security: next 16.2.4 -> 16.2.12, postcss/sharp override

npm audit: 5 HIGH -> 0. Next.js DoS (Server Components) 16.2.12'de kapali.
next'in icine gomulu postcss (GHSA-r28c-9q8g-f849, sourceMappingURL ile
keyfi dosya okuma) ve sharp (GHSA-f88m-g3jw-g9cj, libvips) icin override.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

package.json

@@ -8,8 +8,13 @@
     "start": "next start",
     "lint": "eslint"
   },
+  "comment_overrides": "next'in icine gomulu postcss/sharp HIGH acikli (GHSA-r28c-9q8g-f849 dosya okuma, GHSA-f88m-g3jw-g9cj libvips). next kendi bagimliligini guncelleyene kadar override ile zorluyoruz — 2026-08-01",
+  "overrides": {
+    "postcss": "^8.5.18",
+    "sharp": "^0.35.3"
+  },
   "dependencies": {
-    "next": "16.2.4",
+    "next": "16.2.12",
     "react": "19.2.4",
     "react-dom": "19.2.4"
   },
@@ -19,7 +24,7 @@
     "@types/react": "^19",
     "@types/react-dom": "^19",
     "eslint": "^9",
-    "eslint-config-next": "16.2.4",
+    "eslint-config-next": "16.2.12",
     "tailwindcss": "^4",
     "typescript": "^5"
   }