Skip to content

Chore(deps): bump the dependencies group in /with-next-app-router with 10 updates - #124

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/with-next-app-router/dependencies-240166eadd
Open

Chore(deps): bump the dependencies group in /with-next-app-router with 10 updates#124
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/with-next-app-router/dependencies-240166eadd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown

Bumps the dependencies group in /with-next-app-router with 10 updates:

Package From To
shx 0.3.4 0.4.0
@heroicons/react 2.1.5 2.2.0
@rainbow-me/rainbowkit 2.1.6 2.2.11
@tanstack/react-query 5.28.14 5.101.4
next-nprogress-bar 2.3.16 2.4.7
next-themes 0.3.0 0.4.6
react-hot-toast 2.4.1 2.6.0
viem 2.49.2 2.55.10
abitype 1.0.6 1.3.0
autoprefixer 10.4.27 10.5.4

Updates shx from 0.3.4 to 0.4.0

Release notes

Sourced from shx's releases.

v0.4.0

✨ Highlighted changes

  • This is based on ShellJS v0.9! This means we bumped the minimum node version to >= v18.
  • Small bash compatibility change to shx sed. Now if you invoke shx sed -i, this will not print any output to stdout (this is for consistency with unix sed). Using shx sed without the -i flag will still print to stdout as before.

What's Changed

New Contributors

Full Changelog: shelljs/shx@v0.3.4...v0.4.0

Commits
  • 8886c3e 0.4.0
  • e8db3bc refactor: code cleanup for the --negate flag
  • 6184003 Adding a global --negate flag (#189)
  • b3d5b80 fix: add back ShellJS version in --version
  • 5106c6b chore: update dependencies
  • e8bb9f8 chore: drop some dependencies and simplify
  • 3bb21d9 chore: drop non-LTS node versions
  • b70e666 chore: update shelljs and drop old node support
  • f8b0b37 doc: Fix typo in README
  • 03c2964 chore(dependencies): update js-yaml
  • Additional commits viewable in compare view

Updates @heroicons/react from 2.1.5 to 2.2.0

Release notes

Sourced from @​heroicons/react's releases.

v2.2.0

Added

  • Add React 19 support (#1247)

Fixed

  • Removed unnecessary clipping path from solid/arrow-left-circle (#1211)
Changelog

Sourced from @​heroicons/react's changelog.

[2.2.0] - 2024-11-18

Added

  • Add React 19 support (#1247)

Fixed

  • Removed unnecessary clipping path from solid/arrow-left-circle (#1211)
Commits

Updates @rainbow-me/rainbowkit from 2.1.6 to 2.2.11

Release notes

Sourced from @​rainbow-me/rainbowkit's releases.

@​rainbow-me/rainbowkit@​2.2.11

Patch Changes

  • a40b1f4: Migrate the Base connector to canonical base naming, while preserving backwards-compatible aliases baseAccount and coinbaseWallet.

  • 3672dc6: Added Anchorage Digital wallet support with the anchorageDigitalWallet wallet connector.

  • 1043d88: Added MeCo Wallet support with mecoWallet wallet connector.

  • f52657f: Exposed RainbowKitProviderProps and WalletButtonRendererProps as public type exports to support Custom Wallet Button scenarios.

  • 4f2de17: Fixed a crash that could occur when selecting a wallet while multiple browser wallet extensions were installed and the specific injected wallet was missing. Wallet-specific injected connectors now bind only to their matching provider instead of falling back to available defaults.

  • bc4625c: Fix recent transaction tracking so failed transactions no longer prevent an app's own transaction receipt wait from settling.

  • 25c4c2b: Improved SSR safety to prevent WalletConnect initialization warnings and mitigate localStorage API availability changes in Node.js v25 and above.

  • f52657f: Fixed useWindowSize triggering a state update after unmount, which could surface as a React warning.

  • eb4251d: The AuthenticationAdapter.createMessage API can now return a promise, so dApps can fetch or construct a custom SIWE message asynchronously. This enables server-side SIWE message creation before prompting the wallet, while preserving existing synchronous behavior.

    See the server-side message creation docs for guidance.

  • b0f6d52: fix: harden useCoolMode against malicious wallet icon URLs

    The cool mode particle animation built image elements via innerHTML, which parses its input as HTML. A malicious EIP-6963 wallet could supply a crafted icon URL containing injected attributes (e.g. onerror) that would execute in the dApp's origin when a user interacts with the wallet button.

