Skip to content

build(deps): bump the minor-and-patch group across 1 directory with 34 updates - #376

Merged
rz1989s merged 2 commits into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-ad6b709bc7
Sep 24, 2026
Merged

build(deps): bump the minor-and-patch group across 1 directory with 34 updates#376
rz1989s merged 2 commits into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-ad6b709bc7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 23, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Bumps the minor-and-patch group with 34 updates in the / directory:

Package From To
@anthropic-ai/claude-agent-sdk 0.3.191 0.3.278
@noble/hashes 2.2.0 2.4.0
@sip-protocol/sdk 0.11.0 0.15.1
@solana/spl-token 0.4.14 0.4.15
@solana/web3.js 1.98.4 1.99.0
compression 1.8.1 1.8.2
express-rate-limit 8.5.2 8.7.0
helmet 8.2.0 8.3.0
lru-cache 11.5.1 11.5.3
@playwright/test 1.61.1 1.63.0
@types/supertest 7.2.0 7.2.1
@typescript-eslint/parser 8.62.0 8.70.0
eslint 10.5.0 10.11.0
tsx 4.22.4 4.23.15
typescript-eslint 8.62.0 8.70.0
@noble/ciphers 2.2.0 2.4.0
@sinclair/typebox 0.34.49 0.34.52
twitter-api-v2 1.29.0 1.29.1
ws 8.21.0 8.21.3
@solana/wallet-adapter-react 0.15.39 0.15.40
@solana/wallet-adapter-react-ui 0.9.39 0.9.40
@solana/wallet-adapter-wallets 0.19.38 0.19.39
@tailwindcss/vite 4.3.1 4.3.3
react 19.2.7 19.3.0
@types/react 19.2.17 19.3.0
react-dom 19.2.7 19.3.0
@types/react-dom 19.2.3 19.3.0
react-router-dom 7.18.0 7.18.4
tailwindcss 4.3.1 4.3.3
zustand 5.0.14 5.0.15
@testing-library/react 16.3.2 16.3.3
@testing-library/user-event 14.6.1 14.6.7
@types/react 19.2.17 19.3.0
@types/react-dom 19.2.3 19.3.0
@vitejs/plugin-react 6.0.3 6.1.1
vite 8.1.0 8.3.0

Updates @anthropic-ai/claude-agent-sdk from 0.3.191 to 0.3.278

Release notes

Sourced from @​anthropic-ai/claude-agent-sdk's releases.

v0.3.278

What's changed

  • Updated to parity with Claude Code v2.1.278

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.278
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.278
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.278
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.278

v0.3.277

What's changed

  • Added an optional builtin field to SlashCommand, set when a command is built into Claude Code
  • Added pasted_content to SDKUserMessage: text the user pasted rather than typed, appended after the typed prompt
  • Added optional remote-session latency fields (first_text_post_ms, first_text_post_wall_ms, first_stream_post_queue_wait_ms, first_stream_post_queued_behind) to the success result message
  • Added 'userSettings' as an updateSettings() source, accepting only effortLevel, which is saved for the session's current model as /effort saves it
  • Fixed a resumed or forked session's total_cost_usd, modelUsage and get_usage totals starting at zero instead of continuing from the earlier turns (maxBudgetUsd is unchanged)
  • Changed SDKUsageReport usage rows to always carry severity and is_active: the report relays only rows from a live server reply, and none while the usage fetch is failing
  • Updated to parity with Claude Code v2.1.277

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.277
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.277
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.277
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.277

v0.3.276

What's changed

  • Updated to parity with Claude Code v2.1.276

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.276
# or
</tr></table>

... (truncated)

Changelog

Sourced from @​anthropic-ai/claude-agent-sdk's changelog.

0.3.278

  • Updated to parity with Claude Code v2.1.278

0.3.277

  • Added an optional builtin field to SlashCommand, set when a command is built into Claude Code
  • Added pasted_content to SDKUserMessage: text the user pasted rather than typed, appended after the typed prompt
  • Added optional remote-session latency fields (first_text_post_ms, first_text_post_wall_ms, first_stream_post_queue_wait_ms, first_stream_post_queued_behind) to the success result message
  • Added 'userSettings' as an updateSettings() source, accepting only effortLevel, which is saved for the session's current model as /effort saves it
  • Fixed a resumed or forked session's total_cost_usd, modelUsage and get_usage totals starting at zero instead of continuing from the earlier turns (maxBudgetUsd is unchanged)
  • Changed SDKUsageReport usage rows to always carry severity and is_active: the report relays only rows from a live server reply, and none while the usage fetch is failing
  • Updated to parity with Claude Code v2.1.277

0.3.276

  • Updated to parity with Claude Code v2.1.276

0.3.275

  • Fixed a deferred tool call's result being emitted with internal keys such as toolUseResult instead of tool_use_result when the tool re-runs at the start of a resumed turn
  • Fixed getSessionMessages() and forkSession() sometimes missing a turn's assistant message when called right after the turn's result message
  • Fixed forkSession({ upToMessageId }) rejecting a client-supplied SDKUserMessage.uuid that is not in UUID format
  • Fixed forkSession rejecting the id that getSessionMessages returns for a message sent while Claude was working, and a fork showing a re-run prompt twice
  • Fixed getSessionMessages() omitting a task notification or other queued message that Claude read while running a tool; it now comes back where Claude read it
  • Updated to parity with Claude Code v2.1.275

0.3.274

  • Added startup_failure_reason to the error result a stream-json run writes before exiting on a known startup failure
  • Added mcpServer: {name, source} to canUseTool options, mcp_server to tool hook inputs, and source to MCP server status rows, so hosts can key trust on source === "sdk"
  • Added CLAUDE_CODE_MCP_STARTUP_WAIT_MS (pass via env) to bound or disable (0) the first-turn wait for connecting MCP servers
  • Added CLAUDE_CODE_EMIT_STARTUP_TIMING=1 for stream-json hosts: the session's first system/init then carries the per-phase startup_timing breakdown that cloud sessions already emit
  • Fixed getSessionMessages() omitting a message the user sent while Claude was running a tool; it now comes back as a user message where Claude read it
  • Fixed missing origin: {kind: 'task-notification'} on the replayed user message when a background task finishes during a running turn (--replay-user-messages)
  • Improved startup: the first turn no longer waits up to 2s for connecting MCP servers from settings files or plugins whose tools tool search defers; options.mcpServers servers are still awaited
  • Changed queued background-task completions to share one model call: each still gets its own result, all but the last empty with num_turns: 0
  • Updated to parity with Claude Code v2.1.274

0.3.273

  • Added a usage_report sibling (SDKUsageReport: session totals, the plan's usage rows as the server sends them, extra usage) on the assistant message that delivers a headless /usage result
  • Added reason: "worker_restart" to task_notification messages when a background task was stopped by a worker process restart
  • Added a one-line transcript notice when the SDK host's Stop or SessionStart hook callback times out, shown once until the host answers again
  • Fixed a Stop, SubagentStop or SessionStart hook callback that exceeds its timeout being reported as a hook failure and discarding other hooks' decisions; it now counts as no decision
  • Fixed the browser SSE transport dropping the live slash-command list update (system/commands_changed)
  • Updated to parity with Claude Code v2.1.273

0.3.272

... (truncated)

Commits

Updates @noble/hashes from 2.2.0 to 2.4.0

Release notes

Sourced from @​noble/hashes's releases.

2.4.0

Security and correctness

  • Protect passed options against mutation / pollution
  • keccakprg: fail until entropy is added
  • webcrypto: reject output sizes which crashed engine
  • blake3: fix tree merging for multi-terabyte streams
  • Improve zeroization

Misc

  • Speed-up Argon2 by 20%
  • Argon2 cost options are now optional. The defaults are t: 3, m: 1024 ** 2 KiB (1 GiB), p: 1, dkLen: 32, and a 1 GiB maxmem limit; larger-memory calls must set maxmem explicitly.
  • Corrected scrypt's default maxmem to work for N: 2 ** 20, r: 8, and p: 1
  • nextTick and asyncLoop now yield through scheduler.yield() when available or setTimeout otherwise, allowing timers, I/O, and rendering to progress. They also accept optional rejection cleanup; async Argon2, PBKDF2, and scrypt use it to wipe work state if scheduling is aborted.

Full Changelog: paulmillr/noble-hashes@2.3.0...2.4.0

2.3.0

Improve speed:

  • +10-45% 32b inputs across all hashes
  • +40% SHA-3 / SHAKE, +50% 1mb KT128 / KT256 / TurboSHAKE, +20% kmac
  • 2.2x argon
  • +20% pbkdf2 and hkdf

Other changes:

  • Better error messages and stricter type checks everywhere
  • Bugfix: HMAC _cloneInto now preserves canXOF (#134, ChALkeR); Argon2d typo rename (#135).
  • blake2.compress renamed to _compress (marked internal).
  • Reduce on-disk unpacked size 869kb → 665kb (-204kb) by disabling source maps (they became less relevant).

Full Changelog: paulmillr/noble-hashes@2.2.0...2.3.0

Changelog

Sourced from @​noble/hashes's changelog.

2.4.0 (2026-08-27)

Security and correctness

  • Protect passed options against mutation / pollution
  • keccakprg: fail until entropy is added
  • webcrypto: reject output sizes which crashed engine
  • blake3: fix tree merging for multi-terabyte streams
  • Improve zeroization

Misc

  • Speed-up Argon2 by 20%
  • Argon2 cost options are now optional. The defaults are t: 3, m: 1024 ** 2 KiB (1 GiB), p: 1, dkLen: 32, and a 1 GiB maxmem limit; larger-memory calls must set maxmem explicitly.
  • Corrected scrypt's default maxmem to work for N: 2 ** 20, r: 8, and p: 1
  • nextTick and asyncLoop now yield through scheduler.yield() when available or setTimeout otherwise, allowing timers, I/O, and rendering to progress. They also accept optional rejection cleanup; async Argon2, PBKDF2, and scrypt use it to wipe work state if scheduling is aborted.

