Skip to content

Bump the npm_and_yarn group across 1 directory with 23 updates#130

Closed
dependabot[bot] wants to merge 1 commit intodevfrom
dependabot/npm_and_yarn/npm_and_yarn-7f1685781f
Closed

Bump the npm_and_yarn group across 1 directory with 23 updates#130
dependabot[bot] wants to merge 1 commit intodevfrom
dependabot/npm_and_yarn/npm_and_yarn-7f1685781f

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot bot commented on behalf of github Aug 7, 2025 •
edited
Loading

Bumps the npm_and_yarn group with 15 updates in the / directory:

Package From To
express 4.18.2 4.21.2
next 13.4.7 15.4.6
postcss 8.4.26 8.5.6
@babel/runtime 7.22.5 7.28.2
@solana/web3.js 1.78.0 1.98.4
ws 7.4.6 8.18.0
@rainbow-me/rainbowkit 1.0.7 2.2.8
ethers 5.7.2 5.8.0
viem 1.3.0 2.33.2
wagmi 1.3.9 2.16.1
braces 3.0.2 3.0.3
cookie 0.4.1 0.7.1
cookie-parser 1.4.6 1.4.7
form-data 4.0.2 4.0.4
micromatch 4.0.5 4.0.8

Updates express from 4.18.2 to 4.21.2

Release notes

Sourced from express's releases.

4.21.2

What's Changed

Full Changelog: expressjs/express@4.21.1...4.21.2

4.21.1

What's Changed

Full Changelog: expressjs/express@4.21.0...4.21.1

4.21.0

What's Changed

New Contributors

Full Changelog: expressjs/express@4.20.0...4.21.0

4.20.0

What's Changed

Important

  • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)
  • Remove link renderization in html while using res.redirect

Other Changes

... (truncated)

Changelog

Sourced from express's changelog.

4.21.2 / 2024-11-06

4.21.1 / 2024-10-08

4.21.0 / 2024-09-11

4.20.0 / 2024-09-10

  • deps: [email protected]
    • Remove link renderization in html while redirecting
  • deps: [email protected]
    • Remove link renderization in html while redirecting
  • deps: [email protected]
    • add depth option to customize the depth level in the parser
    • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)
  • Remove link renderization in html while using res.redirect
  • deps: [email protected]
    • Adds support for named matching groups in the routes using a regex
    • Adds backtracking protection to parameters without regexes defined
  • deps: encodeurl@~2.0.0
    • Removes encoding of \, |, and ^ to align better with URL spec
  • Deprecate passing options.maxAge and options.expires to res.clearCookie
    • Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie

4.19.2 / 2024-03-25

  • Improved fix for open redirect allow list bypass

4.19.1 / 2024-03-20

  • Allow passing non-strings to res.location with new encoding handling checks

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by jonchurch, a new releaser for express since your current version.


Updates next from 13.4.7 to 15.4.6

Release notes

Sourced from next's releases.

v15.4.6

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • fix: _error page's req.url can be overwritten to dynamic param on minimal mode (#82347)
  • fix: add ?dpl to fonts in /_next/static/media (#82384)

Credits

Huge thanks to @​devjiwonchoi, @​ijjk, and @​styfle for helping!

v15.4.5

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • Fix API stripping JSON incorrectly (#82062)
  • Fix i18n fallback: false collision (#82158)
  • Revert "Fix tracing of server actions imported by client components (#82167)
  • Ensure setAssetPrefix updates config instance (#82165)
  • Turbopack: update mimalloc (#82166)
  • fix(next/image): fix image-optimizer.ts headers (#82175)
  • fix(next/image): improve and simplify detect-content-type (#82174)

Credits

Huge thanks to @​ijjk, @​sokra, and @​styfle for helping!

v15.4.4

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • Fix dynamicParams false layout case in dev (#82026)
  • Turbopack: fix scope hoisting variable renaming bug (#81640)
  • Upgrade to swc v33 (#81750)
  • Revert "[metadata] use https protocol for schema urls" (#81934)

Credits

Huge thanks to @​bgw @​mischnic @​huozhi @​lukesandberg and @​ijjk for helping!

v15.4.3

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

... (truncated)

Commits
  • be4aafd v15.4.6
  • 91e5b6b Backport "fix: add ?dpl to fonts in /_next/static/media (#82384)" (#82421)
  • f1629d9 Backport "[Pages] fix: _error page's req.url can be overwritten t… (#82377)
  • b9aab5d v15.4.5
  • a8c93c4 Disable test new tests jobs
  • ed2a6c7 [backport]: fix(next/image): improve and simplify detect-content-type (#82118...
  • f00fcc9 [backport]: fix(next/image): fix image-optimizer.ts headers (#82114) (#82175)
  • 55a7568 Backport: Turbopack: update mimalloc (#81993) (#82166)
  • 5bc4b36 [backport] Ensure setAssetPrefix updates config instance (#82165)
  • 717dfb6 [Backport] Revert "Fix tracing of server actions imported by client component...
  • Additional commits viewable in compare view

Updates postcss from 8.4.26 to 8.5.6

Release notes

Sourced from postcss's releases.

8.5.6

  • Fixed ContainerWithChildren type discriminating (by @​Goodwine).

8.5.5

  • Fixed package.json→exports compatibility with some tools (by @​JounQin).

8.5.4

8.5.3

8.5.2

8.5.1

8.5 “Duke Alloces”

PostCSS 8.5 brought API to work better with non-CSS sources like HTML, Vue.js/Svelte sources or CSS-in-JS.

@​romainmenke during his work on Stylelint added Input#document in additional to Input#css.

root.source.input.document //=> "<p>Hello</p>
                           //    <style>
                           //    p {
                           //      color: green;
                           //    }
                           //    </style>"
root.source.input.css      //=> "p {
                           //      color: green;
                           //    }"

Thanks to Sponsors

This release was possible thanks to our community.

If your company wants to support the sustainability of front-end infrastructure or wants to give some love to PostCSS, you can join our supporters by:

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.6

  • Fixed ContainerWithChildren type discriminating (by @​Goodwine).

8.5.5

  • Fixed package.json→exports compatibility with some tools (by @​JounQin).

8.5.4

8.5.3

8.5.2

8.5.1

8.5 “Duke Alloces”

  • Added Input#document for sources like CSS-in-JS or HTML (by @​romainmenke).

8.4.49

8.4.48

  • Fixed position calculation in error/warnings methods (by @​romainmenke).

8.4.47

  • Removed debug code.

8.4.46

  • Fixed Cannot read properties of undefined (reading 'before').

8.4.45

  • Removed unnecessary fix which could lead to infinite loop.

8.4.44

  • Another way to fix markClean is not a function error.

8.4.43

  • Fixed markClean is not a function error.

8.4.42

  • Fixed CSS syntax error on long minified files (by @​varpstar).

8.4.41

... (truncated)

Commits

Updates @babel/runtime from 7.22.5 to 7.28.2

Release notes

Sourced from @​babel/runtime's releases.

v7.28.2 (2025-07-24)

Thanks @​souhailaS for your first PR!

🐛 Bug Fix

  • babel-types
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3

Committers: 4

v7.28.1 (2025-07-12)

🐛 Bug Fix

  • babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator

📝 Documentation

↩️ Revert

  • babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-types

Committers: 3

v7.28.0 (2025-07-02)

🚀 New Feature

  • babel-node
  • babel-types
  • babel-compat-data, babel-preset-env
  • babel-core, babel-parser
  • babel-generator, babel-parser
  • babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-plugin-transform-object-rest-spread, babel-traverse, babel-types

... (truncated)

Changelog

Sourced from @​babel/runtime's changelog.

v7.28.2 (2025-07-24)

🐛 Bug Fix

  • babel-types
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3

v7.28.1 (2025-07-12)

🐛 Bug Fix

  • babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator

📝 Documentation

↩️ Revert

  • babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-types

v7.28.0 (2025-07-02)

🚀 New Feature

  • babel-node
  • babel-types
  • babel-compat-data, babel-preset-env
  • babel-core, babel-parser
  • babel-generator, babel-parser
  • babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-plugin-transform-object-rest-spread, babel-traverse, babel-types
  • babel-parser, babel-traverse, babel-types
  • babel-generator, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring, babel-plugin-transform-explicit-resource-management, babel-plugin-transform-react-display-name, babel-types
  • babel-generator, babel-parser, babel-plugin-proposal-destructuring-private, babel-plugin-transform-block-scoping, babel-plugin-transform-object-rest-spread, babel-plugin-transform-typescript, babel-traverse, babel-types

