[Snyk] Security upgrade next from 15.4.7 to 15.4.8

[peterj]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• ui/package.json
• ui/package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Arbitrary Code Injection SNYK-JS-NEXT-14173355	893

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Arbitrary Code Injection

[Copilot]

Pull request overview

This PR upgrades Next.js from version 15.4.7 to 15.4.8 to address a critical security vulnerability (SNYK-JS-NEXT-14173355) related to Arbitrary Code Injection with a severity score of 893/1000. The upgrade is automated by Snyk and updates all Next.js-related packages and platform-specific SWC binaries consistently.

Key Changes

• Upgraded Next.js framework from 15.4.7 to 15.4.8
• Updated all Next.js environment and SWC compiler binaries to match the new version
• Fixed critical arbitrary code injection vulnerability

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File	Description
ui/package.json	Updates Next.js dependency version to 15.4.8
ui/package-lock.json	Updates lockfile with new versions and integrity hashes for Next.js core package, @next/env, and all platform-specific SWC binaries (darwin-arm64, darwin-x64, linux-arm64-gnu, linux-arm64-musl, linux-x64-gnu, linux-x64-musl, win32-arm64-msvc, win32-x64-msvc)

Files not reviewed (1)

• ui/package-lock.json: Language not supported

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[tomhaynes]

@peterj are there plans to release this 🔜 ? Reading about this vulnerability being used in attacks last week 😬 https://thehackernews.com/2025/12/chinese-hackers-have-started-exploiting.html