Bump next from 15.5.15 to 15.5.23 - #81

Sourced from next's releases.

v15.5.23

What's Changed

• [15.x] Port ReplyServer traversal guards to FlightClient @​eps1lon in vercel/next.js#96405

Full Changelog: vercel/next.js@v15.5.22...v15.5.23

v15.5.22

What's Changed

• [15.5] Reject TypeScript >= 7.0 with an actionable error by @​lukesandberg in vercel/next.js#96110

Full Changelog: vercel/next.js@v15.5.21...v15.5.22

v15.5.21

This release contains security fixes for the following advisories:

High:

• Denial of Service in App Router using Server Actions
• Middleware / Proxy bypass in App Router applications using Turbopack and single locale
• Server-Side Request Forgery in rewrites via attacker-controlled destination hostname
• Server-Side Request Forgery in Server Actions on custom servers

Moderate:

• Cache confusion of response bodies for requests with bodies
• Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences
• Denial of Service in the Image Optimization API using SVGs
• Unauthenticated disclosure of internal Server Function endpoints
• Unbounded Server Action payload in Edge runtime

v15.5.20

Contains no changes except publishing @next/swc-wasm-web which was accidentally not published since 15.5.15.

• c91fd53 v15.5.23
• 0cb3208 [15.x] Port ReplyServer traversal guards to FlightClient (#96405)
• 6ad9e56 v15.5.22
• fcc0424 [15.5] Reject TypeScript >= 7.0 with an actionable error (#96110)
• e26f6ff v15.5.21
• 7f5deeb [15.x] Improve performance of checking valid MPA form submissions
• 57c31f7 [15.x] Enforce serverActions.bodySizeLimit for Server Actions in Edge runtime
• e3e5666 [15.x] Set correct origin for internal redirects in custom server
• 35f5013 [15.x] Ensure exotic rewrite param values are properly encoded
• 062f667 [15.x] fix(fetch-cache): key fetch(Request, init) by the effective request
• Additional commits viewable in compare view

This version was pushed to npm by GitHub Actions, a new releaser for next since your current version.