fix(next): update to the latest version

[maxgfr]

No description provided.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	eslint-config-next@​16.0.10 ⏵ 16.1.6
	@​socialgouv/​cdtn-types@​2.63.0 ⏵ 2.66.6	+1		+2	+1
	@​swc/​cli@​0.7.9 ⏵ 0.7.10	+1		+1	+8
	@​types/​fs-extra@​9.0.13 ⏵ 11.0.4			+1
	@​opentelemetry/​instrumentation-http@​0.208.0 ⏵ 0.211.0	+1		+1
	@​socialgouv/​cdtn-elasticsearch@​2.62.8 ⏵ 2.66.6	+1		+1	+1
	@​pandacss/​dev@​1.7.0 ⏵ 1.8.1			+1	-2
	@​types/​react@​19.2.7 ⏵ 19.2.11	+1		+1
	date-fns@​2.30.0 ⏵ 4.1.0	-1		-2
	@​types/​node@​24.10.3 ⏵ 25.2.0	+1			+1
	cypress@​15.7.1 ⏵ 15.9.0				-1
	globals@​15.15.0 ⏵ 17.3.0			+1
	fs-extra@​11.3.3
	@​opentelemetry/​instrumentation-generic-pool@​0.52.0 ⏵ 0.54.0	+1
	eslint-plugin-cypress@​5.2.0 ⏵ 5.2.1
	@​sentry/​nextjs@​10.33.0 ⏵ 10.38.0	-5		+1	+2
	downshift@​9.0.13 ⏵ 9.2.0	+1			+1
	@​swc/​core@​1.15.3 ⏵ 1.15.11
	@​testing-library/​react@​16.3.0 ⏵ 16.3.2
	@​codegouvfr/​react-dsfr@​1.30.2 ⏵ 1.31.1				+2	+20
	@​opentelemetry/​instrumentation-net@​0.47.0 ⏵ 0.55.0	+1		+4
	eslint@​9.39.1 ⏵ 9.39.2	+4
	@​eslint/​js@​9.39.1 ⏵ 9.39.2

View full report

[socket-security]

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

[revu-bot]

Summary

This PR updates Next.js and several related dependencies to their latest versions. The changes are primarily version bumps in package.json and corresponding lockfile updates.

Key Updates

• Next.js: ~16.1.3 → ~16.1.6
• React: ~19.2.3 → ~19.2.4
• Cypress: ^15.4.0 → ^15.9.0
• Various minor dependencies: katex, memoizee, downshift, html-react-parser, etc.

Import Path Improvement

The import statement in queries.ts has been correctly consolidated to use the package's main export rather than a deep import path, which improves maintainability.

Overall Assessment

The changes appear safe and follow semantic versioning practices. The dependency updates are minor/patch versions that should maintain backward compatibility. No critical issues identified, though testing should verify compatibility with the new versions.

[Copilot]

Pull request overview

This PR updates Next.js from version 16.1.3 to 16.1.6 along with related dependency updates to maintain compatibility and resolve potential issues.

Changes:

• Updated Next.js from 16.1.3 to 16.1.6
• Updated React and React DOM from 19.2.3 to 19.2.4
• Updated various related dependencies (Cypress, katex, memoizee, downshift, html-react-parser, etc.)
• Fixed import path for getRouteBySource in queries.ts to use the standard package import instead of a deep import

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated no comments.

File	Description
pnpm-lock.yaml	Updated dependency versions and peer dependency resolutions for Next.js 16.1.6, React 19.2.4, and related packages
packages/code-du-travail-frontend/package.json	Updated package version specifiers to match the new versions in the lock file
packages/code-du-travail-frontend/src/modules/infographie/queries.ts	Refactored import to use standard package import pattern instead of deep import path

Files not reviewed (1)

• pnpm-lock.yaml: Language not supported

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[sonarqubecloud]

Quality Gate passed

Issues
2 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[tokenbureau]

🎉 Deployment for commit 74b1fbe :

Ingresses

• 🚀 https://code-du-travail-numerique-maxgfr-update-some-libs-5tva5i4e.ovh.fabrique.social.gouv.fr/

Docker images

• 📦 docker pull harbor.fabrique.social.gouv.fr/cdtn/code-du-travail-numerique/app:sha-74b1fbecdd19d79111cd35a72e727503157c0275

Debug

• 📕 Loki logs for namespace code-du-travail-numerique-maxgfr-update-some-libs-5tva5i4e
• 📈 Pods monitoring for namespace code-du-travail-numerique-maxgfr-update-some-libs-5tva5i4e
• 📈 Workloads monitoring for namespace code-du-travail-numerique-maxgfr-update-some-libs-5tva5i4e

[maxgfr]

La CI est verte, je me permets de merger + j'ai modifié l'action Elasticsearch qui nous fait casser nos tests suite à ce problème : elastic/elastic-github-actions#47