Skip to content

deps: bump the production-deps group across 1 directory with 12 updates#82

Closed
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/dev/production-deps-0e526c6262
Closed

deps: bump the production-deps group across 1 directory with 12 updates#82
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/dev/production-deps-0e526c6262

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 16, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the production-deps group with 12 updates in the / directory:

Package From To
@simplewebauthn/server 13.3.0 13.3.2
@stripe/stripe-react-native 0.63.0 0.69.0
@walletconnect/react-native-compat 2.23.9 2.23.10
@walletconnect/sign-client 2.23.9 2.23.10
axios 1.16.1 1.18.1
lucide-react-native 1.16.0 1.24.0
qs 6.15.2 6.15.3
uuid 14.0.0 14.0.1
viem 2.53.1 2.55.2
zustand 5.0.13 5.0.14
@walletconnect/types 2.23.9 2.23.10
react-test-renderer 19.0.0 19.2.7

Updates @simplewebauthn/server from 13.3.0 to 13.3.2

Release notes

Sourced from @​simplewebauthn/server's releases.

v13.3.2

This update fixes a CVSS v4 Low (2.0) security vulnerability identified in @​simplewebauthn/server. See the security advisory linked below for more information.

Changes:

  • [server] Fixed an issue with verifyRegistrationResponse() allowing a maliciously-crafted attestation statement's x5c to contain a self-signed "root certificate" instead of chaining back to an RP-specified trust anchor (GHSA-6hxq-p678-4hr2)

v13.3.1

Changes:

  • [server] Fixed an issue with verifyRegistrationResponse() failing to verify some Packed and SafetyNet statements (#767)
Changelog

Sourced from @​simplewebauthn/server's changelog.

v13.3.2

This update fixes a CVSS v4 Low (2.0) security vulnerability identified in @​simplewebauthn/server. See the security advisory linked below for more information.

Changes:

  • [server] Fixed an issue with verifyRegistrationResponse() allowing a maliciously-crafted attestation statement's x5c to contain a self-signed "root certificate" instead of chaining back to an RP-specified trust anchor (GHSA-6hxq-p678-4hr2)

v13.3.1

Changes:

  • [server] Fixed an issue with verifyRegistrationResponse() failing to verify some Packed and SafetyNet statements (#767)
Commits
  • 84656ff Update version to 13.3.2
  • dd0d73c Fail cert path validation closed instead
  • 213e9ba Add test for failure to chain to trust anchor
  • 989507a Add tests for notAfter enforcement
  • b55f4b9 Move explanation into test
  • 7bed04c Update comments around cert chain validity
  • 6ee9644 Add new tests
  • c23890a Update existing test to use helpers
  • 8d02ed4 Add X.509 cert helpers for tests
  • 8a53d70 Use X509ChainBuilder for chain validation
  • Additional commits viewable in compare view

Updates @stripe/stripe-react-native from 0.63.0 to 0.69.0

Release notes

Sourced from @​stripe/stripe-react-native's releases.

0.69.0 - 2026-07-15

Changes

  • Updated Stripe iOS SDK from 26.0.0 to 26.3.0.
  • Updated Stripe Android SDK from 23.11.0 to 23.12.0.
  • [Changed] Connect embedded components — ConnectAccountOnboarding, ConnectPayments, and ConnectPayouts — are now generally available. No API changes; existing integrations continue to work without modification.

Features

  • [Added] Added standalone Link wallet APIs in private preview via useLinkController.

0.68.0 - 2026-06-29

Changes

  • Updated Stripe iOS SDK from 25.17.0 to 26.0.0.
  • Updated Stripe Android SDK from 23.10.1 to 23.11.0.
  • [Breaking] Updated Stripe Issuing Android Push Provisioning SDK from 1.1.0+ to 1.3.0+.
  • [Breaking] Updated Google Wallet Android Push Provisioning to the Unified Push Provisioning flow. This enables issued cards to be provisioned onto wearable devices via a mobile phone. canAddCardToWallet now requires cardBrand, and now checks if the card can be provisioned onto the mobile device or any connected wearable devices. See documentation for integration guide.

