CVE-2025-55182 | upgraded nextjs 16.0.7

package.json

@@ -5,9 +5,9 @@
   "scripts": {
     "dev": "next dev --turbopack",
     "start": "next start",
-    "build": "npx prisma generate && next build",
+    "build": "npx prisma generate --schema=src/db/schema.prisma && next build",
     "lint": "eslint .",
-    "migrate": "npx prisma generate && env $(cat .env.local | xargs) npx prisma migrate dev",
+    "migrate": "npx prisma generate --schema=src/db/schema.prisma && env $(cat .env.local | xargs) npx prisma migrate dev --schema=src/db/schema.prisma",
     "setup-test-user": "env $(cat .env.local | xargs) node scripts/setup-test-user.js",
     "cypress:open": "cypress open",
     "cypress": "cypress run",
@@ -18,7 +18,8 @@
     "schema": "src/db/schema.prisma"
   },
   "dependencies": {
-    "@prisma/client": "6.5.0",
+    "@prisma/adapter-pg": "^7.1.0",
+    "@prisma/client": "^7.1.0",
     "@radix-ui/react-alert-dialog": "^1.1.6",
     "@radix-ui/react-dialog": "^1.1.6",
     "@radix-ui/react-dropdown-menu": "^2.1.6",
@@ -34,9 +35,10 @@
     "fuse.js": "^7.1.0",
     "lucide-react": "^0.483.0",
     "middleware": "^1.0.0",
-    "next": "^15.3.0",
+    "next": "^16.0.7",
     "next-themes": "^0.4.6",
     "openai": "^4.91.1",
+    "pg": "^8.16.3",
     "react": "^19.0.0",
     "react-dom": "^19.0.0",
     "sonner": "^2.0.1",
@@ -49,6 +51,7 @@
     "@playwright/test": "^1.52.0",
     "@tailwindcss/postcss": "^4",
     "@types/node": "^20",
+    "@types/pg": "^8.15.6",
     "@types/react": "^19",
     "@types/react-dom": "^19",
     "@typescript-eslint/eslint-plugin": "^8.46.1",
@@ -60,6 +63,7 @@
     "eslint-plugin-react-hooks": "^7.0.0",
     "prettier": "^3.6.2",
     "prettier-plugin-tailwindcss": "^0.6.14",
+    "prisma": "^7.1.0",
     "tailwindcss": "^4",
     "typescript": "^5"
   }

prisma.config.ts

@@ -0,0 +1,7 @@
+import { defineConfig } from 'prisma/config'
+
+export default defineConfig({
+  datasource: {
+    url: process.env.DATABASE_URL!
+  }
+})

src/actions/notes.ts

@@ -74,7 +74,7 @@ export const askAIAboutNotesAction = async (
   }
 
   const formattedNotes = notes
-    .map((note) =>
+    .map((note: { text: string; createdAt: Date; updatedAt: Date }) =>
       `
       Text: ${note.text}
       Created at: ${note.createdAt}

src/components/AppSidebar.tsx

@@ -6,7 +6,7 @@ import {
   SidebarGroupLabel,
 } from "@/components/ui/sidebar";
 import { prisma } from "@/db/prisma";
-import { Note } from "@prisma/client";
+import { Note } from "@/db/client";
 import Link from "next/link";
 import SidebarGroupContent from "./SidebarGroupContent";
 

src/components/SelectNoteButton.tsx

@@ -1,7 +1,7 @@
 "use client";
 
 import useNote from "@/hooks/useNote";
-import { Note } from "@prisma/client";
+import { Note } from "@/db/client";
 import { useSearchParams } from "next/navigation";
 import { useEffect, useState } from "react";
 import { SidebarMenuButton } from "./ui/sidebar";

src/components/SidebarGroupContent.tsx

@@ -1,6 +1,6 @@
 "use client";
 
-import { Note } from "@prisma/client";
+import { Note } from "@/db/client";
 import {
   SidebarGroupContent as SidebarGroupContentShadCN,
   SidebarMenu,

src/db/prisma.ts

@@ -1,8 +1,15 @@
 // lib/prisma.ts
-import { PrismaClient } from "@prisma/client";
+import { PrismaClient } from "./client";
+import { PrismaPg } from '@prisma/adapter-pg'
+import { Pool } from 'pg'
 
 const globalForPrisma = global as unknown as { prisma: PrismaClient };
 
-export const prisma = globalForPrisma.prisma || new PrismaClient();
+const pool = new Pool({ connectionString: process.env.DATABASE_URL })
+const adapter = new PrismaPg(pool)
+
+export const prisma = globalForPrisma.prisma || new PrismaClient({
+  adapter
+});
 
 if (process.env.NODE_ENV !== "production") globalForPrisma.prisma = prisma;

src/db/schema.prisma

@@ -1,10 +1,9 @@
 datasource db {
   provider = "postgresql"
-  url      = env("DATABASE_URL")
 }
 
 generator client {
-  provider = "prisma-client"
+  provider = "prisma-client-js"
   output = "client"
 }
 

tsconfig.json

@@ -1,7 +1,11 @@
 {
   "compilerOptions": {
     "target": "ES2017",
-    "lib": ["dom", "dom.iterable", "esnext"],
+    "lib": [
+      "dom",
+      "dom.iterable",
+      "esnext"
+    ],
     "allowJs": true,
     "skipLibCheck": true,
     "strict": true,
@@ -11,17 +15,28 @@
     "moduleResolution": "bundler",
     "resolveJsonModule": true,
     "isolatedModules": true,
-    "jsx": "preserve",
+    "jsx": "react-jsx",
     "incremental": true,
     "plugins": [
       {
         "name": "next"
       }
     ],
     "paths": {
-      "@/*": ["./src/*"]
+      "@/*": [
+        "./src/*"
+      ]
     }
   },
-  "include": ["next-env.d.ts", "**/*.ts", "**/*.tsx", ".next/types/**/*.ts"],
-  "exclude": ["node_modules", "cypress"]
+  "include": [
+    "next-env.d.ts",
+    "**/*.ts",
+    "**/*.tsx",
+    ".next/types/**/*.ts",
+    ".next/dev/types/**/*.ts"
+  ],
+  "exclude": [
+    "node_modules",
+    "cypress"
+  ]
 }