build(deps): bump the npm_and_yarn group across 1 directory with 14 updates by dependabot[bot] · Pull Request #6 · Dargon789/Rabby

dependabot · 2025-03-19T00:49:08Z

Bumps the npm_and_yarn group with 11 updates in the / directory:

Package	From	To
@sentry/browser	`6.7.2`	`7.119.1`
nanoid	`3.3.6`	`3.3.8`
semver	`7.5.2`	`7.5.3`
postcss	`8.4.31`	`8.4.32`
webpack	`5.76.0`	`5.94.0`
@babel/runtime	`7.13.10`	`7.26.10`
es5-ext	`0.10.53`	`0.10.64`
express	`4.18.2`	`4.21.2`
follow-redirects	`1.14.9`	`1.15.9`
serialize-javascript	`6.0.1`	`6.0.2`
webpack-dev-middleware	`5.3.1`	`5.3.4`

Updates @sentry/browser from 6.7.2 to 7.119.1

Release notes

Sourced from @sentry/browser's releases.

7.119.1

fix(browser/v7): Ensure wrap() only returns functions (#13838 backport)

Work in this release contributed by @legobeat. Thank you for your contribution!

7.119.0

backport(tracing): Report dropped spans for transactions (#13343)

Bundle size 📦

Path Size

@sentry/browser (incl. Tracing, Replay, Feedback) - Webpack (gzipped) 80.96 KB

@sentry/browser (incl. Tracing, Replay) - Webpack (gzipped) 71.89 KB

@sentry/browser (incl. Tracing, Replay with Canvas) - Webpack (gzipped) 76.14 KB

@sentry/browser (incl. Tracing, Replay) - Webpack with treeshaking flags (gzipped) 65.52 KB

@sentry/browser (incl. Tracing) - Webpack (gzipped) 35.77 KB

@sentry/browser (incl. browserTracingIntegration) - Webpack (gzipped) 35.66 KB

@sentry/browser (incl. Feedback) - Webpack (gzipped) 31.71 KB

@sentry/browser (incl. sendFeedback) - Webpack (gzipped) 31.72 KB

@sentry/browser - Webpack (gzipped) 22.91 KB

@sentry/browser (incl. Tracing, Replay, Feedback) - ES6 CDN Bundle (gzipped) 79.17 KB

@sentry/browser (incl. Tracing, Replay) - ES6 CDN Bundle (gzipped) 70.49 KB

@sentry/browser (incl. Tracing) - ES6 CDN Bundle (gzipped) 36.17 KB

@sentry/browser - ES6 CDN Bundle (gzipped) 25.41 KB

@sentry/browser (incl. Tracing, Replay) - ES6 CDN Bundle (minified & uncompressed) 221.92 KB

@sentry/browser (incl. Tracing) - ES6 CDN Bundle (minified & uncompressed) 109.52 KB

@sentry/browser - ES6 CDN Bundle (minified & uncompressed) 76.24 KB

@sentry/browser (incl. Tracing) - ES5 CDN Bundle (gzipped) 39.45 KB

@sentry/react (incl. Tracing, Replay) - Webpack (gzipped) 72.4 KB

@sentry/react - Webpack (gzipped) 22.94 KB

@sentry/nextjs Client (incl. Tracing, Replay) - Webpack (gzipped) 90.16 KB

@sentry/nextjs Client - Webpack (gzipped) 54.27 KB

@sentry-internal/feedback - Webpack (gzipped) 17.34 KB

7.118.0

fix(v7/bundle): Ensure CDN bundles do not overwrite window.Sentry (#12579)

Bundle size 📦

Path Size

@sentry/browser (incl. Tracing, Replay, Feedback) - Webpack (gzipped) 80.83 KB

@sentry/browser (incl. Tracing, Replay) - Webpack (gzipped) 71.77 KB

@sentry/browser (incl. Tracing, Replay with Canvas) - Webpack (gzipped) 76.02 KB

@sentry/browser (incl. Tracing, Replay) - Webpack with treeshaking flags (gzipped) 65.38 KB

@sentry/browser (incl. Tracing) - Webpack (gzipped) 35.64 KB

@sentry/browser (incl. browserTracingIntegration) - Webpack (gzipped) 35.53 KB

@sentry/browser (incl. Feedback) - Webpack (gzipped) 31.6 KB

@sentry/browser (incl. sendFeedback) - Webpack (gzipped) 31.61 KB

... (truncated)

Changelog

Sourced from @sentry/browser's changelog.

7.119.1

fix(browser/v7): Ensure wrap() only returns functions (#13838 backport)

Work in this release contributed by @legobeat. Thank you for your contribution!

7.119.0

backport(tracing): Report dropped spans for transactions (#13343)

7.118.0

fix(v7/bundle): Ensure CDN bundles do not overwrite window.Sentry (#12579)

7.117.0

feat(browser/v7): Publish browserprofling CDN bundle (#12224)

fix(v7/publish): Add v7 tag to @sentry/replay (#12304)

7.116.0

build(craft): Publish lambda layer under its own name for v7 (#12098) (#12099)

This release publishes a new AWS Lambda layer under the name SentryNodeServerlessSDKv7 that users still running v7 can use instead of pinning themselves to SentryNodeServerlessSDK:235.

7.115.0

feat(v7): Add support for global onUnhandled Error/Promise for Bun (#11959)

fix(replay/v7): Fix user activity not being updated in start() (#12003)

ref(api): Remove lastEventId deprecation warnings (#12042)

7.114.0

Important Changes

fix(browser/v7): Continuously record CLS (#11935)

This release fixes a bug that caused the cumulative layout shift (CLS) web vital not to be reported in a majority of the cases where it should have been reported. With this change, the CLS web vital should now always be reported for pageloads with layout shift. If a pageload did not have layout shift, no CLS web vital should be reported.

Please note that upgrading the SDK to this version may cause data in your dashboards to drastically change.

Other Changes

build(aws-lambda/v7): Turn off lambda layer publishing (#11875)

feat(v7): Add tunnel support to multiplexed transport (#11851)

fix(opentelemetry-node): support HTTP_REQUEST_METHOD attribute (#11929)

fix(react/v7): Fix react router v4/v5 span names (#11940)

... (truncated)

Commits

c8452e1 release: 7.119.1
5a88ff6 fix(browser/v7): Ensure wrap() only returns functions (#13838 backport) (#1...
5adcbf9 Merge branch 'release/7.119.0' into v7
f58bf69 release: 7.119.0
a6bc39f fix(ci): GH dropped macos-11 at the end of June 24 (#13360)
2060d84 meta(changelog): Update CHANGELOG.md for 7.119.0 (#13350)
f54c97a backport(tracing): Report dropped spans for transactions (#13343)
eeae3cf test(v7/loader): Update Loader Script to latest (#12765)
d3e2c7b meta(v7): Ignore pem for tests (#13051)
47f1710 Merge branch 'release/7.118.0' into v7
Additional commits viewable in compare view

Updates nanoid from 3.3.6 to 3.3.8

Release notes

Sourced from nanoid's releases.

3.1.11

Fixed React Native support.

Changelog

Sourced from nanoid's changelog.

3.3.8

Fixed a way to break Nano ID by passing non-integer size (by @myndzi).

3.3.7

Fixed node16 TypeScript support (by Saadi Myftija).

Commits

3044cd5 Release 3.3.8 version
4fe3495 Update size limit
d643045 Fix pool pollution, infinite loop (#510)
89d82d2 Release 3.3.7 version
5022c35 Update dual-publish
3e7a8e5 Remove benchmark from CI for v3
d356144 Fix CI for v3
37b25df Move to pnpm 8
See full diff in compare view

Updates semver from 7.5.2 to 7.5.3

Release notes

Sourced from semver's releases.

v7.5.3

7.5.3 (2023-06-22)

Bug Fixes

abdd93d #571 set max lengths in regex for numeric and build identifiers (#571) (@lukekarrys)

Documentation

bf53dd8 #569 add example for > comparator (#569) (@mbtools)

Changelog

Sourced from semver's changelog.

7.5.3 (2023-06-22)

Bug Fixes

abdd93d #571 set max lengths in regex for numeric and build identifiers (#571) (@lukekarrys)

Documentation

bf53dd8 #569 add example for > comparator (#569) (@mbtools)

Commits

7fdf1ef chore: release 7.5.3
bf53dd8 docs: add example for > comparator (#569)
abdd93d fix: set max lengths in regex for numeric and build identifiers (#571)
See full diff in compare view

Updates postcss from 8.4.31 to 8.4.32

Release notes

Sourced from postcss's releases.

8.4.32

Fixed postcss().process() types (by @ferreira-tb).

Changelog

Sourced from postcss's changelog.

8.4.32

Fixed postcss().process() types (by Andrew Ferreira).

Commits

a0d9f10 Release 8.4.32 version
0146b3e Add Node.js 21 to CI
2398534 Update dependencies
1918533 Merge pull request #1902 from ferreira-tb/main
395e6dc Fix ProcessOptions interface
fa8cd15 Update dependencies
199a7c4 Typo
2528047 Update EM link
See full diff in compare view

Updates webpack from 5.76.0 to 5.94.0

Release notes

Sourced from webpack's releases.

v5.94.0

Bug Fixes

Added runtime condition for harmony reexport checked

Handle properly data/http/https protocols in source maps

Make bigint optimistic when browserslist not found

Move @types/eslint-scope to dev deps

Related in asset stats is now always an array when no related found

Handle ASI for export declarations

Mangle destruction incorrect with export named default properly

Fixed unexpected asi generation with sequence expression

Fixed a lot of types

New Features

Added new external type "module-import"

Support webpackIgnore for new URL() construction

[CSS] @import pathinfo support

Security

Fixed DOM clobbering in auto public path

v5.93.0

Bug Fixes

Generate correct relative path to runtime chunks

Makes DefinePlugin quieter under default log level

Fixed mangle destructuring default in namespace import

Fixed consumption of eager shared modules for module federation

Strip slash for pretty regexp

Calculate correct contenthash for CSS generator options

New Features

Added the binary generator option for asset modules to explicitly keep source maps produced by loaders

Added the modern-module library value for tree shakable output

Added the overrideStrict option to override strict or non-strict mode for javascript modules

v5.92.1

Bug Fixes

Doesn't crash with an error when the css experiment is enabled and contenthash is used

v5.92.0

Bug Fixes

Correct tidle range's comutation for module federation

Consider runtime for pure expression dependency update hash

Return value in the subtractRuntime function for runtime logic

... (truncated)

Commits

eabf85d chore(release): 5.94.0
955e057 security: fix DOM clobbering in auto public path
9822387 test: fix
cbb86ed test: fix
5ac3d7f fix: unexpected asi generation with sequence expression
2411661 security: fix DOM clobbering in auto public path
b8c03d4 fix: unexpected asi generation with sequence expression
f46a03c revert: do not use heuristic fallback for "module-import"
60f1898 fix: do not use heuristic fallback for "module-import"
66306aa Revert "fix: module-import get fallback from externalsPresets"
Additional commits viewable in compare view

Updates @babel/runtime from 7.13.10 to 7.26.10

Release notes

Sourced from @babel/runtime's releases.

v7.26.10 (2025-03-11)

Thanks @jordan-choi and @mmmsssttt404 for your first PRs!

This release includes a fix for GHSA-968p-4wvh-cqc8, a security vulnerability which affects the .replace method of transpiled regular expressions that use named capturing groups.

