Update dependencies to address security vulnerabilities

[s0]

Perform pnpm audit on the codebase to address security vulnerabilities, and harden permissions for CI workflow.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	next@​15.5.18
	lodash@​4.18.1

View full report

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: c2c203f12f

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Add a changeset for build-utils dependency updates

This commit updates runtime dependencies in @arcanejs/build-utils (a publishable package with "private": false), but no .changeset entry includes that package, so its version/changelog will not be bumped and consumers will not receive these security-related updates through a release. Per /workspace/arcanejs/AGENTS.md (“Changesets (Required for Package Code Changes)”), publishable package code changes must include an accurate changeset.

Useful? React with 👍 / 👎.