Update ui deps sync - #694
Conversation
|
Caution Review the following alerts detected in dependencies. According to your organization's Security Policy, you must resolve all "Block" alerts before proceeding. Learn more about Socket for GitHub.
|
|
Important Review skippedAuto incremental reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the ⚙️ Run configurationConfiguration used: Repository UI Review profile: CHILL Plan: Pro Plus Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
WalkthroughPackage.json devDependencies updated: Changes
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~2 minutes Possibly related PRs
Suggested reviewers
🚥 Pre-merge checks | ✅ 3✅ Passed checks (3 passed)
✨ Finishing Touches📝 Generate docstrings
🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
renovate
Bot
changed the title
48f60b5 to
3a00523
Compare
8c719e6 to
e42c08d
Compare
c81f512 to
2acb5f1
Compare
fe2dd45 to
0fd8ede
Compare
684b39e to
04ee6c9
Compare
2992cb2 to
83401de
Compare
c61a046 to
482fee9
Compare
c613545 to
f5e265c
Compare
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
This PR contains the following updates:
^0.3.1→^0.5.3^28.0.8→^28.0.9^6.0.2→^6.0.3^12.1.4→^12.3.0^20.19.21→^20.19.43^7.7.1→^7.8.01.35.6→1.38.41.35.6→1.38.4^10.4.21→^10.5.5^11.11.1→^11.12.03.6.0→3.10.17.5.0→7.10.07.5.0→7.10.0^7.7.3→^7.8.5^3.4.18→^3.4.19Release Notes
OpenZeppelin/openzeppelin-confidential-contracts (@openzeppelin/confidential-contracts)
v0.5.3Compare Source
BatcherConfidential: Extract logic fromquitinto internal function_quit. Developers can now call_quit(batchId, address)from a derived contract to quit on behalf of a depositor. (#435)v0.5.2Compare Source
VestingWalletConfidential: Ensure that tokens are allowed to access handles they return (or the handle is uninitialized). (#423)ERC7984: Check thatIERC7984Receiverhas ACL access to the ebool they return (or the handle is uninitialized). (#428)v0.5.1Compare Source
BatcherConfidential: Initialize the zero value before unwrapping when dispatching a batch with no contributions.v0.5.0Compare Source
Token
ERC7984: Remove revert on transfer where the sender has an uninitialized balance. (#357)ERC7984Hooked: Add anERC7984extension that calls external hooks before and after transfer of confidential tokens. (#332)ERC7984HookModule: Add a base hook module for building modules compatible withERC7984Hooked. (#351)ERC7984BalanceCapHookModule: Add an example hook module that enforces a confidential balance cap for the token. (#351)ERC7984HolderCapHookModule: Add an example hook module that enforces a maximum number of holders for the token. (#351)ERC7984Rwa: Always call_updateon transfers (even force). Bypass restriction via restriction override. (#339)ERC7984Rwa: Add token recovery functionality. (#341)ERC7984Rwa: Bypass recipient on RWA force transfer in addition to sender. (#372)ERC7984Rwa: Block overrides ofContextfunctions (_msgSender(),_msgData()). (#382)IERC7984Rwa: Add token recovery function and event. (#341)Finance
BatcherConfidential: Revert if underlyingtoTokenbalance changes during a partial route execution. (#385)Utils
FHESafeMath: AddsaturatingAddandsaturatingSubfunctions. (#341)HandleAccessManager: Return false by default in_validateHandleAllowance. (#338)v0.4.2Compare Source
VestingWalletConfidential: Ensure that tokens are allowed to access handles they return (or the handle is uninitialized). (#423)ERC7984: Check thatIERC7984Receiverhas ACL access to the ebool they return (or the handle is uninitialized). (#428)v0.4.1Compare Source
Bug Fixes
BatcherConfidential: Enable decryption of thejoinedAmountinBatcherConfidential. (#387)v0.4.0Compare Source
@fhevm/soliditydependency to0.11.1(#311)Token
ERC7984ERC20Wrapper: use a bytes32 unwrap request identifier instead of identifying batches by the euint64 unwrap amount. (#326)ERC7984ERC20Wrapper: Support ERC-165 interface detection onERC7984ERC20Wrapper. (#267)ERC7984ERC20Wrapper: return the amount of wrapped token sent on wrap calls. (#307)ERC7984ERC20Wrapper: return unwrapped amount onunwrapcalls (#288)ERC7984ERC20Wrapper: revert on wrap if there is a chance of total supply overflow. (#268)ERC7984Restricted,ERC7984Rwa: RenameisUserAllowedtocanTransact(#291)Finance
BatcherConfidential: A batching primitive that enables routing between twoERC7984ERC20Wrappercontracts via a non-confidential route. (#293)Utils
HandleAccessManager: change_validateHandleAllowanceto return a boolean and validate it. (#303)v0.3.2Compare Source
VestingWalletConfidential: Ensure that tokens are allowed to access handles they return (or the handle is uninitialized). (#423)ERC7984: Check thatIERC7984Receiverhas ACL access to the ebool they return (or the handle is uninitialized). (#428)rollup/plugins (@rollup/plugin-commonjs)
v28.0.92025-10-24
Bugfixes
node:builtins withstrictRequires: auto(#1930)rollup/plugins (@rollup/plugin-replace)
v6.0.32025-10-29
Bugfixes
rollup/plugins (@rollup/plugin-typescript)
v12.3.02025-10-23
Features
v12.2.02025-10-22
Features
upstash/redis-js (@upstash/redis)
v1.38.4Compare Source
Patch Changes
7ac8182: Fix read-your-writes sending a staleupstash-sync-tokenA read issued straight after a write travelled with the token from before that
write, so the server was under no obligation to serve the write and
readYourWritessilently did not hold.HttpClient.request()snapshotted the outgoing headers withmergeHeaders(this.headers, ...)and only afterwards wrote the freshest token intothis.headers, so the token learned from response N first shipped with requestN+2. The assignment now happens before the merge.
This regressed in 1.34.5. In 1.34.0–1.34.4 the request options held
headers: this.headersby reference, so the late write was still picked up beforefetch; 1.34.5 introduced per-request header merging, which turned that referenceinto a copy without moving the assignment.
v1.38.3Compare Source
Patch Changes
f020866: Send anUpstash-Telemetry-Retryheader with the retry count on retried requests so retry rates are visible in server-side telemetry777dc30: Trim telemetry header values before deduplicating so whitespace around existing values does not defeat the dedup checkv1.38.2Compare Source
Patch Changes
c0f5ad7: Deduplicate telemetry header values so repeatedmergeTelemetrycalls no longer append the same sdk, platform or runtime tag multiple timesv1.38.1Compare Source
Patch Changes
bd7a19f: Add a quick tip about creating a database via https://upstash.com/start-redis to the warnings shown when the Redis url or token is missing. On Cloudflare, the warning shown when both the url and the token are missing now names bothwrangler secret putcommands instead of only one.v1.38.0Compare Source
Minor Changes
c71f581: Separate read/write commands into separate pipelines in auto pipeline. As aresult, mixed read/write
Promise.allbatches may now be split across multiplepipeline HTTP requests instead of a single request, and read-after-write
ordering may no longer be preserved within those mixed batches.
v1.37.0Compare Source
Minor Changes
6f2a831: Release redis searchPatch Changes
3980b45: Add monorepo structurev1.36.4Compare Source
What's Changed
New Contributors
Full Changelog: upstash/redis-js@v1.36.3...v1.36.4
v1.36.3Compare Source
What's Changed
Full Changelog: upstash/redis-js@v1.36.2...v1.36.3
v1.36.2Compare Source
What's Changed
Full Changelog: upstash/redis-js@v1.36.1...v1.36.2
v1.36.1Compare Source
What's Changed
Full Changelog: upstash/redis-js@v1.36.0...v1.36.1
v1.36.0Compare Source
What's Changed
Full Changelog: upstash/redis-js@v1.35.8...v1.36.0
v1.35.8Compare Source
What's Changed
Full Changelog: upstash/redis-js@v1.35.7...v1.35.8
v1.35.7Compare Source
What's Changed
New Contributors
Full Changelog: upstash/redis-js@v1.35.6...v1.35.7
postcss/autoprefixer (autoprefixer)
v10.5.5Compare Source
v10.5.4Compare Source
v10.5.3Compare Source
v10.5.2Compare Source
-webkit-fill-availablebefore-moz-available, so Firefoxwill use
-webkit-version which is closer tostretch.v10.5.1Compare Source
grid-areaspan reset for overriding areas (by @puneetdixit200).v10.5.0Compare Source
mask-position-xandmask-position-ysupport (by @toporek).v10.4.27Compare Source
package.json.v10.4.26Compare Source
v10.4.25Compare Source
v10.4.24Compare Source
v10.4.23Compare Source
v10.4.22Compare Source
stretchprefixes on new Can I Use database.fraction.js.highlightjs/highlight.js (highlight.js)
v11.12.0Compare Source
Parser Engine:
New Grammars:
.desktop/ systemd) grammar gg582Core Grammars:
atomic_*type names, not C11 atomic functions, issue #3837 Mark Xian#include, issue #3505 Pabloblockandendblockkeywords Anonymous Maarten3rdparty), issue #4170 Mark Xian//as a regex literal Zain Asif_of an identifier, issue #4258 Sarath Francisunicode-rangevalues Konstantin Baltsatbatchas an alias, issue #4395 Hashim Khanwherein GADT and closed type-family declarations, issue #3753 Konstantin Baltsatselfto built-in variables Dsaquelktmandktxaliases DarkMatter-999globalkeyword Nibiri***or___thematic break as the start of bold text, issue #3719 Mayank Guptaaiterandanext(3.10),frozendictandsentinel(3.15) Hugo van Kemenadelazy importsyntax from PEP 810 Peter Bierma::as a symbol, issue #4294 Hashim Khansafekeyword Frances Wingerterrawborrow operator in keywords Shiva Kiran Koninty\\and\"char-literal escapes so highlighting doesn't leak, issue #4351 Sarath FrancisDocumentation:
phpandphp-templateZain Asifpwshalias for PowerShell helpimnotdrowningnpm iProliecanThemes:
Build / Tooling:
Mode.keywordsKJyang-0114@colors/colorswith ansis webdiscusCONTRIBUTORS
v11.11.2Compare Source
Parser Engine:
New Grammars:
Core Grammars:
parallelkeyword, allow[]for Ada 2022 Max Reznik?'char literal and missingdefguardpkeyword Kevin Blochunicode-rangeparsing, issue #4253 Kerry ShetlineDocumentation:
highlightdeprecated message Brandon DongThemes:
Themes:
Night Coder Ashtheme Ashkan ShirpourNight Coder Charcoaltheme Ashkan ShirpourNight Coder Embertheme Ashkan ShirpourNight Coder Flametheme Ashkan ShirpourPapertheme Ashkan ShirpourIcetheme Ashkan ShirpourCONTRIBUTORS
Stuk/jszip (jszip)
v3.10.1Compare Source
constinsteadvarin example from README.markdown #828Internals:
v3.10.0Compare Source
currentFilemetadata to includenull(see #826)v3.9.1Compare Source
InputFileFormatintroduced in 3.9.0.v3.9.0Compare Source
new JSZip()(see #752)compressionOptionsto JSZipFileOptions and JSZipGeneratorOptions (see #722)generateInternalStream(see #774)v3.8.0Compare Source
loadAsync, to avoid "zip slip" attacks. The original filename is available on each zip entry asunsafeOriginalName. See the documentation. Many thanks to McCaulay Hudson for reporting.v3.7.1Compare Source
distfiles.distfiles. Thanks to Evan W for reporting.v3.7.0Compare Source
.filesproperty of a zip object, for examplezip.files.toString(). This approach is taken to prevent files in the zip overriding object methods that would exist on a normal object.openai/openai-node (openai)
v7.10.0Compare Source
Features
Documentation
v7.9.0Compare Source
Features
Bug Fixes
Chores
v7.8.0Compare Source
Features
Bug Fixes
v7.7.0Compare Source
Features
Bug Fixes
v7.6.0Compare Source
Features
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.