Skip to content

chore(deps): bump the npm-dependencies group across 1 directory with 37 updates#199

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-4d4040bae4
Open

chore(deps): bump the npm-dependencies group across 1 directory with 37 updates#199
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-4d4040bae4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 19, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-dependencies group with 37 updates in the / directory:

Package From To
@aws-sdk/client-sesv2 3.1047.0 3.1090.0
@base-ui/react 1.4.1 1.6.0
@hookform/resolvers 5.2.2 5.4.0
@next-safe-action/adapter-react-hook-form 2.0.6 2.1.0
@radix-ui/react-avatar 1.1.11 1.2.2
@radix-ui/react-select 2.2.6 2.3.3
@radix-ui/react-slot 1.2.4 1.3.0
@slack/web-api 7.15.2 8.0.0
@tanstack/react-query 5.100.9 5.101.2
@vercel/speed-insights 1.0.4 2.0.0
@xyflow/react 12.10.2 12.11.2
date-fns 4.1.0 4.4.0
gocardless-nodejs 8.1.0 8.4.0
google-auth-library 10.6.2 10.9.0
googleapis 171.4.0 173.0.0
inngest 4.4.0 4.13.0
lucide-react 1.14.0 1.25.0
motion 12.38.0 12.42.2
next-safe-action 8.5.2 8.6.0
nodemailer 8.0.7 9.0.3
nuqs 2.8.9 2.9.1
pg 8.20.0 8.22.0
posthog-js 1.396.4 1.404.1
posthog-node 5.39.2 5.45.2
radix-ui 1.4.3 1.6.2
react-email 6.1.4 6.9.0
react-hook-form 7.75.0 7.82.0
react-resizable-panels 4.11.0 4.12.2
recharts 3.8.1 3.9.2
tailwind-merge 3.5.0 3.6.0
@biomejs/biome 2.4.15 2.5.4
@react-email/ui 6.1.4 6.9.0
@types/node 25.2.3 26.1.1
concurrently 9.2.1 10.0.3
lint-staged 17.0.4 17.1.0
tsx 4.21.0 4.23.1
typescript 6.0.3 7.0.2

Updates @aws-sdk/client-sesv2 from 3.1047.0 to 3.1090.0

Release notes

Sourced from @​aws-sdk/client-sesv2's releases.

v3.1090.0

3.1090.0(2026-07-17)

New Features
  • clients: update client endpoints as of 2026-07-17 (857153f3)
  • client-kinesis-analytics-v2: Support for Flink 2.3 in Managed Service for Apache Flink (1ad0421f)
  • client-gameliftstreams: Amazon GameLift Streams now supports assigning an IAM role to a stream session, enabling your application to securely access resources in your AWS account, such as Amazon S3 buckets and DynamoDB tables. (cf945cdb)
  • client-rds: Adds the AssociatedRoles parameter to CreateDBCluster, RestoreDBClusterFromSnapshot, RestoreDBClusterToPointInTime, and RestoreDBClusterFromS3, letting customers associate IAM roles with an Aurora DB cluster at create or restore time instead of calling AddRoleToDBCluster afterward. (48b74a43)
  • client-odb: Adds support for sourcing Autonomous Database admin and wallet passwords from customer-managed AWS Secrets Manager secrets, including password source configuration and summaries, and enabling or disabling the OCI IAM service role for Secrets Manager integration via InitializeService. (d5619c8b)
  • client-cognito-identity-provider: Amazon Cognito user pools now support sending SMS via AWS End User Messaging. A new EumsSms object in SmsConfigurationType lets you deliver MFA and verification texts through AWS End User Messaging, alongside the existing Amazon SNS option. (600cf8d5)

For list of updated packages, view updated-packages.md in assets-3.1090.0.zip

v3.1089.0

3.1089.0(2026-07-16)

Chores
Documentation Changes
  • client-s3: Documentation update for removing the 30 day minimum restriction for transition to Standard-IA or OneZone-IA storage classes (91723d24)
  • client-redshift: Amazon Redshift - Added support for rg.large and rg.12xlarge node types in CreateCluster, ModifyCluster, and ResizeCluster API operations. (50989cf0)
New Features
  • clients: update client endpoints as of 2026-07-16 (c9150fe6)
  • client-chime-sdk-voice: Marked CreateProxySession, DeleteProxySession, GetProxySession, ListProxySessions, UpdateProxySession, PutVoiceConnectorProxy, DeleteVoiceConnectorProxy, and GetVoiceConnectorProxy as deprecated. (d706c456)
  • client-emr: Amazon EMR updates the Session object returned by GetSession API (863234ad)
  • client-omics: Adds support for returning the task UUID (universally unique identifier) in GetRunTask and ListRunTasks responses (bafd66dd)
  • client-sagemaker: Release support for g7 instance type for SageMaker inference endpoints. (668f46cb)
  • client-sustainability: Adds support for retrieving estimated water allocation data. (432031b6)
Bug Fixes
  • package.json: run make lint format without file args (#8201) (33ac9c0b)
Tests
  • extend TypeScript compatibility check to 3.4-4.4 (#8197) (59f7fc67)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-sesv2's changelog.

3.1090.0 (2026-07-17)

Note: Version bump only for package @​aws-sdk/client-sesv2

3.1089.0 (2026-07-16)

Note: Version bump only for package @​aws-sdk/client-sesv2

3.1088.0 (2026-07-15)

Note: Version bump only for package @​aws-sdk/client-sesv2

3.1087.0 (2026-07-14)

Note: Version bump only for package @​aws-sdk/client-sesv2

3.1086.0 (2026-07-13)

Note: Version bump only for package @​aws-sdk/client-sesv2

3.1085.0 (2026-07-10)

Note: Version bump only for package @​aws-sdk/client-sesv2

3.1084.0 (2026-07-09)

... (truncated)

Commits

Updates @base-ui/react from 1.4.1 to 1.6.0

Release notes

Sourced from @​base-ui/react's releases.

v1.6.0

General changes

Accordion

Alert Dialog

Autocomplete

Avatar

Checkbox

Checkbox Group

Collapsible

Combobox

... (truncated)

Changelog

Sourced from @​base-ui/react's changelog.

v1.6.0

Jun 18, 2026

General changes

Accordion

Alert Dialog

Autocomplete

Avatar

Checkbox

Checkbox Group

Collapsible

Combobox

... (truncated)

Commits
  • b34551d [code-infra] Fix package publishing (#5074)
  • 615b0e8 [release] v1.6.0 (#5064)
  • 8b7ca5d [test] Restore slider listener spies (#5072)
  • 2502524 [combobox][autocomplete] Document open requirement for the inline prop (#...
  • 4c33d74 [slider] Fix touchend listener accumulation leak (#5070)
  • d169cd5 [combobox] Fix autofill and selected state edge cases (#4972)
  • 2d8b8f6 [avatar] Fix image status edge cases (#4835)
  • ee3c13a [select] Skip disabled items in typeahead and fix multiple-mode serialization...
  • b167c85 [drawer] Commit swipe on primary-button release (#5057)
  • e972d74 [combobox] Avoid re-rendering every item on each keystroke (#4964)
  • Additional commits viewable in compare view

Updates @hookform/resolvers from 5.2.2 to 5.4.0

Release notes

Sourced from @​hookform/resolvers's releases.

v5.4.0

5.4.0 (2026-05-21)

Features

  • feat: add ata-validator resolver (#845)

Fixes

  • fix issue with toNestErrors.ts (#848)
  • add guidance on passing context to yupResolver (useForm context) (#835) (3d29924)
Commits

Updates @next-safe-action/adapter-react-hook-form from 2.0.6 to 2.1.0

Release notes

Sourced from @​next-safe-action/adapter-react-hook-form's releases.

@​next-safe-action/adapter-react-hook-form@​2.1.0

Minor Changes

  • #466 f3ff5ba Thanks @​TheEdoRan! - actionProps in useHookFormAction/useHookFormOptimisticAction is now typed as HookBaseOptions instead of HookCallbacks, so hook configuration options like throwOnNavigation can be passed through the adapter. Type-only change.
Changelog

Sourced from @​next-safe-action/adapter-react-hook-form's changelog.

2.1.0

Minor Changes

  • #466 f3ff5ba Thanks @​TheEdoRan! - actionProps in useHookFormAction/useHookFormOptimisticAction is now typed as HookBaseOptions instead of HookCallbacks, so hook configuration options like throwOnNavigation can be passed through the adapter. Type-only change.
Commits
  • b6c978e Version Packages
  • f3ff5ba feat: add returnServerError and initResult for useAction, fix output transfor...
  • See full diff in compare view

Updates @radix-ui/react-avatar from 1.1.11 to 1.2.2

Changelog

Sourced from @​radix-ui/react-avatar's changelog.

1.2.2

  • Updated dependencies: @radix-ui/react-context@1.2.0

1.2.1

  • Updated dependencies: @radix-ui/react-primitive@2.1.7

1.2.0

  • Fixed several edge cases with Avatar's loading state
    • An avatar's fallback would not be displayed again if its image component unmounted. This is now fixed.
    • Rendering multiple Avatar.Image components per Avatar.Root was never supported and results in buggy, unpredictable behavior. We now warn about this in development.
    • Zero-sized images were treated as loading, meaning that onLoadingStatusChange is never called once loaded. A zero-sized image now triggers an error status on load.

Other updates

  • Fixed console warnings to show in test environments.
  • Updated dependencies: @radix-ui/react-primitive@2.1.6

1.1.12

  • Added repository.directory to all package.json files
  • Updated dependencies: @radix-ui/react-context@1.1.4, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-callback-ref@1.1.2, @radix-ui/react-use-is-hydrated@0.1.1, @radix-ui/react-use-layout-effect@1.1.2
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​radix-ui/react-avatar since your current version.


Updates @radix-ui/react-select from 2.2.6 to 2.3.3

Changelog

Sourced from @​radix-ui/react-select's changelog.

2.3.3

  • Fixed a bug in form control components to ensure their values are updated when their associated form's is reset. This affects RadioGroup, Slider, Select, and Switch.
  • Fixed menu items, tab triggers, toolbar links, and select items intercepting Space/Enter keys that originate from focusable descendants.
  • Updated dependencies: @radix-ui/react-dismissable-layer@1.1.15, @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-focus-scope@1.1.12, @radix-ui/react-presence@1.1.7, @radix-ui/react-collection@1.1.12, @radix-ui/react-popper@1.3.3

2.3.2

  • Fixed infinite re-render loop in React 19 caused by unstable composed ref callback references.

Other updates

  • Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-dismissable-layer@1.1.14, @radix-ui/react-focus-scope@1.1.11, @radix-ui/react-popper@1.3.2, @radix-ui/react-collection@1.1.11, @radix-ui/react-portal@1.1.13, @radix-ui/react-visually-hidden@1.2.7

2.3.1

  • Allowed a Select.Item with an empty string value to act as a "clear" option. Selecting it resets the selection back to the placeholder, restoring the native <select> behavior for optional selects.
  • Fixed a bug where typeahead search resulted in focusing an element that no longer exists.
  • Updated dependencies: @radix-ui/react-slot@1.3.0, @radix-ui/react-popper@1.3.1, @radix-ui/react-dismissable-layer@1.1.13, @radix-ui/react-primitive@2.1.6, @radix-ui/react-collection@1.1.10, @radix-ui/react-focus-scope@1.1.10, @radix-ui/react-portal@1.1.12, @radix-ui/react-visually-hidden@1.2.6

2.3.0

  • Added unstable Provider and BubbleInput parts to Select. Select.unstable_Provider sets up Select's context and state without implicitly rendering the hidden native select, and Select.unstable_BubbleInput exposes that previously internal native select so consumers can recompose it explicitly. Select continues to render both by default.
  • Added support for presence-based exit animations in Select
  • Fixed Select hidden input so it submits empty string when no value is selected
  • Fixed placeholder rendering when a controlled Select is reset to an empty value
  • Added missing __selectScope prop to PopperContent component
  • Fixed Select closing unexpectedly after touch-scrolling its content when rendered inside an open shadow DOM
  • Fixed a bug where iOS text selection and editing on HTML inputs within react-dialog were broken
  • Fixed triggers referencing a non-existent element via aria-controls when their content is removed from the DOM (credit to @​dodomorandi for the original PR)
  • Fixed SelectValue logging invalid prop errors when used with both asChild and a placeholder
  • Added repository.directory to all package.json files
  • Updated dependencies: @radix-ui/react-presence@1.1.6, @radix-ui/react-popper@1.3.0, @radix-ui/react-slot@1.2.5, @radix-ui/react-focus-guards@1.1.4, @radix-ui/react-dismissable-layer@1.1.12, @radix-ui/react-collection@1.1.9, @radix-ui/react-direction@1.1.2, @radix-ui/number@1.1.2, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-focus-scope@1.1.9, @radix-ui/react-id@1.1.2, @radix-ui/react-portal@1.1.11, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-callback-ref@1.1.2, @radix-ui/react-use-controllable-state@1.2.3, @radix-ui/react-use-layout-effect@1.1.2, @radix-ui/react-use-previous@1.1.2, @radix-ui/react-visually-hidden@1.2.5
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​radix-ui/react-select since your current version.


Updates @radix-ui/react-slot from 1.2.4 to 1.3.0

Changelog

Sourced from @​radix-ui/react-slot's changelog.

1.3.0

Added generic type arguments for SlotProps and createSlot

SlotProps and createSlot now accept generic type arguments to specify the type of element a slot should render, as well as its props.

const Slot = createSlot<HTMLButtonElement, MyCustomButtonProps>('Slot');

1.2.5

  • Fixed infinite re-render loop in React 19 caused by Slot creating a new ref callback on every render
  • Added support for nested Slottable via a render prop, so a slotted element can be wrapped while still merging Slot props and refs onto it
  • Added repository.directory to all package.json files
  • Improved error messages for invalid slot children
  • Updated dependencies: @radix-ui/react-compose-refs@1.1.3
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​radix-ui/react-slot since your current version.


Updates @slack/web-api from 7.15.2 to 8.0.0

Release notes

Sourced from @​slack/web-api's releases.

@​slack/web-api@​8.0.0

Major Changes

  • fc98c8c: Drop Node.js 18 support. The minimum supported Node.js version is now 20.

  • fc98c8c: Redesigned error handling to use proper Error subclasses instead of plain objects with a code property.

    Migration: Replace if (error.code === ErrorCode.PlatformError) with if (error instanceof WebAPIPlatformError). All error classes extend a common SlackError base class (which extends Error), so you can also catch all SDK errors with if (error instanceof SlackError).

    New error class hierarchy:

    • SlackError (abstract base)
      • WebAPIPlatformError — Slack API returned ok: false
      • WebAPIRequestError — Network/transport failure (original error in cause)
      • WebAPIHTTPError — Non-200 HTTP status from Slack
      • WebAPIRateLimitedError — HTTP 429 with retryAfter seconds
      • WebAPIFileUploadInvalidArgumentsError — Invalid file upload arguments
      • WebAPIFileUploadReadFileDataError — Failed to read file data for upload

    Removed factory functions (these were internal but exported — use new with the corresponding class instead):

    • errorWithCode()
    • platformErrorFromResult() → new WebAPIPlatformError(...)
    • requestErrorWithOriginal() → new WebAPIRequestError(...)
    • httpErrorFromResponse() → new WebAPIHTTPError(...)
    • rateLimitedErrorWithDelay() → new WebAPIRateLimitedError(...)

    Other breaking type changes:

    • WebAPIHTTPError.headers type changed from IncomingHttpHeaders to Record<string, string>.
    • The CodedError interface is deprecated — use instanceof checks with specific error classes instead.
    • Error .name values changed from generic 'Error' to descriptive class names (e.g., 'WebAPIPlatformError').

  • fc98c8c: Replaced axios with the standard Fetch API for all HTTP transport. The following options and types have been removed from WebClientOptions:

    • agent — Use the new fetch option to provide a custom fetch implementation with proxy or keep-alive support. For proxies, prefer the built-in http.setGlobalProxyFromEnv() or NODE_USE_ENV_PROXY=1 (Node.js 24+). For advanced use cases: 
      import { fetch, Agent } from "undici";
const client = new WebClient(token, {
  fetch: (url, init) =>
    fetch(url, {
      ...init,
      dispatcher: new Agent({ keepAliveTimeout: 60_000 }),
    }),
});
    • tls and TLSOptions — Configure TLS via a custom fetch implementation with an undici Agent, or use the NODE_EXTRA_CA_CERTS environment variable.
    • requestInterceptor and RequestInterceptor type — Wrap the fetch function to intercept or modify requests before they are sent.
    • adapter and AdapterConfig type — Use the fetch option instead.
    • RequestConfig type (was an alias for Axios' InternalAxiosRequestConfig) — Removed entirely.
    • attachOriginalToWebAPIRequestError option — Removed. The original error is now always available via the standard cause property on WebAPIRequestError.

... (truncated)

Commits

Updates @tanstack/react-query from 5.100.9 to 5.101.2

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-devtools@​5.101.2

Patch Changes

@​tanstack/react-query-next-experimental@​5.101.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.101.2

@​tanstack/react-query-persist-client@​5.101.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.101.2
    • @​tanstack/react-query@​5.101.2

@​tanstack/react-query@​5.101.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.101.2

@​tanstack/react-query-devtools@​5.101.1

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.101.1
    • @​tanstack/react-query@​5.101.1

@​tanstack/react-query-next-experimental@​5.101.1

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.101.1

@​tanstack/react-query-persist-client@​5.101.1

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.101.1
    • @​tanstack/react-query@​5.101.1

@​tanstack/react-query@​5.101.1

Patch Changes

... (truncated)

Changelog

Sourced from @​tanstack/react-query's changelog.

5.101.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.101.2

5.101.1

Patch Changes

  • Updated dependencies [9eff92e]:
    • @​tanstack/query-core@​5.101.1

5.101.0

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.101.0

5.100.14

Patch Changes

  • fix(react-query): do not go into optimistic fetching state when not subscribed (#10759)

  • Updated dependencies []:

    • @​tanstack/query-core@​5.100.14

5.100.13

Patch Changes

  • Updated dependencies [d423168]:
    • @​tanstack/query-core@​5.100.13

5.100.12

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.100.12

5.100.11

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.100.11

... (truncated)

Commits
  • 610e8d1 ci: Version Packages (#10996)
  • 1f84256 docs: document the select typing caveat for parallel-queries hooks (#10984)
  • b809297 ci: Version Packages (#10977)
  • ccc843e test({react,preact}-query/useQueries): move type-only tests to 'useQueries.te...
  • 4154613 test({react,preact}-query/useMutation): split 'should handle conditional logi...
  • 8bb5fde test({react,preact}-query/useMutation): split 'should pass meta to mutation' ...
  • 87426a3 test(react-query): replace deprecated 'toBeCalledTimes' with 'toHaveBeenCalle...
  • feb1efd test(*): move 'vi.useRealTimers' to the end of 'afterEach' so cleanup runs un...
  • f3d8d2a ci: Version Packages (#10774)
  • 532bb29 fix(tests): disable local coverage instrumentation (#10776)
  • Additional commits viewable in compare view

Updates @vercel/speed-insights from 1.0.4 to 2.0.0

Release notes

Sourced from @​vercel/speed-insights's releases.

v2.0.0

What's Changed

Breaking Changes

  • License changed from Apache-2.0 to MIT (#111)
  • Nuxt: introduce module support (#110). In case you need to configure it, load injectSpeedInsights() from @vercel/speed-insights/nuxt/runtime

Features

  • feat: load dynamic configuration (#112) — speed insights config can now be loaded dynamically

Full Changelog: vercel/speed-insights@1.3.1...2.0.0

v2.0.0-canary.1

Canary release for testing 2.0.0 changes

1.5.0-canary.4

What's Changed

Full Changelog: vercel/speed-insights@1.2.0-canary.3...1.5.0-canary.4

1.3.1

What's Changed

Full Changelog: vercel/speed-insights@1.3.0...1.3.1

1.3.0

What's Changed

New Contributors

Full Changelog: vercel/speed-insights@1.2.0...1.3.0

1.2.0

What's Changed

... (truncated)

Commits
  • 828d10c chore: bump version to v2.0.0
  • 15cb241 chore: bump version to v2.0.0-canary.1
  • b10a09c feat: load dynamic configuration (#112)
  • c6f4e37 feat(nuxt)!: Add support for injectSpeedInsights() and Nuxt module (#110)
  • 2452c35 fix(nuxt): remove the module as breaking change (#107)
  • 7ed15ed fix: add route param to beforeSend event type (#102)
  • a1dfa74 feat: next release and postinstall script removal (#106)
  • f48623c feat(nuxt): Add support for injectSpeedInsights() and Nuxt module (#104)
  • 23ab42e chore: release 1.2.0 (#94)
  • 5acf92b Add an option to prefix an endpoint path with an environment variable. (#85)
  • Additional commits viewable in compare view

Updates @xyflow/react from 12.10.2 to 12.11.2

Release notes

Sourced from @​xyflow/react's releases.

@​xyflow/react@​12.11.2

Patch Changes

  • #5825 5072914 - Only create an XYDrag instance for draggable nodes.

  • #5847 742860c - Stop the MiniMap from re-rendering on every store update.

  • #5846 17c64a1 - Apply the viewport pan/zoom transform imperatively so the Viewport component only renders once.

  • Updated dependencies [c707267, ...

    Description has been truncated

@dependabot
chore(deps): bump the npm-dependencies group across 1 directory with …
1266864 
…37 updates

Bumps the npm-dependencies group with 37 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@aws-sdk/client-sesv2](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sesv2) | `3.1047.0` | `3.1090.0` |
| [@base-ui/react](https://github.com/mui/base-ui/tree/HEAD/packages/react) | `1.4.1` | `1.6.0` |
| [@hookform/resolvers](https://github.com/react-hook-form/resolvers) | `5.2.2` | `5.4.0` |
| [@next-safe-action/adapter-react-hook-form](https://github.com/next-safe-action/next-safe-action/tree/HEAD/packages/adapter-react-hook-form) | `2.0.6` | `2.1.0` |
| [@radix-ui/react-avatar](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/avatar) | `1.1.11` | `1.2.2` |
| [@radix-ui/react-select](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/select) | `2.2.6` | `2.3.3` |
| [@radix-ui/react-slot](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/slot) | `1.2.4` | `1.3.0` |
| [@slack/web-api](https://github.com/slackapi/node-slack-sdk) | `7.15.2` | `8.0.0` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.100.9` | `5.101.2` |
| [@vercel/speed-insights](https://github.com/vercel/speed-insights/tree/HEAD/packages/web) | `1.0.4` | `2.0.0` |
| [@xyflow/react](https://github.com/xyflow/xyflow/tree/HEAD/packages/react) | `12.10.2` | `12.11.2` |
| [date-fns](https://github.com/date-fns/date-fns) | `4.1.0` | `4.4.0` |
| [gocardless-nodejs](https://github.com/gocardless/gocardless-nodejs) | `8.1.0` | `8.4.0` |
| [google-auth-library](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/packages/google-auth-library-nodejs) | `10.6.2` | `10.9.0` |
| [googleapis](https://github.com/googleapis/google-api-nodejs-client) | `171.4.0` | `173.0.0` |
| [inngest](https://github.com/inngest/inngest-js/tree/HEAD/packages/inngest) | `4.4.0` | `4.13.0` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.14.0` | `1.25.0` |
| [motion](https://github.com/motiondivision/motion) | `12.38.0` | `12.42.2` |
| [next-safe-action](https://github.com/next-safe-action/next-safe-action) | `8.5.2` | `8.6.0` |
| [nodemailer](https://github.com/nodemailer/nodemailer) | `8.0.7` | `9.0.3` |
| [nuqs](https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs) | `2.8.9` | `2.9.1` |
| [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.20.0` | `8.22.0` |
| [posthog-js](https://github.com/PostHog/posthog-js) | `1.396.4` | `1.404.1` |
| [posthog-node](https://github.com/PostHog/posthog-js/tree/HEAD/packages/node) | `5.39.2` | `5.45.2` |
| [radix-ui](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/radix-ui) | `1.4.3` | `1.6.2` |
| [react-email](https://github.com/resend/react-email/tree/HEAD/packages/react-email) | `6.1.4` | `6.9.0` |
| [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.75.0` | `7.82.0` |
| [react-resizable-panels](https://github.com/bvaughn/react-resizable-panels) | `4.11.0` | `4.12.2` |
| [recharts](https://github.com/recharts/recharts) | `3.8.1` | `3.9.2` |
| [tailwind-merge](https://github.com/dcastil/tailwind-merge) | `3.5.0` | `3.6.0` |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.4.15` | `2.5.4` |
| [@react-email/ui](https://github.com/resend/react-email/tree/HEAD/packages/ui) | `6.1.4` | `6.9.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.2.3` | `26.1.1` |
| [concurrently](https://github.com/open-cli-tools/concurrently) | `9.2.1` | `10.0.3` |
| [lint-staged](https://github.com/lint-staged/lint-staged) | `17.0.4` | `17.1.0` |
| [tsx](https://github.com/privatenumber/tsx) | `4.21.0` | `4.23.1` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |



Updates `@aws-sdk/client-sesv2` from 3.1047.0 to 3.1090.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sesv2/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1090.0/clients/client-sesv2)

Updates `@base-ui/react` from 1.4.1 to 1.6.0
- [Release notes](https://github.com/mui/base-ui/releases)
- [Changelog](https://github.com/mui/base-ui/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mui/base-ui/commits/v1.6.0/packages/react)

Updates `@hookform/resolvers` from 5.2.2 to 5.4.0
- [Release notes](https://github.com/react-hook-form/resolvers/releases)
- [Commits](react-hook-form/resolvers@v5.2.2...v5.4.0)

Updates `@next-safe-action/adapter-react-hook-form` from 2.0.6 to 2.1.0
- [Release notes](https://github.com/next-safe-action/next-safe-action/releases)
- [Changelog](https://github.com/next-safe-action/next-safe-action/blob/main/packages/adapter-react-hook-form/CHANGELOG.md)
- [Commits](https://github.com/next-safe-action/next-safe-action/commits/@next-safe-action/adapter-react-hook-form@2.1.0/packages/adapter-react-hook-form)

Updates `@radix-ui/react-avatar` from 1.1.11 to 1.2.2
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/avatar/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/avatar)

Updates `@radix-ui/react-select` from 2.2.6 to 2.3.3
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/select/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/select)

Updates `@radix-ui/react-slot` from 1.2.4 to 1.3.0
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/slot/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/slot)

Updates `@slack/web-api` from 7.15.2 to 8.0.0
- [Release notes](https://github.com/slackapi/node-slack-sdk/releases)
- [Commits](https://github.com/slackapi/node-slack-sdk/compare/@slack/web-api@7.15.2...@slack/web-api@8.0.0)

Updates `@tanstack/react-query` from 5.100.9 to 5.101.2
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.101.2/packages/react-query)

Updates `@vercel/speed-insights` from 1.0.4 to 2.0.0
- [Release notes](https://github.com/vercel/speed-insights/releases)
- [Commits](https://github.com/vercel/speed-insights/commits/v2.0.0/packages/web)

Updates `@xyflow/react` from 12.10.2 to 12.11.2
- [Release notes](https://github.com/xyflow/xyflow/releases)
- [Changelog](https://github.com/xyflow/xyflow/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/xyflow/xyflow/commits/@xyflow/react@12.11.2/packages/react)

Updates `date-fns` from 4.1.0 to 4.4.0
- [Release notes](https://github.com/date-fns/date-fns/releases)
- [Commits](date-fns/date-fns@v4.1.0...v4.4.0)

Updates `gocardless-nodejs` from 8.1.0 to 8.4.0
- [Release notes](https://github.com/gocardless/gocardless-nodejs/releases)
- [Commits](gocardless/gocardless-nodejs@v8.1.0...v8.4.0)

Updates `google-auth-library` from 10.6.2 to 10.9.0
- [Release notes](https://github.com/googleapis/google-cloud-node/releases)
- [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/core/packages/google-auth-library-nodejs/CHANGELOG.md)
- [Commits](https://github.com/googleapis/google-cloud-node/commits/google-auth-library-v10.9.0/core/packages/google-auth-library-nodejs)

Updates `googleapis` from 171.4.0 to 173.0.0
- [Release notes](https://github.com/googleapis/google-api-nodejs-client/releases)
- [Commits](googleapis/google-api-nodejs-client@googleapis-v171.4.0...googleapis-v173.0.0)

Updates `inngest` from 4.4.0 to 4.13.0
- [Release notes](https://github.com/inngest/inngest-js/releases)
- [Changelog](https://github.com/inngest/inngest-js/blob/main/packages/inngest/CHANGELOG.md)
- [Commits](https://github.com/inngest/inngest-js/commits/inngest@4.13.0/packages/inngest)

Updates `lucide-react` from 1.14.0 to 1.25.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.25.0/packages/lucide-react)

Updates `motion` from 12.38.0 to 12.42.2
- [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md)
- [Commits](motiondivision/motion@v12.38.0...v12.42.2)

Updates `next-safe-action` from 8.5.2 to 8.6.0
- [Release notes](https://github.com/next-safe-action/next-safe-action/releases)
- [Commits](https://github.com/next-safe-action/next-safe-action/compare/next-safe-action@8.5.2...next-safe-action@8.6.0)

Updates `nodemailer` from 8.0.7 to 9.0.3
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v8.0.7...v9.0.3)

Updates `nuqs` from 2.8.9 to 2.9.1
- [Release notes](https://github.com/47ng/nuqs/releases)
- [Commits](https://github.com/47ng/nuqs/commits/v2.9.1/packages/nuqs)

Updates `pg` from 8.20.0 to 8.22.0
- [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brianc/node-postgres/commits/pg@8.22.0/packages/pg)

Updates `posthog-js` from 1.396.4 to 1.404.1
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/compare/posthog-js@1.396.4...posthog-js@1.404.1)

Updates `posthog-node` from 5.39.2 to 5.45.2
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/packages/node/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/commits/posthog-node@5.45.2/packages/node)

Updates `radix-ui` from 1.4.3 to 1.6.2
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/radix-ui/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/radix-ui)

Updates `react-email` from 6.1.4 to 6.9.0
- [Release notes](https://github.com/resend/react-email/releases)
- [Changelog](https://github.com/resend/react-email/blob/canary/packages/react-email/CHANGELOG.md)
- [Commits](https://github.com/resend/react-email/commits/react-email@6.9.0/packages/react-email)

Updates `react-hook-form` from 7.75.0 to 7.82.0
- [Release notes](https://github.com/react-hook-form/react-hook-form/releases)
- [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md)
- [Commits](react-hook-form/react-hook-form@v7.75.0...v7.82.0)

Updates `react-resizable-panels` from 4.11.0 to 4.12.2
- [Release notes](https://github.com/bvaughn/react-resizable-panels/releases)
- [Changelog](https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md)
- [Commits](bvaughn/react-resizable-panels@4.11.0...4.12.2)

Updates `recharts` from 3.8.1 to 3.9.2
- [Release notes](https://github.com/recharts/recharts/releases)
- [Changelog](https://github.com/recharts/recharts/blob/main/CHANGELOG.md)
- [Commits](recharts/recharts@v3.8.1...v3.9.2)

Updates `tailwind-merge` from 3.5.0 to 3.6.0
- [Release notes](https://github.com/dcastil/tailwind-merge/releases)
- [Commits](dcastil/tailwind-merge@v3.5.0...v3.6.0)

Updates `@biomejs/biome` from 2.4.15 to 2.5.4
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.4/packages/@biomejs/biome)

Updates `@react-email/ui` from 6.1.4 to 6.9.0
- [Release notes](https://github.com/resend/react-email/releases)
- [Changelog](https://github.com/resend/react-email/blob/canary/packages/ui/CHANGELOG.md)
- [Commits](https://github.com/resend/react-email/commits/@react-email/ui@6.9.0/packages/ui)

Updates `@types/node` from 25.2.3 to 26.1.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `concurrently` from 9.2.1 to 10.0.3
- [Release notes](https://github.com/open-cli-tools/concurrently/releases)
- [Commits](open-cli-tools/concurrently@v9.2.1...v10.0.3)

Updates `lint-staged` from 17.0.4 to 17.1.0
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v17.0.4...v17.1.0)

Updates `tsx` from 4.21.0 to 4.23.1
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.21.0...v4.23.1)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/commits)

---
updated-dependencies:
- dependency-name: "@aws-sdk/client-sesv2"
  dependency-version: 3.1090.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@base-ui/react"
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@hookform/resolvers"
  dependency-version: 5.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@next-safe-action/adapter-react-hook-form"
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@radix-ui/react-avatar"
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@radix-ui/react-select"
  dependency-version: 2.3.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@radix-ui/react-slot"
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@slack/web-api"
  dependency-version: 8.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.101.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@vercel/speed-insights"
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: "@xyflow/react"
  dependency-version: 12.11.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: date-fns
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: gocardless-nodejs
  dependency-version: 8.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: google-auth-library
  dependency-version: 10.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: googleapis
  dependency-version: 173.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: inngest
  dependency-version: 4.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: lucide-react
  dependency-version: 1.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: motion
  dependency-version: 12.42.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: next-safe-action
  dependency-version: 8.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: nodemailer
  dependency-version: 9.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: nuqs
  dependency-version: 2.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: pg
  dependency-version: 8.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: posthog-js
  dependency-version: 1.404.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: posthog-node
  dependency-version: 5.45.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: radix-ui
  dependency-version: 1.6.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: react-email
  dependency-version: 6.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: react-hook-form
  dependency-version: 7.82.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: react-resizable-panels
  dependency-version: 4.12.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: recharts
  dependency-version: 3.9.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: tailwind-merge
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@biomejs/biome"
  dependency-version: 2.5.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@react-email/ui"
  dependency-version: 6.9.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.1.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: concurrently
  dependency-version: 10.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: lint-staged
  dependency-version: 17.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: tsx
  dependency-version: 4.23.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 19, 2026
@socket-security

socket-security Bot commented Jul 19, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updated@​react-email/​ui@​6.1.4 ⏵ 6.9.059 -1710076 -1099 +1100
Updatedinngest@​4.4.0 ⏵ 4.13.066100100100100
Updated@​radix-ui/​react-label@​2.1.8 ⏵ 2.1.11100 +11006699100
Updated@​radix-ui/​react-separator@​1.1.7 ⏵ 1.1.11100 +110067 +199100
Updated@​radix-ui/​react-slot@​1.2.4 ⏵ 1.3.0100 +110069 +195100
Updated@​radix-ui/​react-avatar@​1.1.10 ⏵ 1.2.299 +110070 +199100
Updated@​radix-ui/​react-checkbox@​1.3.3 ⏵ 1.3.799 +11007199100
Updatedgocardless-nodejs@​8.1.0 ⏵ 8.4.071 +110010091100
Updated@​radix-ui/​react-dialog@​1.1.15 ⏵ 1.1.1999 +11007199100
Updated@​radix-ui/​react-dropdown-menu@​2.1.16 ⏵ 2.1.2099 +110071 +199100
Updated@​radix-ui/​react-accordion@​1.2.12 ⏵ 1.2.1699 +11007199100
Updated@​base-ui/​react@​1.4.1 ⏵ 1.6.072 -21008994100
Updatedposthog-js@​1.396.4 ⏵ 1.404.192 +910072 -8100100
Updatedposthog-node@​5.39.2 ⏵ 5.45.272 -910079100100
Updated@​radix-ui/​react-tooltip@​1.2.8 ⏵ 1.2.1299 +110072 +199100
Updated@​radix-ui/​react-select@​2.2.6 ⏵ 2.3.39910074 +199100
Updatedrecharts@​3.8.1 ⏵ 3.9.279 +1100100 +295100
Updatedlucide-react@​1.14.0 ⏵ 1.25.0100 +110098 +196 +280
Updated@​types/​node@​25.2.3 ⏵ 26.1.1100 +11008195 -1100
Updatedgoogleapis@​171.4.0 ⏵ 173.0.081 -5100100 +190 +1100
Updatedradix-ui@​1.4.3 ⏵ 1.6.297 +11008198100
Updatedtsx@​4.21.0 ⏵ 4.23.1100 +110081 +194100
Updatedtailwind-merge@​3.5.0 ⏵ 3.6.0100 +110086 +196100
Updated@​vercel/​speed-insights@​1.0.4 ⏵ 2.0.099 +710087 +292 +5100
Updateddate-fns@​4.1.0 ⏵ 4.4.0100 +11009287100
Updated@​hookform/​resolvers@​5.2.2 ⏵ 5.4.099100100 +187100
Updated@​tanstack/​react-query@​5.100.9 ⏵ 5.101.2991008897100
Updatedtypescript@​6.0.3 ⏵ 7.0.294 -610089 -1100100 +10
Updatedpg@​8.20.0 ⏵ 8.22.099 +1100100 +189 +2100
Updated@​next-safe-action/​adapter-react-hook-form@​2.0.6 ⏵ 2.1.09110010089 +6100
Updatedgoogle-auth-library@​10.6.2 ⏵ 10.9.09310010090100
Updatednext-safe-action@​8.5.2 ⏵ 8.6.0100 +110091 +194 +2100
See 12 more rows in the dashboard

View full report

@socket-security

socket-security Bot commented Jul 19, 2026

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: npm googleapis is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: package-lock.json → npm/googleapis@173.0.0

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/googleapis@173.0.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm googleapis is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: package-lock.json → npm/googleapis@173.0.0

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/googleapis@173.0.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm jiti is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: package-lock.json → npm/react-email@6.9.0 → npm/jiti@2.6.1

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/jiti@2.6.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants