[Snyk] Fix for 6 vulnerabilities

[m1981]

Snyk has created this PR to fix 6 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• package.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Server-side Request Forgery (SSRF) SNYK-JS-NEXT-12299318	736
	Cross-site Scripting (XSS) SNYK-JS-MERMAID-12027649	586
	Interpretation Conflict SNYK-JS-NEXT-10598338	529
	Use of Cache Containing Sensitive Information SNYK-JS-NEXT-12301496	529
	Cross-site Scripting (XSS) SNYK-JS-MERMAID-12027657	469
	Missing Source Correlation of Multiple Independent Data SNYK-JS-NEXT-12265451	329

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Scripting (XSS)
🦉 Server-side Request Forgery (SSRF)

---

Important

Upgrade mermaid and next in package.json to fix security vulnerabilities.

• Dependencies:
  • Upgrade mermaid from ^11.4.1 to ^11.10.0 in package.json to fix XSS vulnerabilities.
  • Upgrade next from ^15.3.0 to ^15.4.2 in package.json to fix SSRF and other vulnerabilities.

^{This description was created by for 1bd2bb1. You can customize this summary. It will automatically update as commits are pushed.}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Preview	Comments	Updated (UTC)
mychat	Error			Oct 6, 2025 9:04am

[ellipsis-dev]

Important

Looks good to me! 👍

Reviewed everything up to 1bd2bb1 in 37 seconds. Click for details.

• Reviewed 16 lines of code in 1 files
• Skipped 0 files when reviewing.
• Skipped posting 2 draft comments. View those below.
• Modify your settings and rules to customize what types of comments Ellipsis leaves. And don't forget to react with 👍 or 👎 to teach Ellipsis.

1. package.json:86

• Draft comment:
  Updated 'mermaid' from ^11.4.1 to ^11.10.0. Verify that this minor upgrade doesn't introduce breaking changes or regressions in any mermaid integrations.
• Reason this comment was not posted:
  Confidence changes required: 33% <= threshold 50% None

2. package.json:88

• Draft comment:
  Updated 'next' from ^15.3.0 to ^15.4.2. Ensure that the upgrade, intended to address vulnerabilities, doesn't affect routing or other core functionality.
• Reason this comment was not posted:
  Confidence changes required: 33% <= threshold 50% None

Workflow ID: wflow_bLH8bI1LT2Rzt0zD

^{You can customize by changing your verbosity settings, reacting with 👍 or 👎, replying to comments, or adding code review rules.}