fix: upgrade Next.js to 15.5.7 (CVE-2025-66478) (#135)

- Patches CVE-2025-66478 (CVSS 10.0) - critical RCE vulnerability in
React Server Components
- Upgrades Next.js 15.1.6 → 15.5.7
- No code changes needed outside of dependencies

Author: derrekcoleman

package.json

@@ -23,7 +23,7 @@
   },
   "dependencies": {
     "@ai-sdk/openai": "^1.1.9",
-    "@next/third-parties": "^15.1.6",
+    "@next/third-parties": "^15.1.9",
     "@radix-ui/react-collapsible": "^1.1.2",
     "@radix-ui/react-dialog": "^1.1.6",
     "@radix-ui/react-dropdown-menu": "^2.1.6",
@@ -50,7 +50,7 @@
     "hast-util-to-jsx-runtime": "^2.3.2",
     "katex": "^0.16.21",
     "lucide-react": "^0.474.0",
-    "next": "15.1.6",
+    "next": "15.5.7",
     "next-themes": "^0.4.4",
     "openai": "^4.83.0",
     "react": "^19.0.0",
@@ -71,7 +71,7 @@
     "@eslint/js": "^9.19.0",
     "@fumadocs/cli": "^0.1.1",
     "@jest/globals": "^30.2.0",
-    "@next/eslint-plugin-next": "^15.1.6",
+    "@next/eslint-plugin-next": "^15.5.7",
     "@tailwindcss/postcss": "^4.0.0",
     "@trivago/prettier-plugin-sort-imports": "^5.2.2",
     "@types/hast": "^3.0.4",
@@ -86,7 +86,7 @@
     "@typescript-eslint/parser": "^8.22.0",
     "dotenv": "^16.4.7",
     "eslint": "^8.57.1",
-    "eslint-config-next": "15.1.6",
+    "eslint-config-next": "15.5.7",
     "eslint-config-prettier": "^10.0.1",
     "eslint-plugin-only-warn": "^1.1.0",
     "eslint-plugin-react": "^7.37.4",