm run lint
-npx lint-staged
+npx pnpm lint
+npx pnpm format:check

.husky/pre-commit

@@ -0,0 +1,8 @@
+{
+  "printWidth": 100,
+  "tabWidth": 2,
+  "useTabs": false,
+  "semi": true,
+  "singleQuote": false,
+  "trailingComma": "all"
+}

.oxfmtrc.json

@@ -0,0 +1,8 @@
+{
+  "$schema": "https://raw.githubusercontent.com/oxc-project/oxc/main/npm/oxlint/configuration_schema.json",
+  "rules": {
+    "no-unused-vars": "warn",
+    "no-console": "off"
+  },
+  "ignorePatterns": ["node_modules", ".next", "e2e-tests"]
+}