Merge pull-request #1120

moeodeh3 · moeodeh3 · commit 435e83f64bb0 · 2025-12-04T13:06:33.000-05:00
diff --git a/.changeset/clean-spies-repeat.md b/.changeset/clean-spies-repeat.md
@@ -0,0 +1,5 @@
+---
+"@turnkey/sdk-react": patch
+---
+
+Bump `Next.js` dependency to `15.5.7` to address [Next.js RCE vulnerability in React flight protocol](https://github.com/advisories/GHSA-9qr9-h5gf-34mp)
diff --git a/examples/import-export-with-iframe-stamper/package.json b/examples/import-export-with-iframe-stamper/package.json
@@ -20,7 +20,7 @@
     "eslint-config-next": "14.2.25",
     "esm": "^3.2.25",
     "install": "^0.13.0",
-    "next": "15.5.2",
+    "next": "15.5.7",
     "npm": "^9.7.2",
     "react": "18.3.1",
     "react-dom": "18.3.1",
diff --git a/examples/import-export-with-rwk/package.json b/examples/import-export-with-rwk/package.json
@@ -16,7 +16,7 @@
     "@types/node": "20.3.1",
     "@types/react": "18.2.14",
     "@types/react-dom": "18.2.6",
-    "next": "15.5.2",
+    "next": "15.5.7",
     "react": "18.3.1",
     "react-dom": "18.3.1",
     "react-hook-form": "7.45.1",
diff --git a/examples/magic-link-auth/package.json b/examples/magic-link-auth/package.json
@@ -15,7 +15,7 @@
     "@types/react": "18.2.14",
     "@types/react-dom": "18.2.6",
     "dotenv": "16.0.3",
-    "next": "15.5.2",
+    "next": "15.5.7",
     "react": "18.2.0",
     "react-dom": "18.2.0",
     "tailwindcss": "4.1.13",
diff --git a/examples/oauth/package.json b/examples/oauth/package.json
@@ -17,7 +17,7 @@
     "@types/node": "20.3.1",
     "@types/react": "18.2.14",
     "@types/react-dom": "18.2.6",
-    "next": "15.5.2",
+    "next": "15.5.7",
     "react": "18.3.1",
     "react-dom": "18.3.1",
     "react-hook-form": "7.45.1",
diff --git a/examples/otp-auth/with-backend/package.json b/examples/otp-auth/with-backend/package.json
@@ -19,7 +19,7 @@
     "@types/node": "20.3.1",
     "@types/react": "18.2.14",
     "@types/react-dom": "18.2.6",
-    "next": "15.5.2",
+    "next": "15.5.7",
     "react": "18.3.1",
     "react-dom": "18.3.1",
     "react-hook-form": "7.45.1",
diff --git a/examples/otp-auth/without-backend/package.json b/examples/otp-auth/without-backend/package.json
@@ -19,7 +19,7 @@
     "@types/node": "20.3.1",
     "@types/react": "18.2.14",
     "@types/react-dom": "18.2.6",
-    "next": "15.5.2",
+    "next": "15.5.7",
     "react": "18.3.1",
     "react-dom": "18.3.1",
     "react-hook-form": "7.45.1",
diff --git a/examples/wallet-auth/with-backend/package.json b/examples/wallet-auth/with-backend/package.json
@@ -19,7 +19,7 @@
     "@types/node": "20.3.1",
     "@types/react": "18.2.14",
     "@types/react-dom": "18.2.6",
-    "next": "15.5.2",
+    "next": "15.5.7",
     "react": "18.3.1",
     "react-dom": "18.3.1",
     "react-hook-form": "7.45.1",
diff --git a/examples/wallet-auth/without-backend/package.json b/examples/wallet-auth/without-backend/package.json
@@ -19,7 +19,7 @@
     "@types/node": "20.3.1",
     "@types/react": "18.2.14",
     "@types/react-dom": "18.2.6",
-    "next": "15.5.2",
+    "next": "15.5.7",
     "react": "18.3.1",
     "react-dom": "18.3.1",
     "react-hook-form": "7.45.1",
diff --git a/examples/with-0x/package.json b/examples/with-0x/package.json
@@ -12,7 +12,7 @@
     "@tanstack/react-query": "^5.90.2",
     "@turnkey/react-wallet-kit": "workspace:*",
     "@turnkey/viem": "workspace:*",
-    "next": "15.5.4",
+    "next": "15.5.7",
     "react": "19.1.0",
     "react-dom": "19.1.0",
     "viem": "^2.37.11",
diff --git a/examples/with-delegated/package.json b/examples/with-delegated/package.json
@@ -16,7 +16,7 @@
     "@types/react": "18.2.14",
     "@types/react-dom": "18.2.6",
     "dotenv": "16.0.3",
-    "next": "15.5.2",
+    "next": "15.5.7",
     "react": "18.2.0",
     "react-dom": "18.2.0",
     "tailwindcss": "4.1.13",
diff --git a/examples/with-lifi/package.json b/examples/with-lifi/package.json
@@ -14,7 +14,7 @@
     "@turnkey/react-wallet-kit": "workspace:*",
     "@turnkey/solana": "workspace:*",
     "@turnkey/viem": "workspace:*",
-    "next": "15.5.4",
+    "next": "15.5.7",
     "react": "19.1.0",
     "react-dom": "19.1.0",
     "viem": "^2.37.11",
diff --git a/examples/with-x402/package.json b/examples/with-x402/package.json
@@ -12,7 +12,7 @@
   "dependencies": {
     "@turnkey/react-wallet-kit": "workspace:*",
     "@turnkey/viem": "workspace:^",
-    "next": "^15.2.4",
+    "next": "^15.5.7",
     "react": "18.2.0",
     "react-dom": "18.2.0",
     "viem": "^2.24.2",
diff --git a/package.json b/package.json
@@ -88,7 +88,9 @@
       "@hpke/core": ">=1.7.5",
       "glob": ">=10.5.0",
       "valibot": ">=1.2.0",
-      "node-forge": ">=1.3.2"
+      "node-forge": ">=1.3.2",
+      "validator": ">=13.15.22",
+      "jws": ">=4.0.1"
     }
   }
 }
diff --git a/packages/sdk-react/package.json b/packages/sdk-react/package.json
@@ -64,7 +64,7 @@
     "@turnkey/wallet-stamper": "workspace:*",
     "jwt-decode": "^4.0.0",
     "libphonenumber-js": "^1.11.14",
-    "next": "^15.2.3 ",
+    "next": "^15.5.7 ",
     "react-apple-login": "^1.1.6",
     "react-international-phone": "^4.3.0",
     "usehooks-ts": "^3.1.1"
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml

-Original file line number
+Diff line change
@@ @@ -0,0 +1,5 @@ @@
 +---
 +"@turnkey/sdk-react": patch
 +---
++
 +Bump `Next.js` dependency to `15.5.7` to address [Next.js RCE vulnerability in React flight protocol](https://github.com/advisories/GHSA-9qr9-h5gf-34mp)