Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the minor group across 1 directory with 16 updates #1222

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 12, 2025

Bumps the minor group with 15 updates in the / directory:

Package From To
@creit.tech/stellar-wallets-kit 1.2.5 1.4.1
@stellar/stellar-sdk 13.0.0 13.1.0
@tanstack/react-query 5.59.0 5.64.0
@tanstack/react-query-devtools 5.59.0 5.64.0
dompurify 3.1.7 3.2.3
@types/dompurify 3.0.5 3.2.0
html-react-parser 5.1.18 5.2.2
tslib 2.7.0 2.8.1
zustand-querystring 0.0.19 0.1.0
@playwright/test 1.47.2 1.49.1
@types/node 22.7.4 22.10.5
lint-staged 15.2.10 15.3.0
prettier 3.3.3 3.4.2
sass 1.79.4 1.83.1
typescript 5.6.2 5.7.3

Updates @creit.tech/stellar-wallets-kit from 1.2.5 to 1.4.1

Release notes

Sourced from @​creit.tech/stellar-wallets-kit's releases.

v1.4.1

1.4.1 (2025-01-09)

Fix

  • Make the Trezor module to work with Webpack projects

v1.4.0

1.4.0 (2024-12-20)

Add

  • Add Trezor wallets support
  • Update the returned value from the openAccountSelector method in the Ledger module.

v1.3.0

1.3.0 (2024-12-05)

Add

  • Add Ledger wallets support
  • Add new "account selector" component which can be used by wallets based on mnemonic phrases or similar (for example hardware wallets)
  • Merge PR #48 - Add signMessage support for Hana wallet
Changelog

Sourced from @​creit.tech/stellar-wallets-kit's changelog.

1.4.1 (2025-01-09)

Fix

  • Make the Trezor module to work with Webpack projects

1.4.0 (2024-12-20)

Add

  • Add Trezor wallets support
  • Update the returned value from the openAccountSelector method in the Ledger module.

1.3.0 (2024-12-05)

Add

  • Add Ledger wallets support
  • Add new "account selector" component which can be used by wallets based on mnemonic phrases or similar (for example hardware wallets)
  • Merge PR #48 - Add signMessage support for Hana wallet
Commits
  • 0cdcd9f Upgrade to 1.4.1
  • 4d2a2c5 Upgrade to 1.4.1
  • 2d88524 Upgrade to 1.4.0
  • 5c127a3 Add new TrezorModule and update Ledger returned value from the `openAccountSe...
  • 97dbed6 Upgrade to 1.3.0
  • 25ba71f Merge branch 'feature/ledger-module'
  • df4b109 Merge remote-tracking branch 'origin/main'
  • 397ed62 Add ledger module
  • 62c9c4d Merge pull request #48 from Hana-Technology/hana-wallet-sign-message
  • 6f460b3 Added signMessage support for Hana
  • See full diff in compare view

Updates @stellar/stellar-sdk from 13.0.0 to 13.1.0

Release notes

Sourced from @​stellar/stellar-sdk's releases.

v13.1.0

v13.1.0

Added

  • Added Horizon.Server.root to obtain information from the Horizon root endpoint (#1122).

Fixed

  • When using a friendbot that points to a Horizon instance that has ledger metadata disabled, you can no longer extract the account sequence from the response. Instead, we hit RPC directly (#1107).
  • rpc.Server.getEvents() now correctly returns the cursor field at the top-level response (#1124).

Contributors

Full Changelog: stellar/js-stellar-sdk@v13.0.0...v13.1.0

Changelog

Sourced from @​stellar/stellar-sdk's changelog.

v13.1.0

Added

  • Added Horizon.Server.root to obtain information from the Horizon root endpoint (#1122).

Fixed

  • When using a friendbot that points to a Horizon instance that has ledger metadata disabled, you can no longer extract the account sequence from the response. Instead, we hit RPC directly (#1107).
  • rpc.Server.getEvents() now correctly returns the cursor field at the top-level response (#1124).
Commits
  • d147768 Prepare v13.1.0 for release (#1123)
  • 548e5c3 Move the cursor field in rpc.Server.getEvents to the right place (#1124)
  • 3988271 Added Horizon.Server.root to obtain information from the Horizon root endpo...
  • 3304995 Fetch metadata via RPC instead of relying on the Friendbot response (#1107)
  • bb2e5ba Bump the minor-and-patch group across 1 directory with 4 updates (#1111)
  • 25ff204 Fix misc. spelling issues in docs (#1083)
  • 24c5032 Allow npm publish to be run manually (#1105)
  • 83de316 Drop the protocol-22-beta when publishing to npm (#1104)
  • See full diff in compare view

Updates @tanstack/react-query from 5.59.0 to 5.64.0

Release notes

Sourced from @​tanstack/react-query's releases.

v5.64.0

Version 5.64.0 - 1/11/25, 6:59 PM

Changes

Feat

  • types: support typing QueryKey and MutationKey via Register (#8521) (fd500a4) by @​neefrehman

Docs

  • react-query: highlight per component select pattern for query options (#8522) (8ddebc6) by @​DogPawHat
  • react-query: Add import statement with skipToken to the docs (#8519) (690fd2a) by Przemek Maszczynski

Packages

  • @​tanstack/query-core@​5.64.0
  • @​tanstack/query-broadcast-client-experimental@​5.64.0
  • @​tanstack/query-persist-client-core@​5.64.0
  • @​tanstack/query-sync-storage-persister@​5.64.0
  • @​tanstack/react-query@​5.64.0
  • @​tanstack/react-query-devtools@​5.64.0
  • @​tanstack/react-query-persist-client@​5.64.0
  • @​tanstack/react-query-next-experimental@​5.64.0
  • @​tanstack/solid-query@​5.64.0
  • @​tanstack/solid-query-devtools@​5.64.0
  • @​tanstack/solid-query-persist-client@​5.64.0
  • @​tanstack/svelte-query@​5.64.0
  • @​tanstack/svelte-query-devtools@​5.64.0
  • @​tanstack/svelte-query-persist-client@​5.64.0
  • @​tanstack/vue-query@​5.64.0
  • @​tanstack/vue-query-devtools@​5.64.0
  • @​tanstack/angular-query-experimental@​5.64.0
  • @​tanstack/query-async-storage-persister@​5.64.0
  • @​tanstack/angular-query-devtools-experimental@​5.64.0

v5.63.0

Version 5.63.0 - 1/8/25, 2:21 PM

Changes

Feat

  • react-query: allow useQuery and useQueries to unsubscribe from the query cache with an option (#8348) (e2bc216) by Dominik Dorfmeister

Packages

  • @​tanstack/react-query@​5.63.0
  • @​tanstack/react-query-devtools@​5.63.0
  • @​tanstack/react-query-persist-client@​5.63.0

... (truncated)

Commits
  • 4a589bf release: v5.64.0
  • 564e549 release: v5.63.0
  • e2bc216 feat(react-query): allow useQuery and useQueries to unsubscribe from the quer...
  • 3c5d8e3 release: v5.62.16
  • c91c590 release: v5.62.14
  • 0503282 fix(react-query): ensureSuspenseTimers should ALWAYS set staleTime to 1000 wh...
  • b25a41e release: v5.62.12
  • 8f72f59 release: v5.62.11
  • 7ade233 fix: handle react-native resolver (#8478)
  • 4f90639 release: v5.62.10
  • Additional commits viewable in compare view

Updates @tanstack/react-query-devtools from 5.59.0 to 5.64.0

Release notes

Sourced from @​tanstack/react-query-devtools's releases.

v5.64.0

Version 5.64.0 - 1/11/25, 6:59 PM

Changes

Feat

  • types: support typing QueryKey and MutationKey via Register (#8521) (fd500a4) by @​neefrehman

Docs

  • react-query: highlight per component select pattern for query options (#8522) (8ddebc6) by @​DogPawHat
  • react-query: Add import statement with skipToken to the docs (#8519) (690fd2a) by Przemek Maszczynski

Packages

  • @​tanstack/query-core@​5.64.0
  • @​tanstack/query-broadcast-client-experimental@​5.64.0
  • @​tanstack/query-persist-client-core@​5.64.0
  • @​tanstack/query-sync-storage-persister@​5.64.0
  • @​tanstack/react-query@​5.64.0
  • @​tanstack/react-query-devtools@​5.64.0
  • @​tanstack/react-query-persist-client@​5.64.0
  • @​tanstack/react-query-next-experimental@​5.64.0
  • @​tanstack/solid-query@​5.64.0
  • @​tanstack/solid-query-devtools@​5.64.0
  • @​tanstack/solid-query-persist-client@​5.64.0
  • @​tanstack/svelte-query@​5.64.0
  • @​tanstack/svelte-query-devtools@​5.64.0
  • @​tanstack/svelte-query-persist-client@​5.64.0
  • @​tanstack/vue-query@​5.64.0
  • @​tanstack/vue-query-devtools@​5.64.0
  • @​tanstack/angular-query-experimental@​5.64.0
  • @​tanstack/query-async-storage-persister@​5.64.0
  • @​tanstack/angular-query-devtools-experimental@​5.64.0

v5.63.0

Version 5.63.0 - 1/8/25, 2:21 PM

Changes

Feat

  • react-query: allow useQuery and useQueries to unsubscribe from the query cache with an option (#8348) (e2bc216) by Dominik Dorfmeister

Packages

  • @​tanstack/react-query@​5.63.0
  • @​tanstack/react-query-devtools@​5.63.0
  • @​tanstack/react-query-persist-client@​5.63.0

... (truncated)

Commits

Updates @trezor/connect-web from 9.4.4 to 9.4.7

Commits

Updates dompurify from 3.1.7 to 3.2.3

Release notes

Sourced from dompurify's releases.

