[Snyk] Security upgrade next from 13.4.4 to 13.5.4

[deepaksing]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • web/package.json
  • web/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ZOD-5925617	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: next

The new version differs by 250 commits.

• 1e8dca4 v13.5.4
• 9e24d6f v13.5.4-canary.11
• 281ae41 Fix build output logging order (#56335)
• d7626ff Revert "misc: shortcut styled-jsx in external resolution (#56291)" (#56334)
• db48052 v13.5.4-canary.10
• 7df92b8 test: add flaky turbopack integration tests to manifest (#56309)
• eeb9b33 fix: Invalid URL (404) provided on server actions error (#56323)
• 3172cfe fix: support both decoded and encoded url requests of conventioned files (#56187)
• a2f9ef5 fix(next/client): keep hash when navigating from app to pages router (#56223)
• a970f28 Add code freeze GitHub actions for releasing (#56325)
• 5fbc23e misc: fix instrumentation with bundled server (#56318)
• 98432a4 Remove buildId test as it's no longer relevant (#56316)
• 86274e6 fix(#53190): add missing crossOrigin to assetsPrefix resources (#56311)
• e970e05 Reland static prefetches & fix prefetch bailout behavior (#56228)
• be952fb fix: typo in `with-stripe-typescript` example (#56274)
• 7f60cc8 Support serverRuntimeConfig and publicRuntimeConfig in Turbopack (#56310)
• 8d18ad6 update webp crate (#56307)
• ac95a20 Fix flaky test for size output (#56303)
• dba978f misc: shortcut styled-jsx in external resolution (#56291)
• 458dab8 misc: update code owners (#56290)
• 5254aae Update image.mdx (#56266)
• 0d4859b Update image.mdx (#56269)
• 59bda2d More Turbopack fixes (#56299)
• ecd94c1 misc: enable source maps for bundled runtime (#56289)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
pclash	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Oct 4, 2023 7:36pm

[sonarqubecloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
0.0% Duplication

[what-the-diff]

PR Summary

• Upgraded versions of next/pack dependencies
  The next package that is used in our web application has been updated to version 13.5.4 for better performance and stability as development continues. Various dependencies of next such as @next/swc and @next/env packages have also been updated to match this new version.

• Improved SWC and PostCSS packages
  To keep up with the latest developments and security patches, the versions of @swc/helpers and postcss packages have been updated to 0.5.2 and 8.4.31 respectively.

• Included new packages for extended functionalities
  New packages glob-to-regexp and graceful-fs have been added in version 0.4.1 and 4.2.11 respectively. These packages add new functionalities to our application such as converting glob patterns to regular expressions and providing graceful file system operations.

• Elevated the Node.js requirement
  The engines requirement for Node.js has been updated to >=16.14.0. This means that the application will now require at least version 16.14.0 of Node.js to run, ensuring our environment is up-to-date with the most recent long-term support (LTS) release for optimal security and performance.

• Updated TypeScript and Watchpack packages
  The tslib package, a runtime library for TypeScript that contains all the TypeScript helper functions, is updated to version 2.6.2. The watchpack package, used for watching changes in files and directories, has been updated to 2.4.0. Both updates contribute to better stability and performance in our TypeScript code and file tracking operations.