[Snyk] Upgrade next from 15.5.2 to 15.5.4

[dennislee928]

Snyk has created this PR to upgrade next from 15.5.2 to 15.5.4.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 2 versions ahead of your current version.

• The recommended version was released a month ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-BABELRUNTIME-10044504	140	Proof of Concept
	Improper Input Validation SNYK-JS-NANOID-8492085	140	No Known Exploit

Release notes

Package name: next

• 15.5.4 - 2025-09-23
  

  Note

  This release is backporting bug fixes. It does not include all pending features/changes on canary.

  Core Changes

  • fix: ensure onRequestError is invoked when otel enabled (#83343)
  • fix: devtools initial position should be from next config (#83571)
  • [devtool] fix overlay styles are missing (#83721)
  • Turbopack: don't match dynamic pattern for node_modules packages (#83176)
  • Turbopack: don't treat metadata routes as RSC (#82911)
  • [turbopack] Improve handling of symlink resolution errors in track_glob and read_glob (#83357)
  • Turbopack: throw large static metadata error earlier (#82939)
  • fix: error overlay not closing when backdrop clicked (#83981)
  • Turbopack: flush Node.js worker IPC on error (#84077)

  Misc Changes

  • [CNA] use linter preference (#83194)
  • CI: use KV for test timing data (#83745)
  • docs: september improvements and fixes (#83997)

  Credits

  Huge thanks to @ yiminghe, @ huozhi, @ devjiwonchoi, @ mischnic, @ lukesandberg, @ ztanner, @ icyJoseph, @ leerob, @ fufuShih, @ dwrth, @ aymericzip, @ obendev, @ molebox, @ OoMNoO, @ pontasan, @ styfle, @ HondaYt, @ ryuapp, @ lpalmes, and @ ijjk for helping!

• 15.5.3 - 2025-09-10
• 15.5.2 - 2025-08-26

from next GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
carbon-trading-for-individuals-tbcr	Error		Mar 20, 2026 3:08pm

[dennislee928]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[coderabbitai]

Important

Review skipped

Ignore keyword(s) in the title.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: c2496aea-aeb5-47e4-979f-bba4cf489b85

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch snyk-upgrade-c714c4badb4f55d3d250d831fa416b52

📝 Coding Plan

• Generate coding plan for human review comments

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[Copilot]

Pull request overview

This PR updates the Frontend’s Next.js dependency to the latest patch release to pick up upstream fixes and address reported vulnerabilities via Snyk.

Changes:

• Bump next from 15.5.3 to 15.5.4 in Frontend/package.json.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Frontend/package-lock.json and Frontend/yarn.lock still reference [email protected], so changing only package.json may not actually upgrade installs/CI. Please regenerate the lockfile(s) with the package manager used by this project and commit the updated lockfile to keep dependency resolution consistent.

Suggested change

	"next": "15.5.4",
	"next": "15.5.3",

[Copilot]

PR title/description indicate upgrading Next from 15.5.2 → 15.5.4, but this diff upgrades 15.5.3 → 15.5.4. Please align the PR metadata (or confirm the intended starting version) to avoid confusion in release notes and security tracking.