DOMPurify 3.2.3

DOMPurify 3.2.2

  • Fixed a possible bypass in case a rather specific config for custom elements is set, thanks @​yaniv-git
  • Fixed several minor issues with the type definitions, thanks again @​reduckted
  • Fixed a minor issue with the types reference for trusted types, thanks @​reduckted
  • Fixed a minor problem with the template detection regex on some systems, thanks @​svdb99

DOMPurify 3.2.1

DOMPurify 3.2.0

Commits
  • f1106aa chore: Preparing 3.2.3 release
  • 9c71e04 fix: Added clobbering check for sanitizeAttribute to prevent an error
  • c183cd6 fix: Fixed a config-dependent bypass caused by skipped attribute checks, than...
  • 6e76ece fix: Fixed a config-dependent bypass relating to data-attributes, thanks @​Slo...
  • c3879a5 Merge pull request #1041 from CoryHrycko/patch-1
  • 0e1c724 Update tags.ts
  • 8513afd Update README.md
  • b883b9e Update README.md
  • 3b4b5e9 Merge pull request #1037 from svdb99/main
  • b9e9087 Fix #1033
  • Additional commits viewable in compare view

Updates @types/dompurify from 3.0.5 to 3.2.0

Commits

Updates html-react-parser from 5.1.18 to 5.2.2

Release notes

Sourced from html-react-parser's releases.

v5.2.2

5.2.2 (2024-12-25)

Build System

  • deps: bump html-dom-parser from 5.0.12 to 5.0.13 (#1652) (ff0b897)

v5.2.1

5.2.1 (2024-12-16)

Bug Fixes

  • package: bump html-dom-parser to 5.0.12 so that \\r isn't escaped (#1642) (a1ef928), closes #1634

v5.2.0

5.2.0 (2024-12-06)

Features

  • package: add react 19 to package.json peerDependencies (8b6506c), closes #1455 #1501

v5.1.19

5.1.19 (2024-12-04)

Bug Fixes

Changelog

Sourced from html-react-parser's changelog.

5.2.2 (2024-12-25)

Build System

  • deps: bump html-dom-parser from 5.0.12 to 5.0.13 (#1652) (ff0b897)

5.2.1 (2024-12-16)

Bug Fixes

  • package: bump html-dom-parser to 5.0.12 so that \\r isn't escaped (#1642) (a1ef928), closes #1634

5.2.0 (2024-12-06)

Features

  • package: add react 19 to package.json peerDependencies (8b6506c), closes #1455 #1501

5.1.19 (2024-12-04)

Bug Fixes

Commits
  • 9e89abc Merge pull request #1653 from remarkablemark/release-please--branches--master...
  • df83051 chore(master): release 5.2.2
  • ff0b897 build(deps): bump html-dom-parser from 5.0.12 to 5.0.13 (#1652)
  • 1987ef5 build(deps-dev): bump the typescript-eslint group with 2 updates (#1651)
  • b551806 build(deps-dev): bump rollup from 4.28.1 to 4.29.1 (#1650)
  • b362004 build(deps-dev): bump preact from 10.25.2 to 10.25.3 (#1646)
  • 525aef2 build(deps-dev): bump globals from 15.13.0 to 15.14.0 (#1647)
  • df4408f build(deps-dev): bump the typescript-eslint group with 2 updates (#1645)
  • 2360c28 build(package): correct repository url error
  • ad1812d Merge pull request #1644 from remarkablemark/release-please--branches--master...
  • Additional commits viewable in compare view

Updates tslib from 2.7.0 to 2.8.1

Release notes

Sourced from tslib's releases.

v2.8.1

What's Changed

Full Changelog: microsoft/tslib@v2.8.0...v2.8.1

v2.8.0

What's Changed

Full Changelog: microsoft/tslib@v2.7.0...v2.8.0

Commits

Updates zustand-querystring from 0.0.19 to 0.1.0

Release notes

Sourced from zustand-querystring's releases.

0.1.0, new URL encoding

0.1.0 is a breaking change. The URL encoding and decoding is simplified. Before 0.1.0, zustand-querystring used a proprietary format to encode the state in the URL. While this made the URL more readable and short, it could cause unexpected issues when other tools/libraries tried to parse it. In this new version, encoding and decoding is handled by encodeURIComponent and decodeURIComponent. This makes the state in the URL unreadable, but should be more compatible with third-party tools.

