From a8a84948e6c82e80e3ff7da5d81408de34a30c0b Mon Sep 17 00:00:00 2001
From: Vercel <vercel[bot]@users.noreply.github.com>
Date: Thu, 28 May 2026 17:32:32 +0000
Subject: [PATCH] Fix React Server Components CVE vulnerabilities

Updated dependencies to fix Next.js and React CVE vulnerabilities.

The fix-react2shell-next tool automatically updated the following packages to their secure versions:
- next
- react-server-dom-webpack
- react-server-dom-parcel
- react-server-dom-turbopack

All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory.

Co-authored-by: Vercel <vercel[bot]@users.noreply.github.com>
---
 package.json | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/package.json b/package.json
index 87bfa18..160ad69 100644
--- a/package.json
+++ b/package.json
@@ -66,7 +66,7 @@
     "lucide-react": "^0.532.0",
     "motion": "^12.23.12",
     "nanoid": "^5.1.5",
-    "next": "15.5.2",
+    "next": "15.5.9",
     "next-themes": "^0.4.6",
     "pixi.js": "^8.13.1",
     "react": "19.1.0",
@@ -82,7 +82,10 @@
     "zod": "^3.25.76"
   },
   "pnpm": {
-    "onlyBuiltDependencies": ["sharp", "unrs-resolver"]
+    "onlyBuiltDependencies": [
+      "sharp",
+      "unrs-resolver"
+    ]
   },
   "devDependencies": {
     "@eslint/eslintrc": "^3",