Upgrade Next.js to 14.2.35 and React to 18.3.1 to resolve CVE-2025-55184

Co-authored-by: walaszczykm <[email protected]>

Author: Copilot

next-env.d.ts

@@ -1,2 +1,5 @@
 /// <reference types="next" />
-/// <reference types="next/types/global" />
+/// <reference types="next/image-types/global" />
+
+// NOTE: This file should not be edited
+// see https://nextjs.org/docs/pages/building-your-application/configuring/typescript for more information.

package.json

@@ -12,18 +12,18 @@
     "db:print": "node ./database/scripts/print.js"
   },
   "dependencies": {
-    "@chakra-ui/react": "^1.6.3",
+    "@chakra-ui/react": "^1.8.8",
     "@emotion/react": "^11",
     "@emotion/styled": "^11",
     "bcrypt": "^5.0.1",
     "cookie": "^0.4.1",
-    "formik": "^2.2.9",
+    "formik": "^2.4.9",
     "framer-motion": "^4",
     "isomorphic-fetch": "^3.0.0",
     "jsonwebtoken": "^9.0.0",
-    "next": "13.5.0",
-    "react": "17.0.2",
-    "react-dom": "17.0.2",
+    "next": "14.2.35",
+    "react": "^18.2.0",
+    "react-dom": "^18.2.0",
     "set-cookie-parser": "^2.4.8",
     "sqlite": "^4.0.23",
     "sqlite3": "^5.1.5",
@@ -36,12 +36,13 @@
     "@types/cookie": "^0.4.0",
     "@types/isomorphic-fetch": "^0.0.35",
     "@types/jsonwebtoken": "^8.5.1",
-    "@types/react": "17.0.8",
+    "@types/react": "^18",
+    "@types/react-dom": "^18",
     "@types/set-cookie-parser": "^2.4.0",
     "@types/sqlite3": "^3.1.7",
     "@types/uuid": "^8.3.0",
-    "eslint": "^7.28.0",
-    "eslint-config-next": "^11.0.0",
-    "typescript": "4.3.2"
+    "eslint": "^8",
+    "eslint-config-next": "14.2.35",
+    "typescript": "4.9.5"
   }
 }

pages/api/auth/me.ts

@@ -36,7 +36,7 @@ async function me(req: NextApiRequest, res: NextApiResponse<ResponseBody>) {
       lastname: user.lastname,
     })
   } catch (error) {
-    console.log(`\nError: POST /api/me\n${error.message}\n`)
+    console.log(`\nError: POST /api/me\n${error instanceof Error ? error.message : String(error)}\n`)
     res.status(401).end()
   }
 }

pages/api/auth/signin.ts

@@ -55,7 +55,7 @@ async function signin(req: NextApiRequest, res: NextApiResponse<ResponseBody>) {
       lastname: user.lastname,
     })
   } catch (error) {
-    console.log(`\nError: POST /api/signin\n${error.message}\n`)
+    console.log(`\nError: POST /api/signin\n${error instanceof Error ? error.message : String(error)}\n`)
     res.status(500).end()
   }
 }

pages/api/auth/signup.ts

@@ -81,7 +81,7 @@ async function signup(req: NextApiRequest, res: NextApiResponse<ResponseBody>) {
       lastname: user.lastname,
     })
   } catch (error) {
-    console.log(`\nError: POST /api/signup\n${error.message}\n`)
+    console.log(`\nError: POST /api/signup\n${error instanceof Error ? error.message : String(error)}\n`)
     res.status(500).end()
   }
 }

pages/api/lc/token.ts

@@ -65,7 +65,7 @@ async function token(req: NextApiRequest, res: NextApiResponse<ResponseBody>) {
       licenseId: Number(process.env.NEXT_PUBLIC_LC_LICENSE_ID!),
     })
   } catch (error) {
-    console.log(`\nError: GET /api/token\n${error.message}\n`)
+    console.log(`\nError: GET /api/token\n${error instanceof Error ? error.message : String(error)}\n`)
     res.status(401).end()
   }
 }

tsconfig.json

@@ -1,7 +1,11 @@
 {
   "compilerOptions": {
     "target": "es5",
-    "lib": ["dom", "dom.iterable", "esnext"],
+    "lib": [
+      "dom",
+      "dom.iterable",
+      "esnext"
+    ],
     "allowJs": true,
     "skipLibCheck": true,
     "strict": true,
@@ -13,8 +17,16 @@
     "resolveJsonModule": true,
     "isolatedModules": true,
     "jsx": "preserve",
-    "baseUrl": "."
+    "baseUrl": ".",
+    "incremental": true
   },
-  "include": ["next-env.d.ts", "**/*.ts", "**/*.tsx"],
-  "exclude": ["node_modules", "database/scripts/*"]
+  "include": [
+    "next-env.d.ts",
+    "**/*.ts",
+    "**/*.tsx"
+  ],
+  "exclude": [
+    "node_modules",
+    "database/scripts/*"
+  ]
 }