security: bump 9 package(s) in npm

[vtiwari-story]

Security dependency upgrade

This PR was opened by depagent to address 9 security alert(s) in the npm ecosystem.

Each package is pinned to exactly the patched version reported by Dependabot's first_patched_version — not a range. To restore a range constraint (e.g. ^x.y.z), edit the manifest after merge.

Alerts addressed

Sev	Package	Vulnerable range	Patched	CVE	GHSA	EPSS	KEV
high	axios	>= 1.0.0, < 1.15.2	1.15.2	CVE-2026-42264	GHSA-q8qp-cvcw-x6jj	0.00	no
high	next	>= 12.2.0, < 15.5.16	15.5.16	CVE-2026-44573	GHSA-36qx-fr4f-26g5	0.00	no
high	next	>= 13.0.0, < 15.5.16	15.5.16	-	GHSA-8h8q-6873-q5fj	-	no
high	next	>= 13.4.13, < 15.5.16	15.5.16	CVE-2026-44578	GHSA-c4j6-fc7j-m34r	0.04	no
high	axios	>= 1.0.0, < 1.15.1	1.15.1	CVE-2026-42033	GHSA-pf86-5x62-jrwf	0.00	no
high	axios	>= 1.0.0, < 1.15.1	1.15.1	CVE-2026-42035	GHSA-6chq-wfr3-2hj9	0.00	no
high	next	>= 13.0.0, < 15.5.15	15.5.15	-	GHSA-q4gf-8mx6-v5v3	-	no
high	axios	>= 1.0.0, <= 1.13.4	1.13.5	CVE-2026-25639	GHSA-43fc-jf86-j433	0.00	no
high	next	>= 13.0.0, < 15.0.8	15.0.8	-	GHSA-h25m-26qc-wcjf	-	no

Notes

(none)

Generated by depagent — storyprotocol/artcast.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
create-artcast	Error		May 19, 2026 11:22pm

[wiz-6cbc7756d1]

Wiz Scan Summary

Scanner	Findings
Vulnerabilities	1  10  22  5
Sensitive Data	-
Secrets	-
IaC Misconfigurations	-
SAST Findings	-
Software Management Findings	-
Total	1  10  22  5

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.

[wiz-6cbc7756d1]

 Vulnerability Finding

The following vulnerabilities impact next versions <15.5.16: CVE-2024-56332, CVE-2025-29927, CVE-2025-32421, CVE-2025-48068, CVE-2025-49826, CVE-2025-55173, CVE-2025-57752, CVE-2025-57822, CVE-2025-59471, CVE-2026-23869, CVE-2026-23870, CVE-2026-27980, CVE-2026-29057, CVE-2026-44572, CVE-2026-44573, CVE-2026-44576, CVE-2026-44577, CVE-2026-44578, CVE-2026-44579, CVE-2026-44580, CVE-2026-44581, CVE-2026-44582.

These can be remediated by updating to version 15.5.16 or higher.

To ignore this finding as an exception, reply to this conversation with #wiz_ignore reason

If you'd like to ignore this finding in all future scans, add an exception in the .wiz file (learn more) or create an Ignore Rule (learn more).

To get more details on how to remediate this issue using AI, reply to this conversation with #wiz remediate

Suggested change

	"next": "15.0.8",
	"next": "15.5.16",