🐛 Bug Fix

🏠 Internal

  • babel-compat-data, babel-plugin-proposal-decorators, babel-plugin-transform-async-generator-functions, babel-plugin-transform-json-modules, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3

... (truncated)

Commits

Updates @solana/web3.js from 1.78.0 to 1.98.4

Release notes

Sourced from @​solana/web3.js's releases.

v1.98.4

1.98.4 (2025-07-31)

Bug Fixes

v1.98.3

1.98.3 (2025-07-31)

Reverts

v1.98.2

1.98.2 (2025-04-24)

Bug Fixes

v1.98.1

1.98.1 (2025-04-22)

Bug Fixes

v1.98.0

1.98.0 (2024-12-16)

Features

  • Agave v2 RPC: replace getRecentBlockhash with getLatestBlockhash (#3419) (8ea27fc)

v1.97.0

1.97.0 (2024-12-16)

Features

  • agave v2 rpc: replace getConfirmedTransaction with getTransaction (#3418) (a805cb9)

v1.96.0

1.96.0 (2024-12-16)

Features

  • Agave v2 RPC: replace getConfirmedBlock with getBlock (#3417) (60e39a6)

v1.95.8

... (truncated)

Commits
  • c26c13b fix: Add Cost Units (Transaction Cost) (#3750)
  • 3d0e82a Revert "chore: Add costUnits to transaction classes (#3748)" (#3749)
  • 720a428 chore: Add costUnits to transaction classes (#3748)
  • 6f265af fix: update base-x to 3.0.11 in lockfile (#3731)
  • d3dc5d5 fix: patch bigint-buffer (#3727)
  • d0e77cf updated for migrated repo (#3728)
  • 4e9988c chore: readme (#3725)
  • 8ea27fc feat: Agave v2 RPC: replace getRecentBlockhash with getLatestBlockhash (#...
  • a805cb9 feat: agave v2 rpc: replace getConfirmedTransaction with getTransaction (...
  • 60e39a6 feat: Agave v2 RPC: replace getConfirmedBlock with getBlock (#3417)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by solana-devs, a new releaser for @​solana/web3.js since your current version.


Updates ws from 7.4.6 to 8.18.0

Release notes

Sourced from ws's releases.

8.18.0

Features

  • Added support for Blob (#2229).

8.17.1

Bug fixes

  • Fixed a DoS vulnerability (#2231).

A request with a number of headers exceeding the[server.maxHeadersCount][] threshold could be used to crash a ws server.

const http = require('http');
const WebSocket = require('ws');
const wss = new WebSocket.Server({ port: 0 }, function () {
const chars = "!#$%&'*+-.0123456789abcdefghijklmnopqrstuvwxyz^_`|~".split('');
const headers = {};
let count = 0;
for (let i = 0; i < chars.length; i++) {
if (count === 2000) break;
for (let j = 0; j &lt; chars.length; j++) {
  const key = chars[i] + chars[j];
  headers[key] = 'x';
if (++count === 2000) break;
}

}
headers.Connection = 'Upgrade';
headers.Upgrade = 'websocket';
headers['Sec-WebSocket-Key'] = 'dGhlIHNhbXBsZSBub25jZQ==';
headers['Sec-WebSocket-Version'] = '13';
const request = http.request({
headers: headers,
host: '127.0.0.1',
port: wss.address().port
});
request.end();
});

The vulnerability was reported by Ryan LaPointe in websockets/ws#2230.

... (truncated)

Commits
  • 976c53c [dist] 8.18.0
  • 59b9629 [feature] Add support for Blob (#2229)
  • 0d1b5e6 [security] Use more descriptive text for 2017 vulnerability link
  • 15f11a0 [security] Add new DoS vulnerability to SECURITY.md
  • 3c56601 [dist] 8.17.1
  • e55e510 [security] Fix crash when the Upgrade header cannot be read (#2231)
  • 6a00029 [test] Increase code coverage
  • ddfe4a8 [perf] Reduce the amount of crypto.randomFillSync() calls
  • b73b118 [dist] 8.17.0
  • 29694a5 [test] Use the highWaterMark variable
  • Additional commits viewable in compare view

Updates @rainbow-me/rainbowkit from 1.0.7 to 2.2.8

Release notes

Sourced from @​rainbow-me/rainbowkit's releases.

