chore: bump next 15.1.0 → 15.5.16 across all apps (CVE-2026-44578)

Patches unauthenticated SSRF in WebSocket upgrade handler. Applies to admin-core, pitch-deck, levis-holzbau, marketing-website. GHSA-c4j6-fc7j-m34r. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-15 18:19:30 +02:00
parent b727f14011
commit 9382d2a7a4
8 changed files with 3072 additions and 124 deletions
@@ -10,7 +10,7 @@
  "dependencies": {
    "framer-motion": "^11.15.0",
    "lucide-react": "^0.468.0",
-    "next": "^15.1.0",
+    "next": "^15.5.16",
    "react": "^18.3.1",
    "react-dom": "^18.3.1"
  },