chore(deps): bump eslint-config-next from 16.2.7 to 16.2.9 in /web

[dependabot]

Bumps eslint-config-next from 16.2.7 to 16.2.9.

Release notes

Sourced from eslint-config-next's releases.

v16.2.9

Empty release to ensure next@latest points at a stable release. Next.js only allows publishing with Trusted Publishing enabled. In order to fix NPM dist-tags, we have to release a new version. Updating dist-tags is not possible with Trusted Publishing.

v16.2.8

Release with no changes in an attempt to fix next@latest pointing at a prerelease version.

Commits

• f37fad9 v16.2.9
• 6f16804 v16.2.8
• 411c455 v16.2.7
• See full diff in compare view

[dependabot]

Labels

The following labels could not be found: dependencies, javascript. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
islamwiki	Ready	Preview, Comment	Jun 13, 2026 2:42pm
ummat-islamwiki	Ready	Preview, Comment	Jun 13, 2026 2:42pm

[github-actions]

🔒 Dependency Audit Failed — 5 HIGH/CRITICAL vulnerability(s)

Package	Severity	Advisory	Fix
@opentelemetry/auto-instrumentations-node	HIGH	1117941	Upgrade to version 0.75.0 or later
@opentelemetry/sdk-node	HIGH	1117942	Upgrade to version 0.217.0 or later
@opentelemetry/exporter-prometheus	HIGH	1117943	Upgrade to version 0.217.0 or later
next	HIGH	1118938	Upgrade to version 16.2.6 or later
vitest	CRITICAL	1120011	Upgrade to version 4.1.0 or later

To resolve: upgrade the affected packages or add an accepted-risk entry to web/.audit-allowlist.json.

Allowlist format

{
  "GHSA-xxxx-xxxx-xxxx": {
    "reason": "No fix available; mitigated by WAF rule #123",
    "expires": "2026-12-31"
  }
}

[dependabot]

Dependabot can't resolve your JavaScript dependency files. Because of this, Dependabot cannot update this pull request.

[dependabot]

Looks like eslint-config-next is no longer a dependency, so this is no longer needed.