Commits

Updates @playwright/test from 1.47.2 to 1.49.1

Release notes

Sourced from @​playwright/test's releases.

v1.49.1

Highlights

microsoft/playwright#33802 - [Bug]: Codegen's Clear button doesn't work if not recording microsoft/playwright#33806 - [Bug]: playwright hangs while waiting for pending navigations microsoft/playwright#33787 - [Bug]: VSC extension isn't capturing all entered text microsoft/playwright#33788 - [Regression]: Double clicking the steps in trace viewer doesn't filter actions microsoft/playwright#33772 - [Bug]: aria_snapshot generates invalid yaml when combined with an aria-label attribut microsoft/playwright#33791 - [Bug]: text input with number value raises "container is not iterable" with to_match_aria_snapshot microsoft/playwright#33644 - [Bug]: getByRole can't find element with the accessible name from label element when aria-labelledby is not valid microsoft/playwright#33660 - [Regression]: Unable to open Playwright UI in Dark Mode

Browser Versions

  • Chromium 131.0.6778.33
  • Mozilla Firefox 132.0
  • WebKit 18.2

This version was also tested against the following stable channels:

  • Google Chrome 130
  • Microsoft Edge 130

v1.49.0

Aria snapshots

New assertion expect(locator).toMatchAriaSnapshot() verifies page structure by comparing to an expected accessibility tree, represented as YAML.

await page.goto('https://playwright.dev');
await expect(page.locator('body')).toMatchAriaSnapshot(`
  - banner:
    - heading /Playwright enables reliable/ [level=1]
    - link "Get started"
    - link "Star microsoft/playwright on GitHub"
  - main:
    - img "Browsers (Chromium, Firefox, WebKit)"
    - heading "Any browser • Any platform • One API"
`);

You can generate this assertion with Test Generator and update the expected snapshot with --update-snapshots command line flag.

Learn more in the aria snapshots guide.

Test runner

... (truncated)

Commits
  • 88bc8af chore: mark v1.49.1 (#33921)
  • 9e855d5 cherry-pick(#33821): fix(recorder): allow clearing when recording is disabled...
  • 9365eb5 cherry-pick(#33834): fix: do not stall waiting for pending navigations after ...
  • f92b233 cherry-pick(#33822): fix(codegen): do not reset current tool upon clearing hi...
  • 008722b cherry-pick(#33797): fix(trace): in indexTree check isVisible before addi...
  • 1dc8b3c cherry-pick(#33746): chore: pin typescript while vue-tsc is broken
  • fbc770c cherry-pick(#33793): fix(aria): escape even more yaml (#33795)
  • 1046fe0 cherry-pick(#33753): docs: update extensions doc for new headless
  • 1781bf3 cherry-pick(#33706): docs: release notes for languages v1.49
  • b52a210 cherry-pick(#33712): docs(python): add LocatorAssertions.NotToMatchAriaSnapshot
  • Additional commits viewable in compare view

Updates @types/dompurify from 3.0.5 to 3.2.0

Commits

Updates @types/node from 22.7.4 to 22.10.5

Commits

Updates lint-staged from 15.2.10 to 15.3.0

Release notes

Sourced from lint-staged's releases.

v15.3.0

Minor Changes

  • #1495 e69da9e Thanks @​iiroj! - Added more info to the debug logs so that "environment" info doesn't need to be added separately to GitHub issues.

  • #1493 fa0fe98 Thanks @​iiroj! - Added more help messages around the automatic git stash that lint-staged creates as a backup (by default). The console output also displays the short git hash of the stash so that it's easier to recover lost files in case some fatal errors are encountered, or the process is killed before completing.

    For example:

    % npx lint-staged
    ✔ Backed up original state in git stash (20addf8)
    ✔ Running tasks for staged files...
    ✔ Applying modifications from tasks...
    ✔ Cleaning up temporary files...
    

    where the backup can be seen with git show 20addf8, or git stash list:

    % git stash list
    stash@{0}: lint-staged automatic backup (20addf8)
    

v15.2.11

Patch Changes

  • #1484 bcfe309 Thanks @​wormsik! - Escape paths containing spaces when using the "shell" option.

  • #1487 7dd8caa Thanks @​iiroj! - Do not treat submodule root paths as "staged files". This caused lint-staged to fail to a Git error when only updating the revision of a submodule.

Changelog

Sourced from lint-staged's changelog.

15.3.0

Minor Changes

  • #1495 e69da9e Thanks @​iiroj! - Added more info to the debug logs so that "environment" info doesn't need to be added separately to GitHub issues.

  • #1493 fa0fe98 Thanks @​iiroj! - Added more help messages around the automatic git stash that lint-staged creates as a backup (by default). The console output also displays the short git hash of the stash so that it's easier to recover lost files in case some fatal errors are encountered, or the process is killed before completing.

    For example:

    % npx lint-staged
    ✔ Backed up original state in git stash (20addf8)
    ✔ Running tasks for staged files...
    ✔ Applying modifications from tasks...
    ✔ Cleaning up temporary files...
    

    where the backup can be seen with git show 20addf8, or git stash list:

    % git stash list
    stash@{0}: lint-staged automatic backup (20addf8)
    

15.2.11

Patch Changes

  • #1484 bcfe309 Thanks @​wormsik! - Escape paths containing spaces when using the "shell" option.

  • #1487 7dd8caa Thanks @​iiroj! - Do not treat submodule root paths as "staged files". This caused lint-staged to fail to a Git error when only updating the revision of a submodule.

Commits
  • 703002a chore(changeset): release
  • 4cee7d8 build(dependencies): update dependencies
  • ef9b02d Merge pull request #1495 from lint-staged/debug-info
  • e69da9e feat: add more info to debug logs, remove "environment" requirement from issu...
  • 1b36f55 docs: combine changesets
  • 6c9ab40 Merge pull request #1493 from lint-staged/help-messages
  • 22fe89d feat: add unique hash to backup stash message
  • c52cc92 docs: add a caution message about git stash
  • fa0fe98 feat: update first task message based on backup status
  • 7bd0447 feat: display "git stash list" message when restoring original state is skipped
  • Additional commits viewable in compare view

Updates prettier from 3.3.3 to 3.4.2

Release notes

Sourced from prettier's releases.

3.4.2

🔗 Changelog

3.4.1

🔗 Changelog

3.4.0

diff

🔗 Release note

Changelog

Sourced from prettier's changelog.

3.4.2

diff

Treat U+30A0 & U+30FB in Katakana Block as CJK (#16796 by @​tats-u)

Prettier doesn't treat U+30A0 & U+30FB as Japanese. U+30FB is commonly used in Japanese to represent the delimitation of first and last names of non-Japanese people or “and”. The following “C言語・C++・Go・Rust” means “C language & C++ & Go & Rust” in Japanese.

<!-- Input (--prose-wrap=never) -->
C言
語
・
C++
・
Go
・
Rust
<!-- Prettier 3.4.1 -->
C言語・ C++ ・ Go ・ Rust
<!-- Prettier 3.4.2 -->
C言語・C++・Go・Rust

U+30A0 can be used as the replacement of the - in non-Japanese names (e.g. “Saint-Saëns” (Charles Camille Saint-Saëns) can be represented as “サン゠サーンス” in Japanese), but substituted by ASCII hyphen (U+002D) or U+FF1D (full width hyphen) in many cases (e.g. “サン=サーンス” or “サン=サーンス”).

Fix comments print on class methods with decorators (#16891 by @​fisker)

// Input
class A {
  @decorator
  /** 
   * The method description
   *
  */
  async method(foo: Foo, bar: Bar) {
    console.log(foo);
  }
}
// Prettier 3.4.1
class A {
@​decorator
async /**
</tr></table>

... (truncated)

Commits

Updates sass from 1.79.4 to 1.83.1

Release notes

Sourced from sass's releases.

Dart Sass 1.83.1

To install Sass 1.83.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • Fix a bug where --quiet-deps would get deactivated for @content blocks, even when those blocks were entirely contained within dependencies.

  • Include deprecation IDs in deprecation warnings to make it easier to determine what to pass to --silence-deprecation or --fatal-deprecation.

See the full changelog for changes in earlier releases.

Dart Sass 1.83.0

To install Sass 1.83.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • Allow trailing commas in all argument and parameter lists.

See the full changelog for changes in earlier releases.

Dart Sass 1.82.0

To install Sass 1.82.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

Command-Line Interface

  • Improve --watch mode reliability when making multiple changes at once, such as checking out a different Git branch.

  • Parse the calc-size() function as a calculation now that it's supported in some browsers.

Dart API

  • Add a SassCalculation.calcSize() function.

See the full changelog for changes in earlier releases.

Dart Sass 1.81.1

To install Sass 1.81.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

... (truncated)

Changelog

Sourced from sass's changelog.

1.83.1

  • Fix a bug where --quiet-deps would get deactivated for @content blocks, even when those blocks were entirely contained within dependencies.

  • Include deprecation IDs in deprecation warnings to make it easier to determine what to pass to --silence-deprecation or --fatal-deprecation.

1.83.0

  • Allow trailing commas in all argument and parameter lists.

1.82.0

Command-Line Interface

  • Improve --watch mode reliability when making multiple changes at once, such as checking out a different Git branch.

  • Parse the calc-size() function as a calculation now that it's supported in some browsers.

Dart API

  • Add a SassCalculation.calcSize() funct...

    Description has been truncated

Bumps the minor group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@creit.tech/stellar-wallets-kit](https://github.com/Creit-Tech/Stellar-Wallets-Kit) | `1.2.5` | `1.4.1` |
| [@stellar/stellar-sdk](https://github.com/stellar/js-stellar-sdk) | `13.0.0` | `13.1.0` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.59.0` | `5.64.0` |
| [@tanstack/react-query-devtools](https://github.com/TanStack/query/tree/HEAD/packages/react-query-devtools) | `5.59.0` | `5.64.0` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.1.7` | `3.2.3` |
| [@types/dompurify](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/dompurify) | `3.0.5` | `3.2.0` |
| [html-react-parser](https://github.com/remarkablemark/html-react-parser) | `5.1.18` | `5.2.2` |
| [tslib](https://github.com/Microsoft/tslib) | `2.7.0` | `2.8.1` |
| [zustand-querystring](https://github.com/nitedani/zustand-querystring) | `0.0.19` | `0.1.0` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.47.2` | `1.49.1` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.7.4` | `22.10.5` |
| [lint-staged](https://github.com/lint-staged/lint-staged) | `15.2.10` | `15.3.0` |
| [prettier](https://github.com/prettier/prettier) | `3.3.3` | `3.4.2` |
| [sass](https://github.com/sass/dart-sass) | `1.79.4` | `1.83.1` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.6.2` | `5.7.3` |



Updates `@creit.tech/stellar-wallets-kit` from 1.2.5 to 1.4.1
- [Release notes](https://github.com/Creit-Tech/Stellar-Wallets-Kit/releases)
- [Changelog](https://github.com/Creit-Tech/Stellar-Wallets-Kit/blob/main/CHANGELOG.md)
- [Commits](Creit-Tech/Stellar-Wallets-Kit@v1.2.5...v1.4.1)

Updates `@stellar/stellar-sdk` from 13.0.0 to 13.1.0
- [Release notes](https://github.com/stellar/js-stellar-sdk/releases)
- [Changelog](https://github.com/stellar/js-stellar-sdk/blob/master/CHANGELOG.md)
- [Commits](stellar/js-stellar-sdk@v13.0.0...v13.1.0)

Updates `@tanstack/react-query` from 5.59.0 to 5.64.0
- [Release notes](https://github.com/TanStack/query/releases)
- [Commits](https://github.com/TanStack/query/commits/v5.64.0/packages/react-query)

Updates `@tanstack/react-query-devtools` from 5.59.0 to 5.64.0
- [Release notes](https://github.com/TanStack/query/releases)
- [Commits](https://github.com/TanStack/query/commits/v5.64.0/packages/react-query-devtools)

Updates `@trezor/connect-web` from 9.4.4 to 9.4.7
- [Release notes](https://github.com/trezor/trezor-suite/releases)
- [Changelog](https://github.com/trezor/trezor-suite/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/trezor/trezor-suite/commits)

Updates `dompurify` from 3.1.7 to 3.2.3
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.1.7...3.2.3)

Updates `@types/dompurify` from 3.0.5 to 3.2.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/dompurify)

Updates `html-react-parser` from 5.1.18 to 5.2.2
- [Release notes](https://github.com/remarkablemark/html-react-parser/releases)
- [Changelog](https://github.com/remarkablemark/html-react-parser/blob/master/CHANGELOG.md)
- [Commits](remarkablemark/html-react-parser@v5.1.18...v5.2.2)

Updates `tslib` from 2.7.0 to 2.8.1
- [Release notes](https://github.com/Microsoft/tslib/releases)
- [Commits](microsoft/tslib@v2.7.0...v2.8.1)

Updates `zustand-querystring` from 0.0.19 to 0.1.0
- [Release notes](https://github.com/nitedani/zustand-querystring/releases)
- [Commits](nitedani/zustand-querystring@v0.0.19...v0.1.0)

Updates `@playwright/test` from 1.47.2 to 1.49.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.47.2...v1.49.1)

Updates `@types/dompurify` from 3.0.5 to 3.2.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/dompurify)

Updates `@types/node` from 22.7.4 to 22.10.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `lint-staged` from 15.2.10 to 15.3.0
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/master/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v15.2.10...v15.3.0)

Updates `prettier` from 3.3.3 to 3.4.2
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.3.3...3.4.2)

Updates `sass` from 1.79.4 to 1.83.1
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.79.4...1.83.1)

Updates `typescript` from 5.6.2 to 5.7.3
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml)
- [Commits](microsoft/TypeScript@v5.6.2...v5.7.3)

---
updated-dependencies:
- dependency-name: "@creit.tech/stellar-wallets-kit"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: "@stellar/stellar-sdk"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: "@tanstack/react-query"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: "@tanstack/react-query-devtools"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: "@trezor/connect-web"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: dompurify
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: "@types/dompurify"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: html-react-parser
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: tslib
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: zustand-querystring
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: "@playwright/test"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: "@types/dompurify"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: lint-staged
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: prettier
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: sass
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: typescript
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 12, 2025
Copy link

New, updated, and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@babel/runtime@7.24.7 🔁 npm/@babel/runtime@7.25.6 None 0 246 kB nicolo-ribaudo
npm/@creit.tech/stellar-wallets-kit@1.4.1 🔁 npm/@creit.tech/stellar-wallets-kit@1.2.5 None 0 513 kB earrietadev
npm/@playwright/test@1.49.1 🔁 npm/@playwright/test@1.47.2 None 0 25.4 kB yurys
npm/@solana-program/token@0.4.1 environment 0 1.12 MB lorisleiva
npm/@solana/accounts@2.0.0 None 0 167 kB lorisleiva
npm/@solana/addresses@2.0.0 None 0 198 kB lorisleiva
npm/@solana/assertions@2.0.0 None 0 51.4 kB lorisleiva
npm/@solana/codecs-core@2.0.0 None 0 495 kB lorisleiva
npm/@solana/codecs-data-structures@2.0.0 None 0 756 kB lorisleiva
npm/@solana/codecs-numbers@2.0.0 None 0 246 kB lorisleiva
npm/@solana/codecs-strings@2.0.0 None 0 208 kB lorisleiva
npm/@solana/codecs@2.0.0 None 0 18.4 kB lorisleiva
npm/@solana/errors@2.0.0 None 0 1.35 MB lorisleiva
npm/@solana/fast-stable-stringify@2.0.0 None 0 43.1 kB lorisleiva
npm/@solana/functional@2.0.0 None 0 33.1 kB lorisleiva
npm/@solana/instructions@2.0.0 None 0 85.8 kB lorisleiva
npm/@solana/keys@2.0.0 None 0 118 kB lorisleiva
npm/@solana/options@2.0.0 None 0 147 kB lorisleiva
npm/@solana/programs@2.0.0 None 0 18.5 kB lorisleiva
npm/@solana/promises@2.0.0 None 0 59.6 kB lorisleiva
npm/@solana/rpc-api@2.0.0 None 0 256 kB lorisleiva
npm/@solana/rpc-parsed-types@2.0.0 None 0 21.9 kB lorisleiva
npm/@solana/rpc-spec-types@2.0.0 None 0 111 kB lorisleiva
npm/@solana/rpc-spec@2.0.0 None 0 72.1 kB lorisleiva
npm/@solana/rpc-subscriptions-api@2.0.0 None 0 146 kB lorisleiva
npm/@solana/rpc-subscriptions-channel-websocket@2.0.0 None 0 82.5 kB lorisleiva
npm/@solana/rpc-subscriptions-spec@2.0.0 None 0 197 kB lorisleiva
npm/@solana/rpc-subscriptions@2.0.0 None 0 263 kB lorisleiva
npm/@solana/rpc-transformers@2.0.0 None 0 227 kB lorisleiva
npm/@solana/rpc-transport-http@2.0.0 environment, network +1 205 kB lorisleiva
npm/@solana/rpc-types@2.0.0 None 0 170 kB lorisleiva
npm/@solana/rpc@2.0.0 environment 0 129 kB lorisleiva
npm/@solana/signers@2.0.0 None 0 399 kB lorisleiva
npm/@solana/subscribable@2.0.0 environment 0 126 kB lorisleiva
npm/@solana/sysvars@2.0.0 None 0 340 kB lorisleiva
npm/@solana/transaction-confirmation@2.0.0 None 0 224 kB lorisleiva
npm/@solana/transaction-messages@2.0.0 None 0 735 kB lorisleiva
npm/@solana/transactions@2.0.0 None 0 152 kB lorisleiva
npm/@solana/web3.js@2.0.0 🔁 npm/@solana/web3.js@1.95.5 None 0 1.67 MB lorisleiva
npm/@stellar/stellar-sdk@13.1.0 🔁 npm/@stellar/stellar-sdk@13.0.0 None 0 14.9 MB stellar-npm-ci
npm/@tanstack/query-core@5.64.0 🔁 npm/@tanstack/query-core@5.59.0 None 0 1.95 MB tannerlinsley
npm/@tanstack/query-devtools@5.62.16 🔁 npm/@tanstack/query-devtools@5.58.0 None 0 2.47 MB tannerlinsley
npm/@tanstack/react-query-devtools@5.64.0 🔁 npm/@tanstack/react-query-devtools@5.59.0 None 0 95.4 kB tannerlinsley
npm/@tanstack/react-query@5.64.0 🔁 npm/@tanstack/react-query@5.59.0 None 0 715 kB tannerlinsley
npm/@trezor/analytics@1.2.5 🔁 npm/@trezor/analytics@1.2.3 None +1 84.2 kB trezor-ci
npm/@trezor/blockchain-link-types@1.2.5 🔁 npm/@trezor/blockchain-link-types@1.2.3 None 0 60 kB trezor-ci
npm/@trezor/blockchain-link-utils@1.2.6 🔁 npm/@trezor/blockchain-link-utils@1.2.3 None 0 59.9 kB trezor-ci
npm/@trezor/blockchain-link@2.3.6 🔁 npm/@trezor/blockchain-link@2.3.3 None 0 219 kB trezor-ci
npm/@trezor/connect-analytics@1.2.4 🔁 npm/@trezor/connect-analytics@1.2.3 None 0 5.52 kB trezor-ci
npm/@trezor/connect-common@0.2.7 🔁 npm/@trezor/connect-common@0.2.4 None 0 202 kB trezor-ci
npm/@trezor/connect-web@9.4.7 🔁 npm/@trezor/connect-web@9.4.4 None +1 170 kB trezor-ci
npm/@trezor/connect@9.4.7 🔁 npm/@trezor/connect@9.4.4 None 0 1.48 MB trezor-ci
npm/@trezor/protobuf@1.2.6 🔁 npm/@trezor/protobuf@1.2.4 None 0 1.01 MB trezor-ci
npm/@trezor/transport@1.3.7 🔁 npm/@trezor/transport@1.3.4 None 0 168 kB trezor-ci
npm/@trezor/type-utils@1.1.4 🔁 npm/@trezor/type-utils@1.1.2 None 0 28.1 kB trezor-ci
npm/@trezor/utxo-lib@2.2.6 🔁 npm/@trezor/utxo-lib@2.2.3 None 0 237 kB trezor-ci
npm/@types/dompurify@3.2.0 🔁 npm/@types/dompurify@3.0.5 None 0 1.74 kB types
npm/axios@1.7.9 🔁 npm/axios@1.7.7 None 0 2.13 MB jasonsaayman
npm/chalk@5.4.1 🔁 npm/chalk@5.3.0 None 0 44.2 kB sindresorhus
npm/dompurify@3.2.3 🔁 npm/dompurify@3.1.7 None 0 306 kB cure53
npm/domutils@3.2.2 🔁 npm/domutils@3.1.0 None 0 167 kB feedic
npm/entities@6.0.0 None 0 540 kB feedic
npm/feaxios@0.0.23 🔁 npm/feaxios@0.0.20 None 0 57.1 kB divyamsingh234
npm/html-dom-parser@5.0.13 🔁 npm/html-dom-parser@5.0.10 None 0 132 kB remarkablemark
npm/html-react-parser@5.2.2 🔁 npm/html-react-parser@5.1.18 None 0 468 kB remarkablemark
npm/htmlparser2@10.0.0 🔁 npm/htmlparser2@9.1.0 None 0 489 kB feedic
npm/immutable@5.0.3 🔁 npm/immutable@4.3.6 None 0 687 kB leebyron
npm/lilconfig@3.1.3 🔁 npm/lilconfig@3.1.2 None 0 18 kB antonk52
npm/lint-staged@15.3.0 🔁 npm/lint-staged@15.2.10 None 0 124 kB okonet
npm/listr2@8.2.5 🔁 npm/listr2@8.2.4 None +2 305 kB cenk1cenk2
npm/playwright-core@1.49.1 🔁 npm/playwright-core@1.47.2 None 0 7.97 MB yurys
npm/playwright@1.49.1 🔁 npm/playwright@1.47.2 None +1 3.31 MB yurys
npm/prettier@3.4.2 🔁 npm/prettier@3.3.3 None 0 7.83 MB prettier-bot
npm/sass@1.83.1 🔁 npm/sass@1.79.4 Transitive: environment +2 5.95 MB sassbot
npm/tslib@2.8.1 🔁 npm/tslib@2.6.3, npm/tslib@2.7.0 None 0 90.4 kB typescript-bot
npm/typescript@5.7.3 🔁 npm/typescript@5.6.2 None 0 22.7 MB andrewbranch, minestarks, rbuckton, ...5 more
npm/undici-types@6.20.0 🔁 npm/undici-types@5.26.5 None 0 83.3 kB matteo.collina
npm/yaml@2.6.1 🔁 npm/yaml@2.5.1 None 0 682 kB eemeli
npm/zustand-querystring@0.1.0 🔁 npm/zustand-querystring@0.0.19 None 0 21.4 kB nitedani

