[Adedayo0101]

Summary

• Refresh the lockfile to patched releases for the five advisories in Update the transitive dependencies flagged by npm audit #512.
• Update the lockfile-only SDK and Next.js releases within their existing manifest ranges.
• Add a scoped Next.js PostCSS override to 8.5.31; Next.js pins 8.4.31, which remains in the vulnerable range.
• Avoid a forced Next.js major upgrade. npm audit --omit=dev reports zero vulnerabilities after these changes.

Dependency versions

• @stellar/stellar-sdk: 16.0.1 -> 16.4.1
• axios: 1.16.1 -> 1.20.0
• follow-redirects: 1.16.0 -> 1.16.1
• next: 15.5.19 -> 15.5.28
• Next.js nested postcss: 8.4.31 -> 8.5.31 (scoped override)
• sharp: 0.34.5 -> 0.35.5
• smol-toml: 1.6.1 -> 1.9.1
• source-map-js: 1.2.1 -> 1.2.2
• Related lockfile changes include Next.js platform packages, Sharp platform/libvips packages, nanoid 3.3.18 -> 3.3.20, and semver 7.8.4 -> 7.8.5.

Validation

• npm audit fix: attempted; failed with EIDLETIMEOUT connecting to registry.npmjs.org.
• npm update @stellar/stellar-sdk axios follow-redirects next postcss sharp smol-toml source-map-js --package-lock-only --offline --ignore-scripts --no-audit: succeeded using cached metadata.
• npm install --package-lock-only --offline --ignore-scripts --no-audit: succeeded and applied the scoped PostCSS override to the lockfile.
• npm audit --omit=dev: passed; found 0 vulnerabilities.
• npm run lint: could not run; eslint: command not found.
• npm run typecheck: could not run; tsc: command not found.
• npm test: could not run; vitest: command not found.
• npm run build: could not run; next: command not found.

The lint, typecheck, test, and build binaries are absent because the previous dependency installation was left incomplete after an npm registry idle timeout. No source files were changed.

Closes #512

[Glittersup]

@Adedayo0101 Please resolve conflicts