🔒 fix(deps): next を 15.5.28 に更新（2026-10-14 セキュリティリリース）

[touyou]

Requested by touyou · project thread

概要

devDependencies の next を 15.5.27 → 15.5.28 に上げ、2026-10-14 公開の Next.js セキュリティアドバイザリに対応します。

next は開発用サイトのための devDependencies なので、npm パッケージの利用者には影響しません（リリース不要）。

変更内容

• next 15.5.27 → 15.5.28（GHSA-2464-fhr4-w9xw / GHSA-p3m5-59mp-jv5r の修正版）
• lockfile は pnpm 10.12.4 で更新。overrides は維持され、差分は next 系のみ。sharp は 0.35.5（修正版）のまま

動作確認

• CI で lint / test / build を確認

関連 Issue

なし

🤖 Generated with Claude Code

https://claude.ai/code/session_018kkYPQKNJrtGCz6Bkctiq7

---

Generated by Claude Code

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
sparkle-design	Ready	Preview	Oct 16, 2026 3:02am UTC

[coderabbitai]

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters: 2

• package.json is excluded by !**/*.json
• pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml, !**/*.yaml

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Essentials
• Run ID: 73d86be0-a2de-472e-b949-9c818f5c17ae

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-16T03:04:09.610246Z	2fdccc7	PR opened
🔒 Security Review	✅ Completed 2026-10-16T03:06:09.120334Z	2fdccc7	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

An organization owner can choose the repository organization as the billing source for reviews requested by members with a paid Copilot license. Learn about Copilot code review billing. Review the Copilot code review billing settings.

[touyou]

copilot-pull-request-reviewer の失敗は Copilot の月間クォータ超過（402 You have exceeded your monthly quota）によるもので、この PR の変更とは無関係です。再実行しても同じ結果になるため、そのままにしています。

---

Generated by Claude Code