Bump the minor-and-patch group across 1 directory with 33 updates by dependabot[bot] · Pull Request #451 · stellar/stellar-demo-wallet

dependabot · 2025-11-23T02:13:45Z

Bumps the minor-and-patch group with 31 updates in the / directory:

Package	From	To
@stellar/stellar-sdk	`14.1.0`	`14.3.3`
form-data	`4.0.4`	`4.0.5`
@microlink/react-json-view	`1.22.2`	`1.27.0`
@simplewebauthn/browser	`13.1.0`	`13.2.2`
@stellar/prettier-config	`1.0.1`	`1.2.0`
@testing-library/jest-dom	`6.0.0`	`6.9.1`
@testing-library/user-event	`14.4.3`	`14.6.1`
assert	`2.0.0`	`2.1.0`
cbor	`10.0.3`	`10.0.11`
dompurify	`3.0.5`	`3.3.0`
sass	`1.69.7`	`1.94.2`
styled-components	`6.0.7`	`6.1.19`
typescript	`5.1.6`	`5.9.3`
url	`0.11.1`	`0.11.4`
@babel/core	`7.22.10`	`7.28.5`
@babel/preset-env	`7.22.10`	`7.28.5`
@babel/preset-react	`7.22.5`	`7.28.5`
@babel/preset-typescript	`7.22.5`	`7.28.5`
@types/lodash	`4.14.197`	`4.17.21`
@types/react-copy-to-clipboard	`5.0.4`	`5.0.7`
@types/styled-components	`5.1.26`	`5.1.36`
eslint-plugin-import	`2.28.0`	`2.32.0`
eslint-plugin-jsx-a11y	`6.7.1`	`6.10.2`
eslint-plugin-react	`7.33.1`	`7.37.5`
html-webpack-plugin	`5.5.3`	`5.6.5`
mini-css-extract-plugin	`2.7.6`	`2.9.4`
prettier	`3.0.2`	`3.6.2`
ts-loader	`9.4.4`	`9.5.4`
tsconfig-paths-webpack-plugin	`4.1.0`	`4.2.0`
webpack	`5.88.2`	`5.103.0`
ts-node	`10.9.1`	`10.9.2`

Updates @stellar/stellar-sdk from 14.1.0 to 14.3.3

Release notes

Sourced from @stellar/stellar-sdk's releases.

v14.3.3

v14.3.3

Added

Spec.nativeToScVal supports parsing Muxed Address(#1274),

Contributors

@alberto-crossmint made their first contribution in stellar/js-stellar-sdk#1274, @jeesunikim

Full Changelog: stellar/js-stellar-sdk@v14.3.2...v14.3.3

v14.3.2

v14.3.2

Added

AssembledTransaction.sign() throws an error if publicKey was not provided when instantiated (#1269).

Fixed

The underlying stellar-base library has been upgraded, refer to its release notes for more updates (#1273).

A missing dependency definition may have caused issues in certain build environments (#1272).

Contributors

@corymsmith made their first contribution in stellar/js-stellar-sdk#1272, @Ryang-21

Full Changelog: stellar/js-stellar-sdk@v14.3.1...v14.3.2

v14.3.1

v14.3.1

Added

Added optional server: rpc.Server field to ClientOption for HttpClient reuse. (#1234).

Fixed

Replaced global HttpClient with per-instance clients in horizon.Server and rpc.Server to prevent cross-instance header contamination (#1234).

Contributors

@ScottyPoi made their first contribution in stellar/js-stellar-sdk#1238, @Ryang-21

Full Changelog: stellar/js-stellar-sdk@v14.3.0...v14.3.1

v14.3.0

Added

Spec.scValToNative now supports parsing Options (#1228).

Added getLedgers method to rpc.Server for retreiving ledger data. (#1231).

Fixed

Spec.scValToNative returns null for voids or Optionals instead of the ambiguous undefined (#1228).

The getEvents API now requires either a start and end ledger or a cursor to be provided (#1231).

Deprecated

GetEventsRequest interface moved from server.ts to api.ts (#1231).

... (truncated)

Changelog

Sourced from @stellar/stellar-sdk's changelog.

v14.3.3

Added

Spec.nativeToScVal supports parsing Muxed Address(#1274),

v14.3.2

Added

AssembledTransaction.sign() throws an error if publicKey was not provided when instantiated (#1269).

v14.3.1

Added

Added optional server: rpc.Server field to ClientOption for HttpClient reuse. (#1234).

Fixed

Replaced global HttpClient with per-instance clients in horizon.Server and rpc.Server to prevent cross-instance header contamination (#1234).

v14.3.0

Added

Spec.scValToNative now supports parsing Options (#1228).

Added getLedgers method to rpc.Server for retreiving ledger data. (#1231).

Fixed

Spec.scValToNative returns null for voids or Optionals instead of the ambiguous undefined (#1228).

The getEvents API now requires either a start and end ledger or a cursor to be provided (#1231).

Deprecated

GetEventsRequest interface moved from server.ts to api.ts (#1231).

v14.2.0

Added

rpc.Server now includes getAccountEntry, getTrustlineEntry, and getClaimableBalance methods to facilitate retrieving those entries without manually constructing the ledger keys (#1218, #1221).

Fixed

The getTransactions API no longer requires startLedger when providing cursor because they are mutually exclusive (#1192).

Updated @stellar/stellar-base to latest patch (see its release notes, #1221).

v14.1.1

Fixed

Added missing transactionIndex and operationIndex to getEvents return schema (#1206).

Remove previously-deprecated and now-removed pagingToken from getEvents (use id instead or the top-level cursor, depending on pagination needs) (#1207).

Commits

59eb782 release v14.3.3 (#1284)
25819d5 add muxed_address to spec (#1279)
f2c0da8 Allow muxed account strings to get encoded (#1274)
1c1ccce update stellar-base dependency and release v14.3.2 (#1273)
0e6f78e AssembledTransaction null publicKey (#1269)
a1137cf Move urijs to dependences vs. devDependencies (#1272)
30dc07b Fix npm publish (#1268)
eea649c release v14.3.1 (#1266)
70c69bb Convert testing suite to vitest and TypeScript (#1238)
9f7824f Fix global http client state pollution (#1234)
Additional commits viewable in compare view

Updates form-data from 4.0.4 to 4.0.5

Changelog

Sourced from form-data's changelog.

v4.0.5 - 2025-11-17

Commits

[Tests] Switch to newer v8 prediction library; enable node 24 testing 16e0076

[Dev Deps] update @ljharb/eslint-config, eslint 5822467

[Fix] set Symbol.toStringTag in the proper place 76d0dee

Commits

68ff7dd v4.0.5
5822467 [Dev Deps] update @ljharb/eslint-config, eslint
76d0dee [Fix] set Symbol.toStringTag in the proper place
16e0076 [Tests] Switch to newer v8 prediction library; enable node 24 testing
See full diff in compare view

Updates @microlink/react-json-view from 1.22.2 to 1.27.0

Release notes

Sourced from @microlink/react-json-view's releases.

v1.27.0

What's Changed

Use "className" instead of "class" in React components by @n1c0de in microlinkhq/react-json-view#78

Prevent module overflow by breaking long words in string value by @n1c0de in microlinkhq/react-json-view#80

Use camelCase on inline style by @n1c0de in microlinkhq/react-json-view#81

feat: show comma option by @truongthanh1303 in microlinkhq/react-json-view#87

New Contributors

@n1c0de made their first contribution in microlinkhq/react-json-view#78

@truongthanh1303 made their first contribution in microlinkhq/react-json-view#87

Full Changelog: microlinkhq/react-json-view@v1.26.2...v1.27.0

v1.26.2

What's Changed

refactor: better to check the constructor by @sharefe-demo in microlinkhq/react-json-view#64

Fix CSP by removing globalThis polyfill by @robbie-c in microlinkhq/react-json-view#77

New Contributors

@sharefe-demo made their first contribution in microlinkhq/react-json-view#64

@robbie-c made their first contribution in microlinkhq/react-json-view#77

Full Changelog: microlinkhq/react-json-view@v1.26.1...v1.26.2

v1.26.1

What's Changed

fix: rolling back the changes directly by @Suntgr in microlinkhq/react-json-view#63

fix: resolve test failures in Node 20+ and below Node 17 by @Suntgr in microlinkhq/react-json-view#62

Full Changelog: microlinkhq/react-json-view@v1.26.0...v1.26.1

v1.26.0

What's Changed

feat: 优化 rjvId 生成方式，添加随机字符串增加唯一性 by @waterbird-i in microlinkhq/react-json-view#60

New Contributors

@waterbird-i made their first contribution in microlinkhq/react-json-view#60

Full Changelog: microlinkhq/react-json-view@v1.25.0...v1.26.0

v1.25.0

What's Changed

feat: Enhance VariableEditor to support BigNumber type handling by @Suntgr in microlinkhq/react-json-view#55

New Contributors

@Suntgr made their first contribution in microlinkhq/react-json-view#55

Full Changelog: microlinkhq/react-json-view@v1.24.1...v1.25.0

... (truncated)

Changelog

Sourced from @microlink/react-json-view's changelog.

1.27.0 (2025-08-01)

Features

add custom buttons to rows according to value type (#4) (e8df37a)

show comma option (bdb3907)

Bug Fixes

replace class attribute by classname (e38bab4)

string data type: use camelcase on inline style (d578398)

use className instead of class in React components (#1) (108e1a8)

1.26.2 (2025-05-16)

1.26.1 (2025-02-15)

Bug Fixes

resolve test failures in Node 20+ and below Node 17 (c00d5cc)

rolling back the changes directly (4c17310)

1.26.0 (2025-02-13)

Features

优化 rjvId 生成方式，添加随机字符串增加唯一性 (6d85757)

1.25.0 (2025-02-12)

Features

Enhance VariableEditor to support BigNumber type handling (98d2d1e)

1.24.1 (2025-02-12)

1.24.0 (2024-12-25)

1.23.4 (2024-10-25)

1.23.3 (2024-09-27)

Bug Fixes

... (truncated)

Commits

cbf13bc chore(release): 1.27.0
a72086a Merge pull request #87 from truongthanh1303/feat/show-comma-option
bdb3907 feat: show comma option
bc355f3 Merge pull request #81 from n1c0de/hotfix/use-camelcase-on-inline-style
a2312a7 Merge branch 'master' into hotfix/use-camelcase-on-inline-style
b8c14d8 Revert "Release/1.27.1 (#11)"
d578398 fix(string data type): use camelcase on inline style
b357174 Merge pull request #80 from n1c0de/hotfix/prevent-module-overflow-by-breaking...
e1f4b60 Revert "fix: use className instead of class in React components (#1)"
c334691 Revert "feat: add custom buttons to rows according to value type (#4)"
Additional commits viewable in compare view

Updates @simplewebauthn/browser from 13.1.0 to 13.2.2

Release notes

Sourced from @simplewebauthn/browser's releases.

v13.2.2

Changes

[browser] [server] In the spirit of contributing to increased software supply chain transparency, both libraries are now published via GitHub Actions workflows. Package listings on JSR and NPM feature build transparency logs at the bottom of their respective pages (#725, #726, #727)

v13.2.1

Changes:

[server] generateRegistrationOptions() will now correctly encoded the userID argument to base64url when it is an instance of Node's Buffer (#724)

v13.2.0

[server] The return value from verifyRegistrationResponse() has been defined more strictly to communicate that registrationInfo will only ever be present if verified is true (#715)

[server] verifyRegistrationResponse() can now verify attestations containing SHA256 hashes by using EC public keys with the P-384 curve (#721)

[server] The Android SafetyNet "CTS profile match" system integrity check can now be disabled by setting attestationSafetyNetEnforceCTSCheck: false when calling verifyRegistrationResponse(). This check remains enforced by default (#722)

[browser] [server] These libraries now have better support in Deno 2.2+ projects which use generic typing for Uint8Array via TypeScript 5.7. SimpleWebAuthn values of type Uint8Array_ are equivalent to Uint8Array in Deno 2.1 and earlier, and Uint8Array<ArrayBuffer> in Deno 2.2 and later. (#717)

v13.1.2

Changes

[browser] [server] Exported the ResidentKeyRequirement type to help with type inference (#704)

v13.1.1

Changes:

[server] "android-key" attestation statement verification has been modernized (#675)

[server] More TPM manufacturers are recognized while verifying "tpm" attestation statements (#673)

Changelog

Sourced from @simplewebauthn/browser's changelog.

v13.2.2

Changes

[browser] [server] In the spirit of contributing to increased software supply chain transparency, both libraries are now published via GitHub Actions workflows. Package listings on JSR and NPM feature build transparency logs at the bottom of their respective pages (#725, #726, #727)

v13.2.1

Changes:

[server] generateRegistrationOptions() will now correctly encoded the userID argument to base64url when it is an instance of Node's Buffer (#724)

v13.2.0

Changes

[server] The return value from verifyRegistrationResponse() has been defined more strictly to communicate that registrationInfo will only ever be present if verified is true (#715)

[server] verifyRegistrationResponse() can now verify attestations containing SHA256 hashes by using EC public keys with the P-384 curve (#721)

[server] The Android SafetyNet "CTS profile match" system integrity check can now be disabled by setting attestationSafetyNetEnforceCTSCheck: false when calling verifyRegistrationResponse(). This check remains enforced by default (#722)

[browser] [server] These libraries now have better support in Deno 2.2+ projects which use generic typing for Uint8Array via TypeScript 5.7. SimpleWebAuthn values of type Uint8Array_ are equivalent to Uint8Array in Deno 2.1 and earlier, and Uint8Array<ArrayBuffer> in Deno 2.2 and later. (#717)

v13.1.2

Changes

[browser] [server] Exported the ResidentKeyRequirement type to help with type inference (#704)

v13.1.1

... (truncated)

Commits

a7b1c79 Update version to 13.2.2
84c61db Publish v13.2.0
f5f3de7 Refactor Uint8Array to Uint8Array_
e552884 Codegen another use of Uint8Array_
e2a3a85 Define Uint8Array_ for Deno backwards compat
467f8f1 Publish v13.1.2
fdbb880 Codegen updated types
See full diff in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @simplewebauthn/browser since your current version.

Updates @stellar/prettier-config from 1.0.1 to 1.2.0

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by piyalbasu, a new releaser for @stellar/prettier-config since your current version.

Updates @testing-library/jest-dom from 6.0.0 to 6.9.1

Release notes

Sourced from @testing-library/jest-dom's releases.

v6.9.1

6.9.1 (2025-10-01)

Bug Fixes

Fix undefined Node error (nodejs) (#707) (0ff8904)

v6.9.0

6.9.0 (2025-09-30)

Features

Add .toAppearBefore/.toAppearAfter matcher (#702) (95f870a)

v6.8.0

6.8.0 (2025-08-20)

Features

add toBePartiallyPressed matcher (#203) (#692) (779b712)

v6.7.0

6.7.0 (2025-08-13)

Features

add toBePressed matcher (#203) (#658) (cfdf8ae)

v6.6.4

6.6.4 (2025-07-26)

Performance Improvements

replace chalk with picocolors (#659) (707e647)

v6.6.3

6.6.3 (2024-10-31)

Bug Fixes

add vitest import when extending vitest matchers (#646) (5ba0156)

v6.6.2

6.6.2 (2024-10-17)

... (truncated)

Commits

0ff8904 fix: Fix undefined Node error (nodejs) (#707)
95f870a feat: Add .toAppearBefore/.toAppearAfter matcher (#702)
d6663f5 docs: add nossbigg as a contributor for code, and test (#703)
779b712 feat: add toBePartiallyPressed matcher (#203) (#692)
e15f789 docs: add kretajak as a contributor for code, and test (#691)
cfdf8ae feat: add toBePressed matcher (#203) (#658)
f00d94d chore: add dependebot.yml (#456)
476c30b refactor: drop lodash entirely (#676)
fafd8ca chore: add tests for Node 22 & 24 (#678)
d9babb1 docs: fix typo (#667)
Additional commits viewable in compare view

Updates @testing-library/user-event from 14.4.3 to 14.6.1

Release notes

Sourced from @testing-library/user-event's releases.

v14.6.1

14.6.1 (2025-01-21)

Bug Fixes

correct description for delay option (#1175) (2edf14d)

keyboard: add ContextMenu to defaultKeyMap (#1079) (3e471d1)

keyboard: add brackets to defaultKeyMap (#1226) (543ecb0)

keyboard: walk through radio group per arrow keys (#1049) (bf8111c)

pointer: dispatch mouse events if pointerdown is defaultPrevented (#1121) (f681f7b)

pointer: set button and buttons properties on PointerEvent (#1219) (6614f72)

pointer: use 1 as default value for PointerEvent.width and PointerEvent.height (#1224) (f0468d0)

prevent click event loop on form-associated custom element (#1238) (465fc7e)

prevent click event on non-focusable control (#1130) (e429094)

upload: apply accept filter more leniently (#1064) (a344ad4)

v14.6.0

14.6.0 (2025-01-15)

Features

dispatch FocusEvent in hidden documents (#1252) (1ed8b15)

Bug Fixes

clipboard: await DataTransferItem.getAsString() callback (#1251) (7b11b0e)

event: assign pointer coords to MouseEvent (#1039) (8528972)

pointer: check PointerCoords.x in isDifferentPointerPosition (#1216) (75edef5)

pointer: check all fields of PointerCoords in isDifferentPointerPosition() (#1229) (5f3d28f)

v14.5.2

14.5.2 (2023-12-29)

Bug Fixes

remove interop and deep DTL imports (6a3c896)

v14.5.1

14.5.1 (2023-09-15)

Bug Fixes

incorrect default import from @testing-library/dom (#1162) (d7483f0)

v14.5.0

14.5.0 (2023-09-14)

... (truncated)

Commits

d42954b chore: fix typos (#1260)
465fc7e fix: prevent click event loop on form-associated custom element (#1238)
65c1f6c test: update snapshots (#1261)
543ecb0 fix(keyboard): add brackets to defaultKeyMap (#1226)
f0468d0 fix(pointer): use 1 as default value for PointerEvent.width and `PointerE...
6614f72 fix(pointer): set button and buttons properties on PointerEvent (#1219)
2edf14d fix: correct description for delay option (#1175)
e429094 fix: prevent click event on non-focusable control (#1130)
f681f7b fix(pointer): dispatch mouse events if pointerdown is defaultPrevented (#...
3e471d1 fix(keyboard): add ContextMenu to defaultKeyMap (#1079)
Additional commits viewable in compare view

Updates assert from 2.0.0 to 2.1.0

Changelog

Sourced from assert's changelog.

2.1.0

[New] Implement assert.match() and assert.doesNotMatch()

[Refactor] switching to a maintained Object.assign package

[readme] Add description for usage with webpack and vite (#60)

[readme] Remove duplicate line under usage section (#48)

[Deps] update is-nan, object-is, util

[Dev Deps] update @babel/cli, @babel/core, @babel/preset-env, airtap, core-js, cross-eng, object.entries, object.getownpropertydescriptors, tape

Commits

fc65923 v2.1.0
d99f50d [meta] add to FUNDING.yml
c6e09cb [Deps] update is-nan, object-is, util
a38013b [Dev Deps] update @babel/cli, @babel/core, @babel/preset-env, airtap,...
f5d7c66 [Refactor] switching to a maintained Object.assign package
80664db [readme] Add description for usage with webpack and vite
d932a53 Implement assert.match() and assert.doesNotMatch()
bba838e Add security.md
ffd5479 Remove duplicate line under usage section (#48)
c112ec4 Remove duplicate line under usage section
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ljharb, a new releaser for assert since your current version.

Updates bignumber.js from 9.1.1 to 9.3.1

Changelog

Sourced from bignumber.js's changelog.

9.3.1

11/07/25

[BUGFIX] #388 toPrecision fix.

9.3.0

19/04/25

Refactor type declarations:

Rename bignumber.d.ts to types.d.ts.

Rename bignumber.d.cts to bignumber.d.ts.

Add export as namespace to bignumber.d.ts.

Remove subpath exports from package.json.

Refactor named export from bignumber.d.mts.

#383 Remove ? from static BigNumber and default properties.

Add blank lines after titles in CHANGELOG.md.

9.2.1

08/04/25

#371 #382 Add BigNumber as named export.

9.2.0

03/04/25

#355 Support BigInt argument.

#371 Provide separate type definitions for CommonJS and ES modules.

#374 Correct comparedTo return type.

9.1.2

28/08/23

#354 Amend round to avoid bug in v8 Maglev compiler.

[BUGFIX] #344 minimum(0, -0) should be -0.

Commits

a7bc1f1 v9.3.1
307860b #388 toPrecision fix.
46d4fe2 #385 Fix link to licence from README
3abe017 Update README for main branch and CI badge
4bc8c79 Remove Travis CI, add GitHub Actions, update to main branch
7a0bb55 Update CHANGELOG.md
c876b68 v9.3.0
57d52cb #383 Refactor type declarations
a626ba7 v9.2.1
9385f0e #371 #382 Add named export
Additional commits viewable in compare view

Updates cbor from 10.0.3 to 10.0.11

Release notes

Sourced from cbor's releases.

v10.0.11

What's Changed

Update dependencies by @hildjj in hildjj/node-cbor#225

Full Changelog: hildjj/node-cbor@v10.0.10...v10.0.11

v10.0.10

What's Changed

Update dependencies by @hildjj in hildjj/node-cbor#224

Full Changelog: hildjj/node-cbor@v10.0.9...v10.0.10

v10.0.9

Note: versions 10.0.4 - 10.0.8 were not published to NPM.

What's Changed

Try again with publishing by @hildjj in hildjj/node-cbor#223

Full Changelog: hildjj/node-cbor@v10.0.8...v10.0.9

v10.0.8

Note: versions 10.0.4-10.0.7 were not released to NPM.

What's Changed

Ensurre pnpm-lock.yaml gets updated during versioning by @hildjj in hildjj/node-cbor#222

Full Changelog: hildjj/node-cbor@v10.0.7...v10.0.8

v10.0.7

Note: 10.0.4-10.0.6 never got published correctly to NPM.

What's Changed

Use pnpm linkWorkspacePackages to prevent version issues during publish by @hildjj in hildjj/node-cbor#221

Full Changelog: hildjj/node-cbor@v10.0.6...v10.0.7

v10.0.6

What's Changed

Try to fix release process by @hildjj in hildjj/node-cbor#219

Full Changelog: hildjj/node-cbor@v10.0.5...v10.0.6

v10.0.5

What's Changed

... (truncated)

Commits

655eac6 10.0.11
dcea7aa Update dependencies
7b0801c 10.0.10
3e029dd Update dependencies
107f057 10.0.9
526c84f 10.0.8
04f26d7 10.0.7
3ae16ce 10.0.6
64dab90 Try to fix release process
93fc7e7 10.0.5
Additional commits viewable in compare view

Updates dompurify from 3.0.5 to 3.3.0

Release notes

Sourced from dompurify's releases.

DOMPurify 3.3.0

Added the SVG mask-type attribute to default allow-list, thanks @prasadrajandran

Added support for ADD_ATTR and ADD_TAGS to accept functions, thanks @nelstrom

Fixed an iss...
Description has been truncated

Bumps the minor-and-patch group with 31 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@stellar/stellar-sdk](https://github.com/stellar/js-stellar-sdk) | `14.1.0` | `14.3.3` | | [form-data](https://github.com/form-data/form-data) | `4.0.4` | `4.0.5` | | [@microlink/react-json-view](https://github.com/microlinkhq/react-json-view) | `1.22.2` | `1.27.0` | | [@simplewebauthn/browser](https://github.com/MasterKale/SimpleWebAuthn/tree/HEAD/packages/browser) | `13.1.0` | `13.2.2` | | [@stellar/prettier-config](https://github.com/stellar/product-conventions) | `1.0.1` | `1.2.0` | | [@testing-library/jest-dom](https://github.com/testing-library/jest-dom) | `6.0.0` | `6.9.1` | | [@testing-library/user-event](https://github.com/testing-library/user-event) | `14.4.3` | `14.6.1` | | [assert](https://github.com/browserify/commonjs-assert) | `2.0.0` | `2.1.0` | | [cbor](https://github.com/hildjj/node-cbor/tree/HEAD/packages/cbor) | `10.0.3` | `10.0.11` | | [dompurify](https://github.com/cure53/DOMPurify) | `3.0.5` | `3.3.0` | | [sass](https://github.com/sass/dart-sass) | `1.69.7` | `1.94.2` | | [styled-components](https://github.com/styled-components/styled-components) | `6.0.7` | `6.1.19` | | [typescript](https://github.com/microsoft/TypeScript) | `5.1.6` | `5.9.3` | | [url](https://github.com/defunctzombie/node-url) | `0.11.1` | `0.11.4` | | [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.22.10` | `7.28.5` | | [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) | `7.22.10` | `7.28.5` | | [@babel/preset-react](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-react) | `7.22.5` | `7.28.5` | | [@babel/preset-typescript](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-typescript) | `7.22.5` | `7.28.5` | | [@types/lodash](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/lodash) | `4.14.197` | `4.17.21` | | [@types/react-copy-to-clipboard](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-copy-to-clipboard) | `5.0.4` | `5.0.7` | | [@types/styled-components](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/styled-components) | `5.1.26` | `5.1.36` | | [eslint-plugin-import](https://github.com/import-js/eslint-plugin-import) | `2.28.0` | `2.32.0` | | [eslint-plugin-jsx-a11y](https://github.com/jsx-eslint/eslint-plugin-jsx-a11y) | `6.7.1` | `6.10.2` | | [eslint-plugin-react](https://github.com/jsx-eslint/eslint-plugin-react) | `7.33.1` | `7.37.5` | | [html-webpack-plugin](https://github.com/jantimon/html-webpack-plugin) | `5.5.3` | `5.6.5` | | [mini-css-extract-plugin](https://github.com/webpack-contrib/mini-css-extract-plugin) | `2.7.6` | `2.9.4` | | [prettier](https://github.com/prettier/prettier) | `3.0.2` | `3.6.2` | | [ts-loader](https://github.com/TypeStrong/ts-loader) | `9.4.4` | `9.5.4` | | [tsconfig-paths-webpack-plugin](https://github.com/dividab/tsconfig-paths-webpack-plugin) | `4.1.0` | `4.2.0` | | [webpack](https://github.com/webpack/webpack) | `5.88.2` | `5.103.0` | | [ts-node](https://github.com/TypeStrong/ts-node) | `10.9.1` | `10.9.2` | Updates `@stellar/stellar-sdk` from 14.1.0 to 14.3.3 - [Release notes](https://github.com/stellar/js-stellar-sdk/releases) - [Changelog](https://github.com/stellar/js-stellar-sdk/blob/master/CHANGELOG.md) - [Commits](stellar/js-stellar-sdk@v14.1.0...v14.3.3) Updates `form-data` from 4.0.4 to 4.0.5 - [Release notes](https://github.com/form-data/form-data/releases) - [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md) - [Commits](form-data/form-data@v4.0.4...v4.0.5) Updates `@microlink/react-json-view` from 1.22.2 to 1.27.0 - [Release notes](https://github.com/microlinkhq/react-json-view/releases) - [Changelog](https://github.com/microlinkhq/react-json-view/blob/master/CHANGELOG.md) - [Commits](microlinkhq/react-json-view@v1.22.2...v1.27.0) Updates `@simplewebauthn/browser` from 13.1.0 to 13.2.2 - [Release notes](https://github.com/MasterKale/SimpleWebAuthn/releases) - [Changelog](https://github.com/MasterKale/SimpleWebAuthn/blob/master/CHANGELOG.md) - [Commits](https://github.com/MasterKale/SimpleWebAuthn/commits/v13.2.2/packages/browser) Updates `@stellar/prettier-config` from 1.0.1 to 1.2.0 - [Release notes](https://github.com/stellar/product-conventions/releases) - [Commits](https://github.com/stellar/product-conventions/commits) Updates `@testing-library/jest-dom` from 6.0.0 to 6.9.1 - [Release notes](https://github.com/testing-library/jest-dom/releases) - [Changelog](https://github.com/testing-library/jest-dom/blob/main/CHANGELOG.md) - [Commits](testing-library/jest-dom@v6.0.0...v6.9.1) Updates `@testing-library/user-event` from 14.4.3 to 14.6.1 - [Release notes](https://github.com/testing-library/user-event/releases) - [Changelog](https://github.com/testing-library/user-event/blob/main/CHANGELOG.md) - [Commits](testing-library/user-event@v14.4.3...v14.6.1) Updates `assert` from 2.0.0 to 2.1.0 - [Release notes](https://github.com/browserify/commonjs-assert/releases) - [Changelog](https://github.com/browserify/commonjs-assert/blob/main/CHANGELOG.md) - [Commits](browserify/commonjs-assert@v2.0.0...v2.1.0) Updates `bignumber.js` from 9.1.1 to 9.3.1 - [Release notes](https://github.com/MikeMcl/bignumber.js/releases) - [Changelog](https://github.com/MikeMcl/bignumber.js/blob/main/CHANGELOG.md) - [Commits](MikeMcl/bignumber.js@v9.1.1...v9.3.1) Updates `cbor` from 10.0.3 to 10.0.11 - [Release notes](https://github.com/hildjj/node-cbor/releases) - [Commits](https://github.com/hildjj/node-cbor/commits/v10.0.11/packages/cbor) Updates `dompurify` from 3.0.5 to 3.3.0 - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](cure53/DOMPurify@3.0.5...3.3.0) Updates `sass` from 1.69.7 to 1.94.2 - [Release notes](https://github.com/sass/dart-sass/releases) - [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md) - [Commits](sass/dart-sass@1.69.7...1.94.2) Updates `styled-components` from 6.0.7 to 6.1.19 - [Release notes](https://github.com/styled-components/styled-components/releases) - [Commits](https://github.com/styled-components/styled-components/compare/v6.0.7...styled-components@6.1.19) Updates `tslib` from 2.6.1 to 2.6.2 - [Release notes](https://github.com/Microsoft/tslib/releases) - [Commits](microsoft/tslib@v2.6.1...v2.6.2) Updates `typescript` from 5.1.6 to 5.9.3 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release-publish.yml) - [Commits](microsoft/TypeScript@v5.1.6...v5.9.3) Updates `url` from 0.11.1 to 0.11.4 - [Commits](defunctzombie/node-url@v0.11.1...v0.11.4) Updates `@babel/core` from 7.22.10 to 7.28.5 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.28.5/packages/babel-core) Updates `@babel/preset-env` from 7.22.10 to 7.28.5 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.28.5/packages/babel-preset-env) Updates `@babel/preset-react` from 7.22.5 to 7.28.5 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.28.5/packages/babel-preset-react) Updates `@babel/preset-typescript` from 7.22.5 to 7.28.5 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.28.5/packages/babel-preset-typescript) Updates `@types/lodash` from 4.14.197 to 4.17.21 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/lodash) Updates `@types/react-copy-to-clipboard` from 5.0.4 to 5.0.7 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-copy-to-clipboard) Updates `@types/styled-components` from 5.1.26 to 5.1.36 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/styled-components) Updates `eslint-plugin-import` from 2.28.0 to 2.32.0 - [Release notes](https://github.com/import-js/eslint-plugin-import/releases) - [Changelog](https://github.com/import-js/eslint-plugin-import/blob/main/CHANGELOG.md) - [Commits](import-js/eslint-plugin-import@v2.28.0...v2.32.0) Updates `eslint-plugin-jsx-a11y` from 6.7.1 to 6.10.2 - [Release notes](https://github.com/jsx-eslint/eslint-plugin-jsx-a11y/releases) - [Changelog](https://github.com/jsx-eslint/eslint-plugin-jsx-a11y/blob/main/CHANGELOG.md) - [Commits](jsx-eslint/eslint-plugin-jsx-a11y@v6.7.1...v6.10.2) Updates `eslint-plugin-react` from 7.33.1 to 7.37.5 - [Release notes](https://github.com/jsx-eslint/eslint-plugin-react/releases) - [Changelog](https://github.com/jsx-eslint/eslint-plugin-react/blob/master/CHANGELOG.md) - [Commits](jsx-eslint/eslint-plugin-react@v7.33.1...v7.37.5) Updates `html-webpack-plugin` from 5.5.3 to 5.6.5 - [Release notes](https://github.com/jantimon/html-webpack-plugin/releases) - [Changelog](https://github.com/jantimon/html-webpack-plugin/blob/main/CHANGELOG.md) - [Commits](jantimon/html-webpack-plugin@v5.5.3...v5.6.5) Updates `mini-css-extract-plugin` from 2.7.6 to 2.9.4 - [Release notes](https://github.com/webpack-contrib/mini-css-extract-plugin/releases) - [Changelog](https://github.com/webpack/mini-css-extract-plugin/blob/main/CHANGELOG.md) - [Commits](webpack/mini-css-extract-plugin@v2.7.6...v2.9.4) Updates `prettier` from 3.0.2 to 3.6.2 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.0.2...3.6.2) Updates `ts-loader` from 9.4.4 to 9.5.4 - [Release notes](https://github.com/TypeStrong/ts-loader/releases) - [Changelog](https://github.com/TypeStrong/ts-loader/blob/main/CHANGELOG.md) - [Commits](TypeStrong/ts-loader@v9.4.4...v9.5.4) Updates `tsconfig-paths-webpack-plugin` from 4.1.0 to 4.2.0 - [Changelog](https://github.com/jonaskello/tsconfig-paths-webpack-plugin/blob/master/CHANGELOG.md) - [Commits](jonaskello/tsconfig-paths-webpack-plugin@v4.1.0...v4.2.0) Updates `webpack` from 5.88.2 to 5.103.0 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v5.88.2...v5.103.0) Updates `ts-node` from 10.9.1 to 10.9.2 - [Release notes](https://github.com/TypeStrong/ts-node/releases) - [Changelog](https://github.com/TypeStrong/ts-node/blob/main/development-docs/release-template.md) - [Commits](TypeStrong/ts-node@v10.9.1...v10.9.2) --- updated-dependencies: - dependency-name: "@stellar/stellar-sdk" dependency-version: 14.3.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: form-data dependency-version: 4.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@microlink/react-json-view" dependency-version: 1.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@simplewebauthn/browser" dependency-version: 13.2.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@stellar/prettier-config" dependency-version: 1.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@testing-library/jest-dom" dependency-version: 6.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@testing-library/user-event" dependency-version: 14.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: assert dependency-version: 2.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: bignumber.js dependency-version: 9.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: cbor dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: dompurify dependency-version: 3.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: sass dependency-version: 1.94.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: styled-components dependency-version: 6.1.19 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: tslib dependency-version: 2.6.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: typescript dependency-version: 5.9.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: url dependency-version: 0.11.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@babel/core" dependency-version: 7.28.5 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@babel/preset-env" dependency-version: 7.28.5 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@babel/preset-react" dependency-version: 7.28.5 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@babel/preset-typescript" dependency-version: 7.28.5 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@types/lodash" dependency-version: 4.17.21 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@types/react-copy-to-clipboard" dependency-version: 5.0.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@types/styled-components" dependency-version: 5.1.36 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: eslint-plugin-import dependency-version: 2.32.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: eslint-plugin-jsx-a11y dependency-version: 6.10.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: eslint-plugin-react dependency-version: 7.37.5 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: html-webpack-plugin dependency-version: 5.6.5 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: mini-css-extract-plugin dependency-version: 2.9.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: prettier dependency-version: 3.6.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: ts-loader dependency-version: 9.5.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: tsconfig-paths-webpack-plugin dependency-version: 4.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: webpack dependency-version: 5.103.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: ts-node dependency-version: 10.9.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

socket-security · 2025-11-23T02:14:15Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
npm/@babel/preset-react@7.22.5 ⏵ 7.28.5		^-1
npm/@babel/preset-typescript@7.22.5 ⏵ 7.28.5
npm/@babel/preset-env@7.22.10 ⏵ 7.28.5	⁺¹	⁺¹
npm/@babel/core@7.22.10 ⏵ 7.28.5		⁺¹
npm/@types/lodash@4.14.197 ⏵ 4.17.21			⁺⁸
npm/eslint-plugin-react@7.33.1 ⏵ 7.37.5
npm/eslint-plugin-import@2.28.0 ⏵ 2.32.0
npm/eslint-plugin-jsx-a11y@6.7.1 ⏵ 6.10.2	⁺¹	⁺¹
npm/tslib@2.6.1 ⏵ 2.6.2
npm/form-data@4.0.4 ⏵ 4.0.5
npm/@stellar/stellar-sdk@14.1.0 ⏵ 14.3.3	^-4		⁺¹

View full report

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 23, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the minor-and-patch group across 1 directory with 33 updates#451

Bump the minor-and-patch group across 1 directory with 33 updates#451
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/minor-and-patch-a9c4f41485

dependabot bot commented on behalf of github Nov 23, 2025

Uh oh!

socket-security bot commented Nov 23, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Nov 23, 2025

v14.3.3

Added

Contributors

v14.3.2

Added

Fixed

Contributors

v14.3.1

Added

Fixed

Contributors

v14.3.0

Added

Fixed

Deprecated

Added

Added

Added

Fixed

Added

Fixed

Deprecated

Added

Fixed

Fixed

v4.0.5 - 2025-11-17

Commits

v1.27.0

What's Changed

New Contributors

v1.26.2

What's Changed

New Contributors

v1.26.1

What's Changed

v1.26.0

What's Changed

New Contributors

v1.25.0

What's Changed

New Contributors

1.27.0 (2025-08-01)

Features

Bug Fixes

1.26.2 (2025-05-16)

1.26.1 (2025-02-15)

Bug Fixes

1.26.0 (2025-02-13)

Features

1.25.0 (2025-02-12)

Features

1.24.1 (2025-02-12)

1.24.0 (2024-12-25)

1.23.4 (2024-10-25)

1.23.3 (2024-09-27)

Bug Fixes

v13.2.2

v13.2.1

v13.2.0

v13.1.2

v13.1.1

v13.2.2

v13.2.1

v13.2.0

v13.1.2

v13.1.1

v6.9.1

6.9.1 (2025-10-01)

Bug Fixes

v6.9.0

6.9.0 (2025-09-30)

Features

v6.8.0

6.8.0 (2025-08-20)

Features

v6.7.0

6.7.0 (2025-08-13)

Features