[Snyk] Security upgrade next from 13.4.2 to 15.5.10

[snyk-io]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• gui/package.json
• gui/package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Allocation of Resources Without Limits or Throttling SNYK-JS-NEXT-15104645	610

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Allocation of Resources Without Limits or Throttling

---

EntelligenceAI PR Summary

Major Next.js framework upgrade from version 13.4.2 to 15.5.10 with comprehensive dependency updates and architectural improvements.

• Upgraded Next.js core framework across two major versions (13→15)
• Updated SWC compiler binaries to version 15.5.7 for all platforms
• Removed deprecated dependencies: busboy, zod, @next/swc-win32-ia32-msvc
• Updated core dependencies: @swc/helpers (0.5.1→0.5.15), postcss (8.4.14→8.4.31), styled-jsx (5.1.1→5.1.6)
• Added sharp image optimization library (0.34.5) with multi-platform binary support
• Extended peer dependency support to React 19 RC and stable versions
• Updated transitive dependencies: caniuse-lite, nanoid, semver, source-map-js

[snyk-io]

⛔ Snyk checks have failed. 1 issues have been found so far.

Status	Scanner	Critical	High	Medium	Low	Total (1)
⛔	Open Source Security	0	1	0	0	1 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[entelligence-ai-pr-reviews]

Walkthrough

This PR upgrades Next.js from version 13.4.2 to 15.5.10, spanning two major releases. The upgrade includes comprehensive dependency updates across the entire Next.js ecosystem, including SWC compiler binaries updated to version 15.5.7 for all supported platforms. The update removes deprecated dependencies (busboy, zod, @next/swc-win32-ia32-msvc) and updates core dependencies like @swc/helpers, postcss, and styled-jsx. It adds optional sharp image optimization library with platform-specific binaries for Darwin, Linux, Windows, and WebAssembly across multiple architectures. Peer dependencies are adjusted to support both React 19 RC and stable versions while maintaining compatibility with the existing React 18.2.0 installation.

Changes

File(s)	Summary
gui/package.json	Upgraded Next.js dependency from version 13.4.2 to 15.5.10, a major version update spanning two releases.
gui/package-lock.json	Updated Next.js to 15.5.10 with comprehensive dependency changes: removed deprecated busboy, zod, and @next/swc-win32-ia32-msvc; updated @swc/helpers (0.5.1→0.5.15), postcss (8.4.14→8.4.31), styled-jsx (5.1.1→5.1.6); added optional sharp (0.34.5) with platform-specific binaries for Darwin, Linux, Windows, and WebAssembly across arm64, x64, ia32 architectures; updated all Next.js SWC compiler binaries to 15.5.7; adjusted peer dependencies to support React 19 RC and stable versions; updated transitive dependencies including caniuse-lite, nanoid, semver, and source-map-js.

Sequence Diagram

This diagram shows the interactions between components:

sequenceDiagram
    actor Dev as Developer
    participant NPM as Package Manager
    participant Next as Next.js 15.5.10
    participant Sharp as Sharp (Image Processor)
    participant SWC as SWC Compiler
    participant Platform as Platform Binaries

    Dev->>NPM: npm install / update
    activate NPM
    
    NPM->>Next: Install Next.js 15.5.10
    activate Next
    
    Note over NPM,Next: Core dependencies updated:<br/>@swc/helpers 0.5.15<br/>postcss 8.4.31<br/>styled-jsx 5.1.6
    
    NPM->>SWC: Install platform-specific SWC binary
    activate SWC
    
    alt darwin-arm64
        NPM->>Platform: Install @next/swc-darwin-arm64
    else darwin-x64
        NPM->>Platform: Install @next/swc-darwin-x64
    else linux-x64-gnu
        NPM->>Platform: Install @next/swc-linux-x64-gnu
    else win32-x64-msvc
        NPM->>Platform: Install @next/swc-win32-x64-msvc
    end
    
    Platform-->>SWC: Binary ready
    deactivate SWC
    
    opt Image Optimization Enabled
        NPM->>Sharp: Install Sharp 0.34.5 (optional)
        activate Sharp
        
        Sharp->>Platform: Install platform-specific libvips
        Note over Sharp,Platform: Installs native binaries for:<br/>- Darwin (arm64/x64)<br/>- Linux (arm/arm64/x64)<br/>- Windows (arm64/x64)
        
        Platform-->>Sharp: Native binaries ready
        deactivate Sharp
    end
    
    Next-->>NPM: Installation complete
    deactivate Next
    
    NPM-->>Dev: Dependencies updated
    deactivate NPM
    
    Note over Dev,Platform: Next.js 15 now includes:<br/>- Enhanced image optimization (Sharp)<br/>- Faster compilation (SWC)<br/>- Updated PostCSS & styled-jsx

Loading

▶️ ⚡ AI Code Reviews for VS Code, Cursor, Windsurf
Install the extension

Note for Windsurf

Please change the default marketplace provider to the following in the windsurf settings:

Marketplace Extension Gallery Service URL: https://marketplace.visualstudio.com/_apis/public/gallery

Marketplace Gallery Item URL: https://marketplace.visualstudio.com/items

Entelligence.ai can learn from your feedback. Simply add 👍 / 👎 emojis to teach it your preferences. More shortcuts below

Emoji Descriptions:

• ⚠️ Potential Issue - May require further investigation.
• 🔒 Security Vulnerability - Fix to ensure system safety.
• 💻 Code Improvement - Suggestions to enhance code quality.
• 🔨 Refactor Suggestion - Recommendations for restructuring code.
• ℹ️ Others - General comments and information.

Interact with the Bot:

• Send a message or request using the format:
  @entelligenceai + *your message*

Example: @entelligenceai Can you suggest improvements for this code?

• Help the Bot learn by providing feedback on its responses.
  @entelligenceai + *feedback*

Example: @entelligenceai Do not comment on `save_auth` function !

Also you can trigger various commands with the bot by doing
@entelligenceai command

The current supported commands are

1. config - shows the current config
2. retrigger_review - retriggers the review

More commands to be added soon.