👓 Spec Compliance

babel-parser

#17159 Disallow decorator in array pattern (@JLHwung)

🐛 Bug Fix

babel-parser, babel-template

#17164 Fix: always initialize ExportDeclaration attributes (@JLHwung)

babel-core

#17142 fix: "Map maximum size exceeded" in deepClone (@liuxingbaoyu)

babel-parser, babel-plugin-transform-typescript

#17154 Update typescript parser tests (@JLHwung)

babel-traverse

#17151 fix: Should not evaluate vars in child scope (@liuxingbaoyu)

babel-generator

#17153 fix: Correctly generate abstract override (@liuxingbaoyu)

babel-parser

#17107 Fix source type detection when parsing TypeScript (@JLHwung)

babel-helpers, babel-runtime, babel-runtime-corejs2, babel-runtime-corejs3

#17173 Fix processing of replacement pattern with named capture groups (@mmmsssttt404)

💅 Polish

babel-standalone

#17158 Avoid warnings when re-bundling @babel/standalone with webpack (@liuxingbaoyu)

🏠 Internal

babel-parser

#17160 Left-value parsing cleanup (@JLHwung)

Committers: 6

Babel Bot (@babel-bot)

Huáng Jùnliàng (@JLHwung)

Nicolò Ribaudo (@nicolo-ribaudo)

Yunyoung Jordan Choi (@jordan-choi)

@liuxingbaoyu

@mmmsssttt404

v7.26.9 (2025-02-14)

🐛 Bug Fix

babel-types

#17103 fix: Definition for TSPropertySignature.kind (@liuxingbaoyu)

babel-generator, babel-types

#17062 Print TypeScript optional/definite in ClassPrivateProperty (@jamiebuilds-signal)

... (truncated)

Changelog

Sourced from @babel/runtime's changelog.

v7.26.10 (2025-03-11)

👓 Spec Compliance

babel-parser

#17159 Disallow decorator in array pattern (@JLHwung)

🐛 Bug Fix

babel-parser, babel-template

#17164 Fix: always initialize ExportDeclaration attributes (@JLHwung)

babel-core

#17142 fix: "Map maximum size exceeded" in deepClone (@liuxingbaoyu)

babel-parser, babel-plugin-transform-typescript

#17154 Update typescript parser tests (@JLHwung)

babel-traverse

#17151 fix: Should not evaluate vars in child scope (@liuxingbaoyu)

babel-generator

#17153 fix: Correctly generate abstract override (@liuxingbaoyu)

babel-parser

#17107 Fix source type detection when parsing TypeScript (@JLHwung)

babel-helpers, babel-runtime, babel-runtime-corejs2, babel-runtime-corejs3

#17173 Fix processing of replacement pattern with named capture groups (@mmmsssttt404)

💅 Polish

babel-standalone

#17158 Avoid warnings when re-bundling @babel/standalone with webpack (@liuxingbaoyu)

🏠 Internal

babel-parser

#17160 Left-value parsing cleanup (@JLHwung)

v7.26.9 (2025-02-14)

🐛 Bug Fix

babel-types

#17103 fix: Definition for TSPropertySignature.kind (@liuxingbaoyu)

babel-generator, babel-types

#17062 Print TypeScript optional/definite in ClassPrivateProperty (@jamiebuilds-signal)

🏠 Internal

babel-types

#17130 Use .ts files with explicit reexports to solve name conflicts (@nicolo-ribaudo)

babel-core

#17127 Do not depend on @types/gensync in Babel 7 (@nicolo-ribaudo)

v7.26.7 (2025-01-24)

🐛 Bug Fix

babel-helpers, babel-preset-env, babel-runtime-corejs3

#17086 Make "object without properties" helpers ES6-compatible (@tquetano-netflix)

babel-plugin-transform-typeof-symbol

#17085 fix: Correctly handle typeof in arrow functions (@liuxingbaoyu)

... (truncated)

Commits

e1ce99d v7.26.10
d5952e8 Fix processing of replacement pattern with named capture groups (#17173)
64bca7b v7.26.9
2d95140 v7.26.7
63d3038 v7.26.0
b07957e v7.25.9
af91759 fix: Accidentally publishing useless files (#16917)
2533cfb v7.25.7
69d65f1 [babel 8] Require Node.js ^18.20.0 || ^20.17.0 || >=22.8.0 (#16800)
2f72b97 v7.25.6
Additional commits viewable in compare view

Updates es5-ext from 0.10.53 to 0.10.64

Release notes

Sourced from es5-ext's releases.

0.10.64 (2024-02-27)

Bug Fixes

Revert update to postinstall script meant to fix Powershell issue, as it's a regression for some Linux terminals (c2e2bb9)

Comparison since last release

0.10.63 (2024-02-23)

Bug Fixes

Do not rely on problematic regex (3551cdd), addresses #201

Support ES2015+ function definitions in function#toStringTokens() (a52e957), addresses #021

Ensure postinstall script does not crash on Windows, fixes #181 (bf8ed79)

Maintenance Improvements

Simplify the manifest message (7855319)

Comparison since last release

0.10.62 (2022-08-02)

Maintenance Improvements

Manifest improvements:

(#190) (b8dc53f)

(c51d552)

Comparison since last release

0.10.61 (2022-04-20)

Bug Fixes

Ensure postinstall script does not error (a0be4fd)

Maintenance Improvements

Bump dependencies (d7e0a61)

Comparison since last release

0.10.60 (2022-04-07)

Maintenance Improvements

Improve postinstall script configuration (ab6b121)

... (truncated)

Changelog

Sourced from es5-ext's changelog.

0.10.64 (2024-02-27)

Bug Fixes

Revert update to postinstall script meant to fix Powershell issue, as it's a regression for some Linux terminals (c2e2bb9)

0.10.63 (2024-02-23)

Bug Fixes

Do not rely on problematic regex (3551cdd), addresses #201

Support ES2015+ function definitions in function#toStringTokens() (a52e957), addresses #021

Ensure postinstall script does not crash on Windows, fixes #181 (bf8ed79)

Maintenance Improvements

Simplify the manifest message (7855319)

0.10.62 (2022-08-02)

Maintenance Improvements

Manifest improvements:

(#190) (b8dc53f)

(c51d552)

0.10.61 (2022-04-20)

Bug Fixes

Ensure postinstall script does not error (a0be4fd)

Maintenance Improvements

Bump dependencies (d7e0a61)

0.10.60 (2022-04-07)

Maintenance Improvements

Improve postinstall script configuration (ab6b121)

0.10.59 (2022-03-17)

Maintenance Improvements

Improve manifest wording (#122) (eb7ae59)

Update data in manifest (3d2935a)

0.10.58 (2022-03-11)

... (truncated)

Commits

f76b03d chore: Release v0.10.64
2881acd chore: Bump dependencies
c2e2bb9 fix: Revert update meant to fix Powershell issue, as it's a regression
16f2b72 docs: Fix date in the changelog
de4e03c chore: Release v0.10.63
3fd53b7 chore: Upgrade lint-staged to v13
bf8ed79 chore: Ensure postinstall script does not crash on Windows
2cbbb07 chore: Bump dependencies
22d0416 chore: Bump LICENSE year
a52e957 fix: Support ES2015+ function definitions in function#toStringTokens()
Additional commits viewable in compare view

Updates express from 4.18.2 to 4.21.2

Release notes

Sourced from express's releases.

4.21.2

What's Changed

Add funding field (v4) by @bjohansebas in expressjs/express#6065

deps: path-to-regexp@0.1.11 by @blakeembrey in expressjs/express#5956

deps: bump path-to-regexp@0.1.12 by @jonchurch in expressjs/express#6209

Release: 4.21.2 by @UlisesGascon in expressjs/express#6094

Full Changelog: expressjs/express@4.21.1...4.21.2

4.21.1

What's Changed

Backport a fix for CVE-2024-47764 to the 4.x branch by @joshbuker in expressjs/express#6029

Release: 4.21.1 by @UlisesGascon in expressjs/express#6031

Full Changelog: expressjs/express@4.21.0...4.21.1

4.21.0

What's Changed

Deprecate "back" magic string in redirects by @blakeembrey in expressjs/express#5935

finalhandler@1.3.1 by @wesleytodd in expressjs/express#5954

fix(deps): serve-static@1.16.2 by @wesleytodd in expressjs/express#5951

Upgraded dependency qs to 6.13.0 to match qs in body-parser by @agadzinski93 in expressjs/express#5946

New Contributors

@agadzinski93 made their first contribution in expressjs/express#5946

Full Changelog: expressjs/express@4.20.0...4.21.0

4.20.0

What's Changed

Important

IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

Remove link renderization in html while using res.redirect

Other Changes

4.19.2 Staging by @wesleytodd in expressjs/express#5561

remove duplicate location test for data uri by @wesleytodd in expressjs/express#5562

feat: document beta releases expectations by @marco-ippolito in expressjs/express#5565

Cut down on duplicated CI runs by @jonchurch in expressjs/express#5564

Add a Threat Model by @UlisesGascon in expressjs/express#5526

Assign captain of encodeurl by @blakeembrey in expressjs/express#5579

Nominate jonchurch as repo captain for http-errors, expressjs.com, morgan, cors, body-parser by @jonchurch in expressjs/express#5587

docs: update Security.md by @inigomarquinez in expressjs/express#5590

docs: update triage nomination policy by @UlisesGascon in expressjs/express#5600

Add CodeQL (SAST) by @UlisesGascon in expressjs/express#5433

docs: add UlisesGascon as triage initiative captain by @UlisesGascon in expressjs/express#5605

... (truncated)

Changelog

Sourced from express's changelog.

4.21.2 / 2024-11-06

deps: path-to-regexp@0.1.12

Fix backtracking protection

deps: path-to-regexp@0.1.11

Throws an error on invalid path values

4.21.1 / 2024-10-08

Backported a fix for CVE-2024-47764

4.21.0 / 2024-09-11

Deprecate res.location("back") and res.redirect("back") magic string

deps: serve-static@1.16.2

includes send@0.19.0

deps: finalhandler@1.3.1

deps: qs@6.13.0

4.20.0 / 2024-09-10

deps: serve-static@0.16.0

Remove link renderization in html while redirecting

deps: send@0.19.0

Remove link renderization in html while redirecting

deps: body-parser@0.6.0

add depth option to customize the depth level in the parser

IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

Remove link renderization in html while using res.redirect

deps: path-to-regexp@0.1.10

Adds support for named matching groups in the routes using a regex

Adds backtracking protection to parameters without regexes defined

deps: encodeurl@~2.0.0

Removes encoding of \, |, and ^ to align better with URL spec

Deprecate passing options.maxAge and options.expires to res.clearCookie

Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie

4.19.2 / 2024-03-25

Improved fix for open redirect allow list bypass

4.19.1 / 2024-03-20

Allow passing non-strings to res.location with new encoding handling checks

... (truncated)

Commits

1faf228 4.21.2
2e0fb64 deps: bump path-to-regexp@0.1.12 (#6209)
59fc270 deps: path-to-regexp@0.1.11 (#5956)
51fc39c docs: add funding (#6065)
8e229f9 4.21.1
a024c8a fix(deps): cookie@0.7.1
7e562c6 4.21.0
1bcde96 fix(deps): qs@6.13.0 (#5946)
7d36477 fix(deps): serve-static@1.16.2 (#5951)
40d2d8f fix(deps): finalhandler@1.3.1
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by jonchurch, a new releaser for express since your current version.

Updates follow-redirects from 1.14.9 to 1.15.9

Commits

e4e55c7 Release version 1.15.9 of the npm package.
31a1abf Attempt much more gentle detection.
d2aaa97 Fix url field.
62558f0 Release version 1.15.8 of the npm package.
a8d1cee Return subtlety.
458ca8e Fix native URL test for Node 20.
ca49e44 Handle KeepAlive connections in tests.
f3711d7 Test on Node 20 and 22.
fda0faf Fix typo.
760757f Release version 1.15.7 of the npm package.
Additional commits viewable in compare view

Updates path-to-regexp from 0.1.7 to 0.1.12

Release notes

Sourced from path-to-regexp's releases.

Fix backtracking (again)

Fixed

Improved backtracking protection for 0.1.x, will break some previously valid paths (see previous advisory: GHSA-9wv6-86v2-598j)

pillarjs/path-to-regexp@v0.1.11...v0.1.12

Error on bad input

Changed

Add error on bad input values 8f09549

pillarjs/path-to-regexp@v0.1.10...v0.1.11

Backtrack protection

Fixed

Add backtrack protection to parameters 29b96b4

This will break some edge cases but should improve performance

pillarjs/path-to-regexp@v0.1.9...v0.1.10

Support non-lookahead regex output

Added

Allow a non-lookahead regex (#312) c4272e4

component/path-to-regexp@v0.1.8...v0.1.9

Support named matching groups in RegExp

Added

Add support for named matching groups (#301) 114f62d

pillarjs/path-to-regexp@v0.1.7...v0.1.8

Commits

640e694 0.1.12
f01c26a Merge commit from fork
0c71192 0.1.11
8f09549 Add error on bad input values
c827fce 0.1.10
29b96b4 Add backtrack protection to parameters
ac4c234 Update repo url (#314)
bdb6635 0.1.9
c4272e4 Allow a non-lookahead regex (#312)
51a1955 0.1.8
Additional commits viewable in compare view

Updates send from 0.18.0 to 0.19.0

Release notes

Sourced from send's releases.

0.19.0

What's Changed

Remove link renderization in html while redirecting (pillarjs/send#235)

New Contributors

@UlisesGascon made their first contribution in pillarjs/send#235

Full Changelog: pillarjs/send@0.18.0...0.19.0

Changelog

Sourced from send's changelog.

0.19.0 / 2024-09-10

Remove link renderization in html while redirecting

Commits

9d2db99 0.19.0
ae4f298 Merge commit from fork
See full diff in compare view

Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for send since your current version.

Updates serialize-javascript from 6.0.1 to 6.0.2

Release notes

Sourced from serialize-javascript's releases.

v6.0.2

fix: serialize URL string contents to prevent XSS (#173) f27d65d

Bump @babel/traverse from 7.10.1 to 7.23.7 (#171) 02499c0

docs: update readme with URL support (#146) 0d88527

chore: update node version and lock file e2a3a91

fix typo (#164) 5a1fa64

yahoo/serialize-javascript@v6.0.1...v6.0.2

Commits

b71ec23 6.0.2
f27d65d fix: serialize URL string contents to prevent XSS (#173)
02499c0 Bump @babel/traverse from 7.10.1 to 7.23.7 (#171)
0d88527 docs: update readme with URL support (#146)

…pdates Bumps the npm_and_yarn group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@sentry/browser](https://github.com/getsentry/sentry-javascript) | `6.7.2` | `7.119.1` | | [nanoid](https://github.com/ai/nanoid) | `3.3.6` | `3.3.8` | | [semver](https://github.com/npm/node-semver) | `7.5.2` | `7.5.3` | | [postcss](https://github.com/postcss/postcss) | `8.4.31` | `8.4.32` | | [webpack](https://github.com/webpack/webpack) | `5.76.0` | `5.94.0` | | [@babel/runtime](https://github.com/babel/babel/tree/HEAD/packages/babel-runtime) | `7.13.10` | `7.26.10` | | [es5-ext](https://github.com/medikoo/es5-ext) | `0.10.53` | `0.10.64` | | [express](https://github.com/expressjs/express) | `4.18.2` | `4.21.2` | | [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.14.9` | `1.15.9` | | [serialize-javascript](https://github.com/yahoo/serialize-javascript) | `6.0.1` | `6.0.2` | | [webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware) | `5.3.1` | `5.3.4` | Updates `@sentry/browser` from 6.7.2 to 7.119.1 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/7.119.1/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@6.7.2...7.119.1) Updates `nanoid` from 3.3.6 to 3.3.8 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](ai/nanoid@3.3.6...3.3.8) Updates `semver` from 7.5.2 to 7.5.3 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v7.5.2...v7.5.3) Updates `postcss` from 8.4.31 to 8.4.32 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.31...8.4.32) Updates `webpack` from 5.76.0 to 5.94.0 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v5.76.0...v5.94.0) Updates `@babel/runtime` from 7.13.10 to 7.26.10 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.26.10/packages/babel-runtime) Updates `es5-ext` from 0.10.53 to 0.10.64 - [Release notes](https://github.com/medikoo/es5-ext/releases) - [Changelog](https://github.com/medikoo/es5-ext/blob/main/CHANGELOG.md) - [Commits](medikoo/es5-ext@v0.10.53...v0.10.64) Updates `express` from 4.18.2 to 4.21.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md) - [Commits](expressjs/express@4.18.2...4.21.2) Updates `follow-redirects` from 1.14.9 to 1.15.9 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.14.9...v1.15.9) Updates `path-to-regexp` from 0.1.7 to 0.1.12 - [Release notes](https://github.com/pillarjs/path-to-regexp/releases) - [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md) - [Commits](pillarjs/path-to-regexp@v0.1.7...v0.1.12) Updates `send` from 0.18.0 to 0.19.0 - [Release notes](https://github.com/pillarjs/send/releases) - [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md) - [Commits](pillarjs/send@0.18.0...0.19.0) Updates `serialize-javascript` from 6.0.1 to 6.0.2 - [Release notes](https://github.com/yahoo/serialize-javascript/releases) - [Commits](yahoo/serialize-javascript@v6.0.1...v6.0.2) Updates `serve-static` from 1.15.0 to 1.16.2 - [Release notes](https://github.com/expressjs/serve-static/releases) - [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md) - [Commits](expressjs/serve-static@v1.15.0...v1.16.2) Updates `webpack-dev-middleware` from 5.3.1 to 5.3.4 - [Release notes](https://github.com/webpack/webpack-dev-middleware/releases) - [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/v5.3.4/CHANGELOG.md) - [Commits](webpack/webpack-dev-middleware@v5.3.1...v5.3.4) --- updated-dependencies: - dependency-name: "@sentry/browser" dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: nanoid dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: semver dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: webpack dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@babel/runtime" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: es5-ext dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-to-regexp dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: send dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serialize-javascript dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serve-static dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack-dev-middleware dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

sourcery-ai · 2025-03-19T00:49:14Z

Reviewer's Guide by Sourcery

This pull request updates multiple npm dependencies in the / directory. It includes updates for @sentry/browser, nanoid, semver, postcss, webpack, @babel/runtime, es5-ext, express, follow-redirects, serialize-javascript, path-to-regexp, and send. The versions have been bumped to the latest available.

Updated class diagram for package.json dependencies

classDiagram
  class PackageJson {
    dependencies: Map<string, string>
    devDependencies: Map<string, string>
  }

  note for PackageJson "Dependencies updated:\n- @sentry/browser: 6.7.2 -> 7.119.1\n- nanoid: 3.3.6 -> 3.3.8\n- semver: 7.5.2 -> 7.5.3\n- postcss: 8.4.31 -> 8.4.32\n- webpack: 5.76.0 -> 5.94.0\n- @babel/runtime: 7.13.10 -> 7.26.10\n- es5-ext: 0.10.53 -> 0.10.64\n- express: 4.18.2 -> 4.21.2\n- follow-redirects: 1.14.9 -> 1.15.9\n- serialize-javascript: 6.0.1 -> 6.0.2\n- path-to-regexp: 0.1.7 -> 0.1.12\n- send: 0.18.0 -> 0.19.0"

File-Level Changes

Change	Details	Files
Updated Sentry browser package to version 7.119.1.	Updated the Sentry browser package from version 6.7.2 to 7.119.1.	`package.json`
Updated nanoid package to version 3.3.8.	Updated the nanoid package from version 3.3.6 to 3.3.8.	`package.json`
Updated semver package to version 7.5.3.	Updated the semver package from version 7.5.2 to 7.5.3.	`package.json`
Updated postcss package to version 8.4.32.	Updated the postcss package from version 8.4.31 to 8.4.32.	`package.json`
Updated webpack package to version 5.94.0.	Updated the webpack package from version 5.76.0 to 5.94.0.	`package.json`
Updated @babel/runtime package to version 7.26.10.	Updated the @babel/runtime package from version 7.13.10 to 7.26.10.	`package.json`
Updated es5-ext package to version 0.10.64.	Updated the es5-ext package from version 0.10.53 to 0.10.64.	`package.json`
Updated express package to version 4.21.2.	Updated the express package from version 4.18.2 to 4.21.2.	`package.json`
Updated follow-redirects package to version 1.15.9.	Updated the follow-redirects package from version 1.14.9 to 1.15.9.	`package.json`
Updated serialize-javascript package to version 6.0.2.	Updated the serialize-javascript package from version 6.0.1 to 6.0.2.	`package.json`
Updated path-to-regexp package to version 0.1.12.	Updated the path-to-regexp package from version 0.1.7 to 0.1.12.	`package.json`
Updated send package to version 0.19.0.	Updated the send package from version 0.18.0 to 0.19.0.	`package.json`

Tips and commands

Interacting with Sourcery

Trigger a new review: Comment @sourcery-ai review on the pull request.
Continue discussions: Reply directly to Sourcery's review comments.
Generate a GitHub issue from a review comment: Ask Sourcery to create an
issue from a review comment by replying to it. You can also reply to a
review comment with @sourcery-ai issue to create an issue from it.
Generate a pull request title: Write @sourcery-ai anywhere in the pull
request title to generate a title at any time. You can also comment
@sourcery-ai title on the pull request to (re-)generate the title at any time.
Generate a pull request summary: Write @sourcery-ai summary anywhere in
the pull request body to generate a PR summary at any time exactly where you
want it. You can also comment @sourcery-ai summary on the pull request to
(re-)generate the summary at any time.
Generate reviewer's guide: Comment @sourcery-ai guide on the pull
request to (re-)generate the reviewer's guide at any time.
Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
pull request to resolve all Sourcery comments. Useful if you've already
addressed all the comments and don't want to see them anymore.
Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
request to dismiss all existing Sourcery reviews. Especially useful if you
want to start fresh with a new review - don't forget to comment
@sourcery-ai review to trigger a new review!
Generate a plan of action for an issue: Comment @sourcery-ai plan on
an issue to generate a plan of action for it.

Customizing Your Experience

Access your dashboard to:

Enable or disable review features such as the Sourcery-generated pull request
summary, the reviewer's guide, and others.
Change the review language.
Add, remove or edit custom review instructions.
Adjust other review settings.

Getting Help

Contact our support team for questions or feedback.
Visit our documentation for detailed guides and information.
Keep in touch with the Sourcery team by following us on X/Twitter, LinkedIn or GitHub.

sourcery-ai

We have skipped reviewing this pull request. It seems to have been created by a bot (hey, dependabot[bot]!). We assume it knows what it's doing!

snyk-io · 2025-03-19T00:49:22Z

🎉 Snyk checks have passed. No issues have been found so far.

✅ security/snyk check is complete. No issues have been found. (View Details)

socket-security · 2025-03-19T00:50:11Z

New, updated, and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@babel/runtime@7.23.4 ➜ 7.26.10	None	`0`	249 kB	nicolo-ribaudo
npm/es5-ext@0.10.53 ➜ 0.10.64	None	`0`	374 kB	medikoo
npm/es6-symbol@3.1.3 ➜ 3.1.4	None	`0`	16.5 kB	medikoo
npm/esniff@2.0.1	None	`0`	60.9 kB	medikoo
npm/event-emitter@0.3.5	None	`0`	27.2 kB	medikoo
npm/ext@1.6.0 ➜ 1.7.0	None	`0`	23.1 kB	medikoo
npm/follow-redirects@1.15.5 ➜ 1.15.9	None	`0`	29.9 kB	rubenverborgh
npm/next-tick@1.0.0 ➜ 1.1.0	None	`0`	7.65 kB	medikoo
npm/type@1.2.0 ➜ 2.7.3	None	`0`	89.3 kB	medikoo

🚮 Removed packages: npm/@parcel/watcher-wasm@2.4.1, npm/chalk@4.1.1, npm/citty@0.1.6, npm/clipboardy@4.0.0

View full report↗︎

socket-security · 2025-03-19T00:50:13Z

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert	Package	Note	Source	CI
Protestware or potentially unwanted behavior	npm/es5-ext@0.10.64	Note: The script attempts to run a local post-install script, which could potentially contain malicious code. The error handling suggests that it is designed to fail silently, which is a common tactic in malicious scripts.	`yarn.lock`	⚠︎

View full report↗︎

Next steps

What is protestware?

This package is a joke, parody, or includes undocumented or hidden behavior unrelated to its primary function.

Consider that consuming this package may come along with functionality unrelated to its primary purpose.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/foo@1.0.0 or ignore all packages with @SocketSecurity ignore-all

@SocketSecurity ignore npm/es5-ext@0.10.64

…08f910

* fix: package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-WS-7266574 * fix: package.json to reduce vulnerabilities (#4) The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AXIOS-6032459 - https://snyk.io/vuln/SNYK-JS-FOLLOWREDIRECTS-6141137 - https://snyk.io/vuln/SNYK-JS-AXIOS-6124857 Co-authored-by: snyk-bot <snyk-bot@snyk.io> * Circleci project setup (#5) * Add .circleci/config.yml * Add .circleci/config.yml * Add .circleci/config.yml * Add .circleci/config.yml * Updated config.yml * Create SECURITY.md (#2) Signed-off-by: AU_019 <64915515+Dargon789@users.noreply.github.com> * build(deps): bump the npm_and_yarn group across 1 directory with 14 updates (#6) Bumps the npm_and_yarn group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@sentry/browser](https://github.com/getsentry/sentry-javascript) | `6.7.2` | `7.119.1` | | [nanoid](https://github.com/ai/nanoid) | `3.3.6` | `3.3.8` | | [semver](https://github.com/npm/node-semver) | `7.5.2` | `7.5.3` | | [postcss](https://github.com/postcss/postcss) | `8.4.31` | `8.4.32` | | [webpack](https://github.com/webpack/webpack) | `5.76.0` | `5.94.0` | | [@babel/runtime](https://github.com/babel/babel/tree/HEAD/packages/babel-runtime) | `7.13.10` | `7.26.10` | | [es5-ext](https://github.com/medikoo/es5-ext) | `0.10.53` | `0.10.64` | | [express](https://github.com/expressjs/express) | `4.18.2` | `4.21.2` | | [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.14.9` | `1.15.9` | | [serialize-javascript](https://github.com/yahoo/serialize-javascript) | `6.0.1` | `6.0.2` | | [webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware) | `5.3.1` | `5.3.4` | Updates `@sentry/browser` from 6.7.2 to 7.119.1 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/7.119.1/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@6.7.2...7.119.1) Updates `nanoid` from 3.3.6 to 3.3.8 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](ai/nanoid@3.3.6...3.3.8) Updates `semver` from 7.5.2 to 7.5.3 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v7.5.2...v7.5.3) Updates `postcss` from 8.4.31 to 8.4.32 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.31...8.4.32) Updates `webpack` from 5.76.0 to 5.94.0 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v5.76.0...v5.94.0) Updates `@babel/runtime` from 7.13.10 to 7.26.10 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.26.10/packages/babel-runtime) Updates `es5-ext` from 0.10.53 to 0.10.64 - [Release notes](https://github.com/medikoo/es5-ext/releases) - [Changelog](https://github.com/medikoo/es5-ext/blob/main/CHANGELOG.md) - [Commits](medikoo/es5-ext@v0.10.53...v0.10.64) Updates `express` from 4.18.2 to 4.21.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md) - [Commits](expressjs/express@4.18.2...4.21.2) Updates `follow-redirects` from 1.14.9 to 1.15.9 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.14.9...v1.15.9) Updates `path-to-regexp` from 0.1.7 to 0.1.12 - [Release notes](https://github.com/pillarjs/path-to-regexp/releases) - [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md) - [Commits](pillarjs/path-to-regexp@v0.1.7...v0.1.12) Updates `send` from 0.18.0 to 0.19.0 - [Release notes](https://github.com/pillarjs/send/releases) - [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md) - [Commits](pillarjs/send@0.18.0...0.19.0) Updates `serialize-javascript` from 6.0.1 to 6.0.2 - [Release notes](https://github.com/yahoo/serialize-javascript/releases) - [Commits](yahoo/serialize-javascript@v6.0.1...v6.0.2) Updates `serve-static` from 1.15.0 to 1.16.2 - [Release notes](https://github.com/expressjs/serve-static/releases) - [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md) - [Commits](expressjs/serve-static@v1.15.0...v1.16.2) Updates `webpack-dev-middleware` from 5.3.1 to 5.3.4 - [Release notes](https://github.com/webpack/webpack-dev-middleware/releases) - [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/v5.3.4/CHANGELOG.md) - [Commits](webpack/webpack-dev-middleware@v5.3.1...v5.3.4) --- updated-dependencies: - dependency-name: "@sentry/browser" dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: nanoid dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: semver dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: webpack dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@babel/runtime" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: es5-ext dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-to-regexp dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: send dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serialize-javascript dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serve-static dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack-dev-middleware dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com> * fix: package.json to reduce vulnerabilities (#7) The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-IP-6240864 - https://snyk.io/vuln/SNYK-JS-WS-7266574 - https://snyk.io/vuln/SNYK-JS-IP-7148531 Co-authored-by: snyk-bot <snyk-bot@snyk.io> * build(deps): bump the npm_and_yarn group across 1 directory with 3 updates (#8) Bumps the npm_and_yarn group with 3 updates in the / directory: [@sentry/browser](https://github.com/getsentry/sentry-javascript), [semver](https://github.com/npm/node-semver) and [postcss](https://github.com/postcss/postcss). Updates `@sentry/browser` from 7.119.1 to 7.119.2 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/7.119.2/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@7.119.1...7.119.2) Updates `semver` from 7.5.3 to 7.5.4 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v7.5.3...v7.5.4) Updates `postcss` from 8.4.32 to 8.4.33 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.32...8.4.33) --- updated-dependencies: - dependency-name: "@sentry/browser" dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: semver dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: direct:development dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com> * fix: package.json to reduce vulnerabilities (#9) The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AXIOS-9403194 Co-authored-by: snyk-io[bot] <141718529+snyk-io[bot]@users.noreply.github.com> * fix: package.json to reduce vulnerabilities (#10) The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8720086 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8187303 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577916 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577917 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577918 - https://snyk.io/vuln/SNYK-JS-SECP256K1-8237220 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8172694 Co-authored-by: snyk-bot <snyk-bot@snyk.io> * fix: package.json to reduce vulnerabilities (#12) The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8720086 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8187303 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577916 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577917 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577918 - https://snyk.io/vuln/SNYK-JS-SECP256K1-8237220 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8172694 Co-authored-by: snyk-bot <snyk-bot@snyk.io> * fix: package.json to reduce vulnerabilities (#13) The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-BIGINTBUFFER-3364597 Co-authored-by: snyk-bot <snyk-bot@snyk.io> * build(deps): bump the npm_and_yarn group across 1 directory with 3 updates (#11) Bumps the npm_and_yarn group with 3 updates in the / directory: [@sentry/browser](https://github.com/getsentry/sentry-javascript), [semver](https://github.com/npm/node-semver) and [postcss](https://github.com/postcss/postcss). Updates `@sentry/browser` from 7.119.2 to 7.120.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/7.120.0/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@7.119.2...7.120.0) Updates `semver` from 7.5.4 to 7.6.0 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v7.5.4...v7.6.0) Updates `postcss` from 8.4.33 to 8.4.34 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.33...8.4.34) --- updated-dependencies: - dependency-name: "@sentry/browser" dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: semver dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: direct:development dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump the npm_and_yarn group across 1 directory with 10 updates (#14) Bumps the npm_and_yarn group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@sentry/browser](https://github.com/getsentry/sentry-javascript) | `7.120.0` | `7.120.1` | | [semver](https://github.com/npm/node-semver) | `7.6.0` | `7.6.1` | | [postcss](https://github.com/postcss/postcss) | `8.4.34` | `8.4.35` | | [webpack-dev-server](https://github.com/webpack/webpack-dev-server) | `4.7.4` | `5.2.1` | | [form-data](https://github.com/form-data/form-data) | `4.0.0` | `4.0.4` | | [parse-uri](https://github.com/kikobeats/parse-uri) | `1.0.7` | `1.0.16` | | [pbkdf2](https://github.com/crypto-browserify/pbkdf2) | `3.1.2` | `3.1.3` | | [tiny-secp256k1](https://github.com/bitcoinjs/tiny-secp256k1) | `1.1.6` | `1.1.7` | Updates `@sentry/browser` from 7.120.0 to 7.120.1 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/7.120.1/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@7.120.0...7.120.1) Updates `semver` from 7.6.0 to 7.6.1 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v7.6.0...v7.6.1) Updates `postcss` from 8.4.34 to 8.4.35 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.34...8.4.35) Updates `webpack-dev-server` from 4.7.4 to 5.2.1 - [Release notes](https://github.com/webpack/webpack-dev-server/releases) - [Changelog](https://github.com/webpack/webpack-dev-server/blob/master/CHANGELOG.md) - [Commits](webpack/webpack-dev-server@v4.7.4...v5.2.1) Updates `form-data` from 4.0.0 to 4.0.4 - [Release notes](https://github.com/form-data/form-data/releases) - [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md) - [Commits](form-data/form-data@v4.0.0...v4.0.4) Updates `http-proxy-middleware` from 2.0.3 to 2.0.9 - [Release notes](https://github.com/chimurai/http-proxy-middleware/releases) - [Changelog](https://github.com/chimurai/http-proxy-middleware/blob/v2.0.9/CHANGELOG.md) - [Commits](chimurai/http-proxy-middleware@v2.0.3...v2.0.9) Updates `ip` from 1.1.5 to 2.0.0 - [Commits](indutny/node-ip@v1.1.5...v2.0.0) Updates `parse-uri` from 1.0.7 to 1.0.16 - [Release notes](https://github.com/kikobeats/parse-uri/releases) - [Changelog](https://github.com/Kikobeats/parse-uri/blob/v1.0.16/CHANGELOG.md) - [Commits](Kikobeats/parse-uri@v1.0.7...v1.0.16) Updates `pbkdf2` from 3.1.2 to 3.1.3 - [Changelog](https://github.com/browserify/pbkdf2/blob/master/CHANGELOG.md) - [Commits](browserify/pbkdf2@v3.1.2...v3.1.3) Updates `tiny-secp256k1` from 1.1.6 to 1.1.7 - [Commits](bitcoinjs/tiny-secp256k1@v1.1.6...v1.1.7) --- updated-dependencies: - dependency-name: "@sentry/browser" dependency-version: 7.120.1 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: semver dependency-version: 7.6.1 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: postcss dependency-version: 8.4.35 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: webpack-dev-server dependency-version: 5.2.1 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: form-data dependency-version: 4.0.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: http-proxy-middleware dependency-version: 2.0.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ip dependency-version: 2.0.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: parse-uri dependency-version: 1.0.16 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: pbkdf2 dependency-version: 3.1.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tiny-secp256k1 dependency-version: 1.1.7 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * fix: package.json to reduce vulnerabilities (#15) The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-BASEX-10118294 - https://snyk.io/vuln/SNYK-JS-BRACEEXPANSION-9789073 - https://snyk.io/vuln/SNYK-JS-GLOBPARENT-1016905 - https://snyk.io/vuln/SNYK-JS-NTHCHECK-1586032 - https://snyk.io/vuln/SNYK-JS-POSTCSS-5926692 - https://snyk.io/vuln/SNYK-JS-UNSETVALUE-2400660 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8720086 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8187303 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577917 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577916 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577918 - https://snyk.io/vuln/SNYK-JS-WEB3UTILS-6229337 - https://snyk.io/vuln/SNYK-JS-BRACES-6838727 - https://snyk.io/vuln/SNYK-JS-CROSSSPAWN-8303230 - https://snyk.io/vuln/SNYK-JS-SECP256K1-8237220 - https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8172694 - https://snyk.io/vuln/SNYK-JS-MICROMATCH-6838728 Co-authored-by: snyk-bot <snyk-bot@snyk.io> * build(deps): bump the npm_and_yarn group across 1 directory with 5 updates (#17) Bumps the npm_and_yarn group with 3 updates in the / directory: [@sentry/browser](https://github.com/getsentry/sentry-javascript), [semver](https://github.com/npm/node-semver) and [postcss](https://github.com/postcss/postcss). Updates `@sentry/browser` from 7.120.1 to 7.120.2 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/7.120.2/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@7.120.1...7.120.2) Updates `semver` from 7.6.1 to 7.6.2 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v7.6.1...v7.6.2) Updates `postcss` from 8.4.35 to 8.5.6 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.35...8.5.6) Updates `braces` from 2.3.2 to 3.0.2 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](https://github.com/micromatch/braces/commits/3.0.2) Updates `micromatch` from 3.1.10 to 4.0.4 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@3.1.10...4.0.4) --- updated-dependencies: - dependency-name: "@sentry/browser" dependency-version: 7.120.2 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: semver dependency-version: 7.6.2 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: postcss dependency-version: 8.5.6 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: braces dependency-version: 3.0.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-version: 4.0.4 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * fix: package.json to reduce vulnerabilities (#18) The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116 - https://snyk.io/vuln/SNYK-JS-BRACEEXPANSION-9789073 Co-authored-by: snyk-bot <snyk-bot@snyk.io> * build(deps): bump the npm_and_yarn group across 1 directory with 6 updates (#19) Bumps the npm_and_yarn group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@sentry/browser](https://github.com/getsentry/sentry-javascript) | `7.120.2` | `7.120.3` | | [semver](https://github.com/npm/node-semver) | `7.6.2` | `7.6.3` | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [cipher-base](https://github.com/crypto-browserify/cipher-base) | `1.0.4` | `1.0.6` | | [micromatch](https://github.com/micromatch/micromatch) | `4.0.4` | `4.0.8` | | [sha.js](https://github.com/crypto-browserify/sha.js) | `2.4.11` | `2.4.12` | Updates `@sentry/browser` from 7.120.2 to 7.120.3 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/7.120.3/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@7.120.2...7.120.3) Updates `semver` from 7.6.2 to 7.6.3 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v7.6.2...v7.6.3) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `cipher-base` from 1.0.4 to 1.0.6 - [Changelog](https://github.com/browserify/cipher-base/blob/master/CHANGELOG.md) - [Commits](browserify/cipher-base@v1.0.4...v1.0.6) Updates `micromatch` from 4.0.4 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.4...4.0.8) Updates `sha.js` from 2.4.11 to 2.4.12 - [Changelog](https://github.com/browserify/sha.js/blob/master/CHANGELOG.md) - [Commits](browserify/sha.js@v2.4.11...v2.4.12) --- updated-dependencies: - dependency-name: "@sentry/browser" dependency-version: 7.120.3 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: semver dependency-version: 7.6.3 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: braces dependency-version: 3.0.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cipher-base dependency-version: 1.0.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-version: 4.0.8 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: sha.js dependency-version: 2.4.12 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * feat: + imkey in new user import * chore: make linter happy * [release] 0.93.72 (#37) * Update dev scripts to use cross-env around the webpack build, so memory limits actually get raised * feat: add Gnosis Safe batch transaction support * build(deps): bump node-forge (#20) Bumps the npm_and_yarn group with 1 update in the / directory: [node-forge](https://github.com/digitalbazaar/forge). Updates `node-forge` from 1.3.1 to 1.3.2 - [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md) - [Commits](digitalbazaar/forge@v1.3.1...v1.3.2) --- updated-dependencies: - dependency-name: node-forge dependency-version: 1.3.2 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Squashed commit of the following: commit edc2344 Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue Dec 23 08:33:10 2025 +0700 build(deps): bump node-forge (#20) Bumps the npm_and_yarn group with 1 update in the / directory: [node-forge](https://github.com/digitalbazaar/forge). Updates `node-forge` from 1.3.1 to 1.3.2 - [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md) - [Commits](digitalbazaar/forge@v1.3.1...v1.3.2) --- updated-dependencies: - dependency-name: node-forge dependency-version: 1.3.2 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * fix: package.json to reduce vulnerabilities (#22) The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8720086 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577917 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577918 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577916 - https://snyk.io/vuln/SNYK-JS-SECP256K1-8237220 - https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8172694 - https://snyk.io/vuln/SNYK-JS-TMP-11501554 - https://snyk.io/vuln/SNYK-JS-BASEX-10118294 Co-authored-by: snyk-io[bot] <141718529+snyk-io[bot]@users.noreply.github.com> * feat: update approve list action (RabbyHub#3379) * style: tuning (RabbyHub#3378) * style: tuning * fix: tailwind * style: tuning * feat: lp token manage v2 (RabbyHub#3374) * feat: lp token manage v2 * fix: bugs * fix: bugs * fix: bugs * feat: + imkey in new user import (RabbyHub#3368) * feat: + imkey in new user import * chore: make linter happy * fix: custom rpc enable (RabbyHub#3367) * chore: update approve list (RabbyHub#3384) * fix: pinnedChain array (RabbyHub#3385) * fix: ui style (RabbyHub#3369) * style: change chain icon position * style: fix gnosis chain alert * fix: asset btn * fix: low value text * feat: update i18n * fix: robust change (RabbyHub#3386) * 0.93.68 * [release] 0.93.68 * feat: no need translate defi (RabbyHub#3391) * chore: update approve list (RabbyHub#3390) * fix: shake desktop (RabbyHub#3389) * feat: support password guard on whitelist (RabbyHub#3388) * feat: support password guard on whitelist * ux: tuning * chore: adjust and fix * fix: tuning * style: tuning * style: tuning * chore: tuning * chore: code cleanup * fix: search logic * style: tuning * style: little fix * feat: implement address deletion functionality and update UI messages (RabbyHub#3382) * feat: implement address deletion functionality and update UI messages * fix: remove authentic before goToHDManager * fix: ui not update after deleted * chore: remove useless console * feat: update i18n --------- Co-authored-by: vvvvvv1vvvvvv <galennnnnnn@gmail.com> * 0.93.69 * [release] 0.93.69 * chore: rm useless zip * fix: all token mode filter (RabbyHub#3397) * fix: all token mode filter * docs: comment * fix: remove is verified filter * fix: is_verified filter * fix: style * feat: search contact balance token * feat: asset list contact * fix: search holds tokens * feat: add transaction gas limit mapping and integrate into gas limit calculation (RabbyHub#3400) * feat: enhance empty state display for seed phrase addresses (RabbyHub#3401) * fix: update localization messages for unsupported address type in multiple languages (RabbyHub#3403) * chore: update approve list (RabbyHub#3404) * feat: update gnosis chain (RabbyHub#3399) * feat: update gnosis chain * feat: udpate safe-deployments * feat: update gnosis sdk * feat: update changelog & i18n (RabbyHub#3405) * feat: update changelog * feat: update i18n * chore * 0.93.70 * [release] 0.93.70 * fix: package.json to reduce vulnerabilities (#24) The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8187303 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577916 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577917 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577918 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8720086 - https://snyk.io/vuln/SNYK-JS-SECP256K1-8237220 Co-authored-by: snyk-bot <snyk-bot@snyk.io> * build(deps): bump the npm_and_yarn group across 0 directory with 2 updates (#23) Updates `base-x` from 1.1.0 to 3.0.8 - [Commits](cryptocoinjs/base-x@v1.1.0...v3.0.8) Updates `cross-spawn` from 6.0.5 to 6.0.6 - [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/v6.0.6/CHANGELOG.md) - [Commits](moxystudio/node-cross-spawn@v6.0.5...v6.0.6) --- updated-dependencies: - dependency-name: base-x dependency-version: 3.0.8 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cross-spawn dependency-version: 6.0.6 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Potential fix for code scanning alert no. 7: Client-side cross-site scripting (#25) Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com> Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> * feat: prediction (RabbyHub#3383) * wip * feat: implement auto-connect and personal sign logic; update UI components for better navigation and layout * feat: enhance auto personal sign logic with message validation and update RPC flow to pass message parameters * feat: add new home hover and inactive icons, update DesktopNav component * fix: approval auto flex * feat: add isFromDesktopDapp flag to ProviderRequest and update request handling * style: change layout * style: change token list style * refactor: wrap setupDappIframeSyncRoute in domReadyCall for improved loading handling * fix: adjust approval condition to handle non-desktop DApp requests * style: change profile header * chore: fix style * feat: add prediction feature support and loading state for DApp iframe * fix: ip * feat: update nav * feat: update prediction feature messages and dependencies * chore: fix some style * chore: fix style * chore: fix style * feat: delay setup of DApp iframe sync route for improved loading * feat: enhance auto personal sign condition for desktop DApp requests * fix: nav * fix: style * fix: style * Update src/background/controller/provider/autoConnect.ts Co-authored-by: vvvvvv1vvvvvv <86296331+vvvvvv1vvvvvv@users.noreply.github.com> * fix: remove unnecessary blank line in shouldAutoPersonalSign function * fix: comment out IframeLoadingBar component in DappIframeLoading * fix: logo * fix: update rabby-api version to 0.9.53 --------- Co-authored-by: Hodor <lost1q84@gmail.com> Co-authored-by: vvvvvv1vvvvvv <86296331+vvvvvv1vvvvvv@users.noreply.github.com> * fix: tokenItem type is_core be null (RabbyHub#3407) * feat: update changelog (RabbyHub#3408) * feat: update changelog * feat: update i18n * 0.93.71 * [release] 0.93.71 * chore: update approve list (RabbyHub#3416) * feat: add kava in open ocean (RabbyHub#3414) * feat: update home pnl (RabbyHub#3413) * fix: update data splitting logic in getCustomTxParamsData to use regex for separator (RabbyHub#3409) * feat: enhance Dapp iframe with error handling and network messages (RabbyHub#3410) * feat: enhance Dapp iframe with error handling and network messages * feat: improve error component layout and add clsx for conditional styling * feat: enhance iframe loading and error handling based on permission status * fix: hash (RabbyHub#3415) * fix: hash * feat: update i18n * fix: perps history empty when switch account (RabbyHub#3417) * 0.93.72 * [release] 0.93.72 * chore: introduce claude code for code review * _raw\images * Potential fix for code scanning alert no. 6: Client-side cross-site scripting (#35) Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com> Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> * fix: package.json to reduce vulnerabilities (#34) The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-BABELRUNTIME-10044504 - https://snyk.io/vuln/SNYK-JS-CIPHERBASE-12084814 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-14908844 - https://snyk.io/vuln/SNYK-JS-LODASH-15053838 - https://snyk.io/vuln/SNYK-JS-NANOID-8492085 - https://snyk.io/vuln/SNYK-JS-SHAJS-12089400 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8187303 - https://snyk.io/vuln/SNYK-JS-WEB3UTILS-6229337 - https://snyk.io/vuln/SNYK-JS-WS-7266574 - https://snyk.io/vuln/SNYK-JS-QS-14724253 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577916 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577917 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577918 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8720086 - https://snyk.io/vuln/SNYK-JS-BIGINTBUFFER-3364597 - https://snyk.io/vuln/SNYK-JS-SECP256K1-8237220 - https://snyk.io/vuln/SNYK-JS-TMP-11501554 - https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8172694 - https://snyk.io/vuln/SNYK-JS-SOLANAWEB3JS-6647564 - https://snyk.io/vuln/SNYK-JS-BASEX-10118294 - https://snyk.io/vuln/SNYK-JS-BRACEEXPANSION-9789073 Co-authored-by: snyk-bot <snyk-bot@snyk.io> * fix: package.json to reduce vulnerabilities (#33) The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-BABELRUNTIME-10044504 - https://snyk.io/vuln/SNYK-JS-BRACES-6838727 - https://snyk.io/vuln/SNYK-JS-CIPHERBASE-12084814 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-14908844 - https://snyk.io/vuln/SNYK-JS-GLOBPARENT-1016905 - https://snyk.io/vuln/SNYK-JS-LODASH-15053838 - https://snyk.io/vuln/SNYK-JS-MICROMATCH-6838728 - https://snyk.io/vuln/SNYK-JS-NANOID-8492085 - https://snyk.io/vuln/SNYK-JS-POSTCSS-5926692 - https://snyk.io/vuln/SNYK-JS-QS-14724253 - https://snyk.io/vuln/SNYK-JS-SHAJS-12089400 - https://snyk.io/vuln/SNYK-JS-UNSETVALUE-2400660 - https://snyk.io/vuln/SNYK-JS-WEBPACK-7840298 - https://snyk.io/vuln/SNYK-JS-WEBPACKDEVSERVER-10300775 - https://snyk.io/vuln/SNYK-JS-WEBPACKDEVSERVER-10300777 - https://snyk.io/vuln/SNYK-JS-IP-12704893 - https://snyk.io/vuln/SNYK-JS-IP-12761655 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8720086 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8187303 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577917 - https://snyk.io/vuln/SNYK-JS-WEB3UTILS-6229337 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577918 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577916 - https://snyk.io/vuln/SNYK-JS-BIGINTBUFFER-3364597 - https://snyk.io/vuln/SNYK-JS-WS-7266574 - https://snyk.io/vuln/SNYK-JS-CROSSSPAWN-8303230 - https://snyk.io/vuln/SNYK-JS-NTHCHECK-1586032 - https://snyk.io/vuln/SNYK-JS-SECP256K1-8237220 - https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8172694 - https://snyk.io/vuln/SNYK-JS-IP-7148531 - https://snyk.io/vuln/SNYK-JS-SOLANAWEB3JS-6647564 - https://snyk.io/vuln/SNYK-JS-BASEX-10118294 - https://snyk.io/vuln/SNYK-JS-BRACEEXPANSION-9789073 - https://snyk.io/vuln/SNYK-JS-SIRV-12558119 - https://snyk.io/vuln/SNYK-JS-JSYAML-13961110 Co-authored-by: snyk-bot <snyk-bot@snyk.io> * [Snyk] Security upgrade ethers from 5.4.2 to 6.0.0 (#32) * chore(deps): bump h3 from 1.11.1 to 1.15.5 Bumps [h3](https://github.com/h3js/h3) from 1.11.1 to 1.15.5. - [Release notes](https://github.com/h3js/h3/releases) - [Changelog](https://github.com/h3js/h3/blob/v1.15.5/CHANGELOG.md) - [Commits](h3js/h3@v1.11.1...v1.15.5) --- updated-dependencies: - dependency-name: h3 dependency-version: 1.15.5 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> * fix: package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8187303 * chore(deps): bump lodash from 4.17.21 to 4.17.23 Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.17.23. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.17.23) --- updated-dependencies: - dependency-name: lodash dependency-version: 4.17.23 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> * build(deps): bump h3 in the npm_and_yarn group across 1 directory Bumps the npm_and_yarn group with 1 update in the / directory: [h3](https://github.com/h3js/h3). Updates `h3` from 1.11.1 to 1.15.5 - [Release notes](https://github.com/h3js/h3/releases) - [Changelog](https://github.com/h3js/h3/blob/v1.15.5/CHANGELOG.md) - [Commits](h3js/h3@v1.11.1...v1.15.5) --- updated-dependencies: - dependency-name: h3 dependency-version: 1.15.5 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com> * swap 1inch --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: snyk-bot <snyk-bot@snyk.io> --------- Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com> Co-authored-by: Drew Fisher <drew@pods.media> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: snyk-io[bot] <141718529+snyk-io[bot]@users.noreply.github.com> Co-authored-by: hz002 <zs4733525@gmail.com> Co-authored-by: richardo2016x <104543757+richardo2016x@users.noreply.github.com> Co-authored-by: vvvvvv1vvvvvv <86296331+vvvvvv1vvvvvv@users.noreply.github.com> Co-authored-by: Hodor <lost1q84@gmail.com> Co-authored-by: DMY <147dmy@gmail.com> Co-authored-by: vvvvvv1vvvvvv <galennnnnnn@gmail.com> Co-authored-by: snyk-bot <snyk-bot@snyk.io> Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> Co-authored-by: kim <180150277+jinming0618@users.noreply.github.com> * Update job name in CircleCI config (#41) 94da053 CI: Update the CircleCI workflow to run the rabby-wallet-hub job instead of the previous job name. Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com> --------- Signed-off-by: AU_019 <64915515+Dargon789@users.noreply.github.com> Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com> Co-authored-by: snyk-bot <snyk-bot@snyk.io> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: snyk-io[bot] <141718529+snyk-io[bot]@users.noreply.github.com> Co-authored-by: vvvvvv1vvvvvv <galennnnnnn@gmail.com> Co-authored-by: Drew Fisher <drew@pods.media> Co-authored-by: hz002 <zs4733525@gmail.com> Co-authored-by: richardo2016x <104543757+richardo2016x@users.noreply.github.com> Co-authored-by: vvvvvv1vvvvvv <86296331+vvvvvv1vvvvvv@users.noreply.github.com> Co-authored-by: Hodor <lost1q84@gmail.com> Co-authored-by: DMY <147dmy@gmail.com> Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> Co-authored-by: kim <180150277+jinming0618@users.noreply.github.com>

* fix: package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-WS-7266574 * fix: package.json to reduce vulnerabilities (#4) The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AXIOS-6032459 - https://snyk.io/vuln/SNYK-JS-FOLLOWREDIRECTS-6141137 - https://snyk.io/vuln/SNYK-JS-AXIOS-6124857 * Circleci project setup (#5) * Add .circleci/config.yml * Add .circleci/config.yml * Add .circleci/config.yml * Add .circleci/config.yml * Updated config.yml * Create SECURITY.md (#2) * build(deps): bump the npm_and_yarn group across 1 directory with 14 updates (#6) Bumps the npm_and_yarn group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@sentry/browser](https://github.com/getsentry/sentry-javascript) | `6.7.2` | `7.119.1` | | [nanoid](https://github.com/ai/nanoid) | `3.3.6` | `3.3.8` | | [semver](https://github.com/npm/node-semver) | `7.5.2` | `7.5.3` | | [postcss](https://github.com/postcss/postcss) | `8.4.31` | `8.4.32` | | [webpack](https://github.com/webpack/webpack) | `5.76.0` | `5.94.0` | | [@babel/runtime](https://github.com/babel/babel/tree/HEAD/packages/babel-runtime) | `7.13.10` | `7.26.10` | | [es5-ext](https://github.com/medikoo/es5-ext) | `0.10.53` | `0.10.64` | | [express](https://github.com/expressjs/express) | `4.18.2` | `4.21.2` | | [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.14.9` | `1.15.9` | | [serialize-javascript](https://github.com/yahoo/serialize-javascript) | `6.0.1` | `6.0.2` | | [webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware) | `5.3.1` | `5.3.4` | Updates `@sentry/browser` from 6.7.2 to 7.119.1 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/7.119.1/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@6.7.2...7.119.1) Updates `nanoid` from 3.3.6 to 3.3.8 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](ai/nanoid@3.3.6...3.3.8) Updates `semver` from 7.5.2 to 7.5.3 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v7.5.2...v7.5.3) Updates `postcss` from 8.4.31 to 8.4.32 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.31...8.4.32) Updates `webpack` from 5.76.0 to 5.94.0 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v5.76.0...v5.94.0) Updates `@babel/runtime` from 7.13.10 to 7.26.10 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.26.10/packages/babel-runtime) Updates `es5-ext` from 0.10.53 to 0.10.64 - [Release notes](https://github.com/medikoo/es5-ext/releases) - [Changelog](https://github.com/medikoo/es5-ext/blob/main/CHANGELOG.md) - [Commits](medikoo/es5-ext@v0.10.53...v0.10.64) Updates `express` from 4.18.2 to 4.21.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md) - [Commits](expressjs/express@4.18.2...4.21.2) Updates `follow-redirects` from 1.14.9 to 1.15.9 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.14.9...v1.15.9) Updates `path-to-regexp` from 0.1.7 to 0.1.12 - [Release notes](https://github.com/pillarjs/path-to-regexp/releases) - [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md) - [Commits](pillarjs/path-to-regexp@v0.1.7...v0.1.12) Updates `send` from 0.18.0 to 0.19.0 - [Release notes](https://github.com/pillarjs/send/releases) - [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md) - [Commits](pillarjs/send@0.18.0...0.19.0) Updates `serialize-javascript` from 6.0.1 to 6.0.2 - [Release notes](https://github.com/yahoo/serialize-javascript/releases) - [Commits](yahoo/serialize-javascript@v6.0.1...v6.0.2) Updates `serve-static` from 1.15.0 to 1.16.2 - [Release notes](https://github.com/expressjs/serve-static/releases) - [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md) - [Commits](expressjs/serve-static@v1.15.0...v1.16.2) Updates `webpack-dev-middleware` from 5.3.1 to 5.3.4 - [Release notes](https://github.com/webpack/webpack-dev-middleware/releases) - [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/v5.3.4/CHANGELOG.md) - [Commits](webpack/webpack-dev-middleware@v5.3.1...v5.3.4) --- updated-dependencies: - dependency-name: "@sentry/browser" dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: nanoid dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: semver dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: webpack dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@babel/runtime" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: es5-ext dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-to-regexp dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: send dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serialize-javascript dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serve-static dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack-dev-middleware dependency-type: indirect dependency-group: npm_and_yarn ... * fix: package.json to reduce vulnerabilities (#7) The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-IP-6240864 - https://snyk.io/vuln/SNYK-JS-WS-7266574 - https://snyk.io/vuln/SNYK-JS-IP-7148531 * build(deps): bump the npm_and_yarn group across 1 directory with 3 updates (#8) Bumps the npm_and_yarn group with 3 updates in the / directory: [@sentry/browser](https://github.com/getsentry/sentry-javascript), [semver](https://github.com/npm/node-semver) and [postcss](https://github.com/postcss/postcss). Updates `@sentry/browser` from 7.119.1 to 7.119.2 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/7.119.2/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@7.119.1...7.119.2) Updates `semver` from 7.5.3 to 7.5.4 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v7.5.3...v7.5.4) Updates `postcss` from 8.4.32 to 8.4.33 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.32...8.4.33) --- updated-dependencies: - dependency-name: "@sentry/browser" dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: semver dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: direct:development dependency-group: npm_and_yarn ... * fix: package.json to reduce vulnerabilities (#9) The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AXIOS-9403194 * fix: package.json to reduce vulnerabilities (#10) The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8720086 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8187303 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577916 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577917 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577918 - https://snyk.io/vuln/SNYK-JS-SECP256K1-8237220 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8172694 * fix: package.json to reduce vulnerabilities (#12) The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8720086 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8187303 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577916 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577917 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577918 - https://snyk.io/vuln/SNYK-JS-SECP256K1-8237220 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8172694 * fix: package.json to reduce vulnerabilities (#13) The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-BIGINTBUFFER-3364597 * build(deps): bump the npm_and_yarn group across 1 directory with 3 updates (#11) Bumps the npm_and_yarn group with 3 updates in the / directory: [@sentry/browser](https://github.com/getsentry/sentry-javascript), [semver](https://github.com/npm/node-semver) and [postcss](https://github.com/postcss/postcss). Updates `@sentry/browser` from 7.119.2 to 7.120.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/7.120.0/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@7.119.2...7.120.0) Updates `semver` from 7.5.4 to 7.6.0 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v7.5.4...v7.6.0) Updates `postcss` from 8.4.33 to 8.4.34 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.33...8.4.34) --- updated-dependencies: - dependency-name: "@sentry/browser" dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: semver dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: direct:development dependency-group: npm_and_yarn ... * build(deps): bump the npm_and_yarn group across 1 directory with 10 updates (#14) Bumps the npm_and_yarn group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@sentry/browser](https://github.com/getsentry/sentry-javascript) | `7.120.0` | `7.120.1` | | [semver](https://github.com/npm/node-semver) | `7.6.0` | `7.6.1` | | [postcss](https://github.com/postcss/postcss) | `8.4.34` | `8.4.35` | | [webpack-dev-server](https://github.com/webpack/webpack-dev-server) | `4.7.4` | `5.2.1` | | [form-data](https://github.com/form-data/form-data) | `4.0.0` | `4.0.4` | | [parse-uri](https://github.com/kikobeats/parse-uri) | `1.0.7` | `1.0.16` | | [pbkdf2](https://github.com/crypto-browserify/pbkdf2) | `3.1.2` | `3.1.3` | | [tiny-secp256k1](https://github.com/bitcoinjs/tiny-secp256k1) | `1.1.6` | `1.1.7` | Updates `@sentry/browser` from 7.120.0 to 7.120.1 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/7.120.1/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@7.120.0...7.120.1) Updates `semver` from 7.6.0 to 7.6.1 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v7.6.0...v7.6.1) Updates `postcss` from 8.4.34 to 8.4.35 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.34...8.4.35) Updates `webpack-dev-server` from 4.7.4 to 5.2.1 - [Release notes](https://github.com/webpack/webpack-dev-server/releases) - [Changelog](https://github.com/webpack/webpack-dev-server/blob/master/CHANGELOG.md) - [Commits](webpack/webpack-dev-server@v4.7.4...v5.2.1) Updates `form-data` from 4.0.0 to 4.0.4 - [Release notes](https://github.com/form-data/form-data/releases) - [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md) - [Commits](form-data/form-data@v4.0.0...v4.0.4) Updates `http-proxy-middleware` from 2.0.3 to 2.0.9 - [Release notes](https://github.com/chimurai/http-proxy-middleware/releases) - [Changelog](https://github.com/chimurai/http-proxy-middleware/blob/v2.0.9/CHANGELOG.md) - [Commits](chimurai/http-proxy-middleware@v2.0.3...v2.0.9) Updates `ip` from 1.1.5 to 2.0.0 - [Commits](indutny/node-ip@v1.1.5...v2.0.0) Updates `parse-uri` from 1.0.7 to 1.0.16 - [Release notes](https://github.com/kikobeats/parse-uri/releases) - [Changelog](https://github.com/Kikobeats/parse-uri/blob/v1.0.16/CHANGELOG.md) - [Commits](Kikobeats/parse-uri@v1.0.7...v1.0.16) Updates `pbkdf2` from 3.1.2 to 3.1.3 - [Changelog](https://github.com/browserify/pbkdf2/blob/master/CHANGELOG.md) - [Commits](browserify/pbkdf2@v3.1.2...v3.1.3) Updates `tiny-secp256k1` from 1.1.6 to 1.1.7 - [Commits](bitcoinjs/tiny-secp256k1@v1.1.6...v1.1.7) --- updated-dependencies: - dependency-name: "@sentry/browser" dependency-version: 7.120.1 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: semver dependency-version: 7.6.1 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: postcss dependency-version: 8.4.35 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: webpack-dev-server dependency-version: 5.2.1 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: form-data dependency-version: 4.0.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: http-proxy-middleware dependency-version: 2.0.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ip dependency-version: 2.0.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: parse-uri dependency-version: 1.0.16 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: pbkdf2 dependency-version: 3.1.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tiny-secp256k1 dependency-version: 1.1.7 dependency-type: indirect dependency-group: npm_and_yarn ... * fix: package.json to reduce vulnerabilities (#15) The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-BASEX-10118294 - https://snyk.io/vuln/SNYK-JS-BRACEEXPANSION-9789073 - https://snyk.io/vuln/SNYK-JS-GLOBPARENT-1016905 - https://snyk.io/vuln/SNYK-JS-NTHCHECK-1586032 - https://snyk.io/vuln/SNYK-JS-POSTCSS-5926692 - https://snyk.io/vuln/SNYK-JS-UNSETVALUE-2400660 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8720086 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8187303 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577917 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577916 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577918 - https://snyk.io/vuln/SNYK-JS-WEB3UTILS-6229337 - https://snyk.io/vuln/SNYK-JS-BRACES-6838727 - https://snyk.io/vuln/SNYK-JS-CROSSSPAWN-8303230 - https://snyk.io/vuln/SNYK-JS-SECP256K1-8237220 - https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8172694 - https://snyk.io/vuln/SNYK-JS-MICROMATCH-6838728 * build(deps): bump the npm_and_yarn group across 1 directory with 5 updates (#17) Bumps the npm_and_yarn group with 3 updates in the / directory: [@sentry/browser](https://github.com/getsentry/sentry-javascript), [semver](https://github.com/npm/node-semver) and [postcss](https://github.com/postcss/postcss). Updates `@sentry/browser` from 7.120.1 to 7.120.2 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/7.120.2/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@7.120.1...7.120.2) Updates `semver` from 7.6.1 to 7.6.2 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v7.6.1...v7.6.2) Updates `postcss` from 8.4.35 to 8.5.6 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.35...8.5.6) Updates `braces` from 2.3.2 to 3.0.2 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](https://github.com/micromatch/braces/commits/3.0.2) Updates `micromatch` from 3.1.10 to 4.0.4 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@3.1.10...4.0.4) --- updated-dependencies: - dependency-name: "@sentry/browser" dependency-version: 7.120.2 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: semver dependency-version: 7.6.2 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: postcss dependency-version: 8.5.6 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: braces dependency-version: 3.0.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-version: 4.0.4 dependency-type: indirect dependency-group: npm_and_yarn ... * fix: package.json to reduce vulnerabilities (#18) The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116 - https://snyk.io/vuln/SNYK-JS-BRACEEXPANSION-9789073 * build(deps): bump the npm_and_yarn group across 1 directory with 6 updates (#19) Bumps the npm_and_yarn group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@sentry/browser](https://github.com/getsentry/sentry-javascript) | `7.120.2` | `7.120.3` | | [semver](https://github.com/npm/node-semver) | `7.6.2` | `7.6.3` | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [cipher-base](https://github.com/crypto-browserify/cipher-base) | `1.0.4` | `1.0.6` | | [micromatch](https://github.com/micromatch/micromatch) | `4.0.4` | `4.0.8` | | [sha.js](https://github.com/crypto-browserify/sha.js) | `2.4.11` | `2.4.12` | Updates `@sentry/browser` from 7.120.2 to 7.120.3 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/7.120.3/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@7.120.2...7.120.3) Updates `semver` from 7.6.2 to 7.6.3 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v7.6.2...v7.6.3) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `cipher-base` from 1.0.4 to 1.0.6 - [Changelog](https://github.com/browserify/cipher-base/blob/master/CHANGELOG.md) - [Commits](browserify/cipher-base@v1.0.4...v1.0.6) Updates `micromatch` from 4.0.4 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.4...4.0.8) Updates `sha.js` from 2.4.11 to 2.4.12 - [Changelog](https://github.com/browserify/sha.js/blob/master/CHANGELOG.md) - [Commits](browserify/sha.js@v2.4.11...v2.4.12) --- updated-dependencies: - dependency-name: "@sentry/browser" dependency-version: 7.120.3 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: semver dependency-version: 7.6.3 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: braces dependency-version: 3.0.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cipher-base dependency-version: 1.0.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-version: 4.0.8 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: sha.js dependency-version: 2.4.12 dependency-type: indirect dependency-group: npm_and_yarn ... * feat: + imkey in new user import * chore: make linter happy * [release] 0.93.72 (#37) * Update dev scripts to use cross-env around the webpack build, so memory limits actually get raised * feat: add Gnosis Safe batch transaction support * build(deps): bump node-forge (#20) Bumps the npm_and_yarn group with 1 update in the / directory: [node-forge](https://github.com/digitalbazaar/forge). Updates `node-forge` from 1.3.1 to 1.3.2 - [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md) - [Commits](digitalbazaar/forge@v1.3.1...v1.3.2) --- updated-dependencies: - dependency-name: node-forge dependency-version: 1.3.2 dependency-type: indirect dependency-group: npm_and_yarn ... * Squashed commit of the following: commit edc2344 Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue Dec 23 08:33:10 2025 +0700 build(deps): bump node-forge (#20) Bumps the npm_and_yarn group with 1 update in the / directory: [node-forge](https://github.com/digitalbazaar/forge). Updates `node-forge` from 1.3.1 to 1.3.2 - [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md) - [Commits](digitalbazaar/forge@v1.3.1...v1.3.2) --- updated-dependencies: - dependency-name: node-forge dependency-version: 1.3.2 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * fix: package.json to reduce vulnerabilities (#22) The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8720086 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577917 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577918 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577916 - https://snyk.io/vuln/SNYK-JS-SECP256K1-8237220 - https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8172694 - https://snyk.io/vuln/SNYK-JS-TMP-11501554 - https://snyk.io/vuln/SNYK-JS-BASEX-10118294 * feat: update approve list action (RabbyHub#3379) * style: tuning (RabbyHub#3378) * style: tuning * fix: tailwind * style: tuning * feat: lp token manage v2 (RabbyHub#3374) * feat: lp token manage v2 * fix: bugs * fix: bugs * fix: bugs * feat: + imkey in new user import (RabbyHub#3368) * feat: + imkey in new user import * chore: make linter happy * fix: custom rpc enable (RabbyHub#3367) * chore: update approve list (RabbyHub#3384) * fix: pinnedChain array (RabbyHub#3385) * fix: ui style (RabbyHub#3369) * style: change chain icon position * style: fix gnosis chain alert * fix: asset btn * fix: low value text * feat: update i18n * fix: robust change (RabbyHub#3386) * 0.93.68 * [release] 0.93.68 * feat: no need translate defi (RabbyHub#3391) * chore: update approve list (RabbyHub#3390) * fix: shake desktop (RabbyHub#3389) * feat: support password guard on whitelist (RabbyHub#3388) * feat: support password guard on whitelist * ux: tuning * chore: adjust and fix * fix: tuning * style: tuning * style: tuning * chore: tuning * chore: code cleanup * fix: search logic * style: tuning * style: little fix * feat: implement address deletion functionality and update UI messages (RabbyHub#3382) * feat: implement address deletion functionality and update UI messages * fix: remove authentic before goToHDManager * fix: ui not update after deleted * chore: remove useless console * feat: update i18n --------- * 0.93.69 * [release] 0.93.69 * chore: rm useless zip * fix: all token mode filter (RabbyHub#3397) * fix: all token mode filter * docs: comment * fix: remove is verified filter * fix: is_verified filter * fix: style * feat: search contact balance token * feat: asset list contact * fix: search holds tokens * feat: add transaction gas limit mapping and integrate into gas limit calculation (RabbyHub#3400) * feat: enhance empty state display for seed phrase addresses (RabbyHub#3401) * fix: update localization messages for unsupported address type in multiple languages (RabbyHub#3403) * chore: update approve list (RabbyHub#3404) * feat: update gnosis chain (RabbyHub#3399) * feat: update gnosis chain * feat: udpate safe-deployments * feat: update gnosis sdk * feat: update changelog & i18n (RabbyHub#3405) * feat: update changelog * feat: update i18n * chore * 0.93.70 * [release] 0.93.70 * fix: package.json to reduce vulnerabilities (#24) The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8187303 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577916 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577917 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577918 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8720086 - https://snyk.io/vuln/SNYK-JS-SECP256K1-8237220 * build(deps): bump the npm_and_yarn group across 0 directory with 2 updates (#23) Updates `base-x` from 1.1.0 to 3.0.8 - [Commits](cryptocoinjs/base-x@v1.1.0...v3.0.8) Updates `cross-spawn` from 6.0.5 to 6.0.6 - [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/v6.0.6/CHANGELOG.md) - [Commits](moxystudio/node-cross-spawn@v6.0.5...v6.0.6) --- updated-dependencies: - dependency-name: base-x dependency-version: 3.0.8 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cross-spawn dependency-version: 6.0.6 dependency-type: indirect dependency-group: npm_and_yarn ... * Potential fix for code scanning alert no. 7: Client-side cross-site scripting (#25) * feat: prediction (RabbyHub#3383) * wip * feat: implement auto-connect and personal sign logic; update UI components for better navigation and layout * feat: enhance auto personal sign logic with message validation and update RPC flow to pass message parameters * feat: add new home hover and inactive icons, update DesktopNav component * fix: approval auto flex * feat: add isFromDesktopDapp flag to ProviderRequest and update request handling * style: change layout * style: change token list style * refactor: wrap setupDappIframeSyncRoute in domReadyCall for improved loading handling * fix: adjust approval condition to handle non-desktop DApp requests * style: change profile header * chore: fix style * feat: add prediction feature support and loading state for DApp iframe * fix: ip * feat: update nav * feat: update prediction feature messages and dependencies * chore: fix some style * chore: fix style * chore: fix style * feat: delay setup of DApp iframe sync route for improved loading * feat: enhance auto personal sign condition for desktop DApp requests * fix: nav * fix: style * fix: style * Update src/background/controller/provider/autoConnect.ts * fix: remove unnecessary blank line in shouldAutoPersonalSign function * fix: comment out IframeLoadingBar component in DappIframeLoading * fix: logo * fix: update rabby-api version to 0.9.53 --------- * fix: tokenItem type is_core be null (RabbyHub#3407) * feat: update changelog (RabbyHub#3408) * feat: update changelog * feat: update i18n * 0.93.71 * [release] 0.93.71 * chore: update approve list (RabbyHub#3416) * feat: add kava in open ocean (RabbyHub#3414) * feat: update home pnl (RabbyHub#3413) * fix: update data splitting logic in getCustomTxParamsData to use regex for separator (RabbyHub#3409) * feat: enhance Dapp iframe with error handling and network messages (RabbyHub#3410) * feat: enhance Dapp iframe with error handling and network messages * feat: improve error component layout and add clsx for conditional styling * feat: enhance iframe loading and error handling based on permission status * fix: hash (RabbyHub#3415) * fix: hash * feat: update i18n * fix: perps history empty when switch account (RabbyHub#3417) * 0.93.72 * [release] 0.93.72 * chore: introduce claude code for code review * _raw\images * Potential fix for code scanning alert no. 6: Client-side cross-site scripting (#35) * fix: package.json to reduce vulnerabilities (#34) The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-BABELRUNTIME-10044504 - https://snyk.io/vuln/SNYK-JS-CIPHERBASE-12084814 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-14908844 - https://snyk.io/vuln/SNYK-JS-LODASH-15053838 - https://snyk.io/vuln/SNYK-JS-NANOID-8492085 - https://snyk.io/vuln/SNYK-JS-SHAJS-12089400 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8187303 - https://snyk.io/vuln/SNYK-JS-WEB3UTILS-6229337 - https://snyk.io/vuln/SNYK-JS-WS-7266574 - https://snyk.io/vuln/SNYK-JS-QS-14724253 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577916 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577917 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577918 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8720086 - https://snyk.io/vuln/SNYK-JS-BIGINTBUFFER-3364597 - https://snyk.io/vuln/SNYK-JS-SECP256K1-8237220 - https://snyk.io/vuln/SNYK-JS-TMP-11501554 - https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8172694 - https://snyk.io/vuln/SNYK-JS-SOLANAWEB3JS-6647564 - https://snyk.io/vuln/SNYK-JS-BASEX-10118294 - https://snyk.io/vuln/SNYK-JS-BRACEEXPANSION-9789073 * fix: package.json to reduce vulnerabilities (#33) The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-BABELRUNTIME-10044504 - https://snyk.io/vuln/SNYK-JS-BRACES-6838727 - https://snyk.io/vuln/SNYK-JS-CIPHERBASE-12084814 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-14908844 - https://snyk.io/vuln/SNYK-JS-GLOBPARENT-1016905 - https://snyk.io/vuln/SNYK-JS-LODASH-15053838 - https://snyk.io/vuln/SNYK-JS-MICROMATCH-6838728 - https://snyk.io/vuln/SNYK-JS-NANOID-8492085 - https://snyk.io/vuln/SNYK-JS-POSTCSS-5926692 - https://snyk.io/vuln/SNYK-JS-QS-14724253 - https://snyk.io/vuln/SNYK-JS-SHAJS-12089400 - https://snyk.io/vuln/SNYK-JS-UNSETVALUE-2400660 - https://snyk.io/vuln/SNYK-JS-WEBPACK-7840298 - https://snyk.io/vuln/SNYK-JS-WEBPACKDEVSERVER-10300775 - https://snyk.io/vuln/SNYK-JS-WEBPACKDEVSERVER-10300777 - https://snyk.io/vuln/SNYK-JS-IP-12704893 - https://snyk.io/vuln/SNYK-JS-IP-12761655 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8720086 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8187303 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577917 - https://snyk.io/vuln/SNYK-JS-WEB3UTILS-6229337 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577918 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-7577916 - https://snyk.io/vuln/SNYK-JS-BIGINTBUFFER-3364597 - https://snyk.io/vuln/SNYK-JS-WS-7266574 - https://snyk.io/vuln/SNYK-JS-CROSSSPAWN-8303230 - https://snyk.io/vuln/SNYK-JS-NTHCHECK-1586032 - https://snyk.io/vuln/SNYK-JS-SECP256K1-8237220 - https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8172694 - https://snyk.io/vuln/SNYK-JS-IP-7148531 - https://snyk.io/vuln/SNYK-JS-SOLANAWEB3JS-6647564 - https://snyk.io/vuln/SNYK-JS-BASEX-10118294 - https://snyk.io/vuln/SNYK-JS-BRACEEXPANSION-9789073 - https://snyk.io/vuln/SNYK-JS-SIRV-12558119 - https://snyk.io/vuln/SNYK-JS-JSYAML-13961110 * [Snyk] Security upgrade ethers from 5.4.2 to 6.0.0 (#32) * chore(deps): bump h3 from 1.11.1 to 1.15.5 Bumps [h3](https://github.com/h3js/h3) from 1.11.1 to 1.15.5. - [Release notes](https://github.com/h3js/h3/releases) - [Changelog](https://github.com/h3js/h3/blob/v1.15.5/CHANGELOG.md) - [Commits](h3js/h3@v1.11.1...v1.15.5) --- updated-dependencies: - dependency-name: h3 dependency-version: 1.15.5 dependency-type: indirect ... * fix: package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8187303 * chore(deps): bump lodash from 4.17.21 to 4.17.23 Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.17.23. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.17.23) --- updated-dependencies: - dependency-name: lodash dependency-version: 4.17.23 dependency-type: direct:production ... * build(deps): bump h3 in the npm_and_yarn group across 1 directory Bumps the npm_and_yarn group with 1 update in the / directory: [h3](https://github.com/h3js/h3). Updates `h3` from 1.11.1 to 1.15.5 - [Release notes](https://github.com/h3js/h3/releases) - [Changelog](https://github.com/h3js/h3/blob/v1.15.5/CHANGELOG.md) - [Commits](h3js/h3@v1.11.1...v1.15.5) --- updated-dependencies: - dependency-name: h3 dependency-version: 1.15.5 dependency-type: indirect dependency-group: npm_and_yarn ... * swap 1inch --------- --------- * Update job name in CircleCI config (#41) 94da053 CI: Update the CircleCI workflow to run the rabby-wallet-hub job instead of the previous job name. --------- Signed-off-by: AU_019 <64915515+Dargon789@users.noreply.github.com> Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com> Co-authored-by: snyk-bot <snyk-bot@snyk.io> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: snyk-io[bot] <141718529+snyk-io[bot]@users.noreply.github.com> Co-authored-by: vvvvvv1vvvvvv <galennnnnnn@gmail.com> Co-authored-by: Drew Fisher <drew@pods.media> Co-authored-by: hz002 <zs4733525@gmail.com> Co-authored-by: richardo2016x <104543757+richardo2016x@users.noreply.github.com> Co-authored-by: vvvvvv1vvvvvv <86296331+vvvvvv1vvvvvv@users.noreply.github.com> Co-authored-by: Hodor <lost1q84@gmail.com> Co-authored-by: DMY <147dmy@gmail.com> Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> Co-authored-by: kim <180150277+jinming0618@users.noreply.github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 19, 2025

sourcery-ai bot reviewed Mar 19, 2025

View reviewed changes

Merge branch 'develop' into dependabot/npm_and_yarn/npm_and_yarn-9fd8…

6216b30

…08f910

Dargon789 merged commit 5c81b36 into develop Mar 19, 2025
8 of 9 checks passed

Dargon789 deleted the dependabot/npm_and_yarn/npm_and_yarn-9fd808f910 branch March 19, 2025 02:20

Dargon789 mentioned this pull request Jan 23, 2026

Main (#40) #42

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump the npm_and_yarn group across 1 directory with 14 updates#6

build(deps): bump the npm_and_yarn group across 1 directory with 14 updates#6
Dargon789 merged 2 commits intodevelopfrom
dependabot/npm_and_yarn/npm_and_yarn-9fd808f910

dependabot bot commented on behalf of github Mar 19, 2025 •

edited by sourcery-ai bot

Loading

Uh oh!

sourcery-ai bot commented Mar 19, 2025 •

edited

Loading

Interacting with Sourcery

Customizing Your Experience

Getting Help

Uh oh!

sourcery-ai bot left a comment

Uh oh!

snyk-io bot commented Mar 19, 2025 •

edited

Loading

Uh oh!

socket-security bot commented Mar 19, 2025 •

edited

Loading

Uh oh!

socket-security bot commented Mar 19, 2025 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Path	Size
`@sentry/browser` (incl. Tracing, Replay, Feedback) - Webpack (gzipped)	80.96 KB
`@sentry/browser` (incl. Tracing, Replay) - Webpack (gzipped)	71.89 KB
`@sentry/browser` (incl. Tracing, Replay with Canvas) - Webpack (gzipped)	76.14 KB
`@sentry/browser` (incl. Tracing, Replay) - Webpack with treeshaking flags (gzipped)	65.52 KB
`@sentry/browser` (incl. Tracing) - Webpack (gzipped)	35.77 KB
`@sentry/browser` (incl. browserTracingIntegration) - Webpack (gzipped)	35.66 KB
`@sentry/browser` (incl. Feedback) - Webpack (gzipped)	31.71 KB
`@sentry/browser` (incl. sendFeedback) - Webpack (gzipped)	31.72 KB
`@sentry/browser` - Webpack (gzipped)	22.91 KB
`@sentry/browser` (incl. Tracing, Replay, Feedback) - ES6 CDN Bundle (gzipped)	79.17 KB
`@sentry/browser` (incl. Tracing, Replay) - ES6 CDN Bundle (gzipped)	70.49 KB
`@sentry/browser` (incl. Tracing) - ES6 CDN Bundle (gzipped)	36.17 KB
`@sentry/browser` - ES6 CDN Bundle (gzipped)	25.41 KB
`@sentry/browser` (incl. Tracing, Replay) - ES6 CDN Bundle (minified & uncompressed)	221.92 KB
`@sentry/browser` (incl. Tracing) - ES6 CDN Bundle (minified & uncompressed)	109.52 KB
`@sentry/browser` - ES6 CDN Bundle (minified & uncompressed)	76.24 KB
`@sentry/browser` (incl. Tracing) - ES5 CDN Bundle (gzipped)	39.45 KB
`@sentry/react` (incl. Tracing, Replay) - Webpack (gzipped)	72.4 KB
`@sentry/react` - Webpack (gzipped)	22.94 KB
`@sentry/nextjs` Client (incl. Tracing, Replay) - Webpack (gzipped)	90.16 KB
`@sentry/nextjs` Client - Webpack (gzipped)	54.27 KB
`@sentry-internal/feedback` - Webpack (gzipped)	17.34 KB

Path	Size
`@sentry/browser` (incl. Tracing, Replay, Feedback) - Webpack (gzipped)	80.83 KB
`@sentry/browser` (incl. Tracing, Replay) - Webpack (gzipped)	71.77 KB
`@sentry/browser` (incl. Tracing, Replay with Canvas) - Webpack (gzipped)	76.02 KB
`@sentry/browser` (incl. Tracing, Replay) - Webpack with treeshaking flags (gzipped)	65.38 KB
`@sentry/browser` (incl. Tracing) - Webpack (gzipped)	35.64 KB
`@sentry/browser` (incl. browserTracingIntegration) - Webpack (gzipped)	35.53 KB
`@sentry/browser` (incl. Feedback) - Webpack (gzipped)	31.6 KB
`@sentry/browser` (incl. sendFeedback) - Webpack (gzipped)	31.61 KB

Conversation

dependabot bot commented on behalf of github Mar 19, 2025 • edited by sourcery-ai bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

7.119.1

7.119.0

Bundle size 📦

7.118.0

Bundle size 📦

7.119.1

7.119.0

7.118.0

7.117.0

7.116.0

7.115.0

7.114.0

Important Changes

Other Changes

3.1.11

3.3.8

3.3.7

v7.5.3

7.5.3 (2023-06-22)

Bug Fixes

Documentation

7.5.3 (2023-06-22)

Bug Fixes

Documentation

8.4.32

8.4.32

v5.94.0

Bug Fixes

New Features

Security

v5.93.0

Bug Fixes

New Features

v5.92.1

Bug Fixes

v5.92.0

Bug Fixes

v7.26.10 (2025-03-11)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

🏠 Internal

Committers: 6

v7.26.9 (2025-02-14)

🐛 Bug Fix

v7.26.10 (2025-03-11)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

🏠 Internal

v7.26.9 (2025-02-14)

🐛 Bug Fix

🏠 Internal

v7.26.7 (2025-01-24)

🐛 Bug Fix

0.10.64 (2024-02-27)

Bug Fixes

0.10.63 (2024-02-23)

Bug Fixes

Maintenance Improvements

0.10.62 (2022-08-02)

Maintenance Improvements

0.10.61 (2022-04-20)

Bug Fixes

Maintenance Improvements

0.10.60 (2022-04-07)

Maintenance Improvements

0.10.64 (2024-02-27)

Bug Fixes

0.10.63 (2024-02-23)

Bug Fixes

Maintenance Improvements

0.10.62 (2022-08-02)

Maintenance Improvements

0.10.61 (2022-04-20)

Bug Fixes

Maintenance Improvements

dependabot bot commented on behalf of github Mar 19, 2025 •

edited by sourcery-ai bot

Loading

Support named matching groups in `RegExp`

sourcery-ai bot commented Mar 19, 2025 •

edited

Loading

snyk-io bot commented Mar 19, 2025 •

edited

Loading

socket-security bot commented Mar 19, 2025 •

edited

Loading

socket-security bot commented Mar 19, 2025 •

edited

Loading