chore: bump next.js, minimatch, and lerna (#2467)

* fix: upgrade Next.js 14 → 15.5.15 to resolve high-severity DoS vulnerability (Dependabot #361, #362, #363)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix: bump minimatch to patched versions and upgrade lerna to v9

Upgrades lerna from v8 to v9 which brings in nx 22.x, eliminating
pinned vulnerable minimatch versions. All transitive minimatch
dependencies now resolve to patched releases.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* chore: fmt

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: jakehobbs

examples/alchemy-privy-integration-example/package.json

@@ -12,7 +12,7 @@
     "@account-kit/privy-integration": "*",
     "@privy-io/react-auth": "^3.3.0",
     "@solana-program/memo": "^0.9.0",
-    "next": "^14.0.0",
+    "next": "^15.5.15",
     "react": "^18.2.0",
     "react-dom": "^18.2.0",
     "viem": "^2.45.0"
@@ -22,7 +22,7 @@
     "@types/react": "^18.2.0",
     "@types/react-dom": "^18.2.0",
     "eslint": "^8.0.0",
-    "eslint-config-next": "^14.0.0",
+    "eslint-config-next": "^15.5.15",
     "typescript": "^5.0.0"
   }
 }

examples/ui-demo/package.json

@@ -42,7 +42,7 @@
     "clsx": "^2.1.1",
     "dedent": "^1.5.3",
     "lucide-react": "^0.394.0",
-    "next": "14.2.29",
+    "next": "^15.5.15",
     "prettier": "3.3.3",
     "qrcode.react": "^4.2.0",
     "react": "^18",
@@ -61,7 +61,7 @@
     "@types/react-dom": "^18",
     "@types/react-syntax-highlighter": "^15.5.13",
     "eslint": "^8",
-    "eslint-config-next": "14.2.3",
+    "eslint-config-next": "^15.5.15",
     "postcss": "^8",
     "tailwind-scrollbar": "^3.1.0",
     "tailwindcss": "^3.4.1",

examples/ui-demo/src/app/api/rpc/[...routes]/route.ts

@@ -4,8 +4,9 @@ import { env } from "../../../../../env.mjs";
 
 export async function POST(
   req: Request,
-  { params }: { params: { routes: string[] } },
+  { params }: { params: Promise<{ routes: string[] }> },
 ) {
+  const { routes } = await params;
   const body = await req.text();
 
   const headers: Record<string, string> = {
@@ -18,7 +19,7 @@ export async function POST(
     headers[key] = value;
   });
 
-  const res = await fetch(env.ALCHEMY_API_URL + `/${params.routes.join("/")}`, {
+  const res = await fetch(env.ALCHEMY_API_URL + `/${routes.join("/")}`, {
     method: "POST",
     headers: {
       ...headers,

examples/ui-demo/src/app/layout.tsx

@@ -20,17 +20,18 @@ export const metadata: Metadata = {
   description: "Protected by Alchemy",
 };
 
-export default function RootLayout({
+export default async function RootLayout({
   children,
 }: Readonly<{
   children: React.ReactNode;
 }>) {
+  const headerStore = await headers();
   const initialState = cookieToInitialState(
     alchemyConfig(),
-    headers().get("cookie") ?? undefined,
+    headerStore.get("cookie") ?? undefined,
   );
 
-  const initialConfig = cookieToInitialConfig(headers().get("cookie"));
+  const initialConfig = cookieToInitialConfig(headerStore.get("cookie"));
 
   const classes = initialConfig
     ? generateClassesForRoot(initialConfig)

examples/ui-demo/tsconfig.json

@@ -19,7 +19,8 @@
     ],
     "paths": {
       "@/*": ["./src/*"]
-    }
+    },
+    "target": "ES2017"
   },
   "include": ["next-env.d.ts", "**/*.ts", "**/*.tsx", ".next/types/**/*.ts"],
   "exclude": ["node_modules"]

package.json

@@ -75,7 +75,7 @@
     "is-ci": "^3.0.1",
     "js-yaml": "^4.1.0",
     "jsdom": "^25.0.1",
-    "lerna": "^8.0.2",
+    "lerna": "^9.0.7",
     "lint-staged": "^13.2.2",
     "markdownlint": "^0.38.0",
     "mdx2vast": "^0.3.0",