🚮 Removed packages: npm/@solana/buffer-layout@4.0.1, npm/@swc/helpers@0.5.13, npm/@types/connect@3.4.38, npm/@types/uuid@8.3.4, npm/agentkeepalive@4.5.0, npm/bigint-buffer@1.1.5, npm/borsh@0.7.0, npm/bufferutil@4.0.8, npm/commander@2.20.3, npm/delay@5.0.0, npm/es6-promise@4.2.8, npm/es6-promisify@5.0.0, npm/eyes@0.1.8, npm/fast-stable-stringify@1.0.0, npm/humanize-ms@1.2.1, npm/isomorphic-ws@4.0.1, npm/jayson@4.1.2, npm/json-stringify-safe@5.0.1, npm/jsonparse@1.3.1, npm/jsonstream@1.3.5, npm/micromatch@4.0.7, npm/ms@2.1.2, npm/rpc-websockets@9.0.2, npm/superstruct@2.0.2, npm/text-encoding-utf-8@1.0.2, npm/through@2.3.8, npm/utf-8-validate@5.0.10, npm/uuid@8.3.2

View full report↗︎

Copy link

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package NoteSourceCI
Deprecated npm/@types/dompurify@3.2.0
  • Reason: This is a stub types definition. dompurify provides its own type definitions, so you do not need this installed.
⚠︎

View full report↗︎

Next steps

What is a deprecated package?

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

Research the state of the package and determine if there are non-deprecated versions that can be used, or if it should be replaced with a new, supported solution.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/foo@1.0.0 or ignore all packages with @SocketSecurity ignore-all

  • @SocketSecurity ignore npm/@types/dompurify@3.2.0

Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 19, 2025

Superseded by #1229.

@dependabot dependabot bot closed this Jan 19, 2025
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/minor-c47fdef372 branch January 19, 2025 02:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
Status: Done
Development

Successfully merging this pull request may close these issues.

0 participants