[Security] Bump next from 7.0.3 to 10.2.3

[dependabot-preview[bot]]

Bumps next from 7.0.3 to 10.2.3. This update includes a security fix.

Vulnerabilities fixed

Sourced from The GitHub Security Advisory Database.

Moderate severity vulnerability that affects next

Impact

• Not affected: Deployments on ZEIT Now v2 (https://zeit.co) are not affected
• Not affected: Deployments using the serverless target
• Not affected: Deployments using next export
• Affected: Users of Next.js below 9.3.2

We recommend everyone to upgrade regardless of whether you can reproduce the issue or not.

Patches

https://github.com/zeit/next.js/releases/tag/v9.3.2

References

https://github.com/zeit/next.js/releases/tag/v9.3.2

Affected versions: < 9.3.2

Release notes

Sourced from next's releases.

v10.2.3

Core Changes

• lazy load postcss plugins: #25317
• Add missing i18n types in gip context: #25363
• Ensure externals are correct for mini-css-extract-plugin: #25340
• Update beforeFiles rewrites to continue: #25418

Documentation Changes

• Update docs to show how to typecheck next.config.js: #25240
• docs: typo in rewrites page: #25377

Example Changes

• Fix PatternFly 4 example: #25356
• Update package.json blog-starter-typescript: #25361
• New kontent UI screenshots: #25387

Misc Changes

• Follow up rewrites regression test for #25208: #25282
• Fix ie11 has rewrite test: #25342

Credits

Huge thanks to @​alexbrazier, @​jamsinclair, @​sokra, @​fabianishere, @​rokinsky, @​ijjk, @​msidqi, @​rubensdemelo, and @​Simply007 for helping!

v10.2.3-canary.1

Core Changes

• Update beforeFiles rewrites to continue: #25418

Example Changes

• New kontent UI screenshots: #25387

Credits

Huge thanks to @​Simply007 for helping!

v10.2.3-canary.0

Core Changes

• lazy load postcss plugins: #25317
• Add missing i18n types in gip context: #25363
• Ensure externals are correct for mini-css-extract-plugin: #25340

Documentation Changes

... (truncated)

Commits

• 4f32a03 v10.2.3
• 1745cf6 v10.2.3-canary.1
• 38fa5ca Update beforeFiles rewrites to continue (#25418)
• c348784 New kontent UI screenshots (#25387)
• c7596be v10.2.3-canary.0
• 5c05f35 Update package.json blog-starter-typescript (#25361)
• 2e5fac7 docs: typo in rewrites page (#25377)
• a348407 Ensure externals are correct for mini-css-extract-plugin (#25340)
• 0aef272 Fix ie11 has rewrite test (#25342)
• 48cbb81 Add missing i18n types in gip context (#25363)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com): - Update frequency (including time of day and day of week) - Pull request limits (per update run and/or open at any time) - Automerge options (never/patch/minor, and dev/runtime dependencies) - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired)