From 427822f707853b0ed3b391ba257d16a5b56cffd4 Mon Sep 17 00:00:00 2001
From: Pattern Security Automation <github-security-automation@pattern.com>
Date: Sat, 25 Jul 2026 03:55:11 -0600
Subject: [PATCH] fix(security): bump next to 16.2.11 [manual lock regen
 required]
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

CVE: CVE-2026-44573
Lock regen timed out — see PR description.
---
 web/package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/package.json b/web/package.json
index 199083d0..6572da10 100644
--- a/web/package.json
+++ b/web/package.json
@@ -23,7 +23,7 @@
     "js-yaml": "^4.1.0",
     "moment": "^2.30.1",
     "moment-timezone": "^0.6.0",
-    "next": "^16.1.6",
+    "next": "^16.2.11",
     "nuqs": "^2.4.1",
     "react": "^19.2.4",
     "react-dom": "^19.2.4",