chore: Bump vulnerable dependencies (#38352)

* Bump nextjs.

* Override tmp dependency.

* Dedupe es-abstract.

---------

Co-authored-by: Alaister Young <a@alaisteryoung.com>

package.json

@@ -68,23 +68,15 @@
       "@tanstack/directive-functions-plugin>vite": "catalog:",
       "@tanstack/react-start-plugin>vite": "catalog:",
       "esbuild": "^0.25.2",
-      "@redocly/respect-core>form-data": "^4.0.4"
+      "@redocly/respect-core>form-data": "^4.0.4",
+      "tmp": "^0.2.4"
     },
-    "neverBuiltDependencies": [
-      "libpg-query"
-    ]
+    "neverBuiltDependencies": ["libpg-query"]
   },
   "engines": {
     "pnpm": ">=9",
     "node": ">=22"
   },
-  "keywords": [
-    "postgres",
-    "firebase",
-    "storage",
-    "functions",
-    "database",
-    "auth"
-  ],
+  "keywords": ["postgres", "firebase", "storage", "functions", "database", "auth"],
   "packageManager": "pnpm@9.15.5"
-}
+}

pnpm-workspace.yaml

@@ -8,7 +8,7 @@ catalog:
   '@supabase/auth-js': 2.71.1-rc.1
   '@supabase/supabase-js': ^2.47.14
   '@supabase/realtime-js': ^2.11.3
-  next: 15.3.3
+  next: ^15.5.2
   'react': '^18.3.0'
   'react-dom': '^18.3.0'
   '@types/react': '^18.3.0'