[Snyk] Security upgrade next from 13.5.1 to 14.2.35

[wiatrM]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• package.json
• package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Deserialization of Untrusted Data SNYK-JS-NEXT-14400636	768

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Deserialization of Untrusted Data

[Copilot]

Pull request overview

This PR upgrades Next.js from version 13.5.1 to 14.2.35 to address a critical security vulnerability (Deserialization of Untrusted Data - SNYK-JS-NEXT-14400636) with a severity score of 768. This is a major version upgrade that also updates several related dependencies and changes the minimum Node.js requirement from 16.14.0 to 18.17.0.

Key Changes:

• Upgrades Next.js from 13.5.1 to 14.2.35 and all associated @next/swc compiler binaries
• Updates @swc/helpers from 0.5.2 to 0.5.5 and adds new @swc/counter dependency
• Updates postcss from 8.4.14 to 8.4.31 within the Next.js package

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.

File	Description
package.json	Updates Next.js version from 13.5.1 to 14.2.35
package-lock.json	Updates Next.js, all platform-specific SWC binaries, @swc/helpers, postcss, removes watchpack and zod dependencies, adds @swc/counter, and includes new @playwright/test peer dependency

⚠️ Critical Issues Found:

This PR has several significant version inconsistencies that need to be addressed:

1. SWC Binary Version Mismatch: All @next/swc-* platform binaries are at version 14.2.33 while Next.js is at 14.2.35, which could cause compilation issues
2. Incompatible Package in package.json: The @next/swc-wasm-nodejs package remains at 13.5.1 (not visible in diff but present in full file)
3. Version Specifier Inconsistencies: Changes from caret (^) to exact versions for some dependencies, and inconsistency between package.json and package-lock.json for the next package itself
4. ESLint Config Outdated: eslint-config-next remains at 13.5.11 which doesn't match the Next.js 14.x version

These issues should be resolved by running npm install or npm update to ensure all versions are properly aligned before merging this PR.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

The next version has been upgraded to 14.2.35, but the @next/swc-wasm-nodejs package at line 26 remains at version 13.5.1. This version mismatch can lead to compatibility issues. The @next/swc-wasm-nodejs package should be updated to match the Next.js version or a compatible version in the 14.x range.