[Snyk] Security upgrade next from 13.0.6 to 14.2.15

[naiba4]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• apps/dev/package.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Missing Authorization SNYK-JS-NEXT-8520073	149

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Missing Authorization

[changeset-bot]

⚠️ No Changeset found

Latest commit: ede0503

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@humanwhocodes/module-importer@1.0.1	unsafe	0	21.2 kB	nzakas
npm/@humanwhocodes/object-schema@2.0.3	None	0	23.3 kB	nzakas
npm/@types/estree@1.0.6	None	0	25.8 kB	types
npm/@typescript-eslint/types@8.18.1	None	0	0 B
npm/acorn@8.14.0	None	0	547 kB	marijn
npm/argparse@2.0.1	environment, filesystem	0	172 kB	vitaly
npm/brace-expansion@1.1.11	None	0	11.1 kB	juliangruber
npm/builtin-modules@3.3.0	unsafe	0	4.51 kB	sindresorhus
npm/classnames@2.5.1	None	0	23.6 kB	jedwatson
npm/doctrine@3.0.0	None	0	106 kB	eslint
npm/eslint-config-prettier@9.1.0	None	0	20.8 kB	lydell
npm/estraverse@5.3.0	None	0	37.1 kB	michaelficarra
npm/fastq@1.17.1	None	0	41.9 kB	matteo.collina
npm/flatted@3.3.2	None	0	33.5 kB	webreflection
npm/function-bind@1.1.2	None	0	31.4 kB	ljharb
npm/glob-parent@6.0.2	None	0	7.72 kB	phated
npm/globals@14.0.0	None	0	117 kB	sindresorhus
npm/graceful-fs@4.2.11	environment, filesystem	0	32.5 kB	isaacs
npm/has-flag@4.0.0	None	0	4.42 kB	sindresorhus
npm/is-number@7.0.0	None	0	9.62 kB	jonschlinkert
npm/isexe@2.0.0	environment, filesystem	0	11 kB	isaacs
npm/json-schema-traverse@0.4.1	None	0	19.6 kB	esp
npm/minimist@1.2.8	None	0	54.5 kB	ljharb
npm/mri@1.2.0	None	0	13.3 kB	lukeed
npm/p-limit@3.1.0	None	0	7.75 kB	sindresorhus
npm/path-exists@4.0.0	filesystem	0	3.92 kB	sindresorhus
npm/path-key@3.1.1	None	0	4.55 kB	sindresorhus
npm/picocolors@1.1.1	None	0	6.37 kB	alexeyraspopov
npm/picomatch@2.3.1	None	0	90 kB	mrmlnc
npm/punycode@2.3.1	None	0	33.5 kB	google-wombot
npm/regexpp@3.2.0	None	0	302 kB	mysticatea
npm/shebang-regex@3.0.0	None	0	2.83 kB	sindresorhus
npm/signal-exit@3.0.7	None	0	9.96 kB	isaacs
npm/strip-json-comments@3.1.1	None	0	6.96 kB	sindresorhus
npm/tslib@2.8.1	None	0	90.4 kB	typescript-bot
npm/type-fest@0.20.2	None	0	111 kB	sindresorhus
npm/util-deprecate@1.0.2	None	0	5.48 kB	tootallnate
npm/which@2.0.2	environment	0	9.97 kB	isaacs
npm/word-wrap@1.2.5	None	0	11.8 kB	jonschlinkert
npm/yallist@4.0.0	None	0	14.8 kB	isaacs
npm/yocto-queue@0.1.0	None	0	6.03 kB	sindresorhus

🚮 Removed packages: npm/@actions/core@1.10.0, npm/@actions/github@5.1.1, npm/@prisma/client@6.1.0, npm/@supabase/supabase-js@2.47.9, npm/@types/jsonwebtoken@9.0.7, npm/@types/react-dom@19.0.2, npm/@types/react@19.0.2, npm/@vercel/ncc@0.34.0, npm/fake-smtp-server@0.8.0, npm/faunadb@4.8.1, npm/next@13.0.6, npm/nodemailer@6.9.16, npm/pg@8.13.1, npm/prisma@6.1.0, npm/react-dom@19.0.0, npm/sqlite3@5.1.7, npm/typeorm@0.3.7

View full report↗︎

[socket-security]

Report is too large to display inline.
View full report↗︎

Next steps

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/foo@1.0.0 or ignore all packages with @SocketSecurity ignore-all

• @SocketSecurity ignore npm/which@2.0.2
• @SocketSecurity ignore npm/has-flag@3.0.0
• @SocketSecurity ignore npm/isarray@1.0.0
• @SocketSecurity ignore npm/progress@2.0.3
• @SocketSecurity ignore npm/which@1.3.1
• @SocketSecurity ignore npm/graceful-fs@4.2.11
• @SocketSecurity ignore npm/convert-source-map@1.9.0
• @SocketSecurity ignore npm/path-exists@4.0.0
• @SocketSecurity ignore npm/merge-stream@2.0.0
• @SocketSecurity ignore npm/npm-run-path@4.0.1
• @SocketSecurity ignore npm/isexe@2.0.0
• @SocketSecurity ignore npm/setimmediate@1.0.5
• @SocketSecurity ignore npm/normalize-path@3.0.0
• @SocketSecurity ignore npm/node-int64@0.4.0
• @SocketSecurity ignore npm/xtend@4.0.2
• @SocketSecurity ignore npm/is-docker@2.2.1
• @SocketSecurity ignore npm/react-is@16.13.1
• @SocketSecurity ignore npm/util-deprecate@1.0.2
• @SocketSecurity ignore npm/is-typedarray@1.0.0
• @SocketSecurity ignore npm/kind-of@6.0.3
• @SocketSecurity ignore npm/is-extendable@0.1.1
• @SocketSecurity ignore npm/repeat-string@1.6.1
• @SocketSecurity ignore npm/require-from-string@2.0.2
• @SocketSecurity ignore npm/process-nextick-args@2.0.1
• @SocketSecurity ignore npm/resolve-alpn@1.2.1
• @SocketSecurity ignore npm/json-buffer@3.0.1
• @SocketSecurity ignore npm/is-promise@2.2.2
• @SocketSecurity ignore npm/builtin-modules@3.3.0
• @SocketSecurity ignore npm/isarray@2.0.5
• @SocketSecurity ignore npm/readdirp@3.6.0
• @SocketSecurity ignore npm/lowercase-keys@1.0.1
• @SocketSecurity ignore npm/to-readable-stream@1.0.0
• @SocketSecurity ignore npm/defer-to-connect@1.1.3
• @SocketSecurity ignore npm/json-buffer@3.0.0
• @SocketSecurity ignore npm/@colors/colors@1.5.0
• @SocketSecurity ignore npm/stack-trace@0.0.10
• @SocketSecurity ignore npm/is-number@7.0.0
• @SocketSecurity ignore npm/lodash.memoize@4.1.2
• @SocketSecurity ignore npm/json5@1.0.2
• @SocketSecurity ignore npm/has-yarn@2.1.0
• @SocketSecurity ignore npm/import-lazy@2.1.0
• @SocketSecurity ignore npm/is-yarn-global@0.3.0
• @SocketSecurity ignore npm/is-obj@1.0.1
• @SocketSecurity ignore npm/path-is-inside@1.0.2
• @SocketSecurity ignore npm/source-map@0.7.4
• @SocketSecurity ignore npm/glob-to-regexp@0.4.1
• @SocketSecurity ignore npm/loader-runner@4.3.0
• @SocketSecurity ignore npm/depd@1.1.2
• @SocketSecurity ignore npm/path-exists@3.0.0
• @SocketSecurity ignore npm/@humanwhocodes/module-importer@1.0.1