    Switched to document.createElement('img') with property assignment so the icon value is always treated as a plain URL rather than markup.

  • f2523a9: Updated MetaMask wallet icon

@​rainbow-me/rainbowkit@​2.2.10

Patch Changes

  • e74f604: Improve UI on the mobile connect flow to hint to users that they can horizontally scroll to see additional wallet connectors

  • eb72c37: Fix Gemini wallet connector to use icon instead of icons in appMetadata

  • e58367e: Fix mobile visibility for Coin98, CLV, SafePal, Frontier, and BeraSig wallets.

  • b7b7b43: Rename the Argent wallet connector to readyWallet

  • 507f583: Add additional wallet flags to isMetaMask() to detect impersonating providers.

  • 16963de: Add ctrlWallet wallet connector to replace xdefiWallet. XDEFI Wallet has been rebranded to CTRL Wallet.

  • 6c745a5: Disable third-party connector telemetry by default for user privacy. h/t @​TimDaub

    To opt-in to WalletConnect analytics:

    With getDefaultConfig:

    const config = getDefaultConfig({
      /** ... **/
      walletConnectParameters: {
        telemetryEnabled: true,
      },
    });

... (truncated)

Changelog

Sourced from @​rainbow-me/rainbowkit's changelog.

2.2.11

Patch Changes

  • a40b1f4: Migrate the Base connector to canonical base naming, while preserving backwards-compatible aliases baseAccount and coinbaseWallet.

  • 3672dc6: Added Anchorage Digital wallet support with the anchorageDigitalWallet wallet connector.

  • 1043d88: Added MeCo Wallet support with mecoWallet wallet connector.

  • f52657f: Exposed RainbowKitProviderProps and WalletButtonRendererProps as public type exports to support Custom Wallet Button scenarios.

  • 4f2de17: Fixed a crash that could occur when selecting a wallet while multiple browser wallet extensions were installed and the specific injected wallet was missing. Wallet-specific injected connectors now bind only to their matching provider instead of falling back to available defaults.

  • bc4625c: Fix recent transaction tracking so failed transactions no longer prevent an app's own transaction receipt wait from settling.

  • 25c4c2b: Improved SSR safety to prevent WalletConnect initialization warnings and mitigate localStorage API availability changes in Node.js v25 and above.

  • f52657f: Fixed useWindowSize triggering a state update after unmount, which could surface as a React warning.

  • eb4251d: The AuthenticationAdapter.createMessage API can now return a promise, so dApps can fetch or construct a custom SIWE message asynchronously. This enables server-side SIWE message creation before prompting the wallet, while preserving existing synchronous behavior.

    See the server-side message creation docs for guidance.

  • b0f6d52: fix: harden useCoolMode against malicious wallet icon URLs

    The cool mode particle animation built image elements via innerHTML, which parses its input as HTML. A malicious EIP-6963 wallet could supply a crafted icon URL containing injected attributes (e.g. onerror) that would execute in the dApp's origin when a user interacts with the wallet button.

    Switched to document.createElement('img') with property assignment so the icon value is always treated as a plain URL rather than markup.

  • f2523a9: Updated MetaMask wallet icon

2.2.10

Patch Changes

  • e74f604: Improve UI on the mobile connect flow to hint to users that they can horizontally scroll to see additional wallet connectors

  • eb72c37: Fix Gemini wallet connector to use icon instead of icons in appMetadata

  • e58367e: Fix mobile visibility for Coin98, CLV, SafePal, Frontier, and BeraSig wallets.

  • b7b7b43: Rename the Argent wallet connector to readyWallet

  • 507f583: Add additional wallet flags to isMetaMask() to detect impersonating providers.

  • 16963de: Add ctrlWallet wallet connector to replace xdefiWallet. XDEFI Wallet has been rebranded to CTRL Wallet.

