chore(deps): bump the npm-dependencies group across 1 directory with 15 updates by dependabot[bot] · Pull Request #756 · FilOzone/dealbot

dependabot · 2026-10-27T17:08:16Z

Bumps the npm-dependencies group with 15 updates in the / directory:

Package	From	To
@filoz/synapse-core	`0.8.1`	`0.10.2`
class-validator	`0.14.4`	`0.15.1`
filecoin-pin	`2.0.0`	`2.2.1`
joi	`18.2.9`	`18.3.0`
viem	`2.57.7`	`2.57.11`
assemblyscript	`0.19.23`	`0.28.20`
@radix-ui/react-switch	`1.4.0`	`1.4.1`
@radix-ui/react-tabs	`1.2.0`	`1.2.1`
lucide-react	`1.55.0`	`1.61.0`
react	`19.3.0`	`19.3.1`
react-dom	`19.3.0`	`19.3.1`
@testing-library/user-event	`14.6.7`	`14.6.8`
vite	`8.3.4`	`8.3.5`
@biomejs/biome	`2.5.15`	`2.6.3`
@swc/core	`1.16.18`	`1.16.20`

Updates @filoz/synapse-core from 0.8.1 to 0.10.2

Release notes

Sourced from @filoz/synapse-core's releases.

synapse-core: v0.10.2

0.10.2 (2026-10-16)

Features

core: use @hugomrdias/commp-wasm for PieceCID hashing (#1018) (d9bf76e)

Bug Fixes

core: default the data set payer to a session key's root wallet (b5aa6c8), closes #1025

core: keep confirmed pieces when another add-pieces tx fails (f218706)

core: stop polling add-pieces/create-dataset status on rejected tx (#1020) (96235c1)

Chores

synapse-core: align ox with viem and drop ox from mocks (#1021) (a830d0d)

synapse-core: update commp-wasm to 0.1.4 (#1030) (91b8502)

synapse-core: v0.10.1

0.10.1 (2026-10-09)

Features

core: accept AbortSignal in legacy uploadPiece (#1009) (596f768)

core: accept AbortSignal in sp actions and forward timeout in waitForCreateDataSetAddPieces (#998) (603403a)

Bug Fixes

core: add is() type guard to WaitForCreateDataSetRejectedError (#1001) (b85f512)

core: cancel sibling uploads when one fails in upload() (#1013) (57d84c2)

core: skip signing in pullPieces when the abort signal already fired (#1012) (47d5e64)

increase max upload size to 64 GiB padded (#997) (290ed9e)

synapse-core: v0.10.0

0.10.0 (2026-09-25)

⚠ BREAKING CHANGES

synapse-core: PdpDataSet.provider and Piece.url can now be null. Callers must check these fields before using them.

Bug Fixes

remove the temporary 40-piece batch limit (#975) (e03a00c)

synapse-core: handle inactive PDP providers (44fee17)

... (truncated)

Commits

e775fef chore(master): release synapse-core 0.10.2 (#1019)
91b8502 chore(synapse-core): update commp-wasm to 0.1.4 (#1030)
2e6b8e0 fix(react): reject a session key whose root is not the connected account
f218706 fix(core): keep confirmed pieces when another add-pieces tx fails
4edbb1b refactor(core): share one concurrency limit helper in utils
f36d697 refactor(core): move the payer default into utils as getPayerAddress
0da72d2 refactor(core): move multi-file upload into SP.uploadPieces
b5aa6c8 fix(core): default the data set payer to a session key's root wallet
3a9a3d5 feat(react): add useUploadPieces streaming multi-file upload hook
182e524 feat(react): accept an optional chainId on read hooks
Additional commits viewable in compare view

Updates class-validator from 0.14.4 to 0.15.1

Release notes

Sourced from class-validator's releases.

v0.15.1

What's Changed

chore: publish 0.15.0 for real by @braaar in typestack/class-validator#2671

chore: publish 0.15.1 by @braaar in typestack/class-validator#2672

Full Changelog: typestack/class-validator@v0.15.0...v0.15.1

v0.15.0

What's Changed

feat: add IsISO31661Numeric decorator for country codes by @RobinvanderVliet in typestack/class-validator#2657

feat: validateIf for validation options by @aoi-umi in typestack/class-validator#1579

feat: update UUID validation to support versions 1-8, nil, max, and all by @PleBea in typestack/class-validator#2647

chore: bump vulnerable dependencies by @braaar in typestack/class-validator#2669

feat: add isISO6391 decorator for language codes by @RobinvanderVliet in typestack/class-validator#2626

feat(IsIBAN)!: Add IsIBANOptions as argument for IsIBAN decorator by @LiiaMenke in typestack/class-validator#2618

fix small grammatical error in README.md by @igorrocha in typestack/class-validator#2596

chore: release 0.15.0 by @braaar in typestack/class-validator#2670

New Contributors

@RobinvanderVliet made their first contribution in typestack/class-validator#2657

@aoi-umi made their first contribution in typestack/class-validator#1579

@PleBea made their first contribution in typestack/class-validator#2647

@LiiaMenke made their first contribution in typestack/class-validator#2618

@igorrocha made their first contribution in typestack/class-validator#2596

Full Changelog: typestack/class-validator@v0.14.4...v0.15.0

Changelog

Sourced from class-validator's changelog.

0.15.1 (2026-02-26)

BREAKING CHANGES

Added options argument to IsIBAN validator (#2618), which breaks any existing usage of this decorator that pass an argument to the decorator, e.g. @IsIBAN({forbidUnknownValues: false})

Fixed

Updated lockfile to patch vulnerabilities (#2669)

Fixed a small grammatical error in the docs (#2596)

Added

Added validateIf option to all validators, providing a lot more flexibility in using conditional validation (#1579)

Added IsISO31661Numeric validator for country codes (#2657)

Added IsISO6391 validator for language codes (#2626)

Added more versions to IsUUID validator options. (#2647)

Commits

2e1a5c2 chore: publish 0.15.1 (#2672)
737d2a7 chore: publish 0.15.0 (#2671)
8bc5f96 chore: release 0.15.0 (#2670)
dc41588 fix small grammatical error in README.md (#2596)
2c0ff53 feat(IsIBAN): Add IsIBANOptions as argument for IsIBAN decorator (#2618)
e0eaa02 feat: add isISO6391 decorator for language codes (#2626)
a8b2f6e chore: bump vulnerable dependencies (#2669)
35e589d feat: update UUID validation to support versions 1-8, nil, max, and all (#2647)
042fb57 feat: add validateIf to validation options (#1579)
4fcad7b feat: add IsISO31661Numeric decorator for country codes (#2657)
See full diff in compare view

Updates filecoin-pin from 2.0.0 to 2.2.1

Release notes

Sourced from filecoin-pin's releases.

v2.2.1

2.2.1 (2026-10-12)

Bug Fixes

cli: move console link flow from utm_campaign to utm_term (#758) (6f6dae1)

v2.2.0

2.2.0 (2026-10-08)

Features

cli: tag console links with utm params for human vs agent attribution (#746) (6d7550a)

Bug Fixes

cli: pdp explorer link (#766) (27fc264)

data-set: paginate listDataSets to avoid RPC timeouts on large accounts (#708) (913f418)

deps: upgrade synapse-core to 0.10.0 (#767) (aedfcb5)

Chores

deps-dev: bump @types/node from 26.1.1 to 26.6.2 (#748) (0b4dcd4)

deps: bump env-paths from 3.0.0 to 4.0.0 (#749) (4f43b3f)

deps: bump pnpm/action-setup from 6.0.10 to 6.1.0 (#760) (0dc6dc2)

deps: bump pnpm/action-setup from 6.0.10 to 6.1.0 in /upload-action (#761) (9bc4bb0)

deps: bump pnpm/action-setup in /upload-action (9bc4bb0)

v2.1.1

2.1.1 (2026-09-16)

Bug Fixes

payments: accept a zero piece in setup check (#728) (6bbbd0b)

v2.1.0

2.1.0 (2026-09-16)

Features

add: funds preflight for session keys (#702) (40389ae)

cli: add balance and dashboard commands (#703) (c068a78)

cli: add login and logout commands (#700) (819dc6a)

cli: auto-load the login session and add the no-credentials error (#701) (7e431c2)

... (truncated)

Changelog

Sourced from filecoin-pin's changelog.

2.2.1 (2026-10-12)

Bug Fixes

cli: move console link flow from utm_campaign to utm_term (#758) (6f6dae1)

2.2.0 (2026-10-08)

Features

cli: tag console links with utm params for human vs agent attribution (#746) (6d7550a)

Bug Fixes

cli: pdp explorer link (#766) (27fc264)

data-set: paginate listDataSets to avoid RPC timeouts on large accounts (#708) (913f418)

deps: upgrade synapse-core to 0.10.0 (#767) (aedfcb5)

Chores

deps-dev: bump @types/node from 26.1.1 to 26.6.2 (#748) (0b4dcd4)

deps: bump env-paths from 3.0.0 to 4.0.0 (#749) (4f43b3f)

deps: bump pnpm/action-setup from 6.0.10 to 6.1.0 (#760) (0dc6dc2)

deps: bump pnpm/action-setup from 6.0.10 to 6.1.0 in /upload-action (#761) (9bc4bb0)

deps: bump pnpm/action-setup in /upload-action (9bc4bb0)

2.1.1 (2026-09-16)

Bug Fixes

payments: accept a zero piece in setup check (#728) (6bbbd0b)

2.1.0 (2026-09-16)

Features

add: funds preflight for session keys (#702) (40389ae)

cli: add balance and dashboard commands (#703) (c068a78)

cli: add login and logout commands (#700) (819dc6a)

cli: auto-load the login session and add the no-credentials error (#701) (7e431c2)

logout: deep link to revoke the key (#726) (b81ff57)

session: add on-chain authorization watcher (#699) (0663f7a)

... (truncated)

Commits

995d942 chore(master): release 2.2.1 (#769)
6f6dae1 fix(cli): move console link flow from utm_campaign to utm_term (#758)
d72a5cc chore(master): release 2.2.0 (#751)
aedfcb5 fix(deps): upgrade synapse-core to 0.10.0 (#767)
27fc264 fix(cli): pdp explorer link (#766)
9bc4bb0 chore(deps): bump pnpm/action-setup from 6.0.10 to 6.1.0 in /upload-action (#...
0dc6dc2 chore(deps): bump pnpm/action-setup from 6.0.10 to 6.1.0 (#760)
4f43b3f chore(deps): bump env-paths from 3.0.0 to 4.0.0 (#749)
0b4dcd4 chore(deps-dev): bump @types/node from 26.1.1 to 26.6.2 (#748)
913f418 fix(data-set): paginate listDataSets to avoid RPC timeouts on large accounts ...
Additional commits viewable in compare view

Updates joi from 18.2.9 to 18.3.0

Commits

b3973e5 18.3.0
1ec93ab Merge pull request #3160 from hapijs/feat/prepare-undefined
a08984c feat: accept undefined values in prepare
See full diff in compare view

Updates viem from 2.57.7 to 2.57.11

Release notes

Sourced from viem's releases.

viem@2.57.11

Patch Changes

#5274 bea62b141a437cfd4027be182e94ae9b7a56fcf1 Thanks @mmv08! - Changed the default cacheTime to the shorter of pollingInterval and half of chain.blockTime, so block numbers are cached for at most half a block and a long pollingInterval no longer lengthens the cache.

#5245 f4da1f6384a2bec09d81164a9bd953c159acdcd6 Thanks @wavebyrd! - Fixed watchEvent so concurrent polling watchers on one client each honor their own events and strict instead of sharing the first watcher's filter.

#5253 94e5c08e73f3627f3b99660d4498344f976707c2 Thanks @decofe! - Increased the base fee multiplier to 2 for HyperEVM mainnet and testnet to provide more headroom for fee increases.

#5247 d65dff84a25d3c89352610bd23d29dc8d773a48a Thanks @clippytool! - Fixed waitForTransactionReceipt leaving a listener behind for concurrent calls with the same options, which made later waits for the same hash join an observer that was no longer polling and never settle.

#5250 2d54066f114a10ad9a05871c321a8d2e9d49445d Thanks @RaphaelFakhri! - Fixed getEnsAvatar returning null for inline SVG avatars containing non-Latin-1 characters (e.g. é or emoji), and decoded base64 NFT metadata as UTF-8.

#5273 ef92315ab2139aee63f9222634109f5bb48c69e8 Thanks @mmv08! - Updated monad and monadTestnet blockTime to 300 ms.

#5244 55ee45c4d9573badcdc76ef6d39de294bfe8184b Thanks @erkancamli! - Fixed nonceManager handing out a duplicate nonce when the previously consumed nonce was 0.

#5267 4ae58f6135c77b5afeb70c19af237d6a3bd127a6 Thanks @struong! - viem/tempo: Fixed prepareTransactionRequest defaulting nonce to 0 for nonceKey: 0n. The protocol nonce key now fills nonce from the account's transaction count or nonceManager.

#5269 3b9afb2219498bd338f136f505e3770589a8404e Thanks @jxom! - Exported the FeePayerTransport and RelayTransport types from viem/tempo, so declaration emit can name the transports that withFeePayer and withRelay return.

#5275 7315f38a32e83d489d412a73225afd8a3d9f614d Thanks @mmv08! - Fixed getTransactionConfirmations returning 0n or a negative number for a transaction already in a block, when the block number it read was lower than the transaction's block number.

#5266 6834ec45211b8b38167950c6a9a5f5d3c1406c47 Thanks @bxpana! - Added ZKsync Era Testnet chain.

viem@2.57.10

Patch Changes
#5260 b56592f7b6cc2d01d926bf6cf278d53cbc0b6e17 Thanks @jxom! - viem/tempo: Added Actions.accounts.upgrade and Actions.accounts.upgradeSync to upgrade an existing account to a configurable account in place (TIP-1113), and an upgrade form of Account.fromConfig for the upgraded account.

#5260 b56592f7b6cc2d01d926bf6cf278d53cbc0b6e17 Thanks @jxom! - viem/tempo: Added the configurable key type to Actions.accessKey.getMetadata and execution error messages for configurable account upgrades and retired root keys.
#5260 b56592f7b6cc2d01d926bf6cf278d53cbc0b6e17 Thanks @jxom! - viem/tempo: Synced configurable accounts with Tempo T14, renaming the nativeMultisig ABI, address and selector exports to configurableAccount, sending configurableAccountSimulation to the node, deriving configurable account addresses and signatures with the tempo:configurable-account:* domains, and storing relay state under configurableAccount:* store keys.
- Abis.nativeMultisig
+ Abis.configurableAccount
- Addresses.nativeMultisig
+ Addresses.configurableAccount
- Addresses.nativeMultisigFactory
+ Addresses.configurableAccountRecoveryFactory
- Selectors.nativeMultisig
+ Selectors.configurableAccount
#5260 b56592f7b6cc2d01d926bf6cf278d53cbc0b6e17 Thanks @jxom! - viem/tempo: Added Actions.accounts.deriveAccount and Actions.accounts.verifyHash for the configurable account precompiles, configurable account signature support in verifyHash, and a factory option on Account.fromConfig that defaults to Addresses.configurableAccountRecoveryFactory.

#5260 b56592f7b6cc2d01d926bf6cf278d53cbc0b6e17 Thanks @jxom! - viem/tempo: Added hardforks t7 through t14 and fixed Hardfork.lt treating unknown hardforks as older than every known hardfork.
viem@2.57.8

... (truncated)

Commits

1353255 chore: version package (#5268)
c0a3f34 chore: fix main CI (watchBlocks polling tests, size limits) (#5287)
393957e chore: run bun postinstall in vercel install (#5278)
4989463 docs: add self-hosted RPC proxy example to fallback transport (#5264)
94e5c08 fix(chains): increase HyperEVM fee headroom (#5253)
2d54066 fix: encode inline SVG avatars as UTF-8 in getEnsAvatar (#5250)
bea62b1 fix: cap default cacheTime at half of chain.blockTime (#5274)
7315f38 fix: avoid zero or negative counts in getTransactionConfirmations (#5275)
ef92315 fix(chains): set Monad and Monad Testnet blockTime to 300ms (#5273)
bca9a1d chore: bump node and bun (#5262)
Additional commits viewable in compare view

Updates assemblyscript from 0.19.23 to 0.28.20

Release notes

Sourced from assemblyscript's releases.

v0.28.20

Bug fixes

optimize dayOfWeek & dateFromEpoch routines in date (#3033) (9ca63f2ff046258afbf360d7bc147665882f8258)

Other

chore: Update Binaryen and other dependencies (#3035) (b6bda05c29c9eb7d07d7f6cb2703508483b30493)

chore: Update binaryen, esbuild & other dependencies (#3032) (282903732b48ddb2e268092384969e0c1ecfb12b)

v0.28.19

New features

update binaryen to v130 (#3026) (18b17a7ade0b9f03b80f63e3235f5ce6f43e5562)

v0.28.18

Bug fixes

evaluate call_indirect callee before arguments (#2994) (ffed83a942222ebb504e9350aad99a831752b043)

v0.28.17

New features

Migrate Binaryen from v123 to v129 (#3019) (f93a9415bcde40660305a32414f2cb2ccfccbfc4)

v0.28.16

New features

properly parse and resolve tuples (#3018) (a5112aa25a6c1699c773fe279a31e2921012078b) Co-authored-by: Max Graey maxgraey@gmail.com

Bug fixes

forbidden override between generic function and concrete function (#3014) (ffada5a3542eb311d271dfb8c5c37c7c173aa0d8)

v0.28.15

Bug fixes

update unicode identifier tables to Unicode 17.0 (#3017) (bf7f95916b97e6d60c45e37d5d2f1c4dbb07db87)

v0.28.14

Bug fixes

report error when generic method attempts to implement non-generic interface method (#3007) (2180c8cd32e5eba973ac78e42e6d4c775ee549d9)

Other

chore: update some CI workflows (#3011) (8c392f004abfca6f52e5e7a4b8f3cd130eec12c7)

chore: Add AI-polices for contributions (#3009) (c91247d8b7a0bfd6a7a2525f0810c8be0ab538ae)

... (truncated)

Commits

b6bda05 chore: Update Binaryen and other dependencies (#3035)
9ca63f2 fix: optimize dayOfWeek & dateFromEpoch routines in date (#3033)
2829037 chore: Update binaryen, esbuild & other dependencies (#3032)
18b17a7 feat: update binaryen to v130 (#3026)
ffed83a fix: evaluate call_indirect callee before arguments (#2994)
f93a941 feat: Migrate Binaryen from v123 to v129 (#3019)
a5112aa feat: properly parse and resolve tuples (#3018)
ffada5a fix: forbidden override between generic function and concrete function (#3014)
bf7f959 fix: update unicode identifier tables to Unicode 17.0 (#3017)
2180c8c fix: report error when generic method attempts to implement non-generic inter...
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for assemblyscript since your current version.

Updates @radix-ui/react-switch from 1.4.0 to 1.4.1

Changelog

Sourced from @radix-ui/react-switch's changelog.

1.4.1

Fixed a type regression where callback props that were previously declared as methods rejected handlers whose parameter is narrower than the prop's.

Commits

See full diff in compare view

Updates @radix-ui/react-tabs from 1.2.0 to 1.2.1

Changelog

Sourced from @radix-ui/react-tabs's changelog.

1.2.1

Fixed a type regression where callback props that were previously declared as methods rejected handlers whose parameter is narrower than the prop's.

Updated dependencies: @radix-ui/react-roving-focus@1.2.1

Commits

See full diff in compare view

Updates lucide-react from 1.55.0 to 1.61.0

Release notes

Sourced from lucide-react's releases.

Version 1.61.0

What's Changed

feat(icons): added circle-chevrons-down, circle-chevrons-left, circle-chevrons-right and 1 more icons by @ypotti in lucide-icons/lucide#5025

New Contributors

@ypotti made their first contribution in lucide-icons/lucide#5025

Full Changelog: lucide-icons/lucide@1.60.0...1.61.0

Version 1.60.0

What's Changed

feat(icons): added tombstone icon by @ryck in lucide-icons/lucide#4929

feat(icons): added smartphone-user-round icon by @hitanshu-machhi in lucide-icons/lucide#4586

feat(icons): added bacon icon by @devkamani9313-lab in lucide-icons/lucide#4694

fix(site): Fix build by @ericfennis in lucide-icons/lucide#5033

chore(docs): Update icon count comparison with Feather Icons by @noahweidig in lucide-icons/lucide#5022

feat(icons): added letter-spacing icon by @madebyoz in lucide-icons/lucide#3038

chore(deps): bump the vue-deps group with 2 updates by @dependabot[bot] in lucide-icons/lucide#5027

chore(deps-dev): bump react-native from 0.87.1 to 0.88.0 in the react-native-deps group by @dependabot[bot] in lucide-icons/lucide#5030

feat(icons): added line-height icon by @madebyoz in lucide-icons/lucide#3039

chore(deps-dev): bump the svelte-deps group across 1 directory with 2 updates by @dependabot[bot] in lucide-icons/lucide#5028

chore(deps): bump the react-deps group across 1 directory with 2 updates by @dependabot[bot] in lucide-icons/lucide#5026

feat(icons): added brain-off icon by @ej52 in lucide-icons/lucide#3535

feat(icons): added graph-hub icon by @Carlito-la-banane in lucide-icons/lucide#4974

feat(svelte): export __iconData and __iconNode across per-icon modules (#4936) by @ronitgupta138 in lucide-icons/lucide#4957

New Contributors

@hitanshu-machhi made their first contribution in lucide-icons/lucide#4586

@devkamani9313-lab made their first contribution in lucide-icons/lucide#4694

@noahweidig made their first contribution in lucide-icons/lucide#5022

@madebyoz made their first contribution in lucide-icons/lucide#3038

@ej52 made their first contribution in lucide-icons/lucide#3535

@Carlito-la-banane made their first contribution in lucide-icons/lucide#4974

@ronitgupta138 made their first contribution in lucide-icons/lucide#4957

Full Changelog: lucide-icons/lucide@1.59.0...1.60.0

Version 1.59.0

What's Changed

feat(docs): Adds search field to docs pages by @ericfennis in lucide-icons/lucide#5012

fix(icons): changed chess-queen icon by @karsa-mistmere in lucide-icons/lucide#4613

Full Changelog: lucide-icons/lucide@1.58.0...1.59.0

Version 1.58.0

What's Changed

feat(docs): add third-party package lucide-jte by @sgruendel in lucide-icons/lucide#5000

chore(integration-tests): Add Svelte integration tests for @ucide/svelte by @ericfennis in lucide-icons/lucide#5005

chore(deps-dev): bump the angular-deps group across 1 directory with 10 updates by @dependabot[bot] in lucide-icons/lucide#5004

... (truncated)

Commits

fa238cf chore(deps): bump the react-deps group across 1 directory with 2 updates (#5026)
3f1255e chore(deps-dev): bump @vitejs/plugin-react (#4995)
See full diff in compare view

Updates react from 19.3.0 to 19.3.1

Release notes

Sourced from react's releases.

19.3.1 (October 14th, 2026)

React Server Components

Improve transport protocol (#37845 by @unstubbable and @eps1lon)

Commits

61aa00d [19.3.x][Flight] Improve transport protocol (#37845)
See full diff in compare view

Updates react-dom from 19.3.0 to 19.3.1

Release notes

Sourced from react-dom's releases.

19.3.1 (October 14th, 2026)

React Server Components

Improve transport protocol (#37845 by @unstubbable and @eps1lon)

Commits

61aa00d [19.3.x][Flight] Improve transport protocol (#37845)
See full diff in compare view

Updates @testing-library/user-event from 14.6.7 to 14.6.8

Release notes

Sourced from @testing-library/user-event's releases.

v14.6.8

14.6.8 (2026-10-13)

Bug Fixes

treat programmatic null input values as empty string (#1329) (1951eb7)

Commits

1951eb7 fix: treat programmatic null input values as empty string (#1329)
See full diff in compare view

Updates vite from 8.3.4 to 8.3.5

Release notes

Sourced from vite's releases.

v8.3.5

Bug Fixes

build: handle missing chunk import maps (#23777) (8d7623d)

build: include preload dependencies to chunk import map hashing (#23793) (4d16e7c)

bundled-dev: apply server.origin to asset URLs (#23683) (52ba877)

bundled-dev: declare utf-8 charset in fallback page (#23846) (197daf6)

bundled-dev: ignore build.chunkImportMap (#23685) (cfe917d)

bundled-dev: include user import.meta.env.* defines in the import.meta.env object (#23713) (6019aa7)

bundled-dev: map forwarded error stacks through the bundle source maps (#23741) (

…15 updates Bumps the npm-dependencies group with 15 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@filoz/synapse-core](https://github.com/FilOzone/synapse-sdk) | `0.8.1` | `0.10.2` | | [class-validator](https://github.com/typestack/class-validator) | `0.14.4` | `0.15.1` | | [filecoin-pin](https://github.com/filecoin-project/filecoin-pin) | `2.0.0` | `2.2.1` | | [joi](https://github.com/hapijs/joi) | `18.2.9` | `18.3.0` | | [viem](https://github.com/wevm/viem) | `2.57.7` | `2.57.11` | | [assemblyscript](https://github.com/AssemblyScript/assemblyscript) | `0.19.23` | `0.28.20` | | [@radix-ui/react-switch](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/switch) | `1.4.0` | `1.4.1` | | [@radix-ui/react-tabs](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tabs) | `1.2.0` | `1.2.1` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.55.0` | `1.61.0` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.3.0` | `19.3.1` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.3.0` | `19.3.1` | | [@testing-library/user-event](https://github.com/testing-library/user-event) | `14.6.7` | `14.6.8` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.4` | `8.3.5` | | [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.15` | `2.6.3` | | [@swc/core](https://github.com/swc-project/swc/tree/HEAD/packages/core) | `1.16.18` | `1.16.20` | Updates `@filoz/synapse-core` from 0.8.1 to 0.10.2 - [Release notes](https://github.com/FilOzone/synapse-sdk/releases) - [Commits](FilOzone/synapse-sdk@v0.8.1...synapse-core-v0.10.2) Updates `class-validator` from 0.14.4 to 0.15.1 - [Release notes](https://github.com/typestack/class-validator/releases) - [Changelog](https://github.com/typestack/class-validator/blob/develop/CHANGELOG.md) - [Commits](typestack/class-validator@v0.14.4...v0.15.1) Updates `filecoin-pin` from 2.0.0 to 2.2.1 - [Release notes](https://github.com/filecoin-project/filecoin-pin/releases) - [Changelog](https://github.com/filecoin-project/filecoin-pin/blob/master/CHANGELOG.md) - [Commits](filecoin-project/filecoin-pin@v2.0.0...v2.2.1) Updates `joi` from 18.2.9 to 18.3.0 - [Commits](hapijs/joi@v18.2.9...v18.3.0) Updates `viem` from 2.57.7 to 2.57.11 - [Release notes](https://github.com/wevm/viem/releases) - [Commits](https://github.com/wevm/viem/compare/viem@2.57.7...viem@2.57.11) Updates `assemblyscript` from 0.19.23 to 0.28.20 - [Release notes](https://github.com/AssemblyScript/assemblyscript/releases) - [Commits](AssemblyScript/assemblyscript@v0.19.23...v0.28.20) Updates `@radix-ui/react-switch` from 1.4.0 to 1.4.1 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/switch/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/switch) Updates `@radix-ui/react-tabs` from 1.2.0 to 1.2.1 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/tabs/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tabs) Updates `lucide-react` from 1.55.0 to 1.61.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.61.0/packages/lucide-react) Updates `react` from 19.3.0 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react) Updates `react-dom` from 19.3.0 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom) Updates `@testing-library/user-event` from 14.6.7 to 14.6.8 - [Release notes](https://github.com/testing-library/user-event/releases) - [Changelog](https://github.com/testing-library/user-event/blob/main/CHANGELOG.md) - [Commits](testing-library/user-event@v14.6.7...v14.6.8) Updates `vite` from 8.3.4 to 8.3.5 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.3.5/packages/vite) Updates `@biomejs/biome` from 2.5.15 to 2.6.3 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/CHANGELOG_v1.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.6.3/packages/@biomejs/biome) Updates `@swc/core` from 1.16.18 to 1.16.20 - [Release notes](https://github.com/swc-project/swc/releases) - [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md) - [Commits](https://github.com/swc-project/swc/commits/v1.16.20/packages/core) --- updated-dependencies: - dependency-name: "@filoz/synapse-core" dependency-version: 0.10.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: class-validator dependency-version: 0.15.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: filecoin-pin dependency-version: 2.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: joi dependency-version: 18.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: viem dependency-version: 2.57.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: assemblyscript dependency-version: 0.28.20 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@radix-ui/react-switch" dependency-version: 1.4.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@radix-ui/react-tabs" dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: lucide-react dependency-version: 1.61.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: react dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: react-dom dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@testing-library/user-event" dependency-version: 14.6.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: vite dependency-version: 8.3.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@biomejs/biome" dependency-version: 2.6.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@swc/core" dependency-version: 1.16.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

socket-security · 2026-10-27T17:08:48Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
@radix-ui/react-tabs@1.2.0 ⏵ 1.2.1	⁺¹	⁺¹	^-1
@radix-ui/react-switch@1.4.0 ⏵ 1.4.1	⁺¹	⁺¹	^-1
joi@18.2.9 ⏵ 18.3.0	⁺¹	⁺¹
lucide-react@1.55.0 ⏵ 1.61.0	⁺¹	⁺¹
filecoin-pin@2.0.0 ⏵ 2.2.1	⁺²		⁺³
vite@8.3.4 ⏵ 8.3.5	⁺¹	⁺¹
react@19.3.0 ⏵ 19.3.1
class-validator@0.14.4 ⏵ 0.15.1		⁺¹
@filoz/synapse-core@0.10.1 ⏵ 0.10.2		⁺¹	⁺¹
assemblyscript@0.28.20
@swc/core@1.16.18 ⏵ 1.16.20
react-dom@19.3.0 ⏵ 19.3.1		⁺¹
@testing-library/user-event@14.6.7 ⏵ 14.6.8	⁺¹	⁺¹
viem@2.57.7 ⏵ 2.57.11		⁺¹
@biomejs/biome@2.5.15 ⏵ 2.6.3		⁺¹

View full report

dependabot Bot requested review from beck-8 and silent-cipher as code owners October 27, 2026 17:08

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 27, 2026

FilOzzy added this to FOC Oct 27, 2026

github-project-automation Bot moved this to 📌 Triage in FOC Oct 27, 2026

FilOzzy moved this from 📌 Triage to 🐱 Todo in FOC Oct 27, 2026

Navigation Menu

Repository navigation

chore(deps): bump the npm-dependencies group across 1 directory with 15 updates - #756

chore(deps): bump the npm-dependencies group across 1 directory with 15 updates#756
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-92efe306df

dependabot Bot commented on behalf of github Oct 27, 2026

Uh oh!

socket-security Bot commented Oct 27, 2026

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 27, 2026

synapse-core: v0.10.2

0.10.2 (2026-10-16)

Features

Bug Fixes

Chores

synapse-core: v0.10.1

0.10.1 (2026-10-09)

Features

Bug Fixes

synapse-core: v0.10.0

0.10.0 (2026-09-25)

⚠ BREAKING CHANGES

Bug Fixes

v0.15.1

What's Changed

v0.15.0

What's Changed

New Contributors

0.15.1 (2026-02-26)

BREAKING CHANGES

Fixed

Added

v2.2.1

2.2.1 (2026-10-12)

Bug Fixes

v2.2.0

2.2.0 (2026-10-08)

Features

Bug Fixes

Chores

v2.1.1

2.1.1 (2026-09-16)

Bug Fixes

v2.1.0

2.1.0 (2026-09-16)

Features

2.2.1 (2026-10-12)

Bug Fixes

2.2.0 (2026-10-08)

Features

Bug Fixes

Chores

2.1.1 (2026-09-16)

Bug Fixes

2.1.0 (2026-09-16)

Features

viem@2.57.11

Patch Changes

viem@2.57.10

Patch Changes

viem@2.57.8

v0.28.20

Bug fixes

Other

v0.28.19

New features

v0.28.18

Bug fixes

v0.28.17

New features

v0.28.16

New features

Bug fixes

v0.28.15

Bug fixes

v0.28.14

Bug fixes

Other

1.4.1

1.2.1

Version 1.61.0

What's Changed

New Contributors

Version 1.60.0

What's Changed

New Contributors

Version 1.59.0

What's Changed