build(deps-dev): Bump eslint-config-next from 16.2.10 to 16.2.12

[dependabot]

Bumps eslint-config-next from 16.2.10 to 16.2.12.

Release notes

Sourced from eslint-config-next's releases.

v16.2.12

What's Changed

• Backport/docs fixes 16.2 - July round by @​icyJoseph in vercel/next.js#96031
• [Backport] Fixes to support TypeScript 7 by @​lukesandberg in vercel/next.js#95831

Full Changelog: vercel/next.js@v16.2.11...v16.2.12

v16.2.11

This release contains security fixes for the following advisories:

High:

• Denial of Service in App Router using Server Actions
• Middleware / Proxy bypass in App Router applications using Turbopack and single locale
• Server-Side Request Forgery in rewrites via attacker-controlled destination hostname
• Server-Side Request Forgery in Server Actions on custom servers

Moderate:

• Cache confusion of response bodies for requests with bodies
• Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences
• Denial of Service in the Image Optimization API using SVGs
• Unauthenticated disclosure of internal Server Function endpoints
• Unbounded Server Action payload in Edge runtime

Commits

• 2234717 v16.2.12
• 9beca08 v16.2.11
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	eslint-config-next@​16.2.10 ⏵ 16.2.12

View full report

[hermes-exosphere]

✅ Auto-approved: all 10 CI checks passing. Ready to merge.

[hermes-exosphere]

Automated code review started - full review. Results will be posted here.

[hermes-exosphere]

[PASS] Approved — LGTM

Trivial dependabot bump: eslint-config-next 16.2.10 → 16.2.12 (patch release).

What changed

• bun.lock: 2 lines — version strings + integrity hashes for eslint-config-next and @next/eslint-plugin-next updated from 16.2.10 to 16.2.12
• No source code, no API changes, no config changes

Verification

• [PASS] All CI checks green: build, test, test-e2e (all 3 variants), quality, docs, OSV-Scanner, Socket Security
• [PASS] Package exists on npm: eslint-config-next@16.2.12, @next/eslint-plugin-next@16.2.12 confirmed published
• [PASS] Integrity hashes match npm registry byte-for-byte:
  • eslint-config-next@16.2.12: sha512-iaaf4vvKo5h2LBdGt0JuRv7t0Ysqr9FMCiFxbptDg8LqOE//mIKR80DdpOnSVM7qjLH3jT8P0aFiwXxBEGZRXw== (npm: match)
  • @next/eslint-plugin-next@16.2.12: sha512-uF2z/qAK2q7B5/6CpnFcBRX6jOq5iCO+Uqh1UkJhXljX1JwLarLYhhoJadO6dPb6moTprOKewMXheBcbIoSbug== (npm: match)
• [PASS] Peer dependencies unchanged: eslint >=9.0.0, typescript >=3.3.1
• [PASS] Dependency tree within eslint-config-next verified — @next/eslint-plugin-next correctly pinned at 16.2.12, all other deps unchanged

Release notes

16.2.12 includes backported TypeScript 7 fixes (16.2.11 was a security release for multiple CVEs). Clean patch bump with no breaking changes.

Verdict

Mergeable. No blockers.

[hermes-exosphere]

[PASS] Approved. Trivial dependabot bump: eslint-config-next 16.2.10 -> 16.2.12. Integrity hashes verified against npm registry. All CI green. No breaking changes.

[hermes-exosphere]

Automated review: Approved. ✅