  • 6c745a5: Disable third-party connector telemetry by default for user privacy. h/t @​TimDaub

    To opt-in to WalletConnect analytics:

    With getDefaultConfig:

    const config = getDefaultConfig({
      /** ... **/
      walletConnectParameters: {
        telemetryEnabled: true,
      },

... (truncated)

Commits

Updates @tanstack/react-query from 5.28.14 to 5.101.4

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-devtools@​5.101.4

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.101.4
    • @​tanstack/react-query@​5.101.4

@​tanstack/react-query-next-experimental@​5.101.4

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.101.4

@​tanstack/react-query-persist-client@​5.101.4

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.101.4
    • @​tanstack/react-query@​5.101.4

@​tanstack/react-query@​5.101.4

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.101.4

@​tanstack/react-query-devtools@​5.101.3

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.101.3
    • @​tanstack/react-query@​5.101.3

@​tanstack/react-query-next-experimental@​5.101.3

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.101.3

@​tanstack/react-query-persist-client@​5.101.3

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.101.3
    • @​tanstack/react-query@​5.101.3

@​tanstack/react-query@​5.101.3

Patch Changes

... (truncated)

Changelog

Sourced from @​tanstack/react-query's changelog.

5.101.4

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.101.4

5.101.3

Patch Changes

  • Updated dependencies [7e3c822]:
    • @​tanstack/query-core@​5.101.3

5.101.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.101.2

5.101.1

Patch Changes

  • Updated dependencies [9eff92e]:
    • @​tanstack/query-core@​5.101.1

5.101.0

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.101.0

5.100.14

Patch Changes

  • fix(react-query): do not go into optimistic fetching state when not subscribed (#10759)

  • Updated dependencies []:

    • @​tanstack/query-core@​5.100.14

5.100.13

Patch Changes

  • Updated dependencies [d423168]:
    • @​tanstack/query-core@​5.100.13

... (truncated)

Commits
  • 86bb8a6 ci: Version Packages (#11094)
  • 181ea82 ci: Version Packages (#11089)
  • 6d55b07 test({react,preact}-query): use the '.then()' convention consistently (#11085)
  • 44f38df test({react,preact,solid}-query/useInfiniteQuery): inline the shared 'fetchIt...
  • d1558c1 test({react,preact}-query/usePrefetchQuery): inline the 'generateQueryFn' fac...
  • 99690d1 test({react,preact}-query/usePrefetchInfiniteQuery): inline single-use helper...
  • 10770f0 test({react,preact}-query/usePrefetchInfiniteQuery): inline the shared 'Suspe...
  • dbd5a86 test({react,preact}-query/usePrefetchQuery): inline the shared 'Suspended' co...
  • b955f60 test({react,preact}-query/useSuspenseQuery): assert the 'loading' fallback is...
  • b9c657e test({react,preact}-query/usePrefetchQuery): assert the 'Loading...' fallback...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​tanstack/react-query since your current version.


Updates next-nprogress-bar from 2.3.16 to 2.4.7

Release notes

Sourced from next-nprogress-bar's releases.

2.4.5

  • add a startOnLoad parameter to launch progress on page load

2.4.4

  • add the router.replace() method on the router
  • some fixes on the router
  • add the disableStyle prop on the AppProgressBar and PagesProgressBar components

2.4.3

  • Fix shallowRouting on PagesProgressBar

2.4.2

Commits

Updates next-themes from 0.3.0 to 0.4.6

Release notes

Sourced from next-themes's releases.

v0.4.6

What's Changed

New Contributors

Full Changelog: pacocoursey/next-themes@v0.4.5...v0.4.6

v0.4.5

What's Changed

New Contributors

Full Changelog: pacocoursey/next-themes@v0.4.4...v0.4.5

v0.4.4

What's Changed

New Contributors

Full Changelog: pacocoursey/next-themes@v0.4.3...v0.4.4

v0.4.3

What's Changed

  • Pass nonce to inline style tag when using disableTransitionOnChange

Full Changelog: pacocoursey/next-themes@v0.4.2...v0.4.3

v0.4.2

What's Changed

New Contributors

Full Changelog: pacocoursey/next-themes@v0.4.1...v0.4.2

... (truncated)

Commits
  • 3a43743 v0.4.6
  • f5be1b2 fix: add null check for value in updateDOM function to prevent runtime errors...
  • c178917 v0.4.5
  • d12996b chore: Fix corepack errors in CI (#342)
  • b77db23 Bump the npm_and_yarn group across 1 directory with 7 updates (#341)
  • d3fa4ee Bump next from 14.2.10 to 14.2.15 in the npm_and_yarn group across 1 director...
  • ad83567 Reduce number of renders by pre-setting resolvedTheme (#338)
  • 1b51044 fix: map theme to class using ValueObject in injected script (#330)
  • 57c0561 v0.4.4
  • ae2ab9b fix: infinite loop theme flicker (#329)
  • Additional commits viewable in compare view