2.3.0 (2026-08-06)

Performance

  • Improved 32-byte input performance across all hashes by 10–45%.
  • Improved SHA-3 and SHAKE by 40%, one-megabyte KangarooTwelve, MarsupilamiFourteen, and TurboSHAKE by 50%, and KMAC by 20%.
  • Improved Argon2 performance by 2.2×.
  • Improved PBKDF2 and HKDF performance by 20%.

Other changes

  • Added better error messages and stricter type checks throughout the package.
  • Fixed HMAC._cloneInto so it preserves canXOF in issue #134, reported by @​ChALkeR, and corrected an Argon2d typo in issue #135.
  • Renamed blake2.compress to the internal _compress method.
  • Reduced unpacked on-disk size from 869 KB to 665 KB by disabling less-relevant source maps.
Commits

Updates @sip-protocol/sdk from 0.11.0 to 0.15.1

Release notes

Sourced from @​sip-protocol/sdk's releases.

@​sip-protocol/sdk@​0.15.1

Patch Changes

  • #1187 8a814f6 Thanks @​rz1989s! - Migrate @langchain/core (0.3 → 1.x) and @langchain/openai (0.6 → 1.x) to v1. LangChain 1.0 made SystemMessage/HumanMessage/AIMessage non-interchangeable (each now carries invariant MessageStructure<MessageToolSet> generics), so the Privacy Advisor's message arrays are explicitly typed as BaseMessage[]. No public API or runtime behavior change.

  • #1188 840f47f Thanks @​rz1989s! - Migrate @triton-one/yellowstone-grpc (4.x → 5.x) in the Solana gRPC providers. v5 moved off @grpc/grpc-js (its Client.subscribe() now returns the library's own ClientDuplexStream instead of @grpc/grpc-js's generic ClientDuplexStream<SubscribeRequest, SubscribeUpdate>). The QuickNode and Triton providers now alias the stream to v5's exported ClientDuplexStream and type their data handlers as SubscribeUpdate, dropping the now-unused @grpc/grpc-js dev dependency. No public API or runtime behavior change.

@​sip-protocol/sdk@​0.15.0

Minor Changes

  • #1164 a87e597 Thanks @​rz1989s! - Add per-flow privacy-score primitives (flow-privacy module): anonSetInWindow, gaslessFlag, amountHidingStatus, and the assessFlowPrivacy composer. They honestly score a single commingling-vault flow — a tier-capped 0–100 score plus an anonymity-set / gasless / amount-hiding factor breakdown with caveats — over caller-supplied data (no RPC).

@​sip-protocol/sdk@​0.14.0

Minor Changes

  • #1157 77a2813 Thanks @​rz1989s! - Add a typed privacy-tier fee model. A new PrivacyTier enum and frozen fee schedule express the protocol fee in basis points (10 / 30 / 50 bps), gated on which privacy guarantee has shipped — not on volume or time. Includes getPrivacyTierFee, getPrivacyTierFeeBps, getCurrentPrivacyTierFee, getPrivacyTierSchedule, and a computePrivacyTierFee(amount, tier) helper (basis-point floor division, no flat floor). Exported from the package root (@sip-protocol/sdk).

@​sip-protocol/sdk@​0.13.0

Minor Changes

  • #1144 08f7e13 Thanks @​rz1989s! - Harden Solana gasless cash-out (closes #1141, #1142).

    Jito relayer (#1141): the Jito bundle path now binds the prepended tip transaction and the confirmation window to the cash-out transaction's own blockhash. Previously a freshly fetched blockhash was used for the tip and for confirmation while the cash-out transaction kept its own, so an expired cash-out blockhash could never land in the atomic bundle and confirmation was judged against the wrong window. directSubmit now confirms against the sent transaction's own blockhash. A tip-less relayTransaction call now fails loudly (and falls back to direct submission) instead of reporting a never-included bundle as submitted.

    Token-2022 (#1142): buildGaslessCashout, claimStealthPayment, and getStealthBalance accept an optional tokenProgramId (defaults to the classic SPL Token program), so Token-2022 mints derive the correct associated-token account and target the correct token program. Existing classic-mint callers are unaffected.

    Cleanup (#1142): signEd25519WithScalar accepts an optional precomputed public key to skip a redundant scalar multiplication per signature; the duplicated Solana detectCluster helper is consolidated into one constants module; the independent RPC reads in buildGaslessCashout now run concurrently; and the direct bs58 dependency is dropped in favour of the in-repo base58 encoder.

@​sip-protocol/sdk@​0.12.0

Minor Changes

  • #1140 46f9607 Thanks @​rz1989s! - Add gasless cash-out relayer for stealth recipients
    • buildGaslessCashout / submitGaslessCashout: build and submit a stealth-claim transaction where a relayer pays the network fee and recovers it from the claimed amount (direct fee-payer submission, with an optional Jito bundle path for mainnet hardening).
    • computeRelayerFee: hybrid relayer-fee helper — max(flatFloor, amount * bps / 10_000) — with input validation.
    • deriveStealthSigner / signEd25519WithScalar: correct ed25519 signing for scalar-derived stealth addresses. Claiming an ed25519 stealth payment via the SDK previously produced invalid signatures because the derived scalar was signed as a key seed; stealth claims now sign and verify correctly.
    • SolanaScanResult (and DetectedPayment) now carry the announcement scheme version, so a scanned payment claims with the matching derivation — legacy SIP:1 payments stay claimable.

@​sip-protocol/sdk@​0.11.1

Patch Changes

  • #1124 215093b Thanks @​rz1989s! - Export SIP_MEMO_PREFIX_V2 ('SIP:2:') and SIP_MEMO_PREFIX_ANY ('SIP:') from the package entry. Both constants were defined in chains/solana/constants.ts and re-exported from the chains/solana sub-barrel, but were missing from the public src/index.ts, so ESM/TypeScript consumers could not import them by name (they resolved to undefined under bundlers that tolerate missing named ESM imports, and errored under tsc). Closes #1123.
Changelog

Sourced from @​sip-protocol/sdk's changelog.

0.15.1

Patch Changes

  • #1187 8a814f6 Thanks @​rz1989s! - Migrate @langchain/core (0.3 → 1.x) and @langchain/openai (0.6 → 1.x) to v1. LangChain 1.0 made SystemMessage/HumanMessage/AIMessage non-interchangeable (each now carries invariant MessageStructure<MessageToolSet> generics), so the Privacy Advisor's message arrays are explicitly typed as BaseMessage[]. No public API or runtime behavior change.

  • #1188 840f47f Thanks @​rz1989s! - Migrate @triton-one/yellowstone-grpc (4.x → 5.x) in the Solana gRPC providers. v5 moved off @grpc/grpc-js (its Client.subscribe() now returns the library's own ClientDuplexStream instead of @grpc/grpc-js's generic ClientDuplexStream<SubscribeRequest, SubscribeUpdate>). The QuickNode and Triton providers now alias the stream to v5's exported ClientDuplexStream and type their data handlers as SubscribeUpdate, dropping the now-unused @grpc/grpc-js dev dependency. No public API or runtime behavior change.

0.15.0

Minor Changes

  • #1164 a87e597 Thanks @​rz1989s! - Add per-flow privacy-score primitives (flow-privacy module): anonSetInWindow, gaslessFlag, amountHidingStatus, and the assessFlowPrivacy composer. They honestly score a single commingling-vault flow — a tier-capped 0–100 score plus an anonymity-set / gasless / amount-hiding factor breakdown with caveats — over caller-supplied data (no RPC).

0.14.0

Minor Changes

  • #1157 77a2813 Thanks @​rz1989s! - Add a typed privacy-tier fee model. A new PrivacyTier enum and frozen fee schedule express the protocol fee in basis points (10 / 30 / 50 bps), gated on which privacy guarantee has shipped — not on volume or time. Includes getPrivacyTierFee, getPrivacyTierFeeBps, getCurrentPrivacyTierFee, getPrivacyTierSchedule, and a computePrivacyTierFee(amount, tier) helper (basis-point floor division, no flat floor). Exported from the package root (@sip-protocol/sdk).

0.13.0

Minor Changes

  • #1144 08f7e13 Thanks @​rz1989s! - Harden Solana gasless cash-out (closes #1141, #1142).

    Jito relayer (#1141): the Jito bundle path now binds the prepended tip transaction and the confirmation window to the cash-out transaction's own blockhash. Previously a freshly fetched blockhash was used for the tip and for confirmation while the cash-out transaction kept its own, so an expired cash-out blockhash could never land in the atomic bundle and confirmation was judged against the wrong window. directSubmit now confirms against the sent transaction's own blockhash. A tip-less relayTransaction call now fails loudly (and falls back to direct submission) instead of reporting a never-included bundle as submitted.

    Token-2022 (#1142): buildGaslessCashout, claimStealthPayment, and getStealthBalance accept an optional tokenProgramId (defaults to the classic SPL Token program), so Token-2022 mints derive the correct associated-token account and target the correct token program. Existing classic-mint callers are unaffected.

    Cleanup (#1142): signEd25519WithScalar accepts an optional precomputed public key to skip a redundant scalar multiplication per signature; the duplicated Solana detectCluster helper is consolidated into one constants module; the independent RPC reads in buildGaslessCashout now run concurrently; and the direct bs58 dependency is dropped in favour of the in-repo base58 encoder.

0.12.0

Minor Changes

  • #1140 46f9607 Thanks @​rz1989s! - Add gasless cash-out relayer for stealth recipients
    • buildGaslessCashout / submitGaslessCashout: build and submit a stealth-claim transaction where a relayer pays the network fee and recovers it from the claimed amount (direct fee-payer submission, with an optional Jito bundle path for mainnet hardening).
    • computeRelayerFee: hybrid relayer-fee helper — max(flatFloor, amount * bps / 10_000) — with input validation.
    • deriveStealthSigner / signEd25519WithScalar: correct ed25519 signing for scalar-derived stealth addresses. Claiming an ed25519 stealth payment via the SDK previously produced invalid signatures because the derived scalar was signed as a key seed; stealth claims now sign and verify correctly.
    • SolanaScanResult (and DetectedPayment) now carry the announcement scheme version, so a scanned payment claims with the matching derivation — legacy SIP:1 payments stay claimable.

0.11.1

Patch Changes

  • #1124 215093b Thanks @​rz1989s! - Export SIP_MEMO_PREFIX_V2 ('SIP:2:') and SIP_MEMO_PREFIX_ANY ('SIP:') from the package entry. Both constants were defined in chains/solana/constants.ts and re-exported from the chains/solana sub-barrel, but were missing from the public src/index.ts, so ESM/TypeScript consumers could not import them by name (they resolved to undefined under bundlers that tolerate missing named ESM imports, and errored under tsc). Closes #1123.
Commits
  • 5d153a6 chore: release packages
  • f3a0028 chore(deps-dev): bump @​types/node from 25.9.4 to 26.0.0
  • 840f47f chore(deps): migrate @​triton-one/yellowstone-grpc to v5
  • d38a083 Merge pull request #1178 from sip-protocol/dependabot/npm_and_yarn/https-prox...
  • 0593594 Merge pull request #1184 from sip-protocol/dependabot/npm_and_yarn/aztec/bb.j...
  • 8a814f6 chore(deps): migrate @​langchain/core + @​langchain/openai to v1
  • 213f556 chore(deps): bump the minor-and-patch group across 3 directories with 6 updates
  • c736395 chore(deps): bump @​aztec/bb.js from 3.0.3 to 4.3.1
  • cf6fd9b chore(deps): bump https-proxy-agent from 7.0.6 to 9.1.0
  • 1b2944e chore(deps): upgrade @​solana/kit and @​solana/compat to v6
  • Additional commits viewable in compare view

Updates @solana/spl-token from 0.4.14 to 0.4.15

Release notes

Sourced from @​solana/spl-token's releases.

js-legacy@v0.4.15

What's new

Commits
  • 27c359d Publish js-legacy@v0.4.15
  • 6a09978 js-legacy: Update package.json for trusted publishing (#1303)
  • 5b2d7fe build(deps): bump solana-packet from 4.1.0 to 4.2.0 (#1302)
  • ca02a9a deps: Update crossbeam-epoch for audit (#1301)
  • 1ead7bb build(deps-dev): bump typedoc from 0.28.19 to 0.28.20 in /clients/js (#1297)
  • 3eb2f00 build(deps-dev): bump typedoc from 0.28.19 to 0.28.20 in /clients/js-legacy (...
  • 800990a build(deps-dev): bump @​typescript-eslint/eslint-plugin from 8.61.1 to 8.62.1 ...
  • e578003 build(deps-dev): bump vitest from 4.1.9 to 4.1.10 in /clients/js (#1296)
  • 1d8f1f8 build(deps-dev): bump @​typescript-eslint/parser from 8.61.1 to 8.62.1 in /cli...
  • c338a07 build(deps-dev): bump prettier from 3.8.4 to 3.9.4 in /clients/js-legacy (#1295)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​solana/spl-token since your current version.


Updates @solana/web3.js from 1.98.4 to 1.99.0

Release notes

Sourced from @​solana/web3.js's releases.

@​solana/web3.js v1.99.0

Add v1 Transaction read support #3866

Installation

pnpm add @solana/web3.js@1.99.0

https://www.npmjs.com/package/@​solana/web3.js/v/1.99.0

@​solana/web3.js v1.99.0-beta.0'

Add v1 Transaction read support #3866

Installation

pnpm add @solana/web3.js@1.99.0-beta.0

https://www.npmjs.com/package/@​solana/web3.js/v/1.99.0-beta.0

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​solana/web3.js since your current version.


Updates compression from 1.8.1 to 1.8.2

Release notes

Sourced from compression's releases.

v1.8.2

Important

What's Changed

New Contributors

Full Changelog: expressjs/compression@v1.8.1...v1.8.2

Changelog

Sourced from compression's changelog.

1.8.2

Commits
  • 0f97074 1.8.2 (#287)
  • 151f63e fix: destroy compression stream on response close
  • 0a76495 fix: match Cache-Control no-transform directive case-insensitively (#286)
  • c17b6e5 docs: update outdated Brotli note and fix npm install docs URL (#276)
  • 112911a chore(ci): npm-publish via reusable workflows (#269)
  • 1bf5eb0 build(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (#267)
  • d8fe64d build(deps): bump actions/setup-node from 6.0.0 to 6.1.0 (#266)
  • b218ff5 build(deps): bump github/codeql-action from 4.31.5 to 4.31.9 (#265)
  • 8a1cf8e build(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 (#268)
  • 4a19855 build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (#257)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for compression since your current version.


Updates express-rate-limit from 8.5.2 to 8.7.0

Release notes

Sourced from express-rate-limit's releases.

v8.7.0

You can view the changelog here.

v8.6.2

You can view the changelog here.

v8.6.1

You can view the changelog here.

v8.6.0

You can view the changelog here.

Commits
  • 48db09e 8.7.0
  • dce5871 v8.7.0 changelog
  • 2f08044 Add inspect.software health badge (#673)
  • a29757c feat: add retryAfter option (#661)
  • 146e88b chore: rename license
  • 5cfb8e8 ci: drop top-level id-token: write from the workflow token (#676)
  • 062bbdd fix: re-wrap license.md so GitHub recognizes it as MIT (#675)
  • 514772d chore(deps-dev): bump mintlify in the development-dependencies group (#674)
  • 4f06c8a chore(deps-dev): bump the development-dependencies group with 2 updates (#671)
  • 83356a5 chore(deps): bump ip-address from 10.4.0 to 10.5.0 (#672)
  • Additional commits viewable in compare view

Updates helmet from 8.2.0 to 8.3.0

Changelog

Sourced from helmet's changelog.

8.3.0 - 2026-07-11

Changed

  • Content-Security-Policy: improved performance by ~7% when there are no dynamic directives
  • Content-Security-Policy: improved error handling for invalid directive names

Fixed

  • Content-Security-Policy: useDefaults: false with no directives is no longer valid, both at runtime and the type level
  • Content-Security-Policy: dynamically-computed directive values would throw, not call next, when invalid
  • Content-Security-Policy: dynamically-computed directive value entries would throw, not call next, when function threw
Commits
  • 75f1a98 8.3.0
  • f03f70d Update changelog for 8.3.0 release
  • a307fce Fix capitalization in CSP package changelog
  • 5347b43 Format default CSP in README for readability
  • 9afc570 CSP: fix middleware-specific README missing link

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 23, 2026
@vercel

vercel Bot commented Sep 23, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
sipher Ready Ready Preview Sep 24, 2026 12:21am UTC

@dependabot dependabot Bot added the javascript Pull requests that update javascript code label Sep 23, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/minor-and-patch-ad6b709bc7 branch from cd46abc to 477824e Compare September 23, 2026 21:29
@rz1989s rz1989s mentioned this pull request Sep 23, 2026
Merged
@dependabot
build(deps): bump the minor-and-patch group across 1 directory with 3…
c2cf641 
…4 updates

Bumps the minor-and-patch group with 34 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@anthropic-ai/claude-agent-sdk](https://github.com/anthropics/claude-agent-sdk-typescript) | `0.3.191` | `0.3.278` |
| [@noble/hashes](https://github.com/paulmillr/noble-hashes) | `2.2.0` | `2.4.0` |
| [@sip-protocol/sdk](https://github.com/sip-protocol/sip-protocol/tree/HEAD/packages/sdk) | `0.11.0` | `0.15.1` |
| [@solana/spl-token](https://github.com/solana-program/token-2022) | `0.4.14` | `0.4.15` |
| [@solana/web3.js](https://github.com/solana-foundation/solana-web3.js) | `1.98.4` | `1.99.0` |
| [compression](https://github.com/expressjs/compression) | `1.8.1` | `1.8.2` |
| [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) | `8.5.2` | `8.7.0` |
| [helmet](https://github.com/helmetjs/helmet) | `8.2.0` | `8.3.0` |
| [lru-cache](https://github.com/isaacs/node-lru-cache) | `11.5.1` | `11.5.3` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.61.1` | `1.63.0` |
| [@types/supertest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/supertest) | `7.2.0` | `7.2.1` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.62.0` | `8.70.0` |
| [eslint](https://github.com/eslint/eslint) | `10.5.0` | `10.11.0` |
| [tsx](https://github.com/privatenumber/tsx) | `4.22.4` | `4.23.15` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.62.0` | `8.70.0` |
| [@noble/ciphers](https://github.com/paulmillr/noble-ciphers) | `2.2.0` | `2.4.0` |
| [@sinclair/typebox](https://github.com/sinclairzx81/sinclair-typebox) | `0.34.49` | `0.34.52` |
| [twitter-api-v2](https://github.com/plhery/node-twitter-api-v2) | `1.29.0` | `1.29.1` |
| [ws](https://github.com/websockets/ws) | `8.21.0` | `8.21.3` |
| [@solana/wallet-adapter-react](https://github.com/anza-xyz/wallet-adapter) | `0.15.39` | `0.15.40` |
| [@solana/wallet-adapter-react-ui](https://github.com/anza-xyz/wallet-adapter) | `0.9.39` | `0.9.40` |
| [@solana/wallet-adapter-wallets](https://github.com/anza-xyz/wallet-adapter) | `0.19.38` | `0.19.39` |
| [@tailwindcss/vite](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-vite) | `4.3.1` | `4.3.3` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.3.0` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.17` | `19.3.0` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.3.0` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.3.0` |
| [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.18.0` | `7.18.4` |
| [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.3.1` | `4.3.3` |
| [zustand](https://github.com/pmndrs/zustand) | `5.0.14` | `5.0.15` |
| [@testing-library/react](https://github.com/testing-library/react-testing-library) | `16.3.2` | `16.3.3` |
| [@testing-library/user-event](https://github.com/testing-library/user-event) | `14.6.1` | `14.6.7` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.17` | `19.3.0` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.3.0` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.0.3` | `6.1.1` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.1.0` | `8.3.0` |



Updates `@anthropic-ai/claude-agent-sdk` from 0.3.191 to 0.3.278
- [Release notes](https://github.com/anthropics/claude-agent-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/claude-agent-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/claude-agent-sdk-typescript@v0.3.191...v0.3.278)

Updates `@noble/hashes` from 2.2.0 to 2.4.0
- [Release notes](https://github.com/paulmillr/noble-hashes/releases)
- [Changelog](https://github.com/paulmillr/noble-hashes/blob/main/CHANGELOG.md)
- [Commits](paulmillr/noble-hashes@2.2.0...2.4.0)

Updates `@sip-protocol/sdk` from 0.11.0 to 0.15.1
- [Release notes](https://github.com/sip-protocol/sip-protocol/releases)
- [Changelog](https://github.com/sip-protocol/sip-protocol/blob/main/packages/sdk/CHANGELOG.md)
- [Commits](https://github.com/sip-protocol/sip-protocol/commits/@sip-protocol/sdk@0.15.1/packages/sdk)

Updates `@solana/spl-token` from 0.4.14 to 0.4.15
- [Release notes](https://github.com/solana-program/token-2022/releases)
- [Commits](https://github.com/solana-program/token-2022/compare/js-legacy@v0.4.14...js-legacy@v0.4.15)

Updates `@solana/web3.js` from 1.98.4 to 1.99.0
- [Release notes](https://github.com/solana-foundation/solana-web3.js/releases)
- [Commits](solana-foundation/solana-web3.js@v1.98.4...v1.99.0)

Updates `compression` from 1.8.1 to 1.8.2
- [Release notes](https://github.com/expressjs/compression/releases)
- [Changelog](https://github.com/expressjs/compression/blob/master/HISTORY.md)
- [Commits](expressjs/compression@v1.8.1...v1.8.2)

Updates `express-rate-limit` from 8.5.2 to 8.7.0
- [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases)
- [Commits](express-rate-limit/express-rate-limit@v8.5.2...v8.7.0)

Updates `helmet` from 8.2.0 to 8.3.0
- [Changelog](https://github.com/helmetjs/helmet/blob/main/CHANGELOG.md)
- [Commits](helmetjs/helmet@v8.2.0...v8.3.0)

Updates `lru-cache` from 11.5.1 to 11.5.3
- [Changelog](https://github.com/isaacs/node-lru-cache/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-lru-cache@v11.5.1...v11.5.3)

Updates `@playwright/test` from 1.61.1 to 1.63.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.61.1...v1.63.0)

Updates `@types/supertest` from 7.2.0 to 7.2.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/supertest)

Updates `@typescript-eslint/parser` from 8.62.0 to 8.70.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.0/packages/parser)

Updates `eslint` from 10.5.0 to 10.11.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.5.0...v10.11.0)

Updates `tsx` from 4.22.4 to 4.23.15
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.22.4...v4.23.15)

Updates `typescript-eslint` from 8.62.0 to 8.70.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.0/packages/typescript-eslint)

Updates `@noble/ciphers` from 2.2.0 to 2.4.0
- [Release notes](https://github.com/paulmillr/noble-ciphers/releases)
- [Changelog](https://github.com/paulmillr/noble-ciphers/blob/main/CHANGELOG.md)
- [Commits](paulmillr/noble-ciphers@2.2.0...2.4.0)

Updates `@sinclair/typebox` from 0.34.49 to 0.34.52
- [Commits](sinclairzx81/sinclair-typebox@0.34.49...0.34.52)

Updates `twitter-api-v2` from 1.29.0 to 1.29.1
- [Release notes](https://github.com/plhery/node-twitter-api-v2/releases)
- [Changelog](https://github.com/plhery/node-twitter-api-v2/blob/master/changelog.md)
- [Commits](plhery/node-twitter-api-v2@1.29.0...1.29.1)

Updates `ws` from 8.21.0 to 8.21.3
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.21.0...8.21.3)

Updates `@solana/wallet-adapter-react` from 0.15.39 to 0.15.40
- [Release notes](https://github.com/anza-xyz/wallet-adapter/releases)
- [Commits](https://github.com/anza-xyz/wallet-adapter/compare/@solana/wallet-adapter-react@0.15.39...@solana/wallet-adapter-react@0.15.40)

Updates `@solana/wallet-adapter-react-ui` from 0.9.39 to 0.9.40
- [Release notes](https://github.com/anza-xyz/wallet-adapter/releases)
- [Commits](https://github.com/anza-xyz/wallet-adapter/compare/@solana/wallet-adapter-react-ui@0.9.39...@solana/wallet-adapter-react-ui@0.9.40)

Updates `@solana/wallet-adapter-wallets` from 0.19.38 to 0.19.39
- [Release notes](https://github.com/anza-xyz/wallet-adapter/releases)
- [Commits](https://github.com/anza-xyz/wallet-adapter/compare/@solana/wallet-adapter-wallets@0.19.38...@solana/wallet-adapter-wallets@0.19.39)

Updates `@tailwindcss/vite` from 4.3.1 to 4.3.3
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/@tailwindcss-vite)

Updates `react` from 19.2.7 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react)

Updates `@types/react` from 19.2.17 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 19.2.7 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom)

Updates `@types/react-dom` from 19.2.3 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `react-router-dom` from 7.18.0 to 7.18.4
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/react-router-dom@7.18.4/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.18.4/packages/react-router-dom)

Updates `tailwindcss` from 4.3.1 to 4.3.3
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/tailwindcss)

Updates `zustand` from 5.0.14 to 5.0.15
- [Release notes](https://github.com/pmndrs/zustand/releases)
- [Commits](pmndrs/zustand@v5.0.14...v5.0.15)

Updates `@testing-library/react` from 16.3.2 to 16.3.3
- [Release notes](https://github.com/testing-library/react-testing-library/releases)
- [Changelog](https://github.com/testing-library/react-testing-library/blob/main/CHANGELOG.md)
- [Commits](testing-library/react-testing-library@v16.3.2...v16.3.3)

Updates `@testing-library/user-event` from 14.6.1 to 14.6.7
- [Release notes](https://github.com/testing-library/user-event/releases)
- [Changelog](https://github.com/testing-library/user-event/blob/main/CHANGELOG.md)
- [Commits](testing-library/user-event@v14.6.1...v14.6.7)

Updates `@types/react` from 19.2.17 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 19.2.3 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `@vitejs/plugin-react` from 6.0.3 to 6.1.1
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.1.1/packages/plugin-react)

Updates `vite` from 8.1.0 to 8.3.0
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/create-vite@8.3.0/packages/vite)

---
updated-dependencies:
- dependency-name: "@anthropic-ai/claude-agent-sdk"
  dependency-version: 0.3.278
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@noble/ciphers"
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@noble/hashes"
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@playwright/test"
  dependency-version: 1.63.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@sinclair/typebox"
  dependency-version: 0.34.52
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@sip-protocol/sdk"
  dependency-version: 0.15.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@solana/spl-token"
  dependency-version: 0.4.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@solana/wallet-adapter-react"
  dependency-version: 0.15.40
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@solana/wallet-adapter-react-ui"
  dependency-version: 0.9.40
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@solana/wallet-adapter-wallets"
  dependency-version: 0.19.39
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@solana/web3.js"
  dependency-version: 1.99.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@tailwindcss/vite"
  dependency-version: 4.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@testing-library/react"
  dependency-version: 16.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@testing-library/user-event"
  dependency-version: 14.6.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/react-dom"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/react-dom"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/supertest"
  dependency-version: 7.2.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.70.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: compression
  dependency-version: 1.8.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: eslint
  dependency-version: 10.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: express-rate-limit
  dependency-version: 8.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: helmet
  dependency-version: 8.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: lru-cache
  dependency-version: 11.5.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: react
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: react-dom
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: react-router-dom
  dependency-version: 7.18.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: tailwindcss
  dependency-version: 4.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: tsx
  dependency-version: 4.23.13
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: twitter-api-v2
  dependency-version: 1.29.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: typescript-eslint
  dependency-version: 8.70.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: vite
  dependency-version: 8.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: ws
  dependency-version: 8.21.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: zustand
  dependency-version: 5.0.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/minor-and-patch-ad6b709bc7 branch from 477824e to c2cf641 Compare September 23, 2026 23:39
@rz1989s
Merge origin/main into dependabot/npm_and_yarn/minor-and-patch-ad6b70…
0382c3a 
…9bc7

Regenerated pnpm-lock.yaml from main's base with pnpm 10.34.5.
Kept the group's remaining bumps; preserved #377's yellowstone-grpc
5.0.9 patch declaration and sdk ^0.15.1.
@rz1989s
rz1989s merged commit c27b049 into main Sep 24, 2026
8 checks passed
@rz1989s
rz1989s deleted the dependabot/npm_and_yarn/minor-and-patch-ad6b709bc7 branch September 24, 2026 00:23

This branch was successfully deployed

1 active deployment
Preview — 0382c3ac Deployed Sep 24, 2026 by vercel[bot]
View deployment
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@rz1989s