Features

  • [Added] Added Issuing support for Google Wallet Bounce Provisioning via the isBounceProvisioned parameter on AddToWalletButton. See documentation for integration guide.

Fixes

  • [Fixed] Manual bank-account entry in ConnectAccountOnboarding now creates an external account on iOS/Android by collecting a bank-account token instead of only Financial Connections accounts.

0.67.0 - 2026-06-09

Changes

  • Updated Stripe iOS SDK from 25.16.0 to 25.17.0.
  • Updated Stripe Android SDK from 23.9.+ to 23.10.+.
  • [Changed] Renamed the React Native Crypto Onramp wrapper API from presentCRSCARFDeclaration to presentUserAttestation.
  • [Changed] Updated Crypto Onramp submitIdentifiers results to return completed and carfTinRequired, and removed the valid field.

Features

  • [Added] Added typed Crypto Onramp API errors for app attestation and uncategorized API failures, including developer diagnostics and structured SDK version metadata.

Fixes

  • Updated Stripe iOS SDK from 25.15.0 to 25.16.0.
  • [Fixed] Matched iOS Onramp LinkAppearance.PrimaryButtonConfiguration mapping to Android so unspecified custom height and corner radius values use Link defaults.

0.66.0 - 2026-05-20

Changes

  • Updated Stripe iOS SDK from 25.14.0 to 25.15.0.
  • Updated Stripe Android SDK from 23.8.+ to 23.9.+.

Features

  • [Added] Added EU support to Onramp. This includes three new APIs, retrieveMissingIdentifiers, submitIdentifiers, and presentCRSCARFDeclaration, EU-specific additions to KycInfo including birthCountry, birthCity, and nationalities, as well as associated helper model types in Onramp.ts.

Please see the changelog for additional details.

0.65.1 - 2026-05-11

Fixes

  • [Fixed] Fixed bug preventing PaymentSheet from dismissing when presenting with timeout. (#2451)
  • [Fixed] Fixed spurious onExit events firing when using ASWebAuthenticationSession. (#2447)

... (truncated)

Changelog

Sourced from @​stripe/stripe-react-native's changelog.

0.69.0 - 2026-07-15

Changes

  • Updated Stripe iOS SDK from 26.0.0 to 26.3.0.
  • Updated Stripe Android SDK from 23.11.0 to 23.12.0.
  • [Changed] Connect embedded components — ConnectAccountOnboarding, ConnectPayments, and ConnectPayouts — are now generally available. No API changes; existing integrations continue to work without modification.

Features

  • [Added] Added standalone Link wallet APIs in private preview via useLinkController.

0.68.0 - 2026-06-29

Changes

  • Updated Stripe iOS SDK from 25.17.0 to 26.0.0.
  • Updated Stripe Android SDK from 23.10.1 to 23.11.0.
  • [Breaking] Updated Stripe Issuing Android Push Provisioning SDK from 1.1.0+ to 1.3.0+.
  • [Breaking] Updated Google Wallet Android Push Provisioning to the Unified Push Provisioning flow. This enables issued cards to be provisioned onto wearable devices via a mobile phone. canAddCardToWallet now requires cardBrand, and now checks if the card can be provisioned onto the mobile device or any connected wearable devices. See documentation for integration guide.

Features

  • [Added] Added Issuing support for Google Wallet Bounce Provisioning via the isBounceProvisioned parameter on AddToWalletButton. See documentation for integration guide.

Fixes

  • [Fixed] Manual bank-account entry in ConnectAccountOnboarding now creates an external account on iOS/Android by collecting a bank-account token instead of only Financial Connections accounts.

0.67.0 - 2026-06-09

Changes

  • Updated Stripe iOS SDK from 25.16.0 to 25.17.0.
  • Updated Stripe Android SDK from 23.9.+ to 23.10.+.
  • [Changed] Renamed the React Native Crypto Onramp wrapper API from presentCRSCARFDeclaration to presentUserAttestation.
  • [Changed] Updated Crypto Onramp submitIdentifiers results to return completed and carfTinRequired, and removed the valid field.

Features

  • [Added] Added typed Crypto Onramp API errors for app attestation and uncategorized API failures, including developer diagnostics and structured SDK version metadata.

