Fix critical security vulnerabilities by updating Next.js and dependencies

[Copilot]

This PR addresses all 7 Dependabot security alerts affecting the portfolio application by updating vulnerable dependencies to their latest secure versions.

Security Vulnerabilities Fixed

Critical Severity

• Next.js Server-Side Request Forgery (SSRF) in Server Actions - Allows attackers to make unauthorized requests from the server
• Next.js Cache Poisoning - Enables cache manipulation leading to serving malicious content
• Next.js Authorization Bypass - Permits unauthorized access to protected resources
• Denial of Service (DoS) with Server Actions - Allows attackers to overwhelm the server
• Information Exposure in Dev Server - Leaks sensitive information due to lack of origin verification

High Severity

• Uncontrolled Resource Consumption in braces - ReDoS vulnerability in glob pattern matching
• Regular Expression Denial of Service in cross-spawn - ReDoS in process spawning utility

Moderate & Low Severity

• Predictable nanoid generation - Weak randomness when given non-integer values
• RegExp DoS in micromatch - Performance degradation in file matching
• Babel inefficient RegExp complexity - Performance issues in transpiled code
• brace-expansion ReDoS - DoS vulnerability in shell expansion patterns

Changes Made

The primary change was upgrading Next.js from 14.0.4 to 14.2.31, which includes patches for all the critical security vulnerabilities. Additional dependency updates were applied automatically via npm audit fix to resolve the remaining issues.

- "next": "14.0.4",
+ "next": "^14.2.31",

Verification

• ✅ Application builds successfully with updated dependencies
• ✅ All linting checks pass
• ✅ Development server starts correctly
• ✅ npm audit reports 0 vulnerabilities
• ✅ No breaking changes or regressions detected

This update ensures the portfolio application is secure against known vulnerabilities while maintaining full compatibility and functionality.

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
dev-portfolio	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Aug 8, 2025 1:19pm