Sicherheitsupdates: next 16.4, sentry, nodemailer 10, zod 4.6, vitest + audit fix

Behebt u.a. RCE-Lücken in next, proxy-addr, shell-quote (mobile), undici, fast-uri.
Offen in mobile (Expo SDK 57): zod 3 in @expo/cli, decode-uri-component, node-forge (kein Fix).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

package.json

@@ -21,7 +21,7 @@
     "@mux/mux-player-react": "^3.13.0",
     "@prisma/adapter-pg": "^7.8.0",
     "@prisma/client": "^7.8.0",
-    "@sentry/nextjs": "^10.69.0",
+    "@sentry/nextjs": "^10.76.2",
     "@supabase/supabase-js": "^2.107.0",
     "@tanstack/react-query": "^5.101.0",
     "@trpc/client": "^11.17.0",
@@ -33,10 +33,10 @@
     "embla-carousel-react": "^8.6.0",
     "ioredis": "^5.11.1",
     "lucide-react": "^1.17.0",
-    "next": "^16.3.0",
+    "next": "^16.4.3",
     "next-intl": "^4.13.0",
     "next-themes": "^0.4.6",
-    "nodemailer": "^9.0.5",
+    "nodemailer": "^10.2.1",
     "pg": "^8.21.0",
     "prisma": "^7.8.0",
     "react": "19.2.4",
@@ -49,7 +49,7 @@
     "stripe": "^22.5.0",
     "tailwind-merge": "^3.6.0",
     "tw-animate-css": "^1.4.0",
-    "zod": "^4.4.3"
+    "zod": "^4.6.7"
   },
   "devDependencies": {
     "@tailwindcss/postcss": "^4",
@@ -59,14 +59,14 @@
     "@types/react": "^19",
     "@types/react-dom": "^19",
     "@vitejs/plugin-react": "^6.0.2",
-    "@vitest/coverage-v8": "^4.1.8",
+    "@vitest/coverage-v8": "^4.1.12",
     "eslint": "^9",
-    "eslint-config-next": "16.2.7",
+    "eslint-config-next": "^16.4.3",
     "jsdom": "^28.1.0",
     "shadcn": "^4.10.0",
     "tailwindcss": "^4",
     "tsx": "^4.22.4",
     "typescript": "^6.0.3",
-    "vitest": "^4.1.8"
+    "vitest": "^4.1.12"
   }
 }