fix(deps): upgrade next 16.2.0 → 16.2.11 to patch security vulnerabilities

mentoria-crm/next.config.ts

@@ -1,7 +1,13 @@
 import type { NextConfig } from "next";
 
 const nextConfig: NextConfig = {
-  /* config options here */
+  // Pin Turbopack workspace root to this directory. Without this, Turbopack
+  // walks up and selects the parent splinter/ lockfile as root — which has no
+  // node_modules on Vercel (only mentoria-crm/node_modules is installed),
+  // causing all module resolution to fail at build time.
+  turbopack: {
+    root: process.cwd(),
+  },
 };
 
 export default nextConfig;

mentoria-crm/package.json

@@ -2,6 +2,9 @@
   "name": "mentoria-crm",
   "version": "0.1.0",
   "private": true,
+  "engines": {
+    "node": ">=20.9.0"
+  },
   "scripts": {
     "dev": "next dev",
     "build": "next build",
@@ -26,7 +29,7 @@
     "clsx": "^2.1.1",
     "date-fns": "^4.1.0",
     "lucide-react": "^0.577.0",
-    "next": "16.2.0",
+    "next": "^16.2.11",
     "react": "19.2.4",
     "react-dom": "19.2.4",
     "recharts": "^3.8.0",
@@ -41,7 +44,6 @@
     "@types/react-dom": "^19",
     "eslint": "^9",
     "eslint-config-next": "16.2.0",
-    "supabase": "^2.82.0",
     "tailwindcss": "^4",
     "typescript": "^5"
   }

mentoria-crm/src/lib/supabase.ts

@@ -1,6 +1,9 @@
 import { createClient } from '@supabase/supabase-js'
 
-const supabaseUrl = process.env.NEXT_PUBLIC_SUPABASE_URL!
-const supabaseAnonKey = process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY!
+// Fallbacks prevent createClient from throwing during Next.js build-time SSR
+// when NEXT_PUBLIC_ vars haven't been embedded yet. Real values are required
+// at runtime for any Supabase call to succeed.
+const supabaseUrl = process.env.NEXT_PUBLIC_SUPABASE_URL ?? 'https://placeholder.supabase.co'
+const supabaseAnonKey = process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY ?? 'placeholder-anon-key'
 
 export const supabase = createClient(supabaseUrl, supabaseAnonKey)

mentoria-crm/vercel.json

@@ -0,0 +1,5 @@
+{
+  "framework": "nextjs",
+  "buildCommand": "next build --webpack",
+  "installCommand": "npm install"
+}