Update next to 14.2.32 in dashboard-service

[Copilot]

Dependabot PR #14 has been stuck 82+ days due to path mismatch (/files/services/dashboard-service vs actual /services/dashboard-service). Manually applying the security update.

Changes

• Pin next to 14.2.32 in services/dashboard-service/package.json (was ^14.0.3)
• Update package-lock.json accordingly

Next.js 14.2.32 Fixes

• Router handling when setting location response header (#82588)
• next/image content-type detection (#82179)
• next/image optimizer headers (#82178)

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• https://api.github.com//advisories
  • Triggering command: /home/REDACTED/work/_temp/ghcca-node/node/bin/node /home/REDACTED/work/_temp/ghcca-node/node/bin/node --enable-source-maps /home/REDACTED/work/_temp/copilot-developer-action-main/dist/index.js (http block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

Objective

Manually update the next package from 14.2.30 to 14.2.32 in the dashboard service to apply security fixes.

Background

Dependabot PR #14 has been stuck for 82+ days due to a path mismatch issue. The Dependabot PR targets /files/services/dashboard-service which doesn't exist. The actual path is /services/dashboard-service.

Task

1. Navigate to /services/dashboard-service
2. Update next version in package.json from 14.2.30 to 14.2.32
3. Run npm install to update package-lock.json
4. Commit changes

Changes in Next.js 14.2.32

• Fix router handling when setting a location response header (#82588)
• Fix next/image: improve and simplify detect-content-type (#82179)
• Fix next/image: fix image-optimizer.ts headers (#82178)

Acceptance Criteria

• next version updated to 14.2.32 in package.json
• package-lock.json updated accordingly
• Build passes successfully

This pull request was created as a result of the following prompt from Copilot chat.

Objective

Manually update the next package from 14.2.30 to 14.2.32 in the dashboard service to apply security fixes.

Background

Dependabot PR #14 has been stuck for 82+ days due to a path mismatch issue. The Dependabot PR targets /files/services/dashboard-service which doesn't exist. The actual path is /services/dashboard-service.

Task

1. Navigate to /services/dashboard-service
2. Update next version in package.json from 14.2.30 to 14.2.32
3. Run npm install to update package-lock.json
4. Commit changes

Changes in Next.js 14.2.32

• Fix router handling when setting a location response header (#82588)
• Fix next/image: improve and simplify detect-content-type (#82179)
• Fix next/image: fix image-optimizer.ts headers (#82178)

Acceptance Criteria

• next version updated to 14.2.32 in package.json
• package-lock.json updated accordingly
• Build passes successfully

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

[jazzberry-ai]

This repository is associated with groupthinking whose free trial has ended. Subscribe at jazzberry.ai.
_{If this is an error contact us at [email protected].}

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Preview	Comments	Updated (UTC)
ajob-4-agent	Ready	Preview	Comment	Nov 26, 2025 8:27pm

[Copilot]

Pull request overview

This PR manually updates Next.js from version ^14.0.3 to 14.2.32 in the dashboard service to apply security fixes. This addresses a stuck Dependabot PR (#14) that has been unable to complete due to a path mismatch issue.

Key Changes:

• Updated next dependency from ^14.0.3 to 14.2.32 in package.json
• Updated package-lock.json with new Next.js version and all related @next/* package entries
• Version pinning removes semver range operator (changed from ^14.0.3 to exact 14.2.32)

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.

File	Description
services/dashboard-service/package.json	Updated Next.js version to 14.2.32 with exact version pinning
services/dashboard-service/package-lock.json	Updated lockfile with new Next.js 14.2.32 dependencies and all related @next/* packages

Files not reviewed (1)

• services/dashboard-service/package-lock.json: Language not supported

[Copilot]

The version has been pinned (removing the ^ prefix) which means future npm install or npm update commands won't automatically pick up newer patch versions of Next.js. While this provides more control, it means security updates won't be automatically applied. Consider keeping the ^ prefix (i.e., "next": "^14.2.32") to allow automatic patch updates while staying on the 14.2.x version range, or document why strict version pinning is required for this dependency.

Suggested change

	"next": "14.2.32",
	"next": "^14.2.32",