* update nextjs to fix CVE-2026-94545