@​rainbow-me/rainbowkit@​2.2.8

Patch Changes

  • f542876: The metaMaskWallet wallet connector now utilizes the MetaMask SDK for more reliable, faster connections on mobile

@​rainbow-me/rainbowkit@​2.2.7

Patch Changes

  • a147620: Fixed error handling when connect requests are rejected on mobile.
  • 10090d2: Mitigated WalletConnect Core is already initialized warnings that began appearing with recent distributions of Wagmi and WalletConnect.
  • 50c7f13: Added missing rdns metadata for wallet connectors that now support EIP-6963.
  • 15ddd4a: Improved QR Code error correction and rendering with cuer

@​rainbow-me/rainbowkit@​2.2.6

Patch Changes

  • 624a38a: The coinbaseWallet connector now supports additional SDK configuration options to enable Paymasters and Sub Accounts for your dapp.

    import { coinbaseWallet } from "@rainbow-me/rainbowkit/wallets";
// Configure Paymaster for gas sponsorship
coinbaseWallet.paymasterUrls = {
[base.id]: "...",
};
// Enable Sub Accounts
coinbaseWallet.subAccounts = {
enableAutoSubAccounts: true,
defaultSpendLimits: {
// ...
},
};

  • f6ad6aa: Added support for Superposition chain

@​rainbow-me/rainbowkit@​2.2.5

Patch Changes

  • 03ae0d0: Added xPortal Wallet support with xPortalWallet wallet connector
  • 3d73508: Added ZilPay Wallet support with zilPayWallet wallet connector
  • 5b54649: MEW Wallet now supports WalletConnect on mobile
  • c5a9cc1: Fixed SVG encoding in wallet connector icons for Cool Mode
  • 8515fd3: Resolved a warning for mismatched dApp url metadata on recent versions of WalletConnect

@​rainbow-me/rainbowkit@​2.2.4

Patch Changes

  • f5a7cec: Added support for Unichain

... (truncated)

Changelog

Sourced from @​rainbow-me/rainbowkit's changelog.

2.2.8

Patch Changes

  • f542876: The metaMaskWallet wallet connector now utilizes the MetaMask SDK for more reliable, faster connections on mobile

2.2.7

Patch Changes

  • a147620: Fixed error handling when connect requests are rejected on mobile.
  • 10090d2: Mitigated WalletConnect Core is already initialized warnings that began appearing with recent distributions of Wagmi and WalletConnect.
  • 50c7f13: Added missing rdns metadata for wallet connectors that now support EIP-6963.
  • 15ddd4a: Improved QR Code error correction and rendering with cuer

2.2.6

Patch Changes

  • 624a38a: The coinbaseWallet connector now supports additional SDK configuration options to enable Paymasters and Sub Accounts for your dapp.

    import { coinbaseWallet } from "@rainbow-me/rainbowkit/wallets";
// Configure Paymaster for gas sponsorship
coinbaseWallet.paymasterUrls = {
[base.id]: "...",
};
// Enable Sub Accounts
coinbaseWallet.subAccounts = {
enableAutoSubAccounts: true,
defaultSpendLimits: {
// ...
},
};

  • f6ad6aa: Added support for Superposition chain

2.2.5

Patch Changes

  • 3d73508: Added ZilPay Wallet support with zilPayWallet wallet connector
  • c5a9cc1: Fixed SVG encoding in wallet connector icons for Cool Mode
  • 8515fd3: Resolved a warning for mismatched dApp url metadata on recent versions of WalletConnect
  • 5b54649: MEW Wallet now supports WalletConnect on mobile
  • 03ae0d0: Added xPortal Wallet support with xPortalWallet wallet connector

... (truncated)

Commits

Updates ethers from 5.7.2 to 5.8.0

Release notes

Sourced from ethers's releases.

ethers/v5.8.0 (2025-02-25 19:15) [legacy version]

This is a security update for the legacy Ethers v5 branch, addressing two security fixes.

For those that wish to audit the specific changes in the the bundled version between v5.7 and v5.8, see this gist.

