Update dependencies and refresh Next.js quickstart lockfile

[dex-the-ai]

Summary

• update the quickstart’s safe dependency drift: axios, next, qs, eslint, eslint-config-next, and postcss
• refresh package-lock.json on Node 24 with the corresponding safe transitive patches
• re-verify the local Couchbase walkthrough plus a clean-bucket production build gate

Verification

• npm run check
• npm run init-db:default
• npm test
• npm run init-db:local
• ./node_modules/.bin/env-cmd -f tutorial-maintenance/runs/nextjs-quickstart/2026-05-26T19-40-00Z/build.env npm run build
• ran the app locally with npm run dev -- --hostname 127.0.0.1 --port 3000 and exercised create/update/delete flows through the live API surface

Evidence

• format + lint passed on the updated dependency set

• Jest passed all 4 suites / 6 tests against the local Couchbase-backed test setup

• the temp-bucket build gate completed successfully, including sample-data load and index creation

• the live walkthrough listed seeded profiles, created a profile, updated it, deleted it, and verified removal afterward

• Test output

  PASS __test__/api-profiles-update.test.js
  PASS __test__/api-profiles-delete.test.js
  PASS __test__/api-profiles-create.test.js
  PASS __test__/api-profiles-read.test.js
  
  Test Suites: 4 passed, 4 total
  Tests:       6 passed, 6 total
  

• Walkthrough excerpt

  $ POST /api/user
  status=201
  created_email=dex-20260526@example.com
  
  $ PUT /api/user?pid=<created>
  status=200
  updated_lastName=Verified
  
  $ DELETE /api/user?pid=<created>
  status=200
  post_delete_contains_email=false
  

• tutorial-maintenance/runs/nextjs-quickstart/2026-05-26T19-40-00Z/verification.md

Notes

• npm audit --audit-level=moderate still points at breaking-major follow-ups (next-test-api-route-handler@5, uuid@14) plus the advisory path reported through Next’s bundled postcss, so I kept this PR to the smallest verified safe updates.
• Running npm run build directly against the long-lived local user_profile bucket still trips over the existing non-idempotent sample-data load step once those docs are already present; the clean-bucket build check above passed successfully.

Media evidence

• Captured the live home page after the verified local walkthrough completed against the seeded user_profile bucket.
• Shows the user-directory UI surface behind the API create/update/delete checks called out in verification.

Notes

• Local artifact path: tutorial-maintenance/runs/nextjs-quickstart/2026-05-26T19-40-00Z/homepage.png

- Short walkthrough video of the verified Next.js home page, including the live search interaction. [Short walkthrough video of the Next.js user-directory UI](https://res.cloudinary.com/dhwqj0ps2/video/upload/v1779836920/pr-evidence/couchbase-examples/nextjs-quickstart/pr-200/homepage-walkthrough.webm)

Notes

• Local artifact path: tutorial-maintenance/runs/nextjs-quickstart/2026-05-26T19-40-00Z/homepage.webm

[dex-the-ai]

Owner ping for this maintenance PR: @ejscribner

Requesting review from the manifest-listed owner(s) where GitHub does not already show a pending review request.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
couchbase-nextjs-quickstart	Ready	Preview, Comment	May 26, 2026 8:24pm
nextjs-quickstart	Ready	Preview, Comment	May 26, 2026 8:24pm

[gemini-code-assist]

Code Review

This pull request updates several dependencies and devDependencies in package.json and package-lock.json, including upgrading axios, next, qs, eslint, eslint-config-next, and postcss to their latest versions. I have no feedback to provide as there are no review comments and the changes are standard dependency updates.

[dex-the-ai]

I pushed a workflow-only follow-up. The previous red tests (24.x) status was coming from the final Slack notification step (ravsamhq/notify-slack-action@v1 crashing with ImportError: cannot import name 'cache' from 'functools'), not from npm test. This branch now uses ravsamhq/notify-slack-action@v2 and leaves the report step non-blocking so a notifier regression cannot flip a green test job red.