fix(deps): update dependency next to v15.2.3 [security]

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
next (source)	15.2.2 -> 15.2.3

GitHub Vulnerability Alerts

CVE-2025-29927

Impact

It is possible to bypass authorization checks within a Next.js application, if the authorization check occurs in middleware.

Patches

• For Next.js 15.x, this issue is fixed in 15.2.3
• For Next.js 14.x, this issue is fixed in 14.2.25
• For Next.js 13.x, this issue is fixed in 13.5.9
• For Next.js 12.x, this issue is fixed in 12.3.5
• For Next.js 11.x, consult the below workaround.

Note: Next.js deployments hosted on Vercel are automatically protected against this vulnerability.

Workaround

If patching to a safe version is infeasible, it is recommend that you prevent external user requests which contain the x-middleware-subrequest header from reaching your Next.js application.

Credits

• Allam Rachid (zhero;)
• Allam Yasser (inzo_)

---

Release Notes

vercel/next.js (next)

v15.2.3

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.
This release contains a security patch for CVE-2025-29927.

Core Changes

• Update default allowed origins list (#​77212)
• unify allowed origin detection handling (#​77053)
• Add dev warning for cross-origin and stabilize allowedDevOrigins (#​77044)
• Ensure deploymentId is used for CSS preloads (#​77210)
• Update middleware request header (#​77201)
• [metadata] remove the default segement check for metadata rendering (#​77119)
• [ts-hint] fix vscode type hint plugin enabling (#​77099)
• [metadata] re-insert icons to head for streamed metadata (#​76915)

Credits

Huge thanks to @​ijjk, @​ztanner, and @​huozhi for helping!

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

GitLab Pipeline Action

General information

Link to pipeline: https://gitlab.com/code0-tech/development/landing-page/-/pipelines/1843715970

Status: Passed
Duration: 1 minutes

Job summaries

build

Preview available at https://code0-tech.gitlab.io/-/development/landing-page/-/jobs/10194477548/artifacts/out/index.html