chore(deps): update npm dependencies

[deniswsrosa]

Summary

Updates direct npm dependencies for couchbase-examples/nextjs-quickstart and regenerates package-lock.json with the existing npm workflow.

This also applies the minimal compatibility change required by Tailwind CSS 4: add @tailwindcss/postcss and switch postcss.config.cjs from tailwindcss to @tailwindcss/postcss.

Updated dependencies

Ecosystem	Dependency	Previous	Updated	Type	Notes
npm	@headlessui/react	^1.7.19	^2.2.10	dependency	Direct update
npm	axios	^1.18.0	^1.18.1	dependency	Direct update
npm	couchbase	^4.7.0	^4.7.1	dependency	Direct update
npm	next	^16.2.9	^16.2.10	dependency	Direct update
npm	qs	^6.15.2	^6.15.3	dependency	Direct update
npm	react	^18.3.1	^19.2.7	dependency	Direct update
npm	react-dom	^18.3.1	^19.2.7	dependency	Direct update
npm	@tailwindcss/postcss	not present	^4.3.2	devDependency	Required PostCSS adapter for Tailwind CSS 4
npm	autoprefixer	^10.5.0	^10.5.2	devDependency	Direct update
npm	env-cmd	^10.1.0	^11.0.0	devDependency	Direct update
npm	eslint-config-next	^16.2.9	^16.2.10	devDependency	Direct update
npm	eslint-config-prettier	^8.10.2	^10.1.8	devDependency	Direct update
npm	jest	^29.7.0	^30.4.2	devDependency	Direct update
npm	jest-environment-jsdom	^29.7.0	^30.4.1	devDependency	Direct update
npm	postcss	^8.5.15	^8.5.16	devDependency	Direct update
npm	prettier	^3.8.4	^3.9.4	devDependency	Direct update
npm	tailwindcss	^3.4.19	^4.3.2	devDependency	Direct update

Validation

Final validation was run locally from a clean node_modules install using Node v24.18.0 / npm 11.16.0 and a local Couchbase Docker container.

npm ci
npm run check
npm test -- --runInBand
CB_USERNAME=Administrator CB_PASSWORD=password CB_CONNECT_STRING=couchbase://localhost CB_BUCKET=user_profile npm run build

Check	Result
npm ci	Passed, exit 0
npm run check	Passed, exit 0
npm test -- --runInBand	Passed, exit 0; 4 suites / 6 tests
npm run build	Passed, exit 0

Evidence screenshot

Risk notes

• eslint@10.6.0 was attempted, but local lint failed with TypeError: scopeManager.addGlobals is not a function through the Next/ESLint plugin stack, so this PR keeps the latest compatible eslint 9.x line (^9.39.4).
• npm audit --audit-level=moderate still reports known transitive advisories, including a Next/PostCSS advisory whose suggested force fix is not an appropriate stable direct-dependency update for this preflight. No npm audit fix --force was applied.
• Rollback: revert this PR to restore the previous package manifest, lockfile, and PostCSS config.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
couchbase-nextjs-quickstart	Ready	Preview, Comment	Jul 6, 2026 11:22am
nextjs-quickstart	Ready	Preview, Comment	Jul 6, 2026 11:22am

[gemini-code-assist]

Code Review

This pull request updates several dependencies in package.json, notably upgrading React to v19 and Tailwind CSS to v4, and updates postcss.config.cjs to use @tailwindcss/postcss. The review feedback recommends removing autoprefixer from both package.json and postcss.config.cjs because Tailwind CSS v4 handles vendor prefixing automatically.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.

[gemini-code-assist]

With Tailwind CSS v4, vendor prefixing is handled automatically by Lightning CSS under the hood. As a result, autoprefixer is no longer required as a dependency and can be safely removed.

Suggested change

	"@tailwindcss/postcss": "^4.3.2",
	"autoprefixer": "^10.5.2",
	"@tailwindcss/postcss": "^4.3.2",

[gemini-code-assist]

Since Tailwind CSS v4 includes built-in vendor prefixing, autoprefixer is no longer needed. You should remove autoprefixer: {}, from your PostCSS plugins configuration to simplify the setup.