Fixes

  • Updated Stripe iOS SDK from 25.15.0 to 25.16.0.
  • [Fixed] Matched iOS Onramp LinkAppearance.PrimaryButtonConfiguration mapping to Android so unspecified custom height and corner radius values use Link defaults.

0.66.0 - 2026-05-20

Changes

  • Updated Stripe iOS SDK from 25.14.0 to 25.15.0.
  • Updated Stripe Android SDK from 23.8.+ to 23.9.+.

Features

  • [Added] Added EU support to Onramp. This includes three new APIs, retrieveMissingIdentifiers, submitIdentifiers, and presentCRSCARFDeclaration, EU-specific additions to KycInfo including birthCountry, birthCity, and nationalities, as well as associated helper model types in Onramp.ts.

0.65.1 - 2026-05-11

Fixes

  • [Fixed] Fixed bug preventing PaymentSheet from dismissing when presenting with timeout. (#2451)
  • [Fixed] Fixed spurious onExit events firing when using ASWebAuthenticationSession. (#2447)

0.65.0 - 2026-04-29

... (truncated)

Commits

Updates @walletconnect/react-native-compat from 2.23.9 to 2.23.10

Release notes

Sourced from @​walletconnect/react-native-compat's releases.

@​walletconnect/react-native-compat@​2.23.10

Patch Changes

Changelog

Sourced from @​walletconnect/react-native-compat's changelog.

2.23.10

Patch Changes

Commits
  • 3ef9f3e chore: update versions and lerna.json
  • 73b7d5c chore: update yttrium dependencies-wasm-0.10.57-kotlin-0.10.58
  • fcaaf3f chore: update yttrium dependencies-wasm-0.10.54-swift-0.10.54-kotlin-0.10.55
  • See full diff in compare view

Updates @walletconnect/sign-client from 2.23.9 to 2.23.10

Release notes

Sourced from @​walletconnect/sign-client's releases.

@​walletconnect/sign-client@​2.23.10

Patch Changes

  • #7252 cd32ff1 Thanks @​ganchoradkov! - Add TVF extraction for Canton's canton_prepareSignExecute.

  • #7253 63ff999 Thanks @​ganchoradkov! - Deprecate the authenticate method on Sign Client. It is marked @deprecated in the type definitions and logs a runtime warning when called. Use connect()'s authentication parameter instead to establish an authenticated session.

  • #7255 3233b47 Thanks @​ganchoradkov! - Reject plaintext TYPE_2 envelopes delivered over the relay transport. TYPE_2 payloads are now only handled in link mode in the sign engine (onRelayMessage) and pairing (registerRelayerEvents) relay handlers.

  • #7254 4af4524 Thanks @​ganchoradkov! - Enforce controller authorization on session update. Incoming wc_sessionUpdate requests are now rejected (UNAUTHORIZED_UPDATE_REQUEST) unless the sending peer is the session controller, and the public update() method now throws when called by a non-controller. This prevents a non-controller peer (e.g. a dApp using a custom SDK) from mutating a session's namespaces.

  • Updated dependencies [cd32ff1, 63ff999, 3233b47, 3ea740e, da98172]:

    • @​walletconnect/utils@​2.23.10
    • @​walletconnect/types@​2.23.10
    • @​walletconnect/core@​2.23.10
Changelog

Sourced from @​walletconnect/sign-client's changelog.

2.23.10

Patch Changes

  • #7252 cd32ff1 Thanks @​ganchoradkov! - Add TVF extraction for Canton's canton_prepareSignExecute.

  • #7253 63ff999 Thanks @​ganchoradkov! - Deprecate the authenticate method on Sign Client. It is marked @deprecated in the type definitions and logs a runtime warning when called. Use connect()'s authentication parameter instead to establish an authenticated session.

  • #7255 3233b47 Thanks @​ganchoradkov! - Reject plaintext TYPE_2 envelopes delivered over the relay transport. TYPE_2 payloads are now only handled in link mode in the sign engine (onRelayMessage) and pairing (registerRelayerEvents) relay handlers.

  • #7254 4af4524 Thanks @​ganchoradkov! - Enforce controller authorization on session update. Incoming wc_sessionUpdate requests are now rejected (UNAUTHORIZED_UPDATE_REQUEST) unless the sending peer is the session controller, and the public update() method now throws when called by a non-controller. This prevents a non-controller peer (e.g. a dApp using a custom SDK) from mutating a session's namespaces.

  • Updated dependencies [cd32ff1, 63ff999, 3233b47, 3ea740e, da98172]:

    • @​walletconnect/utils@​2.23.10
    • @​walletconnect/types@​2.23.10
    • @​walletconnect/core@​2.23.10
Commits
  • 3ef9f3e chore: update versions and lerna.json
  • acfea2a Merge branch 'v2.0' into feat/canton-tvf
  • 8ba23a9 Merge branch 'v2.0' into fix/type2-relay-envelope-auth
  • 0f75b1c Merge branch 'v2.0' into fix/session-update-extend-controller-auth
  • 4c0e866 fix: guard TYPE_2 check against decode errors and link-mode encoding
  • ecabc88 fix: reject plaintext TYPE_2 envelopes on relay transport
  • 02ddf18 fix: await isValidUpdate/isValidExtend in session request handlers
  • 54673cb test: update via controller in namespaces update test
  • 96652ee fix: scope controller authorization to session update only
  • 4af4524 fix: enforce controller authorization on session update & extend
  • Additional commits viewable in compare view

Updates axios from 1.16.1 to 1.18.1

Release notes

Sourced from axios's releases.

v1.18.1 — June 21, 2026

This release focuses on Node HTTP adapter fixes, safer AxiosError serialisation, runtime/type correctness fixes, documentation updates, and dependency maintenance.

🐛 Bug Fixes

  • AxiosError Serialisation: Made AxiosError#cause non-enumerable to prevent circular JSON serialisation failures when errors include nested causes. (#10913)
  • Node HTTP Adapter: Guarded socket.setKeepAlive for proxy agent streams, accepted path-only URLs when socketPath is configured, deferred environment proxy handling to Node, and explicitly passed maxBodyLength through to follow-redirects. (#10917, #10930, #10942, #10993)
  • Runtime and Type Correctness: Fixed several runtime crashes, type definition mismatches, and incorrect error handling paths. (#10959, #11021)
  • AxiosURLSearchParams: Switched the encoder callback to an arrow function so encoder.call(this) receives the AxiosURLSearchParams instance correctly. (#11019)

🔧 Maintenance & Chores

  • Documentation: Documented sensitive headers and status transition behaviour, prepared cleaned-up docs, added Deno install instructions, and clarified that request data is request-specific (#11007, #11010, #11023, #11025)

  • Dependencies: Bumped vite, rollup, form-data, js-yaml, and multer across the root project, docs, smoke tests, and module test workspaces. (#11011, #11012, #11013, #11014, #11015, #11016, #11017, #11026)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

Full Changelog

v1.18.0 — June 13, 2026

This release hardens redirect and URL handling, improves the validateStatus configuration semantics, and includes updates to documentation, dependencies, and release metadata.

🔒 Security Fixes

  • Redirect Header Safety: Added Node HTTP adapter support for stripping caller-specified sensitive headers on cross-origin redirects, helping prevent custom auth headers such as API keys from leaking to another origin. (#10892)

  • URL And Request Hardening: Rejects malformed http: and https: URLs that omit // with ERR_INVALID_URL, while tightening prototype-pollution-safe config reads, stream size limits, FormData depth handling, data URL sizing, and local NO_PROXY matching. (#11000)

🐛 Bug Fixes

  • Status Validation: Added transitional.validateStatusUndefinedResolves so applications can opt in to treating validateStatus: undefined like the option was omitted, while validateStatus: null remains the explicit way to accept every status. (#10899)

🔧 Maintenance & Chores

  • Documentation: Published the v1.17.0 release notes, fixed a changelog typo, clarified the package update PR policy, and marked the proxy request config as Node.js-only in the advanced docs. (#10984, #10988, #10992, #10995)

  • Dependencies: Bumped @babel/core, @babel/preset-env, @commitlint/cli, @commitlint/config-conventional, @rollup/plugin-babel, @rollup/plugin-commonjs, @vitest/browser, @vitest/browser-playwright, eslint, lint-staged, rollup, vitest, and actions/checkout. (#10989, #10996, #10997)

  • Release Metadata: Prepared the 1.18.0 release by updating package metadata and the runtime VERSION value. (#11003)

... (truncated)

Changelog

Sourced from axios's changelog.

Changelog

v1.18.0 — June 13, 2026

This release hardens redirect and URL handling, improves the validateStatus configuration semantics, and includes updates to documentation, dependencies, and release metadata.

🔒 Security Fixes

  • Redirect Header Safety: Added Node HTTP adapter support for stripping caller-specified sensitive headers on cross-origin redirects, helping prevent custom auth headers such as API keys from leaking to another origin. (#10892)

  • URL And Request Hardening: Rejects malformed http: and https: URLs that omit // with ERR_INVALID_URL, while tightening prototype-pollution-safe config reads, stream size limits, FormData depth handling, data URL sizing, and local NO_PROXY matching. (#11000)

🐛 Bug Fixes

  • Status Validation: Added transitional.validateStatusUndefinedResolves so applications can opt in to treating validateStatus: undefined like the option was omitted, while validateStatus: null remains the explicit way to accept every status. (#10899)

🔧 Maintenance & Chores

  • Documentation: Published the v1.17.0 release notes, fixed a changelog typo, clarified the package update PR policy, and marked the proxy request config as Node.js-only in the advanced docs. (#10984, #10988, #10992, #10995)

  • Dependencies: Bumped @babel/core, @babel/preset-env, @commitlint/cli, @commitlint/config-conventional, @rollup/plugin-babel, @rollup/plugin-commonjs, @vitest/browser, @vitest/browser-playwright, eslint, lint-staged, rollup, vitest, and actions/checkout. (#10989, #10996, #10997)

  • Release Metadata: Prepared the 1.18.0 release by updating package metadata and the runtime VERSION value. (#11003)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

Full Changelog

v1.17.0 — June 1, 2026

This release adds Node HTTP zstd decompression, hardens config and release workflows, and fixes authentication, header, proxy, and type-handling regressions.

🔒 Security Fixes

  • Config Hardening: Guarded socketPath, params, and paramsSerializer reads with own-property checks to prevent inherited prototype values from affecting request behavior, including SSRF-sensitive paths. (#10901, #10922)
  • Release Publishing: Switched the publish workflow to npm staged publishing for safer, auditable package releases with provenance. (#10926)

🚀 New Features

  • HTTP Compression: Added Node HTTP adapter support for zstd response decompression, with transitional.advertiseZstdAcceptEncoding controlling whether zstd is advertised in Accept-Encoding. (#6792, #10920)

🐛 Bug Fixes

  • Authentication Handling: Restored Basic auth on same-origin Node redirects while continuing to strip credentials cross-origin, and aligned the fetch adapter with HTTP adapter behavior for URL-embedded Basic auth. (#10929, #10896)

... (truncated)

Commits
  • a209bfb chore(release): prepare release 1.18.1 (#11027)
  • fa6a55e chore(deps-dev): bump multer from 2.1.1 to 2.2.0 (#11026)
  • 40e7be8 docs: clarifies that request data is request-specific in axios (#11025)
  • a446b39 fix(AxiosURLSearchParams): use arrow function so encoder.call(this) receives ...
  • cf1306a docs: add Deno to install instructions (#11023)
  • b32880a fix: incorrect use of error (#11021)
  • 1792eda fix: ensure maxBodyLength is explicitly passed to follow-redirects (#10993)
  • 30499d6 fix: various runtime crashes and type definition mismatches (#10959)
  • 20ce9c4 fix(http): defer env proxy handling to Node (#10942)
  • e64bcf9 chore(deps): merge branch 'v1.x' into tests/module/cjs (#11014)
  • Additional commits viewable in compare view

Updates lucide-react-native from 1.16.0 to 1.24.0

Release notes

Sourced from lucide-react-native's releases.

Version 1.24.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.23.0...1.24.0

Version 1.23.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.22.0...1.23.0

Version 1.22.0

What's Changed

... (truncated)

Commits
  • 7291cbc fix(lucide-react-native): Add icon exports property to the package.json file ...
  • 63369b1 fix(lucide-react-native): restore the icons entry point in the JS bundles (#4...
  • 7e93884 fix(lcuide-react-native): Fix context provider export (#4497)
  • 5ff536e ci(release.yml): Fix workflow and remove version scripts in package scripts...
  • 2dd4be8 Fix provider exports (#4463)
  • See full diff in compare view

Updates qs from 6.15.2 to 6.15.3

Changelog

Sourced from qs's changelog.

6.15.3

  • [Fix] parse: enforce throwOnLimitExceeded for cumulative array growth via combine/merge
  • [Fix] utils: respect encoding of surrogate pairs across chunks (#559)
  • [Robustness] parse: throw the arrayLimit error before splitting oversized comma values
  • [Robustness] utils.merge / utils.assign: avoid invoking __proto__ setter when copying own properties
  • [Robustness] utils: enforce arrayLimit consistently across merge's array paths
  • [Perf] utils: make compact O(n) via a side-channel visited-set instead of Array.indexOf
  • [Deps] update side-channel
  • [Dev Deps] update eslint, mock-property, tape
  • [Tests] parse: characterize current lenient handling of unbalanced bracket keys (#558)
Commits
  • 18d085e v6.15.3
  • c38af42 [Deps] update side-channel
  • adce539 [Dev Deps] update eslint, mock-property, tape
  • 74a0f6a [Robustness] utils: enforce arrayLimit consistently across merge's arra...
  • f4938f5 [Tests] parse: characterize current lenient handling of unbalanced bracket ...
  • 5d5f723 [Perf] utils: make compact O(n) via a side-channel visited-set instead of...
  • 52afe00 [Robustness] parse: throw the arrayLimit error before splitting oversized...
  • 963e538 [Fix] parse: enforce throwOnLimitExceeded for cumulative array growth via...
  • 59da434 [Fix] utils: respect encoding of surrogate pairs across chunks
  • 9532969 [Robustness] utils.merge / utils.assign: avoid invoking __proto__ sette...
  • See full diff in compare view

Updates uuid from 14.0.0 to 14.0.1

Release notes

Sourced from uuid's releases.

v14.0.1

14.0.1 (2026-06-20)

Bug Fixes

  • add types condition to node export for moduleResolution bundler (#961) (27ffae5)
Changelog

Sourced from uuid's changelog.

14.0.1 (2026-06-20)

Bug Fixes

  • add types condition to node export for moduleResolution bundler (#961) (27ffae5)
Commits
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates viem from 2.53.1 to 2.55.2

Release notes

Sourced from viem's releases.

viem@2.55.2

Patch Changes

viem@2.55.1

Patch Changes

viem@2.55.0

Minor Changes

@dependabot
deps: bump the production-deps group across 1 directory with 12 updates
54ad7f1 
Bumps the production-deps group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@simplewebauthn/server](https://github.com/MasterKale/SimpleWebAuthn/tree/HEAD/packages/server) | `13.3.0` | `13.3.2` |
| [@stripe/stripe-react-native](https://github.com/stripe/stripe-react-native) | `0.63.0` | `0.69.0` |
| [@walletconnect/react-native-compat](https://github.com/WalletConnect/walletconnect-monorepo/tree/HEAD/packages/react-native-compat) | `2.23.9` | `2.23.10` |
| [@walletconnect/sign-client](https://github.com/WalletConnect/walletconnect-monorepo/tree/HEAD/packages/sign-client) | `2.23.9` | `2.23.10` |
| [axios](https://github.com/axios/axios) | `1.16.1` | `1.18.1` |
| [lucide-react-native](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react-native) | `1.16.0` | `1.24.0` |
| [qs](https://github.com/ljharb/qs) | `6.15.2` | `6.15.3` |
| [uuid](https://github.com/uuidjs/uuid) | `14.0.0` | `14.0.1` |
| [viem](https://github.com/wevm/viem) | `2.53.1` | `2.55.2` |
| [zustand](https://github.com/pmndrs/zustand) | `5.0.13` | `5.0.14` |
| [@walletconnect/types](https://github.com/WalletConnect/walletconnect-monorepo/tree/HEAD/packages/types) | `2.23.9` | `2.23.10` |
| [react-test-renderer](https://github.com/facebook/react/tree/HEAD/packages/react-test-renderer) | `19.0.0` | `19.2.7` |



Updates `@simplewebauthn/server` from 13.3.0 to 13.3.2
- [Release notes](https://github.com/MasterKale/SimpleWebAuthn/releases)
- [Changelog](https://github.com/MasterKale/SimpleWebAuthn/blob/master/CHANGELOG.md)
- [Commits](https://github.com/MasterKale/SimpleWebAuthn/commits/v13.3.2/packages/server)

Updates `@stripe/stripe-react-native` from 0.63.0 to 0.69.0
- [Release notes](https://github.com/stripe/stripe-react-native/releases)
- [Changelog](https://github.com/stripe/stripe-react-native/blob/master/CHANGELOG.md)
- [Commits](stripe/stripe-react-native@v0.63.0...v0.69.0)

Updates `@walletconnect/react-native-compat` from 2.23.9 to 2.23.10
- [Release notes](https://github.com/WalletConnect/walletconnect-monorepo/releases)
- [Changelog](https://github.com/WalletConnect/walletconnect-monorepo/blob/v2.0/packages/react-native-compat/CHANGELOG.md)
- [Commits](https://github.com/WalletConnect/walletconnect-monorepo/commits/@walletconnect/react-native-compat@2.23.10/packages/react-native-compat)

Updates `@walletconnect/sign-client` from 2.23.9 to 2.23.10
- [Release notes](https://github.com/WalletConnect/walletconnect-monorepo/releases)
- [Changelog](https://github.com/WalletConnect/walletconnect-monorepo/blob/v2.0/packages/sign-client/CHANGELOG.md)
- [Commits](https://github.com/WalletConnect/walletconnect-monorepo/commits/@walletconnect/sign-client@2.23.10/packages/sign-client)

Updates `axios` from 1.16.1 to 1.18.1
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.16.1...v1.18.1)

Updates `lucide-react-native` from 1.16.0 to 1.24.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.24.0/packages/lucide-react-native)

Updates `qs` from 6.15.2 to 6.15.3
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.15.2...v6.15.3)

Updates `uuid` from 14.0.0 to 14.0.1
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](uuidjs/uuid@v14.0.0...v14.0.1)

Updates `viem` from 2.53.1 to 2.55.2
- [Release notes](https://github.com/wevm/viem/releases)
- [Commits](https://github.com/wevm/viem/compare/viem@2.53.1...viem@2.55.2)

Updates `zustand` from 5.0.13 to 5.0.14
- [Release notes](https://github.com/pmndrs/zustand/releases)
- [Commits](pmndrs/zustand@v5.0.13...v5.0.14)

Updates `@walletconnect/types` from 2.23.9 to 2.23.10
- [Release notes](https://github.com/WalletConnect/walletconnect-monorepo/releases)
- [Changelog](https://github.com/WalletConnect/walletconnect-monorepo/blob/v2.0/packages/types/CHANGELOG.md)
- [Commits](https://github.com/WalletConnect/walletconnect-monorepo/commits/@walletconnect/types@2.23.10/packages/types)

Updates `react-test-renderer` from 19.0.0 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-test-renderer)

---
updated-dependencies:
- dependency-name: "@simplewebauthn/server"
  dependency-version: 13.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: "@stripe/stripe-react-native"
  dependency-version: 0.69.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: "@walletconnect/react-native-compat"
  dependency-version: 2.23.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: "@walletconnect/sign-client"
  dependency-version: 2.23.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: axios
  dependency-version: 1.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: lucide-react-native
  dependency-version: 1.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: qs
  dependency-version: 6.15.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: uuid
  dependency-version: 14.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: viem
  dependency-version: 2.55.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: zustand
  dependency-version: 5.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: "@walletconnect/types"
  dependency-version: 2.23.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: react-test-renderer
  dependency-version: 19.2.7
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: production-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jul 16, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from ArpitxGit as a code owner July 16, 2026 00:32
@dependabot @github

dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 20, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/dev/production-deps-0e526c6262 branch July 20, 2026 08:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@ArpitxGit ArpitxGit Awaiting requested review from ArpitxGit ArpitxGit is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants