fix: update next and postcss security deps

[dannyneira]

Summary

• Updates next from 16.2.0 to 16.2.6 to resolve the current batch of Next.js Dependabot alerts.
• Updates eslint-config-next to 16.2.6 to keep the Next.js tooling version aligned.
• Updates direct postcss to 8.5.10 and adds an npm overrides.postcss pin to force Next's nested postcss@8.4.31 dependency to the patched 8.5.10 release.
• Commits Next's required tsconfig.json adjustment from moduleResolution: "node" to "bundler" after running the upgraded build.

Resolved Dependabot alerts

• https://github.com/warpdotdev/commands.dev/security/dependabot/69 — next GHSA-q4gf-8mx6-v5v3
• https://github.com/warpdotdev/commands.dev/security/dependabot/70 — next GHSA-q4gf-8mx6-v5v3
• https://github.com/warpdotdev/commands.dev/security/dependabot/72 — next GHSA-8h8q-6873-q5fj
• https://github.com/warpdotdev/commands.dev/security/dependabot/73 — next GHSA-8h8q-6873-q5fj
• https://github.com/warpdotdev/commands.dev/security/dependabot/74 — next CVE-2026-44573
• https://github.com/warpdotdev/commands.dev/security/dependabot/75 — next CVE-2026-44573
• https://github.com/warpdotdev/commands.dev/security/dependabot/76 — next CVE-2026-44575
• https://github.com/warpdotdev/commands.dev/security/dependabot/77 — next CVE-2026-44575
• https://github.com/warpdotdev/commands.dev/security/dependabot/82 — next CVE-2026-45109
• https://github.com/warpdotdev/commands.dev/security/dependabot/83 — next CVE-2026-45109
• https://github.com/warpdotdev/commands.dev/security/dependabot/84 — next CVE-2026-44574
• https://github.com/warpdotdev/commands.dev/security/dependabot/85 — next CVE-2026-44574
• https://github.com/warpdotdev/commands.dev/security/dependabot/88 — next CVE-2026-44578
• https://github.com/warpdotdev/commands.dev/security/dependabot/89 — next CVE-2026-44578
• https://github.com/warpdotdev/commands.dev/security/dependabot/94 — next CVE-2026-44579
• https://github.com/warpdotdev/commands.dev/security/dependabot/95 — next CVE-2026-44579
• https://github.com/warpdotdev/commands.dev/security/dependabot/71 — postcss CVE-2026-41305
• https://github.com/warpdotdev/commands.dev/security/dependabot/78 — next CVE-2026-44580
• https://github.com/warpdotdev/commands.dev/security/dependabot/79 — next CVE-2026-44580
• https://github.com/warpdotdev/commands.dev/security/dependabot/80 — next CVE-2026-44576
• https://github.com/warpdotdev/commands.dev/security/dependabot/81 — next CVE-2026-44576
• https://github.com/warpdotdev/commands.dev/security/dependabot/86 — next CVE-2026-44577
• https://github.com/warpdotdev/commands.dev/security/dependabot/87 — next CVE-2026-44577
• https://github.com/warpdotdev/commands.dev/security/dependabot/90 — next CVE-2026-44572
• https://github.com/warpdotdev/commands.dev/security/dependabot/91 — next CVE-2026-44572
• https://github.com/warpdotdev/commands.dev/security/dependabot/92 — next CVE-2026-44582
• https://github.com/warpdotdev/commands.dev/security/dependabot/93 — next CVE-2026-44582
• https://github.com/warpdotdev/commands.dev/security/dependabot/96 — next CVE-2026-44581
• https://github.com/warpdotdev/commands.dev/security/dependabot/97 — next CVE-2026-44581

Verification

• npm audit --json no longer reports next or postcss advisories after the update and override. Remaining audit entries are unrelated: brace-expansion, picomatch, and yaml.
• npm run lint
• npx tsc lib/*.ts
• NEXT_PUBLIC_ALGOLIA_APP_ID=dummy NEXT_PUBLIC_ALGOLIA_SEARCH_API_KEY=dummy npx next build

Note: npm run build reaches the Algolia postbuild publishing step and fails in this sandbox when using dummy Algolia credentials, so the compile path was validated directly without publishing search data.

Conversation: https://staging.warp.dev/conversation/ab7292d2-cf6e-4f63-a336-17845f66438d
Run: https://oz.staging.warp.dev/runs/019e3184-1bb8-759c-9558-dc9283e4ea69
This PR was generated with Oz.

[BossChaos]

Code Review

PR: fix: update next and postcss security deps by @dannyneira

• ✅ Bug/security fix

Wallet: 0xdaE5d307339074A24F579dB48e7c639359D94904

Code review

[BossChaos]

Code Review

PR: fix: update next and postcss security deps by @dannyneira

• ✅ Bug/security fix

Wallet: 0xdaE5d307339074A24F579dB48e7c639359D94904

Code review