Skip to content

deps: bump the production-deps group across 1 directory with 13 updates#86

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/dev/production-deps-0bba9877aa
Open

deps: bump the production-deps group across 1 directory with 13 updates#86
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/dev/production-deps-0bba9877aa

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown

Bumps the production-deps group with 13 updates in the / directory:

Package From To
@simplewebauthn/server 13.3.0 13.3.2
@stripe/stripe-react-native 0.63.0 0.70.0
@walletconnect/react-native-compat 2.23.9 2.23.10
@walletconnect/sign-client 2.23.9 2.23.10
axios 1.16.1 1.18.1
lucide-react-native 1.16.0 1.25.0
qs 6.15.2 6.15.3
uuid 14.0.0 14.0.1
viem 2.53.1 2.55.4
zustand 5.0.13 5.0.14
@walletconnect/types 2.23.9 2.23.10
react-test-renderer 19.0.0 19.2.7
lightningcss-linux-x64-gnu 1.32.0 1.33.0

Updates @simplewebauthn/server from 13.3.0 to 13.3.2

Release notes

Sourced from @​simplewebauthn/server's releases.

v13.3.2

This update fixes a CVSS v4 Low (2.0) security vulnerability identified in @​simplewebauthn/server. See the security advisory linked below for more information.

Changes:

  • [server] Fixed an issue with verifyRegistrationResponse() allowing a maliciously-crafted attestation statement's x5c to contain a self-signed "root certificate" instead of chaining back to an RP-specified trust anchor (GHSA-6hxq-p678-4hr2)

v13.3.1

Changes:

  • [server] Fixed an issue with verifyRegistrationResponse() failing to verify some Packed and SafetyNet statements (#767)
Changelog

Sourced from @​simplewebauthn/server's changelog.

v13.3.2

This update fixes a CVSS v4 Low (2.0) security vulnerability identified in @​simplewebauthn/server. See the security advisory linked below for more information.

Changes:

  • [server] Fixed an issue with verifyRegistrationResponse() allowing a maliciously-crafted attestation statement's x5c to contain a self-signed "root certificate" instead of chaining back to an RP-specified trust anchor (GHSA-6hxq-p678-4hr2)

v13.3.1

Changes:

  • [server] Fixed an issue with verifyRegistrationResponse() failing to verify some Packed and SafetyNet statements (#767)
Commits
  • 84656ff Update version to 13.3.2
  • dd0d73c Fail cert path validation closed instead
  • 213e9ba Add test for failure to chain to trust anchor
  • 989507a Add tests for notAfter enforcement
  • b55f4b9 Move explanation into test
  • 7bed04c Update comments around cert chain validity
  • 6ee9644 Add new tests
  • c23890a Update existing test to use helpers
  • 8d02ed4 Add X.509 cert helpers for tests
  • 8a53d70 Use X509ChainBuilder for chain validation
  • Additional commits viewable in compare view

Updates @stripe/stripe-react-native from 0.63.0 to 0.70.0

Release notes

Sourced from @​stripe/stripe-react-native's releases.

0.70.0 - 2026-07-16

Changes

  • [Changed] Renamed the Crypto Onramp error status enum from OnrampError to OnrampErrorStatus. Existing generic Onramp errors now use StripeError<OnrampErrorStatus>.
  • [Changed] Split rich Crypto Onramp errors into OnrampSdkError for SDK-owned diagnostics and OnrampApiError for API response context. Rich SDK errors use an onrampErrorType discriminator typed as OnrampErrorType, while API errors narrow it to OnrampApiErrorType and add fields such as reason, requestId, and API message/code details.
  • [Fixed] Android: PaymentMethod.Card.availableNetworks and PaymentMethod.USBankAccount.supportedNetworks now return the expected array of network strings instead of always returning null, matching iOS behavior.

Features

  • [Added] Added AppAttestationUnavailableError for local SDK app attestation availability/setup failures.
  • [Added] Added Crypto Onramp wallet ownership verification APIs, getWalletOwnershipChallenge and submitWalletOwnershipSignature, for EU Travel Rule compliance.
  • [Added] Added Arbitrum network support to Crypto Onramp.

0.69.0 - 2026-07-15

Changes

  • Updated Stripe iOS SDK from 26.0.0 to 26.3.0.
  • Updated Stripe Android SDK from 23.11.0 to 23.12.0.
  • [Changed] Connect embedded components — ConnectAccountOnboarding, ConnectPayments, and ConnectPayouts — are now generally available. No API changes; existing integrations continue to work without modification.

Features

  • [Added] Added standalone Link wallet APIs in private preview via useLinkController.

0.68.0 - 2026-06-29

Changes

  • Updated Stripe iOS SDK from 25.17.0 to 26.0.0.
  • Updated Stripe Android SDK from 23.10.1 to 23.11.0.
  • [Breaking] Updated Stripe Issuing Android Push Provisioning SDK from 1.1.0+ to 1.3.0+.
  • [Breaking] Updated Google Wallet Android Push Provisioning to the Unified Push Provisioning flow. This enables issued cards to be provisioned onto wearable devices via a mobile phone. canAddCardToWallet now requires cardBrand, and now checks if the card can be provisioned onto the mobile device or any connected wearable devices. See documentation for integration guide.

Features

  • [Added] Added Issuing support for Google Wallet Bounce Provisioning via the isBounceProvisioned parameter on AddToWalletButton. See documentation for integration guide.

Fixes

  • [Fixed] Manual bank-account entry in ConnectAccountOnboarding now creates an external account on iOS/Android by collecting a bank-account token instead of only Financial Connections accounts.

0.67.0 - 2026-06-09

Changes

  • Updated Stripe iOS SDK from 25.16.0 to 25.17.0.
  • Updated Stripe Android SDK from 23.9.+ to 23.10.+.
  • [Changed] Renamed the React Native Crypto Onramp wrapper API from presentCRSCARFDeclaration to presentUserAttestation.
  • [Changed] Updated Crypto Onramp submitIdentifiers results to return completed and carfTinRequired, and removed the valid field.

Features

  • [Added] Added typed Crypto Onramp API errors for app attestation and uncategorized API failures, including developer diagnostics and structured SDK version metadata.

Fixes

  • Updated Stripe iOS SDK from 25.15.0 to 25.16.0.
  • [Fixed] Matched iOS Onramp LinkAppearance.PrimaryButtonConfiguration mapping to Android so unspecified custom height and corner radius values use Link defaults.

0.66.0 - 2026-05-20

Changes

  • Updated Stripe iOS SDK from 25.14.0 to 25.15.0.

... (truncated)

Changelog

Sourced from @​stripe/stripe-react-native's changelog.

0.70.0 - 2026-07-16

Changes

  • [Changed] Renamed the Crypto Onramp error status enum from OnrampError to OnrampErrorStatus. Existing generic Onramp errors now use StripeError<OnrampErrorStatus>.
  • [Changed] Split rich Crypto Onramp errors into OnrampSdkError for SDK-owned diagnostics and OnrampApiError for API response context. Rich SDK errors use an onrampErrorType discriminator typed as OnrampErrorType, while API errors narrow it to OnrampApiErrorType and add fields such as reason, requestId, and API message/code details.
  • [Fixed] Android: PaymentMethod.Card.availableNetworks and PaymentMethod.USBankAccount.supportedNetworks now return the expected array of network strings instead of always returning null, matching iOS behavior.

Features

  • [Added] Added AppAttestationUnavailableError for local SDK app attestation availability/setup failures.
  • [Added] Added Crypto Onramp wallet ownership verification APIs, getWalletOwnershipChallenge and submitWalletOwnershipSignature, for EU Travel Rule compliance.
  • [Added] Added Arbitrum network support to Crypto Onramp.

0.69.0 - 2026-07-15

Changes

  • Updated Stripe iOS SDK from 26.0.0 to 26.3.0.
  • Updated Stripe Android SDK from 23.11.0 to 23.12.0.
  • [Changed] Connect embedded components — ConnectAccountOnboarding, ConnectPayments, and ConnectPayouts — are now generally available. No API changes; existing integrations continue to work without modification.

Features

  • [Added] Added standalone Link wallet APIs in private preview via useLinkController.

0.68.0 - 2026-06-29

Changes

  • Updated Stripe iOS SDK from 25.17.0 to 26.0.0.
  • Updated Stripe Android SDK from 23.10.1 to 23.11.0.
  • [Breaking] Updated Stripe Issuing Android Push Provisioning SDK from 1.1.0+ to 1.3.0+.
  • [Breaking] Updated Google Wallet Android Push Provisioning to the Unified Push Provisioning flow. This enables issued cards to be provisioned onto wearable devices via a mobile phone. canAddCardToWallet now requires cardBrand, and now checks if the card can be provisioned onto the mobile device or any connected wearable devices. See documentation for integration guide.

Features

  • [Added] Added Issuing support for Google Wallet Bounce Provisioning via the isBounceProvisioned parameter on AddToWalletButton. See documentation for integration guide.

Fixes

  • [Fixed] Manual bank-account entry in ConnectAccountOnboarding now creates an external account on iOS/Android by collecting a bank-account token instead of only Financial Connections accounts.

0.67.0 - 2026-06-09

Changes

  • Updated Stripe iOS SDK from 25.16.0 to 25.17.0.
  • Updated Stripe Android SDK from 23.9.+ to 23.10.+.
  • [Changed] Renamed the React Native Crypto Onramp wrapper API from presentCRSCARFDeclaration to presentUserAttestation.
  • [Changed] Updated Crypto Onramp submitIdentifiers results to return completed and carfTinRequired, and removed the valid field.

Features

  • [Added] Added typed Crypto Onramp API errors for app attestation and uncategorized API failures, including developer diagnostics and structured SDK version metadata.

Fixes

  • Updated Stripe iOS SDK from 25.15.0 to 25.16.0.
  • [Fixed] Matched iOS Onramp LinkAppearance.PrimaryButtonConfiguration mapping to Android so unspecified custom height and corner radius values use Link defaults.

0.66.0 - 2026-05-20

Changes

  • Updated Stripe iOS SDK from 25.14.0 to 25.15.0.

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by cttsai-stripe, a new releaser for @​stripe/stripe-react-native since your current version.


Updates @walletconnect/react-native-compat from 2.23.9 to 2.23.10

Release notes

Sourced from @​walletconnect/react-native-compat's releases.

@​walletconnect/react-native-compat@​2.23.10

Patch Changes

Changelog

Sourced from @​walletconnect/react-native-compat's changelog.

2.23.10

Patch Changes

Commits
  • 3ef9f3e chore: update versions and lerna.json
  • 73b7d5c chore: update yttrium dependencies-wasm-0.10.57-kotlin-0.10.58
  • fcaaf3f chore: update yttrium dependencies-wasm-0.10.54-swift-0.10.54-kotlin-0.10.55
  • See full diff in compare view

Updates @walletconnect/sign-client from 2.23.9 to 2.23.10

Release notes

Sourced from @​walletconnect/sign-client's releases.

@​walletconnect/sign-client@​2.23.10

Patch Changes

  • #7252 cd32ff1 Thanks @​ganchoradkov! - Add TVF extraction for Canton's canton_prepareSignExecute.

  • #7253 63ff999 Thanks @​ganchoradkov! - Deprecate the authenticate method on Sign Client. It is marked @deprecated in the type definitions and logs a runtime warning when called. Use connect()'s authentication parameter instead to establish an authenticated session.

  • #7255 3233b47 Thanks @​ganchoradkov! - Reject plaintext TYPE_2 envelopes delivered over the relay transport. TYPE_2 payloads are now only handled in link mode in the sign engine (onRelayMessage) and pairing (registerRelayerEvents) relay handlers.

  • #7254 4af4524 Thanks @​ganchoradkov! - Enforce controller authorization on session update. Incoming wc_sessionUpdate requests are now rejected (UNAUTHORIZED_UPDATE_REQUEST) unless the sending peer is the session controller, and the public update() method now throws when called by a non-controller. This prevents a non-controller peer (e.g. a dApp using a custom SDK) from mutating a session's namespaces.

  • Updated dependencies [cd32ff1, 63ff999, 3233b47, 3ea740e, da98172]:

    • @​walletconnect/utils@​2.23.10
    • @​walletconnect/types@​2.23.10
    • @​walletconnect/core@​2.23.10
Changelog

Sourced from @​walletconnect/sign-client's changelog.

2.23.10

Patch Changes

  • #7252 cd32ff1 Thanks @​ganchoradkov! - Add TVF extraction for Canton's canton_prepareSignExecute.

  • #7253 63ff999 Thanks @​ganchoradkov! - Deprecate the authenticate method on Sign Client. It is marked @deprecated in the type definitions and logs a runtime warning when called. Use connect()'s authentication parameter instead to establish an authenticated session.

  • #7255 3233b47 Thanks @​ganchoradkov! - Reject plaintext TYPE_2 envelopes delivered over the relay transport. TYPE_2 payloads are now only handled in link mode in the sign engine (onRelayMessage) and pairing (registerRelayerEvents) relay handlers.

  • #7254 4af4524 Thanks @​ganchoradkov! - Enforce controller authorization on session update. Incoming wc_sessionUpdate requests are now rejected (UNAUTHORIZED_UPDATE_REQUEST) unless the sending peer is the session controller, and the public update() method now throws when called by a non-controller. This prevents a non-controller peer (e.g. a dApp using a custom SDK) from mutating a session's namespaces.

  • Updated dependencies [cd32ff1, 63ff999, 3233b47, 3ea740e, da98172]:

    • @​walletconnect/utils@​2.23.10
    • @​walletconnect/types@​2.23.10
    • @​walletconnect/core@​2.23.10
Commits
  • 3ef9f3e chore: update versions and lerna.json
  • acfea2a Merge branch 'v2.0' into feat/canton-tvf
  • 8ba23a9 Merge branch 'v2.0' into fix/type2-relay-envelope-auth
  • 0f75b1c Merge branch 'v2.0' into fix/session-update-extend-controller-auth
  • 4c0e866 fix: guard TYPE_2 check against decode errors and link-mode encoding
  • ecabc88 fix: reject plaintext TYPE_2 envelopes on relay transport
  • 02ddf18 fix: await isValidUpdate/isValidExtend in session request handlers
  • 54673cb test: update via controller in namespaces update test
  • 96652ee fix: scope controller authorization to session update only
  • 4af4524 fix: enforce controller authorization on session update & extend
  • Additional commits viewable in compare view

Updates axios from 1.16.1 to 1.18.1

Release notes

Sourced from axios's releases.

v1.18.1 — June 21, 2026

This release focuses on Node HTTP adapter fixes, safer AxiosError serialisation, runtime/type correctness fixes, documentation updates, and dependency maintenance.

🐛 Bug Fixes

  • AxiosError Serialisation: Made AxiosError#cause non-enumerable to prevent circular JSON serialisation failures when errors include nested causes. (#10913)
  • Node HTTP Adapter: Guarded socket.setKeepAlive for proxy agent streams, accepted path-only URLs when socketPath is configured, deferred environment proxy handling to Node, and explicitly passed maxBodyLength through to follow-redirects. (#10917, #10930, #10942, #10993)
  • Runtime and Type Correctness: Fixed several runtime crashes, type definition mismatches, and incorrect error handling paths. (#10959, #11021)
  • AxiosURLSearchParams: Switched the encoder callback to an arrow function so encoder.call(this) receives the AxiosURLSearchParams instance correctly. (#11019)

🔧 Maintenance & Chores

  • Documentation: Documented sensitive headers and status transition behaviour, prepared cleaned-up docs, added Deno install instructions, and clarified that request data is request-specific (#11007, #11010, #11023, #11025)

  • Dependencies: Bumped vite, rollup, form-data, js-yaml, and multer across the root project, docs, smoke tests, and module test workspaces. (#11011, #11012, #11013, #11014, #11015, #11016, #11017, #11026)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

Full Changelog

v1.18.0 — June 13, 2026

This release hardens redirect and URL handling, improves the validateStatus configuration semantics, and includes updates to documentation, dependencies, and release metadata.

🔒 Security Fixes

  • Redirect Header Safety: Added Node HTTP adapter support for stripping caller-specified sensitive headers on cross-origin redirects, helping prevent custom auth headers such as API keys from leaking to another origin. (#10892)

  • URL And Request Hardening: Rejects malformed http: and https: URLs that omit // with ERR_INVALID_URL, while tightening prototype-pollution-safe config reads, stream size limits, FormData depth handling, data URL sizing, and local NO_PROXY matching. (#11000)

🐛 Bug Fixes

  • Status Validation: Added transitional.validateStatusUndefinedResolves so applications can opt in to treating validateStatus: undefined like the option was omitted, while validateStatus: null remains the explicit way to accept every status. (#10899)

🔧 Maintenance & Chores

  • Documentation: Published the v1.17.0 release notes, fixed a changelog typo, clarified the package update PR policy, and marked the proxy request config as Node.js-only in the advanced docs. (#10984, #10988, #10992, #10995)

  • Dependencies: Bumped @babel/core, @babel/preset-env, @commitlint/cli, @commitlint/config-conventional, @rollup/plugin-babel, @rollup/plugin-commonjs, @vitest/browser, @vitest/browser-playwright, eslint, lint-staged, rollup, vitest, and actions/checkout. (#10989, #10996, #10997)

  • Release Metadata: Prepared the 1.18.0 release by updating package metadata and the runtime VERSION value. (#11003)

... (truncated)

Changelog

Sourced from axios's changelog.

Changelog

v1.18.0 — June 13, 2026

This release hardens redirect and URL handling, improves the validateStatus configuration semantics, and includes updates to documentation, dependencies, and release metadata.

🔒 Security Fixes

  • Redirect Header Safety: Added Node HTTP adapter support for stripping caller-specified sensitive headers on cross-origin redirects, helping prevent custom auth headers such as API keys from leaking to another origin. (#10892)

  • URL And Request Hardening: Rejects malformed http: and https: URLs that omit // with ERR_INVALID_URL, while tightening prototype-pollution-safe config reads, stream size limits, FormData depth handling, data URL sizing, and local NO_PROXY matching. (#11000)

🐛 Bug Fixes

  • Status Validation: Added transitional.validateStatusUndefinedResolves so applications can opt in to treating validateStatus: undefined like the option was omitted, while validateStatus: null remains the explicit way to accept every status. (#10899)

🔧 Maintenance & Chores

  • Documentation: Published the v1.17.0 release notes, fixed a changelog typo, clarified the package update PR policy, and marked the proxy request config as Node.js-only in the advanced docs. (#10984, #10988, #10992, #10995)

  • Dependencies: Bumped @babel/core, @babel/preset-env, @commitlint/cli, @commitlint/config-conventional, @rollup/plugin-babel, @rollup/plugin-commonjs, @vitest/browser, @vitest/browser-playwright, eslint, lint-staged, rollup, vitest, and actions/checkout. (#10989, #10996, #10997)

  • Release Metadata: Prepared the 1.18.0 release by updating package metadata and the runtime VERSION value. (#11003)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

Full Changelog

v1.17.0 — June 1, 2026

This release adds Node HTTP zstd decompression, hardens config and release workflows, and fixes authentication, header, proxy, and type-handling regressions.

🔒 Security Fixes

  • Config Hardening: Guarded socketPath, params, and paramsSerializer reads with own-property checks to prevent inherited prototype values from affecting request behavior, including SSRF-sensitive paths. (#10901, #10922)
  • Release Publishing: Switched the publish workflow to npm staged publishing for safer, auditable package releases with provenance. (#10926)

🚀 New Features

  • HTTP Compression: Added Node HTTP adapter support for zstd response decompression, with transitional.advertiseZstdAcceptEncoding controlling whether zstd is advertised in Accept-Encoding. (#6792, #10920)

🐛 Bug Fixes

  • Authentication Handling: Restored Basic auth on same-origin Node redirects while continuing to strip credentials cross-origin, and aligned the fetch adapter with HTTP adapter behavior for URL-embedded Basic auth. (#10929, #10896)

... (truncated)

Commits
  • a209bfb chore(release): prepare release 1.18.1 (#11027)
  • fa6a55e chore(deps-dev): bump multer from 2.1.1 to 2.2.0 (#11026)
  • 40e7be8 docs: clarifies that request data is request-specific in axios (#11025)
  • a446b39 fix(AxiosURLSearchParams): use arrow function so encoder.call(this) receives ...
  • cf1306a docs: add Deno to install instructions (#11023)
  • b32880a fix: incorrect use of error (#11021)
  • 1792eda fix: ensure maxBodyLength is explicitly passed to follow-redirects (#10993)
  • 30499d6 fix: various runtime crashes and type definition mismatches (#10959)
  • 20ce9c4 fix(http): defer env proxy handling to Node (#10942)
  • e64bcf9 chore(deps): merge branch 'v1.x' into tests/module/cjs (#11014)
  • Additional commits viewable in compare view

Updates lucide-react-native from 1.16.0 to 1.25.0

Release notes

Sourced from lucide-react-native's releases.

Version 1.25.0

What's Changed

Full Changelog: lucide-icons/lucide@1.24.0...1.25.0

Version 1.24.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.23.0...1.24.0

Version 1.23.0

What's Changed

... (truncated)

Commits
  • f229f83 chore(depedencies): Update dependencies (#4553)
  • 7291cbc fix(lucide-react-native): Add icon exports property to the package.json file ...
  • 63369b1 fix(lucide-react-native): restore the icons entry point in the JS bundles (#4...
  • 7e93884 fix(lcuide-react-native): Fix context provider export (#4497)
  • 5ff536e ci(release.yml): Fix workflow and remove version scripts in package scripts...
  • 2dd4be8 Fix provider exports (#4463)
  • See full diff in compare view

Updates qs from 6.15.2 to 6.15.3

Changelog

Sourced from qs's changelog.

6.15.3

  • [Fix] parse: enforce throwOnLimitExceeded for cumulative array growth via combine/merge
  • [Fix] utils: respect encoding of surrogate pairs across chunks (#559)
  • [Robustness] parse: throw the arrayLimit error before splitting oversized comma values
  • [Robustness] utils.merge / utils.assign: avoid invoking __proto__ setter when copying own properties
  • [Robustness] utils: enforce arrayLimit consistently across merge's array paths
  • [Perf] utils: make compact O(n) via a side-channel visited-set instead of Array.indexOf
  • [Deps] update side-channel
  • [Dev Deps] update eslint, mock-property, tape
  • [Tests] parse: characterize current lenient handling of unbalanced bracket keys (#558)
Commits
  • 18d085e v6.15.3
  • c38af42 [Deps] update side-channel
  • adce539 [Dev Deps] update eslint, mock-property, tape
  • 74a0f6a [Robustness] utils: enforce arrayLimit consistently across merge's arra...
  • f4938f5 [Tests] parse: characterize current lenient handling of unbalanced bracket ...
  • 5d5f723 [Perf] utils: make compact O(n) via a side-channel visited-set instead of...
  • 52afe00 [Robustness] parse: throw the arrayLimit error before splitting oversized...
  • 963e538 [Fix] parse: enforce throwOnLimitExceeded for cumulative array growth via...
  • 59da434 [Fix] utils: respect encoding of surrogate pairs across chunks
  • 9532969 [Robustness] utils.merge / utils.assign: avoid invoking __proto__ sette...
  • See full diff in compare view

Updates uuid from 14.0.0 to 14.0.1

Release notes

Sourced from uuid's releases.

v14.0.1

14.0.1 (2026-06-20)

Bug Fixes

  • add types condition to node export for moduleResolution bundler (#961) (27ffae5)
Changelog

Sourced from uuid's changelog.

14.0.1 (2026-06-20)

Bug Fixes

  • add types condition to node export for moduleResolution bundler (#961) (27ffae5)
Commits
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates viem from 2.53.1 to 2.55.4

Release notes

Sourced from viem's releases.

viem@2.55.4

Patch Changes

@dependabot
deps: bump the production-deps group across 1 directory with 13 updates
1008a35 
Bumps the production-deps group with 13 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@simplewebauthn/server](https://github.com/MasterKale/SimpleWebAuthn/tree/HEAD/packages/server) | `13.3.0` | `13.3.2` |
| [@stripe/stripe-react-native](https://github.com/stripe/stripe-react-native) | `0.63.0` | `0.70.0` |
| [@walletconnect/react-native-compat](https://github.com/WalletConnect/walletconnect-monorepo/tree/HEAD/packages/react-native-compat) | `2.23.9` | `2.23.10` |
| [@walletconnect/sign-client](https://github.com/WalletConnect/walletconnect-monorepo/tree/HEAD/packages/sign-client) | `2.23.9` | `2.23.10` |
| [axios](https://github.com/axios/axios) | `1.16.1` | `1.18.1` |
| [lucide-react-native](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react-native) | `1.16.0` | `1.25.0` |
| [qs](https://github.com/ljharb/qs) | `6.15.2` | `6.15.3` |
| [uuid](https://github.com/uuidjs/uuid) | `14.0.0` | `14.0.1` |
| [viem](https://github.com/wevm/viem) | `2.53.1` | `2.55.4` |
| [zustand](https://github.com/pmndrs/zustand) | `5.0.13` | `5.0.14` |
| [@walletconnect/types](https://github.com/WalletConnect/walletconnect-monorepo/tree/HEAD/packages/types) | `2.23.9` | `2.23.10` |
| [react-test-renderer](https://github.com/facebook/react/tree/HEAD/packages/react-test-renderer) | `19.0.0` | `19.2.7` |
| [lightningcss-linux-x64-gnu](https://github.com/parcel-bundler/lightningcss) | `1.32.0` | `1.33.0` |



Updates `@simplewebauthn/server` from 13.3.0 to 13.3.2
- [Release notes](https://github.com/MasterKale/SimpleWebAuthn/releases)
- [Changelog](https://github.com/MasterKale/SimpleWebAuthn/blob/master/CHANGELOG.md)
- [Commits](https://github.com/MasterKale/SimpleWebAuthn/commits/v13.3.2/packages/server)

Updates `@stripe/stripe-react-native` from 0.63.0 to 0.70.0
- [Release notes](https://github.com/stripe/stripe-react-native/releases)
- [Changelog](https://github.com/stripe/stripe-react-native/blob/master/CHANGELOG.md)
- [Commits](stripe/stripe-react-native@v0.63.0...v0.70.0)

Updates `@walletconnect/react-native-compat` from 2.23.9 to 2.23.10
- [Release notes](https://github.com/WalletConnect/walletconnect-monorepo/releases)
- [Changelog](https://github.com/WalletConnect/walletconnect-monorepo/blob/v2.0/packages/react-native-compat/CHANGELOG.md)
- [Commits](https://github.com/WalletConnect/walletconnect-monorepo/commits/@walletconnect/react-native-compat@2.23.10/packages/react-native-compat)

Updates `@walletconnect/sign-client` from 2.23.9 to 2.23.10
- [Release notes](https://github.com/WalletConnect/walletconnect-monorepo/releases)
- [Changelog](https://github.com/WalletConnect/walletconnect-monorepo/blob/v2.0/packages/sign-client/CHANGELOG.md)
- [Commits](https://github.com/WalletConnect/walletconnect-monorepo/commits/@walletconnect/sign-client@2.23.10/packages/sign-client)

Updates `axios` from 1.16.1 to 1.18.1
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.16.1...v1.18.1)

Updates `lucide-react-native` from 1.16.0 to 1.25.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.25.0/packages/lucide-react-native)

Updates `qs` from 6.15.2 to 6.15.3
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.15.2...v6.15.3)

Updates `uuid` from 14.0.0 to 14.0.1
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](uuidjs/uuid@v14.0.0...v14.0.1)

Updates `viem` from 2.53.1 to 2.55.4
- [Release notes](https://github.com/wevm/viem/releases)
- [Commits](https://github.com/wevm/viem/compare/viem@2.53.1...viem@2.55.4)

Updates `zustand` from 5.0.13 to 5.0.14
- [Release notes](https://github.com/pmndrs/zustand/releases)
- [Commits](pmndrs/zustand@v5.0.13...v5.0.14)

Updates `@walletconnect/types` from 2.23.9 to 2.23.10
- [Release notes](https://github.com/WalletConnect/walletconnect-monorepo/releases)
- [Changelog](https://github.com/WalletConnect/walletconnect-monorepo/blob/v2.0/packages/types/CHANGELOG.md)
- [Commits](https://github.com/WalletConnect/walletconnect-monorepo/commits/@walletconnect/types@2.23.10/packages/types)

Updates `react-test-renderer` from 19.0.0 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-test-renderer)

Updates `lightningcss-linux-x64-gnu` from 1.32.0 to 1.33.0
- [Release notes](https://github.com/parcel-bundler/lightningcss/releases)
- [Commits](parcel-bundler/lightningcss@v1.32.0...v1.33.0)

---
updated-dependencies:
- dependency-name: "@simplewebauthn/server"
  dependency-version: 13.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: "@stripe/stripe-react-native"
  dependency-version: 0.70.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: "@walletconnect/react-native-compat"
  dependency-version: 2.23.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: "@walletconnect/sign-client"
  dependency-version: 2.23.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: axios
  dependency-version: 1.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: lucide-react-native
  dependency-version: 1.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: qs
  dependency-version: 6.15.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: uuid
  dependency-version: 14.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: viem
  dependency-version: 2.55.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: zustand
  dependency-version: 5.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: "@walletconnect/types"
  dependency-version: 2.23.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: react-test-renderer
  dependency-version: 19.2.7
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: lightningcss-linux-x64-gnu
  dependency-version: 1.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from ArpitxGit as a code owner July 20, 2026 08:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@ArpitxGit ArpitxGit Awaiting requested review from ArpitxGit ArpitxGit is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants