Manually bumping next.js version to address CVE, release 0.24.3

https://nextjs.org/blog/security-update-2025-12-11

Author: Nathan Booker

core/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@bigcommerce/catalyst-core",
   "description": "BigCommerce Catalyst is a Next.js starter kit for building headless BigCommerce storefronts.",
-  "version": "0.24.2",
+  "version": "0.24.3",
   "private": true,
   "scripts": {
     "dev": "npm run generate && next dev",
@@ -44,7 +44,7 @@
     "lodash.debounce": "^4.0.8",
     "lru-cache": "^11.0.2",
     "lucide-react": "^0.468.0",
-    "next": "15.2.3",
+    "next": "15.5.8",
     "next-auth": "5.0.0-beta.25",
     "next-intl": "^3.26.1",
     "react": "^19.0.0",