web: upgrade to next 16.3.3 and typescript 7, cache turbopack builds in docker

web/Dockerfile

@@ -23,7 +23,8 @@ COPY . .
 # Uncomment the following line in case you want to disable telemetry during the build.
 ENV NEXT_TELEMETRY_DISABLED 1
 
-RUN npm run build
+# Persist Turbopack's build cache
+RUN --mount=type=cache,target=/app/.next/cache npm run build
 
 # Production image, copy all the files and run next
 FROM base AS runner

web/next.config.mjs

@@ -27,6 +27,13 @@ const nextConfig = {
   turbopack: {
     root: __dirname,
   },
+  experimental: {
+    // `typescript` is aliased to the TS6 API package (typescript-eslint can't
+    // use TS7's native compiler yet), which has no `tsc` bin for the 16.3 CLI
+    // checker — type-check builds through the TS6 JS API instead. `npx tsc`
+    // (CI, manual) runs native TS7 via @typescript/native.
+    useTypeScriptCli: false,
+  },
 };
 
 export default nextConfig;

web/package.json

@@ -27,7 +27,7 @@
     "date-fns-tz": "^3.2.0",
     "graphql": "^17.0.2",
     "html-react-parser": "^6.1.4",
-    "next": "^16.2.10",
+    "next": "^16.3.3",
     "nuqs": "^2.9.0",
     "react": "19.2.7",
     "react-dom": "19.2.7",
@@ -42,11 +42,12 @@
     "@types/node": "^24",
     "@types/react": "19.2.17",
     "@types/react-dom": "19.2.3",
+    "@typescript/native": "npm:typescript@^7.0.2",
     "baseline-browser-mapping": "^2.10.42",
     "eslint": "^9",
-    "eslint-config-next": "16.2.10",
+    "eslint-config-next": "16.3.3",
     "lighthouse": "^13.4.0",
-    "typescript": "^6",
+    "typescript": "npm:@typescript/typescript6@6.0.2",
     "vitest": "^4.1.10",
     "wait-on": "^9.0.10"
   },