Changes

  • Updated to latest elliptic library to fix audit warnings. (f8deaae)
  • Added ENS to Sepolia. (0065547)
  • Bump ws package version to address DoS security concern. (#4791; f345816)
  • Added modern networks, updated third-party backend URLs and added QuickNode. (#3935, #4010; f7c813d)

Embedding UMD with SRI:

<script type="text/javascript"
  integrity="sha384-KpyAXoFibPIUEi79EsnN1EtEWCCrOQ8MtGsa4IrVxeZo514PYarFXujnjyu0DzgC"
  crossorigin="anonymous"
  src="https://cdnjs.cloudflare.com/ajax/libs/ethers/5.8.0/ethers.umd.min.js">
</script>
Changelog

Sourced from ethers's changelog.

ethers/v5.8.0 (2025-02-25 19:15)

  • Updated to latest elliptic library to fix audit warnings. (f8deaae)
  • Added ENS to Sepolia. (0065547)
  • Bump ws package version to address DoS security concern. (#4791; f345816)
  • Added modern networks, updated third-party backend URLs and added QuickNode. (#3935, #4010; f7c813d)
Commits
  • 5ff3dc9 admin: updated dist files with update-versions
  • 808153e admin: updated sort issue in package.json
  • f8deaae Updated to latest elliptic library to fix audit warnings.
  • c6a1b15 Updated browser tests; but karma is still defunct
  • c7c07f5 admin: update dist files
  • 01dccc7 tests: swapped goerli for sepolia; contracts re-deployed
  • 0065547 Added ENS to Sepolia.
  • d7e8ad1 admin: updated dist files
  • f345816 Bump ws package version to address DoS security concern (#4791).
  • 9f42637 tests: updates test details
  • Additional commits viewable in compare view

Updates viem from 1.3.0 to 2.33.2

Release notes

Sourced from viem's releases.

[email protected]

Patch Changes

@dependabot
Bump the npm_and_yarn group across 1 directory with 23 updates
94eb58a 
Bumps the npm_and_yarn group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [express](https://github.com/expressjs/express) | `4.18.2` | `4.21.2` |
| [next](https://github.com/vercel/next.js) | `13.4.7` | `15.4.6` |
| [postcss](https://github.com/postcss/postcss) | `8.4.26` | `8.5.6` |
| [@babel/runtime](https://github.com/babel/babel/tree/HEAD/packages/babel-runtime) | `7.22.5` | `7.28.2` |
| [@solana/web3.js](https://github.com/solana-foundation/solana-web3.js) | `1.78.0` | `1.98.4` |
| [ws](https://github.com/websockets/ws) | `7.4.6` | `8.18.0` |
| [@rainbow-me/rainbowkit](https://github.com/rainbow-me/rainbowkit/tree/HEAD/packages/rainbowkit) | `1.0.7` | `2.2.8` |
| [ethers](https://github.com/ethers-io/ethers.js) | `5.7.2` | `5.8.0` |
| [viem](https://github.com/wevm/viem) | `1.3.0` | `2.33.2` |
| [wagmi](https://github.com/wevm/wagmi/tree/HEAD/packages/react) | `1.3.9` | `2.16.1` |
| [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` |
| [cookie](https://github.com/jshttp/cookie) | `0.4.1` | `0.7.1` |
| [cookie-parser](https://github.com/expressjs/cookie-parser) | `1.4.6` | `1.4.7` |
| [form-data](https://github.com/form-data/form-data) | `4.0.2` | `4.0.4` |
| [micromatch](https://github.com/micromatch/micromatch) | `4.0.5` | `4.0.8` |



Updates `express` from 4.18.2 to 4.21.2
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md)
- [Commits](expressjs/express@4.18.2...4.21.2)

Updates `next` from 13.4.7 to 15.4.6
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v13.4.7...v15.4.6)

Updates `postcss` from 8.4.26 to 8.5.6
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.4.26...8.5.6)

Updates `@babel/runtime` from 7.22.5 to 7.28.2
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.28.2/packages/babel-runtime)

Updates `@solana/web3.js` from 1.78.0 to 1.98.4
- [Release notes](https://github.com/solana-foundation/solana-web3.js/releases)
- [Changelog](https://github.com/solana-foundation/solana-web3.js/blob/maintenance/v1.x/.releaserc.json)
- [Commits](solana-foundation/solana-web3.js@v1.78.0...v1.98.4)

Updates `ws` from 7.4.6 to 8.18.0
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@7.4.6...8.18.0)

Updates `@rainbow-me/rainbowkit` from 1.0.7 to 2.2.8
- [Release notes](https://github.com/rainbow-me/rainbowkit/releases)
- [Changelog](https://github.com/rainbow-me/rainbowkit/blob/main/packages/rainbowkit/CHANGELOG.md)
- [Commits](https://github.com/rainbow-me/rainbowkit/commits/@rainbow-me/[email protected]/packages/rainbowkit)

Updates `ethers` from 5.7.2 to 5.8.0
- [Release notes](https://github.com/ethers-io/ethers.js/releases)
- [Changelog](https://github.com/ethers-io/ethers.js/blob/v5.8.0/CHANGELOG.md)
- [Commits](ethers-io/ethers.js@v5.7.2...v5.8.0)

Updates `viem` from 1.3.0 to 2.33.2
- [Release notes](https://github.com/wevm/viem/releases)
- [Commits](https://github.com/wevm/viem/compare/[email protected]@2.33.2)

Updates `wagmi` from 1.3.9 to 2.16.1
- [Release notes](https://github.com/wevm/wagmi/releases)
- [Changelog](https://github.com/wevm/wagmi/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/wevm/wagmi/commits/[email protected]/packages/react)

Updates `base-x` from 3.0.9 to 5.0.1
- [Commits](cryptocoinjs/base-x@v3.0.9...v5.0.1)

Updates `body-parser` from 1.20.1 to 1.20.3
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)
- [Commits](expressjs/body-parser@1.20.1...1.20.3)

Updates `braces` from 3.0.2 to 3.0.3
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](micromatch/braces@3.0.2...3.0.3)

Updates `cookie` from 0.4.1 to 0.7.1
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Commits](jshttp/cookie@v0.4.1...v0.7.1)

Updates `cookie-parser` from 1.4.6 to 1.4.7
- [Release notes](https://github.com/expressjs/cookie-parser/releases)
- [Changelog](https://github.com/expressjs/cookie-parser/blob/master/HISTORY.md)
- [Commits](expressjs/cookie-parser@1.4.6...1.4.7)

Updates `elliptic` from 6.5.4 to 6.6.1
- [Commits](indutny/elliptic@v6.5.4...v6.6.1)

Updates `form-data` from 4.0.2 to 4.0.4
- [Release notes](https://github.com/form-data/form-data/releases)
- [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md)
- [Commits](form-data/form-data@v4.0.2...v4.0.4)

Updates `micromatch` from 4.0.5 to 4.0.8
- [Release notes](https://github.com/micromatch/micromatch/releases)
- [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/micromatch@4.0.5...4.0.8)

Updates `nanoid` from 3.3.6 to 3.3.11
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@3.3.6...3.3.11)

Updates `path-to-regexp` from 0.1.7 to 0.1.12
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md)
- [Commits](pillarjs/path-to-regexp@v0.1.7...v0.1.12)

Updates `send` from 0.18.0 to 0.19.0
- [Release notes](https://github.com/pillarjs/send/releases)
- [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md)
- [Commits](pillarjs/send@0.18.0...0.19.0)

Updates `serve-static` from 1.15.0 to 1.16.2
- [Release notes](https://github.com/expressjs/serve-static/releases)
- [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md)
- [Commits](expressjs/serve-static@v1.15.0...v1.16.2)

Updates `zod` from 3.21.4 to 3.22.4
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v3.21.4...v3.22.4)

---
updated-dependencies:
- dependency-name: express
  dependency-version: 4.21.2
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.4.6
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: postcss
  dependency-version: 8.5.6
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: "@babel/runtime"
  dependency-version: 7.28.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@solana/web3.js"
  dependency-version: 1.98.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ws
  dependency-version: 8.18.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@rainbow-me/rainbowkit"
  dependency-version: 2.2.8
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: ethers
  dependency-version: 5.8.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: viem
  dependency-version: 2.33.2
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: wagmi
  dependency-version: 2.16.1
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: base-x
  dependency-version: 5.0.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: body-parser
  dependency-version: 1.20.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: braces
  dependency-version: 3.0.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cookie
  dependency-version: 0.7.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cookie-parser
  dependency-version: 1.4.7
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: elliptic
  dependency-version: 6.6.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: form-data
  dependency-version: 4.0.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: micromatch
  dependency-version: 4.0.8
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: nanoid
  dependency-version: 3.3.11
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: path-to-regexp
  dependency-version: 0.1.12
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: send
  dependency-version: 0.19.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: serve-static
  dependency-version: 1.16.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: zod
  dependency-version: 3.22.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 7, 2025
@dependabot @github
Copy link
Copy Markdown
Author

dependabot bot commented on behalf of github Aug 26, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Aug 26, 2025
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/npm_and_yarn-7f1685781f branch August 26, 2025 22:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants