chore: refresh framework, emulators and mise toolchain

[anandpant]

Summary

• Refresh Next to 16.4.0 across the docs app and five examples with a shared framework/React catalog; update compatible SDK, emulator and toolchain dependencies while retaining the two-day release-age policy.
• Pin Node 24.21.0 and pnpm 11.28.5 through mise in local development and CI/release jobs. Verify root and nested executable selection and retain Turbo affected checks and integration coverage.
• Fix inherited-property OG slugs returning invalid titles, and replace effect-driven search/share-link state exposed by refreshed lint rules. Preserve search cancellation, keyboard navigation and hydration.

Verification

• Local: 621 package/CLI tests plus the OG regression pass; all 58 build/typecheck/lint tasks pass; formatting, frozen install and version sync pass.
• Browser: search navigation, reset, empty results, network failure/recovery and mobile layout; valid OG PNGs and invalid-slug 404s; embedded Blob upload and absolute share URL.
• Vercel: current-head preview built and deployed. Runtime requests remain blocked by Vercel SSO, including the CLI bypass request.
• Audit: two unpatched transitive advisories remain (braces, sprintf-js). The docs app does not use bash-tool's disk-glob option; model-generated shell commands can reach printf. No claim of a clean audit or proven deployed exploit.

Based on current main, not draft #28. Coordinator owns independent review, merge, draft supersession and cleanup. No package release version changed.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
nyrra-emulate-web	Ready	Preview	Oct 10, 2026 5:04am UTC

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	eslint@​9.39.4 ⏵ 9.39.5
	next@​16.2.0 ⏵ 16.4.0	+11	+75
	eslint-config-next@​16.2.0 ⏵ 16.4.0			+1
	@​base-ui/​react@​1.3.0 ⏵ 1.8.0	-2			-2
	@​types/​mdx@​2.0.13 ⏵ 2.0.14
	typescript-eslint@​8.58.0 ⏵ 8.71.1			+1
	@​ai-sdk/​react@​3.0.153 ⏵ 3.0.305			+1
	@​types/​react-dom@​19.2.3 ⏵ 19.3.0	+1		+1	+2
	shiki@​4.0.2 ⏵ 4.5.0	+1		+1
	@​types/​react@​19.2.14 ⏵ 19.3.0
	vitest@​4.1.3 ⏵ 4.1.11	+1	+2
	@​types/​node@​22.19.17 ⏵ 24.19.1	+1		+1	+1
	radix-ui@​1.4.3 ⏵ 1.7.0	+1		+2	+5
	tailwindcss@​4.2.2 ⏵ 4.3.3				+2
	react@​19.2.4 ⏵ 19.3.0	+1		+1
	turbo@​2.9.5 ⏵ 2.11.7		+3		+1
	tailwind-merge@​3.5.0 ⏵ 3.7.0	+1		+1
	geist@​1.7.0 ⏵ 1.7.2
	just-bash@​2.14.0 ⏵ 2.14.5	+10		+1	-1
	yaml@​2.8.3 ⏵ 2.9.1	+1
	jose@​6.2.2 ⏵ 6.2.12
	react-dom@​19.2.4 ⏵ 19.3.0			+1
	bash-tool@​1.3.16 ⏵ 1.3.19	+24			+3
	@​slack/​web-api@​7.16.0 ⏵ 7.19.0	+1			-3
	streamdown@​2.5.0 ⏵ 2.7.0	+1			+5
	stripe@​22.1.0 ⏵ 22.6.2
	hono@​4.12.25 ⏵ 4.13.13	+1	+36
	@​vercel/​blob@​2.4.0 ⏵ 2.8.1	+1		+1	+3
	prettier@​3.8.1 ⏵ 3.9.9			+1
	@​next/​mdx@​16.2.2 ⏵ 16.4.0	+12			-1
	@​aws-sdk/​client-s3@​3.1031.0 ⏵ 3.1147.0	+2		+1
	@​aws-sdk/​s3-presigned-post@​3.1031.0 ⏵ 3.1147.0	+1
See 3 more rows in the dashboard

View full report