Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the minor group across 1 directory with 16 updates #1239

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 2, 2025

Bumps the minor group with 15 updates in the / directory:

Package From To
@creit.tech/stellar-wallets-kit 1.2.5 1.4.1
@stellar/stellar-sdk 13.0.0 13.1.0
@tanstack/react-query 5.59.0 5.66.0
@tanstack/react-query-devtools 5.59.0 5.66.0
dompurify 3.1.7 3.2.4
@types/dompurify 3.0.5 3.2.0
html-react-parser 5.1.18 5.2.2
tslib 2.7.0 2.8.1
zustand-querystring 0.0.19 0.1.0
@playwright/test 1.47.2 1.50.1
@types/node 22.7.4 22.13.0
lint-staged 15.2.10 15.4.3
prettier 3.3.3 3.4.2
sass 1.79.4 1.83.4
typescript 5.6.2 5.7.3

Updates @creit.tech/stellar-wallets-kit from 1.2.5 to 1.4.1

Release notes

Sourced from @​creit.tech/stellar-wallets-kit's releases.

v1.4.1

1.4.1 (2025-01-09)

Fix

  • Make the Trezor module to work with Webpack projects

v1.4.0

1.4.0 (2024-12-20)

Add

  • Add Trezor wallets support
  • Update the returned value from the openAccountSelector method in the Ledger module.

v1.3.0

1.3.0 (2024-12-05)

Add

  • Add Ledger wallets support
  • Add new "account selector" component which can be used by wallets based on mnemonic phrases or similar (for example hardware wallets)
  • Merge PR #48 - Add signMessage support for Hana wallet
Changelog

Sourced from @​creit.tech/stellar-wallets-kit's changelog.

1.4.1 (2025-01-09)

Fix

  • Make the Trezor module to work with Webpack projects

1.4.0 (2024-12-20)

Add

  • Add Trezor wallets support
  • Update the returned value from the openAccountSelector method in the Ledger module.

1.3.0 (2024-12-05)

Add

  • Add Ledger wallets support
  • Add new "account selector" component which can be used by wallets based on mnemonic phrases or similar (for example hardware wallets)
  • Merge PR #48 - Add signMessage support for Hana wallet
Commits
  • 0cdcd9f Upgrade to 1.4.1
  • 4d2a2c5 Upgrade to 1.4.1
  • 2d88524 Upgrade to 1.4.0
  • 5c127a3 Add new TrezorModule and update Ledger returned value from the `openAccountSe...
  • 97dbed6 Upgrade to 1.3.0
  • 25ba71f Merge branch 'feature/ledger-module'
  • df4b109 Merge remote-tracking branch 'origin/main'
  • 397ed62 Add ledger module
  • 62c9c4d Merge pull request #48 from Hana-Technology/hana-wallet-sign-message
  • 6f460b3 Added signMessage support for Hana
  • See full diff in compare view

Updates @stellar/stellar-sdk from 13.0.0 to 13.1.0

Release notes

Sourced from @​stellar/stellar-sdk's releases.

v13.1.0

v13.1.0

Added

  • Added Horizon.Server.root to obtain information from the Horizon root endpoint (#1122).

Fixed

  • When using a friendbot that points to a Horizon instance that has ledger metadata disabled, you can no longer extract the account sequence from the response. Instead, we hit RPC directly (#1107).
  • rpc.Server.getEvents() now correctly returns the cursor field at the top-level response (#1124).

Contributors

Full Changelog: stellar/js-stellar-sdk@v13.0.0...v13.1.0

Changelog

Sourced from @​stellar/stellar-sdk's changelog.

v13.1.0

Added

  • Added Horizon.Server.root to obtain information from the Horizon root endpoint (#1122).

Fixed

  • When using a friendbot that points to a Horizon instance that has ledger metadata disabled, you can no longer extract the account sequence from the response. Instead, we hit RPC directly (#1107).
  • rpc.Server.getEvents() now correctly returns the cursor field at the top-level response (#1124).
Commits
  • d147768 Prepare v13.1.0 for release (#1123)
  • 548e5c3 Move the cursor field in rpc.Server.getEvents to the right place (#1124)
  • 3988271 Added Horizon.Server.root to obtain information from the Horizon root endpo...
  • 3304995 Fetch metadata via RPC instead of relying on the Friendbot response (#1107)
  • bb2e5ba Bump the minor-and-patch group across 1 directory with 4 updates (#1111)
  • 25ff204 Fix misc. spelling issues in docs (#1083)
  • 24c5032 Allow npm publish to be run manually (#1105)
  • 83de316 Drop the protocol-22-beta when publishing to npm (#1104)
  • See full diff in compare view

Updates @tanstack/react-query from 5.59.0 to 5.66.0

Release notes

Sourced from @​tanstack/react-query's releases.

v5.66.0

Version 5.66.0 - 1/31/25, 9:05 AM

Changes

Feat

  • core: add client to queryFunctionContext (#8599) (f86eb7e) by Dominik Dorfmeister

Docs

  • Add OpenAPI Qraft React to the list of community projects (#8588) (a507400) by Alex Batalov

Packages

  • @​tanstack/eslint-plugin-query@​5.66.0
  • @​tanstack/query-core@​5.66.0
  • @​tanstack/query-persist-client-core@​5.66.0
  • @​tanstack/angular-query-experimental@​5.66.0
  • @​tanstack/query-async-storage-persister@​5.66.0
  • @​tanstack/query-broadcast-client-experimental@​5.66.0
  • @​tanstack/query-sync-storage-persister@​5.66.0
  • @​tanstack/react-query@​5.66.0
  • @​tanstack/react-query-devtools@​5.66.0
  • @​tanstack/react-query-persist-client@​5.66.0
  • @​tanstack/react-query-next-experimental@​5.66.0
  • @​tanstack/solid-query@​5.66.0
  • @​tanstack/solid-query-devtools@​5.66.0
  • @​tanstack/solid-query-persist-client@​5.66.0
  • @​tanstack/svelte-query@​5.66.0
  • @​tanstack/svelte-query-devtools@​5.66.0
  • @​tanstack/svelte-query-persist-client@​5.66.0
  • @​tanstack/vue-query@​5.66.0
  • @​tanstack/vue-query-devtools@​5.66.0
  • @​tanstack/angular-query-devtools-experimental@​5.66.0

v5.65.1

Version 5.65.1 - 1/28/25, 8:59 AM

Changes

Fix

Packages

  • @​tanstack/react-query@​5.65.1
  • @​tanstack/react-query-devtools@​5.65.1
  • @​tanstack/react-query-persist-client@​5.65.1

... (truncated)

Commits

Updates @tanstack/react-query-devtools from 5.59.0 to 5.66.0

Release notes

Sourced from @​tanstack/react-query-devtools's releases.

v5.66.0

Version 5.66.0 - 1/31/25, 9:05 AM

Changes

Feat

  • core: add client to queryFunctionContext (#8599) (f86eb7e) by Dominik Dorfmeister

Docs

  • Add OpenAPI Qraft React to the list of community projects (#8588) (a507400) by Alex Batalov

Packages

  • @​tanstack/eslint-plugin-query@​5.66.0
  • @​tanstack/query-core@​5.66.0
  • @​tanstack/query-persist-client-core@​5.66.0
  • @​tanstack/angular-query-experimental@​5.66.0
  • @​tanstack/query-async-storage-persister@​5.66.0
  • @​tanstack/query-broadcast-client-experimental@​5.66.0
  • @​tanstack/query-sync-storage-persister@​5.66.0
  • @​tanstack/react-query@​5.66.0
  • @​tanstack/react-query-devtools@​5.66.0
  • @​tanstack/react-query-persist-client@​5.66.0
  • @​tanstack/react-query-next-experimental@​5.66.0
  • @​tanstack/solid-query@​5.66.0
  • @​tanstack/solid-query-devtools@​5.66.0
  • @​tanstack/solid-query-persist-client@​5.66.0
  • @​tanstack/svelte-query@​5.66.0
  • @​tanstack/svelte-query-devtools@​5.66.0
  • @​tanstack/svelte-query-persist-client@​5.66.0
  • @​tanstack/vue-query@​5.66.0
  • @​tanstack/vue-query-devtools@​5.66.0
  • @​tanstack/angular-query-devtools-experimental@​5.66.0

v5.65.1

Version 5.65.1 - 1/28/25, 8:59 AM

Changes

Fix

Packages

  • @​tanstack/react-query@​5.65.1
  • @​tanstack/react-query-devtools@​5.65.1
  • @​tanstack/react-query-persist-client@​5.65.1

... (truncated)

Commits

Updates @trezor/connect-web from 9.4.4 to 9.4.7

Commits

Updates dompurify from 3.1.7 to 3.2.4

Release notes

Sourced from dompurify's releases.

DOMPurify 3.2.4

  • Fixed a conditional and config dependent mXSS-style bypass reported by @​nsysean
  • Added a new feature to allow specific hook removal, thanks @​davecardwell
  • Added purify.js and purify.min.js to exports, thanks @​Aetherinox
  • Added better logic in case no window object is president, thanks @​yehuya
  • Updated some dependencies called out by dependabot
  • Updated license files etc to show the correct year

DOMPurify 3.2.3

DOMPurify 3.2.2

  • Fixed a possible bypass in case a rather specific config for custom elements is set, thanks @​yaniv-git
  • Fixed several minor issues with the type definitions, thanks again @​reduckted
  • Fixed a minor issue with the types reference for trusted types, thanks @​reduckted
  • Fixed a minor problem with the template detection regex on some systems, thanks @​svdb99

DOMPurify 3.2.1

DOMPurify 3.2.0

Commits
  • ec29e65 Merge pull request #1062 from cure53/main
  • 1c1b183 chore: Preparing 3.2.4 release
  • d18ffcb fix: Changed the template literal regex to avoid a config-dependent bypass
  • 0d64d2b Merge pull request #1060 from yehuya/initializeTestImprovements
  • 9ad7933 tests: DOMPurify custom window tests improvements
  • 72760ca Merge pull request #1059 from yehuya/fixMissingWindowElement
  • bc72d44 Fix tests
  • 363a89d fix: handle undefined Element in DOMPurify initialization
  • f41b45d Update LICENSE
  • b25bf26 Update README.md
  • Additional commits viewable in compare view

Updates @types/dompurify from 3.0.5 to 3.2.0

Commits

Updates html-react-parser from 5.1.18 to 5.2.2

Release notes

Sourced from html-react-parser's releases.

v5.2.2

5.2.2 (2024-12-25)

Build System

  • deps: bump html-dom-parser from 5.0.12 to 5.0.13 (#1652) (ff0b897)

v5.2.1

5.2.1 (2024-12-16)

Bug Fixes

  • package: bump html-dom-parser to 5.0.12 so that \\r isn't escaped (#1642) (a1ef928), closes #1634

v5.2.0

5.2.0 (2024-12-06)

Features

  • package: add react 19 to package.json peerDependencies (8b6506c), closes #1455 #1501

v5.1.19

5.1.19 (2024-12-04)

Bug Fixes

Changelog

Sourced from html-react-parser's changelog.

5.2.2 (2024-12-25)

Build System

  • deps: bump html-dom-parser from 5.0.12 to 5.0.13 (#1652) (ff0b897)

5.2.1 (2024-12-16)

Bug Fixes

  • package: bump html-dom-parser to 5.0.12 so that \\r isn't escaped (#1642) (a1ef928), closes #1634

5.2.0 (2024-12-06)

Features

  • package: add react 19 to package.json peerDependencies (8b6506c), closes #1455 #1501

5.1.19 (2024-12-04)

Bug Fixes

Commits
  • 9e89abc Merge pull request #1653 from remarkablemark/release-please--branches--master...
  • df83051 chore(master): release 5.2.2
  • ff0b897 build(deps): bump html-dom-parser from 5.0.12 to 5.0.13 (#1652)
  • 1987ef5 build(deps-dev): bump the typescript-eslint group with 2 updates (#1651)
  • b551806 build(deps-dev): bump rollup from 4.28.1 to 4.29.1 (#1650)
  • b362004 build(deps-dev): bump preact from 10.25.2 to 10.25.3 (#1646)
  • 525aef2 build(deps-dev): bump globals from 15.13.0 to 15.14.0 (#1647)
  • df4408f build(deps-dev): bump the typescript-eslint group with 2 updates (#1645)
  • 2360c28 build(package): correct repository url error
  • ad1812d Merge pull request #1644 from remarkablemark/release-please--branches--master...
  • Additional commits viewable in compare view

Updates tslib from 2.7.0 to 2.8.1

Release notes

Sourced from tslib's releases.

v2.8.1

What's Changed

Full Changelog: microsoft/tslib@v2.8.0...v2.8.1

v2.8.0

What's Changed

Full Changelog: microsoft/tslib@v2.7.0...v2.8.0

Commits

Updates zustand-querystring from 0.0.19 to 0.1.0

Release notes

Sourced from zustand-querystring's releases.

0.1.0, new URL encoding

0.1.0 is a breaking change. The URL encoding and decoding is simplified. Before 0.1.0, zustand-querystring used a proprietary format to encode the state in the URL. While this made the URL more readable and short, it could cause unexpected issues when other tools/libraries tried to parse it. In this new version, encoding and decoding is handled by encodeURIComponent and decodeURIComponent. This makes the state in the URL unreadable, but should be more compatible with third-party tools.

Commits

Updates @playwright/test from 1.47.2 to 1.50.1

Release notes

Sourced from @​playwright/test's releases.

v1.50.1

Highlights

microsoft/playwright#34483 - [Feature]: single aria snapshot for different engines/browsers microsoft/playwright#34497 - [Bug]: Firefox not handling keepalive: true fetch requests microsoft/playwright#34504 - [Bug]: update snapshots not creating good diffs microsoft/playwright#34507 - [Bug]: snapshotPathTemplate doesnt work when multiple projects microsoft/playwright#34462 - [Bug]: updateSnapshots "changed" throws an error

Browser Versions

  • Chromium 133.0.6943.16
  • Mozilla Firefox 134.0
  • WebKit 18.2

This version was also tested against the following stable channels:

  • Google Chrome 132
  • Microsoft Edge 132

v1.50.0

Test runner

  • New option timeout allows specifying a maximum run time for an individual test step. A timed-out step will fail the execution of the test.

    test('some test', async ({ page }) => {
      await test.step('a step', async () => {
        // This step can time out separately from the test
      }, { timeout: 1000 });
    });
  • New method test.step.skip() to disable execution of a test step.

    test('some test', async ({ page }) => {
      await test.step('before running step', async () => {
        // Normal step
      });
    await test.step.skip('not yet ready', async () => {
    // This step is skipped
    });
    await test.step('after running step', async () => {
    // This step still runs even though the previous one was skipped
    });
    });

  • Expanded expect(locator).toMatchAriaSnapshot() to allow storing of aria snapshots in separate YAML files.

... (truncated)

Commits
  • dbc685c chore: mark v1.50.1 (#34575)
  • 13d80f1 cherry-pick(#34560): chore(docs): clarify connection method via BrowserType.c...
  • 159210d cherry-pick(#34556): fix(toMatchAriaSnapshot): fail test run when updating mi...
  • fbad9f7 cherry-pick(#34537): feat: per-assertion snapshot path template in config (#3...
  • 67313fa cherry-pick(#34550): roll follow-ups for .NET and Python
  • 4b7794b cherry-pick(#34544): fix(aria): disregard text area textContent
  • 1efbedd cherry-pick(#34535): Revert "Reapply "fix(har timing): record connect timing ...
  • 1e258e0 cherry-pick(#34420): chore(deps): bump vite from 5.4.6 to 5.4.14 (#34539)
  • 7be4ef5 cherry-pick(#34522): test: fetch request through socks proxy over ipv4
  • 7b3e590 cherry-pick(#34530): fix(firefox): disable fetch keep-alive for now before a ...
  • Additional commits viewable in compare view

Updates @types/dompurify from 3.0.5 to 3.2.0

Commits

Updates @types/node from 22.7.4 to 22.13.0

Commits

Updates lint-staged from 15.2.10 to 15.4.3

Release notes

Sourced from lint-staged's releases.

v15.4.3

Patch Changes

  • #1512 cbfed1d Thanks @​tarik02! - Adjust TypeScript types for the default export so that it can be used as a value without error TS2693.

v15.4.2

Patch Changes

  • #1509 8827ebf Thanks @​iiroj! - Change lint-staged's dependencies to use caret (^) ranges instead of tilde (~). This makes it easier for package managers to perform dependency management when minor-level updates are also permitted instead of just patch-level.

v15.4.1

Patch Changes

v15.4.0

Minor Changes

  • #1500 a8ec1dd Thanks @​iiroj! - Lint-staged now provides TypeScript types for the configuration and main Node.js API. You can use the JSDoc syntax in your JS configuration files:

    /**
     * @filename: lint-staged.config.js
     * @type {import('lint-staged').Configuration}
     */
    export default {
      '*': 'prettier --write',
    }

    It's also possible to use the .ts file extension for the configuration if your Node.js version supports it. The --experimental-strip-types flag was introduced in Node.js v22.6.0 and unflagged in v23.6.0, enabling Node.js to execute TypeScript files without additional configuration.

    export NODE_OPTIONS="--experimental-strip-types"
    npx lint-staged --config lint-staged.config.ts

Patch Changes

v15.3.0

Minor Changes

  • #1495 e69da9e Thanks @​iiroj! - Added more info to the debug logs so that "environment" info doesn't need to be added separately to GitHub issues.

  • #1493 fa0fe98 Thanks @​iiroj! - Added more help messages around the automatic git stash that lint-staged creates as a backup (by default). The console output also displays the short git hash of the stash so that it's easier to recover lost files in case some fatal errors are encountered, or the process is killed before completing.

... (truncated)

Changelog

Sourced from lint-staged's changelog.

15.4.3

Patch Changes

  • #1512 cbfed1d Thanks @​tarik02! - Adjust TypeScript types for the default export so that it can be used as a value without error TS2693.

15.4.2

Patch Changes

  • #1509 8827ebf Thanks @​iiroj! - Change lint-staged's dependencies to use caret (^) ranges instead of tilde (~). This makes it easier for package managers to perform dependency management when minor-level updates are also permitted instead of just patch-level.

15.4.1

Patch Changes

15.4.0

Minor Changes

  • #1500 a8ec1dd Thanks @​iiroj! - Lint-staged now provides TypeScript types for the configuration and main Node.js API. You can use the JSDoc syntax in your JS configuration files:

    /**
     * @filename: lint-staged.config.js
     * @type {import('lint-staged').Configuration}
     */
    export default {
      '*': 'prettier --write',
    }

    It's also possible to use the .ts file extension for the configuration if your Node.js version supports it. The --experimental-strip-types flag was introduced in Node.js v22.6.0 and unflagged in v23.6.0, enabling Node.js to execute TypeScript files without additional configuration.

    export NODE_OPTIONS="--experimental-strip-types"
    npx lint-staged --config lint-staged.config.ts

Patch Changes

15.3.0

... (truncated)

Commits
  • e53f950 chore(changeset): release
  • 089da56 test: fail Jest when coverage is under 100%
  • 19aa461 ci: remove code coverage action since it's not working in PRs from forks
  • cbfed1d fix: update types.d.ts (#1512)
  • aef9e5c chore(changeset): release (#1510)
  • 8827ebf build(dependencies): update dependencies and switch to caret ranges (#1509)
  • 7f69b3f docs: generalize description from 'linting' to 'tasks' (#1507)
  • 1c93c9e chore(changeset): release (#1505)
  • c020664 Merge pull request #1504 from lint-staged/fix-typescript
  • 1c7a45e fix: default TypeScript config filenames match JS equivalents
  • Additional commits viewable in compare view

Updates prettier from 3.3.3 to 3.4.2

Release notes

Sourced from prettier's releases.

3.4.2

🔗 Changelog

3.4.1

🔗 Changelog

3.4.0

diff

🔗 Release note

Changelog

Sourced from prettier's changelog.

3.4.2

diff

Treat U+30A0 & U+30FB in Katakana Block as CJK (#16796 by @​tats-u)

Prettier doesn't treat U+30A0 & U+30FB as Japanese. U+30FB is commonly used in Japanese to represent the delimitation of first and last names of non-Japanese people or “and”. The following “C言語・C++・Go・Rust” means “C language & C++ & Go & Rust” in Japanese.

<!-- Input (--prose-wrap=never) -->
C言
語
・
C++
・
Go
・
Rust
<!-- Prettier 3.4.1 -->
C言語・ C++ ・ Go ・ Rust
<!-- Prettier 3.4.2 -->
C言語・C++・Go・Rust

U+30A0 can be used as the replacement of the - in non-Japanese names (e.g. “Saint-Saëns” (Charles Camille Saint-Saëns) can be represented as “サン゠サーンス” in Japanese), but substituted by ASCII hyphen (U+002D) or U+FF1D (full width hyphen) in many cases (e.g. “サン=サーンス” or “サン=サーンス”).

Fix comments print on class methods with decorators (#16891 by @​fisker)

// Input
class A {
  @decorator
  /** 
   * The method description
   *
  */
  async method(foo: Foo, bar: Bar) {
    console.log(foo);
  }
}
// Prettier 3.4.1
class A {
@​decorator
async /**
</tr></table>

... (truncated)

Commits

Updates sass from 1.79.4 to 1.83.4

Release notes

Sourced from sass's releases.

Dart Sass 1.83.4

To install Sass 1.83.4, download one of the packages below and add it to your PATH, or see

Bumps the minor group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@creit.tech/stellar-wallets-kit](https://github.com/Creit-Tech/Stellar-Wallets-Kit) | `1.2.5` | `1.4.1` |
| [@stellar/stellar-sdk](https://github.com/stellar/js-stellar-sdk) | `13.0.0` | `13.1.0` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.59.0` | `5.66.0` |
| [@tanstack/react-query-devtools](https://github.com/TanStack/query/tree/HEAD/packages/react-query-devtools) | `5.59.0` | `5.66.0` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.1.7` | `3.2.4` |
| [@types/dompurify](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/dompurify) | `3.0.5` | `3.2.0` |
| [html-react-parser](https://github.com/remarkablemark/html-react-parser) | `5.1.18` | `5.2.2` |
| [tslib](https://github.com/Microsoft/tslib) | `2.7.0` | `2.8.1` |
| [zustand-querystring](https://github.com/nitedani/zustand-querystring) | `0.0.19` | `0.1.0` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.47.2` | `1.50.1` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.7.4` | `22.13.0` |
| [lint-staged](https://github.com/lint-staged/lint-staged) | `15.2.10` | `15.4.3` |
| [prettier](https://github.com/prettier/prettier) | `3.3.3` | `3.4.2` |
| [sass](https://github.com/sass/dart-sass) | `1.79.4` | `1.83.4` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.6.2` | `5.7.3` |



Updates `@creit.tech/stellar-wallets-kit` from 1.2.5 to 1.4.1
- [Release notes](https://github.com/Creit-Tech/Stellar-Wallets-Kit/releases)
- [Changelog](https://github.com/Creit-Tech/Stellar-Wallets-Kit/blob/main/CHANGELOG.md)
- [Commits](Creit-Tech/Stellar-Wallets-Kit@v1.2.5...v1.4.1)

Updates `@stellar/stellar-sdk` from 13.0.0 to 13.1.0
- [Release notes](https://github.com/stellar/js-stellar-sdk/releases)
- [Changelog](https://github.com/stellar/js-stellar-sdk/blob/master/CHANGELOG.md)
- [Commits](stellar/js-stellar-sdk@v13.0.0...v13.1.0)

Updates `@tanstack/react-query` from 5.59.0 to 5.66.0
- [Release notes](https://github.com/TanStack/query/releases)
- [Commits](https://github.com/TanStack/query/commits/v5.66.0/packages/react-query)

Updates `@tanstack/react-query-devtools` from 5.59.0 to 5.66.0
- [Release notes](https://github.com/TanStack/query/releases)
- [Commits](https://github.com/TanStack/query/commits/v5.66.0/packages/react-query-devtools)

Updates `@trezor/connect-web` from 9.4.4 to 9.4.7
- [Release notes](https://github.com/trezor/trezor-suite/releases)
- [Changelog](https://github.com/trezor/trezor-suite/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/trezor/trezor-suite/commits)

Updates `dompurify` from 3.1.7 to 3.2.4
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.1.7...3.2.4)

Updates `@types/dompurify` from 3.0.5 to 3.2.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/dompurify)

Updates `html-react-parser` from 5.1.18 to 5.2.2
- [Release notes](https://github.com/remarkablemark/html-react-parser/releases)
- [Changelog](https://github.com/remarkablemark/html-react-parser/blob/master/CHANGELOG.md)
- [Commits](remarkablemark/html-react-parser@v5.1.18...v5.2.2)

Updates `tslib` from 2.7.0 to 2.8.1
- [Release notes](https://github.com/Microsoft/tslib/releases)
- [Commits](microsoft/tslib@v2.7.0...v2.8.1)

Updates `zustand-querystring` from 0.0.19 to 0.1.0
- [Release notes](https://github.com/nitedani/zustand-querystring/releases)
- [Commits](nitedani/zustand-querystring@v0.0.19...v0.1.0)

Updates `@playwright/test` from 1.47.2 to 1.50.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.47.2...v1.50.1)

Updates `@types/dompurify` from 3.0.5 to 3.2.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/dompurify)

Updates `@types/node` from 22.7.4 to 22.13.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `lint-staged` from 15.2.10 to 15.4.3
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/master/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v15.2.10...v15.4.3)

Updates `prettier` from 3.3.3 to 3.4.2
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.3.3...3.4.2)

Updates `sass` from 1.79.4 to 1.83.4
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.79.4...1.83.4)

Updates `typescript` from 5.6.2 to 5.7.3
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml)
- [Commits](microsoft/TypeScript@v5.6.2...v5.7.3)

---
updated-dependencies:
- dependency-name: "@creit.tech/stellar-wallets-kit"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: "@stellar/stellar-sdk"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: "@tanstack/react-query"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: "@tanstack/react-query-devtools"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: "@trezor/connect-web"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: dompurify
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: "@types/dompurify"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: html-react-parser
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: tslib
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: zustand-querystring
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: "@playwright/test"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: "@types/dompurify"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: lint-staged
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: prettier
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: sass
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: typescript
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Feb 2, 2025
Copy link

New, updated, and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@babel/[email protected] 🔁 npm/@babel/[email protected] None 0 246 kB nicolo-ribaudo
npm/@creit.tech/[email protected] 🔁 npm/@creit.tech/[email protected] None 0 513 kB earrietadev
npm/@playwright/[email protected] 🔁 npm/@playwright/[email protected] None 0 25.4 kB dgozman-ms, mxschmitt, pavelfeldman, ...1 more
npm/@solana-program/[email protected] environment 0 1.12 MB lorisleiva
npm/@solana/[email protected] None 0 167 kB lorisleiva
npm/@solana/[email protected] None 0 198 kB lorisleiva
npm/@solana/[email protected] None 0 51.4 kB lorisleiva
npm/@solana/[email protected] None 0 495 kB lorisleiva
npm/@solana/[email protected] None 0 756 kB lorisleiva
npm/@solana/[email protected] None 0 246 kB lorisleiva
npm/@solana/[email protected] None 0 208 kB lorisleiva
npm/@solana/[email protected] None 0 18.4 kB lorisleiva
npm/@solana/[email protected] None 0 1.35 MB lorisleiva
npm/@solana/[email protected] None 0 43.1 kB lorisleiva
npm/@solana/[email protected] None 0 33.1 kB lorisleiva
npm/@solana/[email protected] None 0 85.8 kB lorisleiva
npm/@solana/[email protected] None 0 118 kB lorisleiva
npm/@solana/[email protected] None 0 147 kB lorisleiva
npm/@solana/[email protected] None 0 18.5 kB lorisleiva
npm/@solana/[email protected] None 0 59.6 kB lorisleiva
npm/@solana/[email protected] None 0 256 kB lorisleiva
npm/@solana/[email protected] None 0 21.9 kB lorisleiva
npm/@solana/[email protected] None 0 111 kB lorisleiva
npm/@solana/[email protected] None 0 72.1 kB lorisleiva
npm/@solana/[email protected] None 0 146 kB lorisleiva
npm/@solana/[email protected] None 0 82.5 kB lorisleiva
npm/@solana/[email protected] None 0 197 kB lorisleiva
npm/@solana/[email protected] None 0 263 kB lorisleiva
npm/@solana/[email protected] None 0 227 kB lorisleiva
npm/@solana/[email protected] environment, network +1 205 kB lorisleiva
npm/@solana/[email protected] None 0 170 kB lorisleiva
npm/@solana/[email protected] environment 0 129 kB lorisleiva
npm/@solana/[email protected] None 0 399 kB lorisleiva
npm/@solana/[email protected] environment 0 126 kB lorisleiva
npm/@solana/[email protected] None 0 340 kB lorisleiva
npm/@solana/[email protected] None 0 224 kB lorisleiva
npm/@solana/[email protected] None 0 735 kB lorisleiva
npm/@solana/[email protected] None 0 152 kB lorisleiva
npm/@solana/[email protected] 🔁 npm/@solana/[email protected] None 0 1.67 MB lorisleiva
npm/@stellar/[email protected] 🔁 npm/@stellar/[email protected] None 0 14.9 MB stellar-npm-ci
npm/@tanstack/[email protected] 🔁 npm/@tanstack/[email protected] None 0 1.96 MB nksaraf, tannerlinsley
npm/@tanstack/[email protected] 🔁 npm/@tanstack/[email protected] None 0 2.59 MB tannerlinsley
npm/@tanstack/[email protected] 🔁 npm/@tanstack/[email protected] None 0 95.4 kB tannerlinsley
npm/@tanstack/[email protected] 🔁 npm/@tanstack/[email protected] None 0 721 kB nksaraf, tannerlinsley
npm/@trezor/[email protected] 🔁 npm/@trezor/[email protected] None +1 84.2 kB trezor-ci
npm/@trezor/[email protected] 🔁 npm/@trezor/[email protected] None 0 60 kB trezor-ci
npm/@trezor/[email protected] 🔁 npm/@trezor/[email protected] None 0 59.9 kB trezor-ci
npm/@trezor/[email protected] 🔁 npm/@trezor/[email protected] None 0 219 kB trezor-ci
npm/@trezor/[email protected] 🔁 npm/@trezor/[email protected] None 0 5.52 kB trezor-ci
npm/@trezor/[email protected] 🔁 npm/@trezor/[email protected] None 0 202 kB trezor-ci
npm/@trezor/[email protected] 🔁 npm/@trezor/[email protected] None +1 170 kB trezor-ci
npm/@trezor/[email protected] 🔁 npm/@trezor/[email protected] None 0 1.48 MB trezor-ci
npm/@trezor/[email protected] 🔁 npm/@trezor/[email protected] None 0 1.01 MB trezor-ci
npm/@trezor/[email protected] 🔁 npm/@trezor/[email protected] None 0 168 kB trezor-ci
npm/@trezor/[email protected] 🔁 npm/@trezor/[email protected] None 0 28.1 kB trezor-ci
npm/@trezor/[email protected] 🔁 npm/@trezor/[email protected] None 0 237 kB trezor-ci
npm/@types/[email protected] 🔁 npm/@types/[email protected] None 0 1.74 kB types
npm/[email protected] 🔁 npm/[email protected] None 0 2.13 MB jasonsaayman
npm/[email protected] 🔁 npm/[email protected] None 0 44.2 kB sindresorhus
npm/[email protected] 🔁 npm/[email protected] None 0 308 kB cure53
npm/[email protected] 🔁 npm/[email protected] None 0 167 kB feedic
npm/[email protected] None 0 540 kB feedic
npm/[email protected] 🔁 npm/[email protected] None 0 57.1 kB divyamsingh234
npm/[email protected] 🔁 npm/[email protected] None 0 132 kB remarkablemark
npm/[email protected] 🔁 npm/[email protected] None 0 468 kB remarkablemark
npm/[email protected] 🔁 npm/[email protected] None 0 489 kB feedic
npm/[email protected] 🔁 npm/[email protected] None 0 687 kB leebyron
npm/[email protected] 🔁 npm/[email protected] None 0 18 kB antonk52
npm/[email protected] 🔁 npm/[email protected] Transitive: environment +1 329 kB okonet
npm/[email protected] 🔁 npm/[email protected] None +2 305 kB cenk1cenk2
npm/[email protected] 🔁 npm/[email protected] None 0 7.84 MB dgozman, dgozman-ms, pavelfeldman, ...1 more
npm/[email protected] 🔁 npm/[email protected] None +1 3.34 MB dgozman, dgozman-ms, pavelfeldman, ...1 more
npm/[email protected] 🔁 npm/[email protected] None 0 7.83 MB prettier-bot
npm/[email protected] 🔁 npm/[email protected] Transitive: environment +2 5.95 MB hcatlin, nex3, sassbot
npm/[email protected] 🔁 npm/[email protected], npm/[email protected] None 0 90.4 kB typescript-bot
npm/[email protected] 🔁 npm/[email protected] None 0 22.7 MB typescript-bot
npm/[email protected] 🔁 npm/[email protected] None 0 83.3 kB matteo.collina
npm/[email protected] 🔁 npm/[email protected] None 0 132 kB broofa
npm/[email protected] 🔁 npm/[email protected] None 0 681 kB eemeli
npm/[email protected] 🔁 npm/[email protected] None 0 21.4 kB nitedani

🚮 Removed packages: npm/@solana/[email protected], npm/@swc/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected]

View full report↗︎

Copy link

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package NoteSourceCI
Deprecated npm/@types/[email protected]
  • Reason: This is a stub types definition. dompurify provides its own type definitions, so you do not need this installed.
⚠︎

View full report↗︎

Next steps

What is a deprecated package?

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

Research the state of the package and determine if there are non-deprecated versions that can be used, or if it should be replaced with a new, supported solution.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/[email protected] or ignore all packages with @SocketSecurity ignore-all

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
Status: Backlog (Not Ready)
Development

Successfully merging this pull request may close these issues.

0 participants