test(e2e): Bump Next.js to 16.2.11 and 15.5.21 in test apps (#23820)

## What

Bumps Next.js in nine E2E test applications off versions carrying
high-severity advisories.

- `16.2.3` -> `16.2.11` in `nextjs-16`, `nextjs-16-bun`,
`nextjs-16-cf-workers`, `nextjs-16-tunnel`, `nextjs-16-trailing-slash`
and `nextjs-sourcemaps`
- `16.2.6` -> `16.2.11` in `nextjs-16-streaming`, which still hit four
of the same advisories
- `15.5.18` -> `15.5.21` in `nextjs-15` and `nextjs-15-intl`, matching
the pin `packages/nextjs` already uses

`16.2.11` and `15.5.21` are the first releases on each line clearing
every high-severity advisory. The Next 14 apps are left alone: they pin
an old version on purpose to cover the minimum supported version, and
their advisory is already allowlisted.

## Why

Dependency review only evaluates changed manifests, so a pin is checked
once when it is introduced and never again. These apps have been sitting
on vulnerable versions without CI saying anything, which only surfaced
when adding a new app in #23817 made the same dependency count as added.

Ref #23513

Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>

Author: andreiborza

dev-packages/e2e-tests/test-applications/nextjs-15-intl/package.json

@@ -15,7 +15,7 @@
     "@types/node": "^18.19.1",
     "@types/react": "18.0.26",
     "@types/react-dom": "18.0.9",
-    "next": "15.5.18",
+    "next": "15.5.21",
     "next-intl": "^4.3.12",
     "react": "latest",
     "react-dom": "latest",

dev-packages/e2e-tests/test-applications/nextjs-15/package.json

@@ -20,7 +20,7 @@
     "@types/react": "18.0.26",
     "@types/react-dom": "18.0.9",
     "ai": "^3.0.0",
-    "next": "15.5.18",
+    "next": "15.5.21",
     "react": "latest",
     "react-dom": "latest",
     "typescript": "~5.0.0",

dev-packages/e2e-tests/test-applications/nextjs-16-bun/package.json

@@ -16,7 +16,7 @@
     "@sentry/bun": "file:../../packed/sentry-bun-packed.tgz",
     "@sentry/core": "file:../../packed/sentry-core-packed.tgz",
     "import-in-the-middle": "^2",
-    "next": "16.2.3",
+    "next": "16.2.11",
     "react": "19.1.0",
     "react-dom": "19.1.0",
     "require-in-the-middle": "^8"

dev-packages/e2e-tests/test-applications/nextjs-16-cf-workers/package.json

@@ -20,7 +20,7 @@
     "@opennextjs/cloudflare": "^1.14.9",
     "@sentry/nextjs": "file:../../packed/sentry-nextjs-packed.tgz",
     "@sentry/core": "file:../../packed/sentry-core-packed.tgz",
-    "next": "16.2.3",
+    "next": "16.2.11",
     "react": "19.1.0",
     "react-dom": "19.1.0"
   },

dev-packages/e2e-tests/test-applications/nextjs-16-streaming/package.json

@@ -24,7 +24,7 @@
     "@vercel/queue": "^0.1.3",
     "ai": "^3.0.0",
     "import-in-the-middle": "^2",
-    "next": "16.2.6",
+    "next": "16.2.11",
     "react": "19.1.0",
     "react-dom": "19.1.0",
     "require-in-the-middle": "^8",

dev-packages/e2e-tests/test-applications/nextjs-16-trailing-slash/package.json

@@ -16,7 +16,7 @@
     "@sentry/nextjs": "file:../../packed/sentry-nextjs-packed.tgz",
     "@sentry/core": "file:../../packed/sentry-core-packed.tgz",
     "import-in-the-middle": "^2",
-    "next": "16.2.3",
+    "next": "16.2.11",
     "react": "19.1.0",
     "react-dom": "19.1.0",
     "require-in-the-middle": "^8"

dev-packages/e2e-tests/test-applications/nextjs-16-tunnel/package.json

@@ -27,7 +27,7 @@
     "@sentry/core": "file:../../packed/sentry-core-packed.tgz",
     "ai": "^3.0.0",
     "import-in-the-middle": "^1",
-    "next": "16.2.3",
+    "next": "16.2.11",
     "react": "19.1.0",
     "react-dom": "19.1.0",
     "require-in-the-middle": "^7",

dev-packages/e2e-tests/test-applications/nextjs-16/package.json

@@ -30,7 +30,7 @@
     "ai": "^3.0.0",
     "import-in-the-middle": "^2",
     "ioredis": "5.10.1",
-    "next": "16.2.3",
+    "next": "16.2.11",
     "openai": "5.18.1",
     "pg": "^8.13.1",
     "react": "19.1.0",

dev-packages/e2e-tests/test-applications/nextjs-sourcemaps/package.json

@@ -10,7 +10,7 @@
   },
   "dependencies": {
     "@sentry/nextjs": "file:../../packed/sentry-nextjs-packed.tgz",
-    "next": "16.2.3",
+    "next": "16.2.11",
     "react": "19.1.0",
     "react-dom": "19.1.0",
     "typescript": "~5.0.0"