[romantech]

User description

Summary

• Update Next.js from 16.3.1 to 16.3.3.
• Resolve GHSA-2xp9-vwfh-vxw4 and GHSA-p293-qw3h-jr36.
• Keep the existing sharp 0.35.4 resolution.

Validation

• pnpm install --frozen-lockfile
• pnpm why next --recursive
• pnpm why sharp --recursive
• pnpm audit --json (0 vulnerabilities)
• pnpm type
• pnpm lint (0 errors, 1,200 warnings)
• pnpm build

---

PR Type

Bug fix

---

Description

• Upgrades next to 16.3.3

• Applies upstream security fixes

• Keeps the rest of dependencies unchanged

---

Diagram Walkthrough

flowchart LR
  A["package.json"] -- "bump `next` version" --> B["Updated Next.js 16.3.3"]
  B -- "security fix" --> C["Patched dependency risk"]

Loading

File Walkthrough

	Relevant files
Dependencies	package.json Update Next.js dependency version                                                package.json Bumps next from 16.3.1 to 16.3.3 Keeps all other dependency versions unchanged Continues the security-focused dependency update +1/-1

---

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
simple-kanban	Ready	Preview	Sep 14, 2026 3:44pm UTC

[github-actions]

PR Reviewer Guide 🔍

Here are some key observations to aid the review process:

⏱️ Estimated effort to review: 1 🔵⚪⚪⚪⚪

🧪 No relevant tests

🔒 No security concerns identified

⚡ No major issues detected

[github-actions]

PR Code Suggestions ✨

No code suggestions found for the PR.

[qodo-code-review]

ⓘ Qodo reviews are paused because your trial has ended. Ask your workspace admin to add credits to resume reviews. Manage billing

[github-actions]

Standalone PR Review

PR-Agent could not safely update the persistent review. This standalone result will not replace the canonical review.

PR Reviewer Guide 🔍

Here are some key observations to aid the review process:

⏱️ Estimated effort to review: 1 🔵⚪⚪⚪⚪

🧪 No relevant tests

🔒 No security concerns identified

⚡ No major issues detected

[github-actions]

PR Code Suggestions ✨

No code suggestions found for the PR.