Updates react-hot-toast from 2.4.1 to 2.6.0

Release notes

Sourced from react-hot-toast's releases.

v2.6.0


timolins/react-hot-toast@v2.5.2...v2.6.0

v2.6.0-beta.0

What's new

  • Adds support for multiple toasters
  • Add first version of Multi toaster docs
  • Add dismissAll and removeAll More ergonomic API when working with multiple toasters a1d0b02

Ready to try it out?

npm i react-hot-toast@beta

Other Changes

  • Update pnpm version f6c867b
  • Move timeouts inside a useRef cb1fe8e
  • Use data tag instead of id 1d5d3d3
  • Fix dispatch to be id specific again fe934fd
  • Merge branch 'main' into global-settings 0953822
  • Add first version of multi toaster page 5b1ee55
  • Merge branch 'main' into global-settings 4d43622
  • Move toaster settings into state cf9ae4b
  • Some experimentation with global settings API 2e0a4dd

timolins/react-hot-toast@v2.5.1...v2.6.0-beta.0

v2.5.2

  • Fix race condition in backwards compatible way – fixes #101 1556d28
  • Replace JSX.Element type with React.ReactElement 87c7a52

timolins/react-hot-toast@v2.5.1...v2.5.2

Commits

Updates viem from 2.49.2 to 2.55.10

Release notes

Sourced from viem's releases.

viem@2.55.10

Patch Changes

viem@2.55.8

Patch Changes

viem@2.55.7

Patch Changes

viem@2.55.5

Patch Changes

... (truncated)

Commits

Updates abitype from 1.0.6 to 1.3.0

Release notes

Sourced from abitype's releases.

abitype@1.3.0

Minor Changes

  • Deprecated human-readable ABI utilities in favor of Ox's Abi, AbiItem, AbiParameter, and AbiParameters modules. (#309)

    Deprecated abitype/zod schemas in favor of Ox's ABI and EIP-712 Typed Data schemas from ox/zod.

abitype@1.2.4

Patch Changes

  • Fixed Zod identifier regex to anchor start and end, rejecting invalid identifiers like café, 2g, and hello👋. (#296)

abitype@1.2.3

Patch Changes

  • Added max depth guard for named tuple tail recursion (#290)

abitype@1.2.2

Patch Changes

  • Trimmed generated tuple names. (cd23231)

abitype@1.2.1

Patch Changes

  • Updated generated ABI parameter tuple names (8afc256)

  • Updated ABI parameter named tuple generation to use most common parameter names from Dune query. (8961150)

abitype@1.2.0

Minor Changes

  • Added experimental named tuple support to AbiParametersToPrimitiveTypes (#281)

abitype@1.1.2

Patch Changes

  • Fixed struct name collision in parseAbiParameter cache (#282)

abitype@1.1.1

Patch Changes

abitype@1.1.0

Minor Changes

abitype@1.0.9

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for abitype since your current version.


Updates autoprefixer from 10.4.27 to 10.5.4

Release notes

Sourced from autoprefixer's releases.

10.5.4

10.5.3

10.5.2

  • Moved -webkit-fill-available before -moz-available, so Firefox will use -webkit- version which is closer to stretch.

10.5.1

10.5.0 “Each Endeavouring, All Achieving”

  • Added mask-position-x and mask-position-y support (by @​toporek).
Changelog

Sourced from autoprefixer's changelog.

10.5.4

10.5.3

10.5.2

  • Moved -webkit-fill-available before -moz-available, so Firefox will use -webkit- version which is closer to stretch.

10.5.1

10.5.0 “Each Endeavouring, All Achieving”

  • Added mask-position-x and mask-position-y support (by @​toporek).
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for autoprefixer since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • `@...

Description has been truncated


View with [code]smith Autofix with [code]smith
Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.

Bumps the dependencies group in /with-next-app-router with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [shx](https://github.com/shelljs/shx) | `0.3.4` | `0.4.0` |
| [@heroicons/react](https://github.com/tailwindlabs/heroicons) | `2.1.5` | `2.2.0` |
| [@rainbow-me/rainbowkit](https://github.com/rainbow-me/rainbowkit/tree/HEAD/packages/rainbowkit) | `2.1.6` | `2.2.11` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.28.14` | `5.101.4` |
| [next-nprogress-bar](https://github.com/Skyleen77/bprogress) | `2.3.16` | `2.4.7` |
| [next-themes](https://github.com/pacocoursey/next-themes) | `0.3.0` | `0.4.6` |
| [react-hot-toast](https://github.com/timolins/react-hot-toast) | `2.4.1` | `2.6.0` |
| [viem](https://github.com/wevm/viem) | `2.49.2` | `2.55.10` |
| [abitype](https://github.com/wevm/abitype) | `1.0.6` | `1.3.0` |
| [autoprefixer](https://github.com/postcss/autoprefixer) | `10.4.27` | `10.5.4` |


Updates `shx` from 0.3.4 to 0.4.0
- [Release notes](https://github.com/shelljs/shx/releases)
- [Changelog](https://github.com/shelljs/shx/blob/main/CHANGELOG.md)
- [Commits](shelljs/shx@v0.3.4...v0.4.0)

Updates `@heroicons/react` from 2.1.5 to 2.2.0
- [Release notes](https://github.com/tailwindlabs/heroicons/releases)
- [Changelog](https://github.com/tailwindlabs/heroicons/blob/master/CHANGELOG.md)
- [Commits](tailwindlabs/heroicons@v2.1.5...v2.2.0)

Updates `@rainbow-me/rainbowkit` from 2.1.6 to 2.2.11
- [Release notes](https://github.com/rainbow-me/rainbowkit/releases)
- [Changelog](https://github.com/rainbow-me/rainbowkit/blob/main/packages/rainbowkit/CHANGELOG.md)
- [Commits](https://github.com/rainbow-me/rainbowkit/commits/@rainbow-me/rainbowkit@2.2.11/packages/rainbowkit)

Updates `@tanstack/react-query` from 5.28.14 to 5.101.4
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.101.4/packages/react-query)

Updates `next-nprogress-bar` from 2.3.16 to 2.4.7
- [Release notes](https://github.com/Skyleen77/bprogress/releases)
- [Commits](https://github.com/Skyleen77/bprogress/commits)

Updates `next-themes` from 0.3.0 to 0.4.6
- [Release notes](https://github.com/pacocoursey/next-themes/releases)
- [Commits](pacocoursey/next-themes@v0.3.0...v0.4.6)

Updates `react-hot-toast` from 2.4.1 to 2.6.0
- [Release notes](https://github.com/timolins/react-hot-toast/releases)
- [Commits](timolins/react-hot-toast@v2.4.1...v2.6.0)

Updates `viem` from 2.49.2 to 2.55.10
- [Release notes](https://github.com/wevm/viem/releases)
- [Commits](https://github.com/wevm/viem/compare/viem@2.49.2...viem@2.55.10)

Updates `abitype` from 1.0.6 to 1.3.0
- [Release notes](https://github.com/wevm/abitype/releases)
- [Commits](https://github.com/wevm/abitype/compare/abitype@1.0.6...abitype@1.3.0)

Updates `autoprefixer` from 10.4.27 to 10.5.4
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](postcss/autoprefixer@10.4.27...10.5.4)

---
updated-dependencies:
- dependency-name: shx
  dependency-version: 0.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@heroicons/react"
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@rainbow-me/rainbowkit"
  dependency-version: 2.2.11
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.101.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: next-nprogress-bar
  dependency-version: 2.4.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: next-themes
  dependency-version: 0.4.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: react-hot-toast
  dependency-version: 2.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: viem
  dependency-version: 2.55.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: abitype
  dependency-version: 1.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: autoprefixer
  dependency-version: 10.5.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 3, 2026
@socket-security

Copy link
Copy Markdown

Dependency limit exceeded — report not shown.

This pull request scan exceeded the 10,000-dependency limit applied to this scan, so the results are incomplete and may be inaccurate. To avoid reporting false positives, Socket has not posted a report.

Upgrade your plan to raise the dependency limit and get complete reports, or view the partial scan in the dashboard.

Socket is always free for open source. If this is a non-commercial open source project, contact us to request a free Team account.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants