OUT-3723: patch nextjs for latest vulnerabilities

[SandipBajracharya]

No description provided.

[linear-code]

OUT-3723

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
quickbooks-sync	Building		May 13, 2026 3:41pm
quickbooks-sync (dev)	Ready	Preview, Comment	May 13, 2026 3:41pm

[greptile-apps]

Greptile Summary

This PR patches Next.js from 15.5.15 to 15.5.18, a security-focused update that the Next.js team released to address multiple vulnerabilities (high, moderate, and low severity) including an upstream React issue (CVE-2025-55184, CVE-2025-55183).

• package.json: Version pin for next changed from 15.5.15 → 15.5.18.
• yarn.lock: All next and @next/* sub-package resolutions and checksums updated to match 15.5.18; no other dependency changes are present.

Confidence Score: 5/5

Safe to merge — this is a targeted security patch bump with no application logic changes.

The change is limited to bumping Next.js from 15.5.15 to 15.5.18, a patch release issued specifically by the Next.js team to fix known security vulnerabilities. The yarn.lock is consistent with the version change, all @next/* sub-packages are updated together, and no unrelated dependencies were modified. There is minimal risk of regression from a patch-level security release within the same minor version.

No files require special attention — both changed files are straightforward version-pin updates.

Important Files Changed

Filename	Overview
package.json	Bumps the next dependency from 15.5.15 to 15.5.18 to address security vulnerabilities.
yarn.lock	Lockfile updated to reflect the new Next.js 15.5.18 resolution, checksums, and all associated @next/* sub-packages; no unrelated dependency changes.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A["package.json: next 15.5.15 → 15.5.18"] --> B["yarn.lock updated"]
    B --> C["@next/env 15.5.18"]
    B --> D["@next/swc-* 15.5.18 (9 platform binaries)"]
    B --> E["next 15.5.18 with new checksum"]
    C & D & E --> F["Security fixes applied (CVE-2025-55184, CVE-2025-55183)"]

Loading

_{Reviews (1): Last reviewed commit: "chore(OUT-3723): patch nextjs for latest..." | Re-trigger Greptile}