Security Audit

[mikaalnaik]

No description provided.

[greptile-apps]

Greptile Summary

The PR updates security-sensitive framework, authentication, and analytics dependencies while adding an @auth/core resolution override.

• Upgrades Next.js and its ESLint configuration from 16.1.6 to 16.2.12.
• Upgrades NextAuth from 4.24.13 to 4.24.15 and permits its optional @auth/core peer.
• Upgrades the PostHog browser client from 1.368.0 to 1.417.2.
• Regenerates the pnpm lockfile for the resulting dependency graph.

Confidence Score: 5/5

The dependency-only security update appears safe to merge, with no concrete blocking or independently actionable non-blocking issue identified.

The updated manifest and lockfile remain aligned, deployment satisfies the upgraded framework’s runtime requirements, and the investigated authentication and analytics paths do not establish a reachable failure.

Important Files Changed

Filename	Overview
package.json	Updates Next.js, NextAuth, PostHog, and matching lint dependencies, and adds pnpm rules for the optional @auth/core peer; no actionable incompatibility was established.
pnpm-lock.yaml	Regenerates dependency resolutions consistently with the manifest changes and removes obsolete transitive packages; no concrete vulnerable or broken resolution was identified.

_{Reviews (1): Last reviewed commit: "package deps" | Re-trigger Greptile}