chore(deps-dev)(deps-dev): bump eslint-config-next from 15.0.2 to 15.5.18 in the linting-and-formatting group across 1 directory

[dependabot]

Bumps the linting-and-formatting group with 1 update in the / directory: eslint-config-next.

Updates eslint-config-next from 15.0.2 to 15.5.18

Release notes

Sourced from eslint-config-next's releases.

v15.5.18

This release contains security fixes for the following advisories:

High:

• GHSA-8h8q-6873-q5fj: Denial of Service with Server Components
• GHSA-267c-6grr-h53f: Middleware / Proxy bypass in App Router applications via segment-prefetch routes
• GHSA-26hh-7cqf-hhc6: Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-Up
• GHSA-mg66-mrh9-m8jx: Denial of Service via connection exhaustion in applications using Cache Components
• GHSA-492v-c6pp-mqqv: Middleware / Proxy bypass through dynamic route parameter injection
• GHSA-c4j6-fc7j-m34r: Server-side request forgery in applications using WebSocket upgrades
• GHSA-36qx-fr4f-26g5: Middleware / Proxy bypass in Pages Router applications using i18n

Moderate:

• GHSA-ffhc-5mcf-pf4q: Cross-site scripting in App Router applications using CSP nonces
• GHSA-gx5p-jg67-6x7h: Cross-site scripting in beforeInteractive scripts with untrusted input
• GHSA-h64f-5h5j-jqjh: Denial of Service in the Image Optimization API
• GHSA-wfc6-r584-vfw7: Cache poisoning in React Server Component responses

Low:

• GHSA-vfv6-92ff-j949: Cache poisoning via collisions in React Server Component cache-busting
• GHSA-3g8h-86w9-wvmq: Middleware / Proxy redirects can be cache-poisoned

v15.5.16

This release contains security fixes for the following advisories:

High:

• GHSA-8h8q-6873-q5fj: Denial of Service with Server Components
• GHSA-267c-6grr-h53f: Middleware / Proxy bypass in App Router applications via segment-prefetch routes
• GHSA-mg66-mrh9-m8jx: Denial of Service via connection exhaustion in applications using Cache Components
• GHSA-492v-c6pp-mqqv: Middleware / Proxy bypass through dynamic route parameter injection
• GHSA-c4j6-fc7j-m34r: Server-side request forgery in applications using WebSocket upgrades
• GHSA-36qx-fr4f-26g5: Middleware / Proxy bypass in Pages Router applications using i18n

Moderate:

• GHSA-ffhc-5mcf-pf4q: Cross-site scripting in App Router applications using CSP nonces
• GHSA-gx5p-jg67-6x7h: Cross-site scripting in beforeInteractive scripts with untrusted input
• GHSA-h64f-5h5j-jqjh: Denial of Service in the Image Optimization API
• GHSA-wfc6-r584-vfw7: Cache poisoning in React Server Component responses

Low:

• GHSA-vfv6-92ff-j949: Cache poisoning via collisions in React Server Component cache-busting
• GHSA-3g8h-86w9-wvmq: Middleware / Proxy redirects can be cache-poisoned

v15.5.15

Please refer the following changelogs for more information about this security release:

https://vercel.com/changelog/summary-of-cve-2026-23869

v15.5.14

[!NOTE]

... (truncated)

Commits

• 9ff92ce v15.5.18
• 62c97ab v15.5.17
• ad6fd4e v15.5.16
• 412eb90 v15.5.15
• d7b012d v15.5.14
• cfd5f53 v15.5.13
• d23f41c v15.5.12
• bbfd4e3 v15.5.11
• 60a2aa9 v15.5.10
• c5de33e v15.5.9
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for eslint-config-next since your current version.

[dependabot]

Labels

The following labels could not be found: npm. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
interviewoptimiser	Ready	Preview, Comment	May 18, 2026 3:38am

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 2bc317d8-ca09-4fb5-b362-a746cbe9aff9

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch dependabot-npm_and_yarn-linting-and-formatting-f26f2b94e0

📝 Coding Plan

• Generate coding plan for human review comments

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[cubic-dev-ai]

1 issue found across 1 file

Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="package.json">

<violation number="1" location="package.json:186">
P2: Version mismatch: `eslint-config-next` is being bumped to 15.5.12 while the project's `next` dependency is pinned at 15.0.5. These packages are designed to be kept in sync. Consider either bumping `next` to 15.5.x as well, or keeping `eslint-config-next` aligned at ~15.0.x.</violation>
</file>

_{Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review.}

[cubic-dev-ai]

P2: Version mismatch: eslint-config-next is being bumped to 15.5.12 while the project's next dependency is pinned at 15.0.5. These packages are designed to be kept in sync. Consider either bumping next to 15.5.x as well, or keeping eslint-config-next aligned at ~15.0.x.

Prompt for AI agents

Check if this issue is valid — if so, understand the root cause and fix it. At package.json, line 186:

<comment>Version mismatch: `eslint-config-next` is being bumped to 15.5.12 while the project's `next` dependency is pinned at 15.0.5. These packages are designed to be kept in sync. Consider either bumping `next` to 15.5.x as well, or keeping `eslint-config-next` aligned at ~15.0.x.</comment>

<file context>
@@ -183,7 +183,7 @@
     "esbuild-register": "^3.6.0",
     "eslint": "^9.37.0",
-    "eslint-config-next": "15.0.2",
+    "eslint-config-next": "15.5.12",
     "eslint-plugin-react-compiler": "19.0.0-beta-63b359f-20241101",
     "husky": "^9.1.6",
</file context>

Suggested change

	"eslint-config-next": "15.5.12",
	"eslint-config-next": "15.0.5",