chore: bump up all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@types/react (source)	19.2.9 → 19.2.10
eslint-config-next (source)	16.1.4 → 16.1.6
next (source)	16.1.4 → 16.1.6
pnpm (source)	10.28.1 → 10.28.2
react (source)	19.2.3 → 19.2.4
react-dom (source)	19.2.3 → 19.2.4

---

Release Notes

vercel/next.js (eslint-config-next)

v16.1.6

Compare Source

v16.1.5

Compare Source

vercel/next.js (next)

v16.1.6

Compare Source

v16.1.5

Compare Source

pnpm/pnpm (pnpm)

v10.28.2

Compare Source

facebook/react (react)

v19.2.4: 19.2.4 (January 26th, 2026)

Compare Source

React Server Components

• Add more DoS mitigations to Server Actions, and harden Server Components (@​gnoff, @​lubieowoce, @​sebmarkbage, @​unstubbable)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Review	Updated (UTC)
milkdown	Ready	Preview, Comment	Jan 28, 2026 2:13am

[changeset-bot]

⚠️ No Changeset found

Latest commit: 8d5e16f

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR