templates: bumps next.js to 16.2.6 (#16538)

This bumps the Next.js version in our templates and monorepo to 16.2.6.
It also bumps the minimum supported Next.js 16 version to 16.2.6, to
discourage people from using a Next.js version with known CVEs.

Author: AlessioGr

docs/getting-started/installation.mdx

@@ -16,7 +16,7 @@ Payload requires the following software:
   - `15.2.9` - `15.2.x`
   - `15.3.9` - `15.3.x`
   - `15.4.11` - `15.4.x`
-  - `16.2.2`+
+  - `16.2.6`+
 - Any [compatible database](/docs/database/overview) (MongoDB, Postgres or SQLite)
 
 <Banner type="warning">

package.json

@@ -194,7 +194,7 @@
     "@types/fs-extra": "^11.0.2",
     "@types/minimist": "1.2.5",
     "@types/node": "22.15.30",
-    "@types/react": "19.2.9",
+    "@types/react": "19.2.14",
     "@types/react-dom": "19.2.3",
     "@types/shelljs": "0.8.15",
     "@vitest/ui": "4.1.2",
@@ -226,8 +226,8 @@
     "postcss": "^8.4.49",
     "postcss-scss": "^4.0.9",
     "prettier": "3.5.3",
-    "react": "19.2.4",
-    "react-dom": "19.2.4",
+    "react": "19.2.6",
+    "react-dom": "19.2.6",
     "rimraf": "6.0.1",
     "sharp": "0.32.6",
     "shelljs": "0.8.5",

packages/admin-bar/package.json

@@ -42,7 +42,7 @@
   },
   "devDependencies": {
     "@payloadcms/eslint-config": "workspace:*",
-    "@types/react": "19.2.9",
+    "@types/react": "19.2.14",
     "@types/react-dom": "19.2.3",
     "payload": "workspace:*"
   },

packages/live-preview-react/package.json

@@ -46,7 +46,7 @@
   },
   "devDependencies": {
     "@payloadcms/eslint-config": "workspace:*",
-    "@types/react": "19.2.9",
+    "@types/react": "19.2.14",
     "@types/react-dom": "19.2.3",
     "payload": "workspace:*"
   },

packages/next/package.json

@@ -131,10 +131,10 @@
     "@babel/preset-env": "7.27.2",
     "@babel/preset-react": "7.27.1",
     "@babel/preset-typescript": "7.27.1",
-    "@next/eslint-plugin-next": "16.2.3",
+    "@next/eslint-plugin-next": "16.2.6",
     "@payloadcms/eslint-config": "workspace:*",
     "@types/busboy": "1.5.4",
-    "@types/react": "19.2.9",
+    "@types/react": "19.2.14",
     "@types/react-dom": "19.2.3",
     "babel-plugin-react-compiler": "19.1.0-rc.3",
     "esbuild": "0.27.1",
@@ -144,7 +144,7 @@
   },
   "peerDependencies": {
     "graphql": "^16.8.1",
-    "next": ">=15.2.9 <15.3.0 || >=15.3.9 <15.4.0 || >=15.4.11 <15.5.0 || >=16.2.2 <17.0.0",
+    "next": ">=15.2.9 <15.3.0 || >=15.3.9 <15.4.0 || >=15.4.11 <15.5.0 || >=16.2.6 <17.0.0",
     "payload": "workspace:*"
   },
   "engines": {

packages/plugin-cloud-storage/package.json

@@ -65,7 +65,7 @@
   },
   "devDependencies": {
     "@types/find-node-modules": "^2.1.2",
-    "@types/react": "19.2.9",
+    "@types/react": "19.2.14",
     "@types/react-dom": "19.2.3",
     "payload": "workspace:*"
   },

packages/plugin-ecommerce/package.json

@@ -92,7 +92,7 @@
     "@payloadcms/next": "workspace:*",
     "@payloadcms/translations": "workspace:*",
     "@types/json-schema": "7.0.15",
-    "@types/react": "19.2.9",
+    "@types/react": "19.2.14",
     "@types/react-dom": "19.2.3",
     "payload": "workspace:*",
     "stripe": "18.3.0"

packages/plugin-form-builder/package.json

@@ -68,7 +68,7 @@
   "devDependencies": {
     "@payloadcms/eslint-config": "workspace:*",
     "@types/escape-html": "^1.0.4",
-    "@types/react": "19.2.9",
+    "@types/react": "19.2.14",
     "@types/react-dom": "19.2.3",
     "copyfiles": "^2.4.1",
     "cross-env": "^7.0.3",

packages/plugin-search/package.json

@@ -65,7 +65,7 @@
   },
   "devDependencies": {
     "@payloadcms/eslint-config": "workspace:*",
-    "@types/react": "19.2.9",
+    "@types/react": "19.2.14",
     "@types/react-dom": "19.2.3",
     "payload": "workspace:*"
   },

packages/plugin-sentry/package.json

@@ -59,7 +59,7 @@
   },
   "devDependencies": {
     "@payloadcms/eslint-config": "workspace:*",
-    "@types/react": "19.2.9",
+    "@types/react": "19.2.14",
     "@types/react-dom": "19.2.3",
     "payload": "workspace:*"
   },