chore: add changelog entry for next 15.5.10 security bump

Co-authored-by: Brendan Kellam <brendan-kellam@users.noreply.github.com>

Author: github-actions[bot]

CHANGELOG.md

@@ -12,6 +12,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Bumped `@aws-sdk/credential-providers` to `^3.1000.0`. [#955](https://github.com/sourcebot-dev/sourcebot/pull/955)
 - Bumped `rollup` transitive dependency to `^4.59.0` via yarn resolutions. [#956](https://github.com/sourcebot-dev/sourcebot/pull/956)
 - Bumped `minimatch` transitive dependency to `^3.1.3` via yarn resolutions. [#957](https://github.com/sourcebot-dev/sourcebot/pull/957)
+- Bumped `next` to `15.5.10` (security release: CVE-2025-59471, CVE-2025-59472, CVE-2026-23864). [#960](https://github.com/sourcebot-dev/sourcebot/pull/960)
 
 ## [4.13.0] - 2026-02-27