build(deps): Bump the npm_and_yarn group across 10 directories with 5 updates by dependabot[bot] · Pull Request #8827 · thirdweb-dev/js

dependabot · 2026-07-02T04:51:17Z

Bumps the npm_and_yarn group with 1 update in the /apps/wagmi-demo directory: vite.
Bumps the npm_and_yarn group with 2 updates in the /apps/wallet-ui directory: next and postcss.
Bumps the npm_and_yarn group with 1 update in the /packages/api directory: @hey-api/openapi-ts.
Bumps the npm_and_yarn group with 1 update in the /packages/engine directory: @hey-api/openapi-ts.
Bumps the npm_and_yarn group with 1 update in the /packages/insight directory: @hey-api/openapi-ts.
Bumps the npm_and_yarn group with 1 update in the /packages/nebula directory: @hey-api/openapi-ts.
Bumps the npm_and_yarn group with 1 update in the /packages/service-utils directory: vitest.
Bumps the npm_and_yarn group with 2 updates in the /packages/thirdweb directory: vite and vitest.
Bumps the npm_and_yarn group with 2 updates in the /packages/ui directory: next and postcss.
Bumps the npm_and_yarn group with 1 update in the /packages/vault-sdk directory: vitest.

Updates vite from 7.1.7 to 7.3.5

Release notes

Sourced from vite's releases.

v7.3.5

Please refer to CHANGELOG.md for details.

v7.3.3

Please refer to CHANGELOG.md for details.

v7.3.2

Please refer to CHANGELOG.md for details.

v7.3.1

Please refer to CHANGELOG.md for details.

v7.3.0

Please refer to CHANGELOG.md for details.

v7.2.7

Please refer to CHANGELOG.md for details.

v7.2.6

Please refer to CHANGELOG.md for details.

v7.2.5

Please refer to CHANGELOG.md for details.

Note: 7.2.5 failed to publish so it is skipped on npm

v7.2.4

Please refer to CHANGELOG.md for details.

v7.2.3

Please refer to CHANGELOG.md for details.

v7.2.2

Please refer to CHANGELOG.md for details.

v7.2.1

Please refer to CHANGELOG.md for details.

v7.2.0

Please refer to CHANGELOG.md for details.

v7.2.0-beta.1

Please refer to CHANGELOG.md for details.

v7.2.0-beta.0

Please refer to CHANGELOG.md for details.

v7.1.12

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

7.3.5 (2026-06-01)

Bug Fixes

backport #22572, reject windows alternate paths (#22574) (8c18556)

deps: backport #22571, reject UNC paths for launch-editor-middleware (#22573) (f20d64b)

Miscellaneous Chores

skip v7.3.4 release (8a6a0c9)

7.3.4 (2026-06-01)

Bug Fixes

backport #22572, reject windows alternate paths (#22574) (8c18556)

deps: backport #22571, reject UNC paths for launch-editor-middleware (#22573) (f20d64b)

7.3.3 (2026-05-07)

Bug Fixes

avoid destructure lowering for newer safari (#22346) (5ab51c0)

7.3.2 (2026-04-06)

Bug Fixes

avoid path traversal with optimize deps sourcemap handler (#22161) (09d8c90)

backport #22159, apply server.fs check to env transport (#22162) (19db0f2)

check server.fs after stripping query as well (#22160) (f8103cc)

7.3.1 (2026-01-07)

Features

add ignoreOutdatedRequests option to optimizeDeps (#21364) (9d39d37)

7.3.0 (2025-12-15)

Features

deps: update esbuild from ^0.25.0 to ^0.27.0 (#21183) (cff26ec)

7.2.7 (2025-12-08)

Bug Fixes

plugin shortcut support (#21211) (721f163)

7.2.6 (2025-12-01)

7.2.5 (2025-12-01)

Bug Fixes

config: handle shebang properly (#21158) (df5a30d)

deps: update all non-major dependencies (#21146) (a3cd262)

deps: update all non-major dependencies (#21175) (72e398a)

... (truncated)

Commits

077945c release: v7.3.5
8a6a0c9 chore: skip v7.3.4 release
8c18556 fix: backport #22572, reject windows alternate paths (#22574)
f20d64b fix(deps): backport #22571, reject UNC paths for launch-editor-middleware (#2...
ca31424 release: v7.3.3
5ab51c0 fix: avoid destructure lowering for newer safari (#22346)
cc383e0 release: v7.3.2
09d8c90 fix: avoid path traversal with optimize deps sourcemap handler (#22161)
f8103cc fix: check server.fs after stripping query as well (#22160)
19db0f2 fix: backport #22159, apply server.fs check to env transport (#22162)
Additional commits viewable in compare view

Updates next from 15.3.8 to 15.5.18

Release notes

Sourced from next's releases.

v15.5.18

This release contains security fixes for the following advisories:

High:

GHSA-8h8q-6873-q5fj: Denial of Service with Server Components

GHSA-267c-6grr-h53f: Middleware / Proxy bypass in App Router applications via segment-prefetch routes

GHSA-26hh-7cqf-hhc6: Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-Up

GHSA-mg66-mrh9-m8jx: Denial of Service via connection exhaustion in applications using Cache Components

GHSA-492v-c6pp-mqqv: Middleware / Proxy bypass through dynamic route parameter injection

GHSA-c4j6-fc7j-m34r: Server-side request forgery in applications using WebSocket upgrades

GHSA-36qx-fr4f-26g5: Middleware / Proxy bypass in Pages Router applications using i18n

Moderate:

GHSA-ffhc-5mcf-pf4q: Cross-site scripting in App Router applications using CSP nonces

GHSA-gx5p-jg67-6x7h: Cross-site scripting in beforeInteractive scripts with untrusted input

GHSA-h64f-5h5j-jqjh: Denial of Service in the Image Optimization API

GHSA-wfc6-r584-vfw7: Cache poisoning in React Server Component responses

Low:

GHSA-vfv6-92ff-j949: Cache poisoning via collisions in React Server Component cache-busting

GHSA-3g8h-86w9-wvmq: Middleware / Proxy redirects can be cache-poisoned

v15.5.16

This release contains security fixes for the following advisories:

High:

GHSA-8h8q-6873-q5fj: Denial of Service with Server Components

GHSA-267c-6grr-h53f: Middleware / Proxy bypass in App Router applications via segment-prefetch routes

GHSA-mg66-mrh9-m8jx: Denial of Service via connection exhaustion in applications using Cache Components

GHSA-492v-c6pp-mqqv: Middleware / Proxy bypass through dynamic route parameter injection

GHSA-c4j6-fc7j-m34r: Server-side request forgery in applications using WebSocket upgrades

GHSA-36qx-fr4f-26g5: Middleware / Proxy bypass in Pages Router applications using i18n

Moderate:

GHSA-ffhc-5mcf-pf4q: Cross-site scripting in App Router applications using CSP nonces

GHSA-gx5p-jg67-6x7h: Cross-site scripting in beforeInteractive scripts with untrusted input

GHSA-h64f-5h5j-jqjh: Denial of Service in the Image Optimization API

GHSA-wfc6-r584-vfw7: Cache poisoning in React Server Component responses

Low:

GHSA-vfv6-92ff-j949: Cache poisoning via collisions in React Server Component cache-busting

GHSA-3g8h-86w9-wvmq: Middleware / Proxy redirects can be cache-poisoned

Commits

9ff92ce v15.5.18
00ebe23 [backport] Disable build caches for production/staging/force-preview deploys ...
62c97ab v15.5.17
423623a Turbopack: Match proxy matchers with webpack implementation (#93594)
fa78739 Turbopack: Fix middleware matcher suffix (#93590)
36e62c6 [backport] Turbopack: more strict vergen setup (#93588)
36589b5 [backport][test] Pin package manager to patch versions (#93596)
ad6fd4e v15.5.16
79d7dff Ignore malformed CSP nonce headers (#103)
c4f6908 router-server: guard upgrade proxy against absolute-url SSRF (#77) (#102)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for next since your current version.

Updates postcss from 8.5.6 to 8.5.10

Release notes

Sourced from postcss's releases.

8.5.10

Fixed XSS via unescaped </style> in non-bundler cases (by @TharVid).

8.5.9

Speed up source map encoding paring in case of the error.

8.5.8

Fixed Processor#version.

8.5.7

Improved source map annotation cleaning performance (by CodeAnt AI).

Changelog

Sourced from postcss's changelog.

8.5.10

Fixed XSS via unescaped </style> in non-bundler cases (by @TharVid).

8.5.9

Speed up source map encoding paring in case of the error.

8.5.8

Fixed Processor#version.

8.5.7

Improved source map annotation cleaning performance (by CodeAnt AI).

Commits

33b9790 Release 8.5.10 version
536c79e Escape </style> in CSS output (#2074)
afa96b2 Update dependencies (#2073)
effe88b Typo (#2072)
3ee79a2 Thread model (#2071)
2e0683d Create incident response docs (#2070)
fe88ac2 Release 8.5.9 version
c551632 Avoid RegExp when we can use simple JS
89a6b74 Move SECURITY.txt for docs folder to keep GitHub page cleaner
6ceb8a4 Create SECURITY.md
Additional commits viewable in compare view

Updates @hey-api/openapi-ts from 0.76.0 to 0.97.3

Release notes

Sourced from @hey-api/openapi-ts's releases.

@hey-api/openapi-ts@0.95.0

Minor Changes

plugin(valibot): remove request data schema (#3671) (96f60ad) by @mrlubos

Validator request schemas

Valibot plugin no longer exports composite request Data schemas. Instead, each layer is exported as a separate schema. If you're using validators with SDKs, you can preserve the composite schema with shouldExtract:
export default {
  input: "hey-api/backend", // sign up at app.heyapi.dev
  output: "src/client",
  plugins: [
    // ...other plugins
    {
      name: "sdk",
      validator: "valibot",
    },
    {
      name: "valibot",
      requests: {
        shouldExtract: true,
      },
    },
  ],
};
internal: remove plugin.getSymbol() function (#3671) (96f60ad) by @mrlubos

Removed plugin.getSymbol() function

This function has been removed. You can use plugin.querySymbol() instead. It accepts the same arguments and returns the same result.

plugin(zod): remove request data schema (#3671) (96f60ad) by @mrlubos

Validator request schemas

Zod plugin no longer exports composite request Data schemas. Instead, each layer is exported as a separate schema. If you're using validators with SDKs, you can preserve the composite schema with shouldExtract:
export default {
  input: "hey-api/backend", // sign up at app.heyapi.dev
  output: "src/client",
  plugins: [
    // ...other plugins
    {
      name: "sdk",
      validator: "zod",
</tr></table> 

... (truncated)

Changelog

Sourced from @hey-api/openapi-ts's changelog.

0.97.3

Patch Changes

plugin(@hey-api/client-axios): fix: correct return type in SSE (#3919) (a19b3a4) by @kitlangton

plugin(@tanstack/preact-query): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@hey-api/client-ofetch): fix: correct return type in SSE (#3919) (a19b3a4) by @kitlangton

plugin(@tanstack/svelte-query): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@tanstack/angular-query-experimental): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@tanstack/react-query): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@hey-api/client-fetch): fix: correct return type in SSE (#3919) (a19b3a4) by @kitlangton

plugin(@tanstack/react-query): add useGetQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@hey-api/client-ky): fix: correct return type in SSE (#3919) (a19b3a4) by @kitlangton

plugin(@tanstack/solid-query): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@hey-api/client-next): fix: correct return type in SSE (#3919) (a19b3a4) by @kitlangton

plugin(@tanstack/preact-query): add useGetQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@hey-api/client-angular): fix: correct return type in SSE (#3919) (58962a0) by @kitlangton

plugin(@hey-api/transformers): add support for Temporal API via temporal-polyfill in dates (#3916) (bfa457a) by @OptoCloud

plugin(@tanstack/vue-query): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(zod): fix: avoid invalid .extend() on z.record() when a discriminated union member is an empty object (#3915) (8fa9f3a) by @pullfrog

Updated Dependencies:

@hey-api/shared@0.4.5

@hey-api/codegen-core@0.8.2

0.97.2

Patch Changes

plugin(zod): use enums from TypeScript if available (#3884) (abc8ceb) by @mrlubos

plugin(@hey-api/client-next): fix: preserve query auth when when there are no other query parameters (#3853) (a6ee7eb) by @copilot-swe-agent

plugin(@hey-api/sdk): support valibot as response transformer (#3847) (6770f78) by @SukkaW

... (truncated)

Commits

d833f73 ci: release
4987bc3 docs: add changesets
30498ce Merge branch 'main' of https://github.com/hey-api/openapi-ts into feat/tansta...
9be7e7f chore: one more try
4c5916d chore: one more try
83b4464 chore: one more try
597e151 Merge branch 'main' into pullfrog/3914-zod-discriminated-union-empty-object
462c2e9 Merge branch 'main' into feat/transformers-temporal
3367e64 Merge branch 'main' into fix/sse-iterator-treturn-miswiring
e6d4416 refactor: valibot plugin
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @hey-api/openapi-ts since your current version.

Updates @hey-api/openapi-ts from 0.76.0 to 0.97.3

Release notes

Sourced from @hey-api/openapi-ts's releases.

@hey-api/openapi-ts@0.95.0

Minor Changes

plugin(valibot): remove request data schema (#3671) (96f60ad) by @mrlubos

Validator request schemas

Valibot plugin no longer exports composite request Data schemas. Instead, each layer is exported as a separate schema. If you're using validators with SDKs, you can preserve the composite schema with shouldExtract:
export default {
  input: "hey-api/backend", // sign up at app.heyapi.dev
  output: "src/client",
  plugins: [
    // ...other plugins
    {
      name: "sdk",
      validator: "valibot",
    },
    {
      name: "valibot",
      requests: {
        shouldExtract: true,
      },
    },
  ],
};
internal: remove plugin.getSymbol() function (#3671) (96f60ad) by @mrlubos

Removed plugin.getSymbol() function

This function has been removed. You can use plugin.querySymbol() instead. It accepts the same arguments and returns the same result.

plugin(zod): remove request data schema (#3671) (96f60ad) by @mrlubos

Validator request schemas

Zod plugin no longer exports composite request Data schemas. Instead, each layer is exported as a separate schema. If you're using validators with SDKs, you can preserve the composite schema with shouldExtract:
export default {
  input: "hey-api/backend", // sign up at app.heyapi.dev
  output: "src/client",
  plugins: [
    // ...other plugins
    {
      name: "sdk",
      validator: "zod",
</tr></table> 

... (truncated)

Changelog

Sourced from @hey-api/openapi-ts's changelog.

0.97.3

Patch Changes

plugin(@hey-api/client-axios): fix: correct return type in SSE (#3919) (a19b3a4) by @kitlangton

plugin(@tanstack/preact-query): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@hey-api/client-ofetch): fix: correct return type in SSE (#3919) (a19b3a4) by @kitlangton

plugin(@tanstack/svelte-query): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@tanstack/angular-query-experimental): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@tanstack/react-query): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@hey-api/client-fetch): fix: correct return type in SSE (#3919) (a19b3a4) by @kitlangton

plugin(@tanstack/react-query): add useGetQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@hey-api/client-ky): fix: correct return type in SSE (#3919) (a19b3a4) by @kitlangton

plugin(@tanstack/solid-query): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@hey-api/client-next): fix: correct return type in SSE (#3919) (a19b3a4) by @kitlangton

plugin(@tanstack/preact-query): add useGetQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@hey-api/client-angular): fix: correct return type in SSE (#3919) (58962a0) by @kitlangton

plugin(@hey-api/transformers): add support for Temporal API via temporal-polyfill in dates (#3916) (bfa457a) by @OptoCloud

plugin(@tanstack/vue-query): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(zod): fix: avoid invalid .extend() on z.record() when a discriminated union member is an empty object (#3915) (8fa9f3a) by @pullfrog

Updated Dependencies:

@hey-api/shared@0.4.5

@hey-api/codegen-core@0.8.2

0.97.2

Patch Changes

plugin(zod): use enums from TypeScript if available (#3884) (abc8ceb) by @mrlubos

plugin(@hey-api/client-next): fix: preserve query auth when when there are no other query parameters (#3853) (a6ee7eb) by @copilot-swe-agent

plugin(@hey-api/sdk): support valibot as response transformer (#3847) (6770f78) by @SukkaW

... (truncated)

Commits

d833f73 ci: release
4987bc3 docs: add changesets
30498ce Merge branch 'main' of https://github.com/hey-api/openapi-ts into feat/tansta...
9be7e7f chore: one more try
4c5916d chore: one more try
83b4464 chore: one more try
597e151 Merge branch 'main' into pullfrog/3914-zod-discriminated-union-empty-object
462c2e9 Merge branch 'main' into feat/transformers-temporal
3367e64 Merge branch 'main' into fix/sse-iterator-treturn-miswiring
e6d4416 refactor: valibot plugin
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @hey-api/openapi-ts since your current version.

Updates @hey-api/openapi-ts from 0.76.0 to 0.97.3

Release notes

Sourced from @hey-api/openapi-ts's releases.

@hey-api/openapi-ts@0.95.0

Minor Changes

plugin(valibot): remove request data schema (#3671) (96f60ad) by @mrlubos

Validator request schemas

Valibot plugin no longer exports composite request Data schemas. Instead, each layer is exported as a separate schema. If you're using validators with SDKs, you can preserve the composite schema with shouldExtract:
export default {
  input: "hey-api/backend", // sign up at app.heyapi.dev
  output: "src/client",
  plugins: [
    // ...other plugins
    {
      name: "sdk",
      validator: "valibot",
    },
    {
      name: "valibot",
      requests: {
        shouldExtract: true,
      },
    },
  ],
};
internal: remove plugin.getSymbol() function (#3671) (96f60ad) by @mrlubos

Removed plugin.getSymbol() function

This function has been removed. You can use plugin.querySymbol() instead. It accepts the same arguments and returns the same result.

plugin(zod): remove request data schema (#3671) (96f60ad) by @mrlubos

Validator request schemas

Zod plugin no longer exports composite request Data schemas. Instead, each layer is exported as a separate schema. If you're using validators with SDKs, you can preserve the composite schema with shouldExtract:
export default {
  input: "hey-api/backend", // sign up at app.heyapi.dev
  output: "src/client",
  plugins: [
    // ...other plugins
    {
      name: "sdk",
      validator: "zod",
</tr></table> 

... (truncated)

Changelog

Sourced from @hey-api/openapi-ts's changelog.

0.97.3

Patch Changes

plugin(@hey-api/client-axios): fix: correct return type in SSE (#3919) (a19b3a4) by @kitlangton

plugin(@tanstack/preact-query): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@hey-api/client-ofetch): fix: correct return type in SSE (#3919) (a19b3a4) by @kitlangton

plugin(@tanstack/svelte-query): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@tanstack/angular-query-experimental): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@tanstack/react-query): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@hey-api/client-fetch): fix: correct return type in SSE (#3919) (a19b3a4) by @kitlangton

plugin(@tanstack/react-query): add useGetQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@hey-api/client-ky): fix: correct return type in SSE (#3919) (a19b3a4) by @kitlangton

plugin(@tanstack/solid-query): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@hey-api/client-next): fix: correct return type in SSE (#3919) (a19b3a4) by @kitlangton

plugin(@tanstack/preact-query): add useGetQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@hey-api/client-angular): fix: correct return type in SSE (#3919) (58962a0) by @kitlangton

plugin(@hey-api/transformers): add support for Temporal API via temporal-polyfill in dates (#3916) (bfa457a) by @OptoCloud

plugin(@tanstack/vue-query): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(zod): fix: avoid invalid .extend() on z.record() when a discriminated union member is an empty object (#3915) (8fa9f3a) by @pullfrog

Updated Dependencies:

@hey-api/shared@0.4.5

@hey-api/codegen-core@0.8.2

0.97.2

Patch Changes

plugin(zod): use enums from TypeScript if available (#3884) (abc8ceb) by @mrlubos

plugin(@hey-api/client-next): fix: preserve query auth when when there are no other query parameters (#3853) (a6ee7eb) by @copilot-swe-agent

plugin(@hey-api/sdk): support valibot as response transformer (#3847) (6770f78) by @SukkaW

... (truncated)

Commits

d833f73 ci: release
4987bc3 docs: add changesets
30498ce Merge branch 'main' of https://github.com/hey-api/openapi-ts into feat/tansta...
9be7e7f chore: one more try
4c5916d chore: one more try
83b4464 chore: one more try
597e151 Merge branch 'main' into pullfrog/3914-zod-discriminated-union-empty-object
462c2e9 Merge branch 'main' into feat/transformers-temporal
3367e64 Merge branch 'main' into fix/sse-iterator-treturn-miswiring
e6d4416 refactor: valibot plugin
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @hey-api/openapi-ts since your current version.

Updates @hey-api/openapi-ts from 0.76.0 to 0.97.3

Release notes

Sourced from @hey-api/openapi-ts's releases.

@hey-api/openapi-ts@0.95.0

Minor Changes

plugin(valibot): remove request data schema (#3671) (96f60ad) by @mrlubos

Validator request schemas

Valibot plugin no longer exports composite request Data schemas. Instead, each layer is exported as a separate schema. If you're using validators with SDKs, you can preserve the composite schema with shouldExtract:
export default {
  input: "hey-api/backend", // sign up at app.heyapi.dev
  output: "src/client",
  plugins: [
    // ...other plugins
    {
      name: "sdk",
      validator: "valibot",
    },
    {
      name: "valibot",
      requests: {
        shouldExtract: true,
      },
    },
  ],
};
internal: remove plugin.getSymbol() function (#3671) (96f60ad) by @mrlubos

Removed plugin.getSymbol() function

This function has been removed. You can use plugin.querySymbol() ...
Description has been truncated

PR-Codex overview

This PR focuses on updating various package dependencies across multiple package.json files, enhancing compatibility and functionality within the project.

Detailed summary

Updated vite from 7.1.7 to 7.3.5 in apps/wagmi-demo and packages/thirdweb.

Updated vitest from 3.2.4 to 3.2.6 in packages/vault-sdk and packages/service-utils.

Updated @hey-api/openapi-ts from 0.76.0 to 0.97.3 in several packages.

Updated next from 15.3.8 to 15.5.18 in packages/ui and apps/wallet-ui.

Updated postcss from 8.5.6 to 8.5.10 in packages/ui and apps/wallet-ui.

✨ Ask PR-Codex anything about this PR by commenting with /codex {your question}

… updates Bumps the npm_and_yarn group with 1 update in the /apps/wagmi-demo directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite). Bumps the npm_and_yarn group with 2 updates in the /apps/wallet-ui directory: [next](https://github.com/vercel/next.js) and [postcss](https://github.com/postcss/postcss). Bumps the npm_and_yarn group with 1 update in the /packages/api directory: [@hey-api/openapi-ts](https://github.com/hey-api/hey-api/tree/HEAD/packages/openapi-ts). Bumps the npm_and_yarn group with 1 update in the /packages/engine directory: [@hey-api/openapi-ts](https://github.com/hey-api/hey-api/tree/HEAD/packages/openapi-ts). Bumps the npm_and_yarn group with 1 update in the /packages/insight directory: [@hey-api/openapi-ts](https://github.com/hey-api/hey-api/tree/HEAD/packages/openapi-ts). Bumps the npm_and_yarn group with 1 update in the /packages/nebula directory: [@hey-api/openapi-ts](https://github.com/hey-api/hey-api/tree/HEAD/packages/openapi-ts). Bumps the npm_and_yarn group with 1 update in the /packages/service-utils directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest). Bumps the npm_and_yarn group with 2 updates in the /packages/thirdweb directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest). Bumps the npm_and_yarn group with 2 updates in the /packages/ui directory: [next](https://github.com/vercel/next.js) and [postcss](https://github.com/postcss/postcss). Bumps the npm_and_yarn group with 1 update in the /packages/vault-sdk directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest). Updates `vite` from 7.1.7 to 7.3.5 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v7.3.5/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v7.3.5/packages/vite) Updates `next` from 15.3.8 to 15.5.18 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v15.3.8...v15.5.18) Updates `postcss` from 8.5.6 to 8.5.10 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.6...8.5.10) Updates `@hey-api/openapi-ts` from 0.76.0 to 0.97.3 - [Release notes](https://github.com/hey-api/hey-api/releases) - [Changelog](https://github.com/hey-api/hey-api/blob/main/packages/openapi-ts/CHANGELOG.md) - [Commits](https://github.com/hey-api/hey-api/commits/@hey-api/openapi-ts@0.97.3/packages/openapi-ts) Updates `@hey-api/openapi-ts` from 0.76.0 to 0.97.3 - [Release notes](https://github.com/hey-api/hey-api/releases) - [Changelog](https://github.com/hey-api/hey-api/blob/main/packages/openapi-ts/CHANGELOG.md) - [Commits](https://github.com/hey-api/hey-api/commits/@hey-api/openapi-ts@0.97.3/packages/openapi-ts) Updates `@hey-api/openapi-ts` from 0.76.0 to 0.97.3 - [Release notes](https://github.com/hey-api/hey-api/releases) - [Changelog](https://github.com/hey-api/hey-api/blob/main/packages/openapi-ts/CHANGELOG.md) - [Commits](https://github.com/hey-api/hey-api/commits/@hey-api/openapi-ts@0.97.3/packages/openapi-ts) Updates `@hey-api/openapi-ts` from 0.76.0 to 0.97.3 - [Release notes](https://github.com/hey-api/hey-api/releases) - [Changelog](https://github.com/hey-api/hey-api/blob/main/packages/openapi-ts/CHANGELOG.md) - [Commits](https://github.com/hey-api/hey-api/commits/@hey-api/openapi-ts@0.97.3/packages/openapi-ts) Updates `vitest` from 3.2.4 to 3.2.6 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v3.2.6/packages/vitest) Updates `vite` from 7.1.7 to 7.3.5 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v7.3.5/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v7.3.5/packages/vite) Updates `vitest` from 3.2.4 to 3.2.6 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v3.2.6/packages/vitest) Updates `next` from 15.3.8 to 15.5.18 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v15.3.8...v15.5.18) Updates `postcss` from 8.5.6 to 8.5.10 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.6...8.5.10) Updates `vitest` from 3.2.4 to 3.2.6 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v3.2.6/packages/vitest) --- updated-dependencies: - dependency-name: vite dependency-version: 7.3.5 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: next dependency-version: 15.5.18 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: postcss dependency-version: 8.5.10 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@hey-api/openapi-ts" dependency-version: 0.97.3 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@hey-api/openapi-ts" dependency-version: 0.97.3 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@hey-api/openapi-ts" dependency-version: 0.97.3 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@hey-api/openapi-ts" dependency-version: 0.97.3 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: vitest dependency-version: 3.2.6 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: vite dependency-version: 7.3.5 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: vitest dependency-version: 3.2.6 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: next dependency-version: 15.5.18 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: postcss dependency-version: 8.5.10 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: vitest dependency-version: 3.2.6 dependency-type: direct:development dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

vercel · 2026-07-02T04:51:24Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Updated (UTC)
docs-v2	Error	Jul 2, 2026 4:51am
nebula	Error	Jul 2, 2026 4:51am
thirdweb_playground	Error	Jul 2, 2026 4:51am
thirdweb-www	Error	Jul 2, 2026 4:51am
wallet-ui	Error	Jul 2, 2026 4:51am

changeset-bot · 2026-07-02T04:51:27Z

⚠️ No Changeset found

Latest commit: 7ea3c05

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

github-actions · 2026-07-10T02:14:43Z

This PR has been inactive for 7 days. It is now marked as stale and will be closed in 2 days if no further activity occurs.

dependabot · 2026-07-13T02:14:06Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot requested a review from a team as a code owner July 2, 2026 04:51

dependabot Bot added Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 2, 2026

dependabot Bot requested a review from a team as a code owner July 2, 2026 04:51

dependabot Bot added Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 2, 2026

dependabot Bot mentioned this pull request Jul 2, 2026

build(deps): Bump the npm_and_yarn group across 6 directories with 4 updates #8819

Closed

github-actions Bot added packages Ecosystem Portal Involves changes to the Ecosystem Portal SDK Involves changes to the thirdweb SDK labels Jul 2, 2026

vercel Bot had a problem deploying to Preview – wallet-ui July 2, 2026 04:51 Failure

vercel Bot had a problem deploying to Preview – thirdweb_playground July 2, 2026 04:51 Failure

vercel Bot had a problem deploying to Preview – thirdweb-www July 2, 2026 04:51 Failure

vercel Bot had a problem deploying to Preview – docs-v2 July 2, 2026 04:51 Failure

vercel Bot had a problem deploying to Preview – nebula July 2, 2026 04:51 Failure

github-actions Bot added the Stale label Jul 10, 2026

github-actions Bot closed this Jul 13, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/apps/wagmi-demo/npm_and_yarn-174d853755 branch July 13, 2026 02:14

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps): Bump the npm_and_yarn group across 10 directories with 5 updates#8827

build(deps): Bump the npm_and_yarn group across 10 directories with 5 updates#8827
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/apps/wagmi-demo/npm_and_yarn-174d853755

dependabot Bot commented on behalf of github Jul 2, 2026 •

edited by pr-codex Bot

Loading

Uh oh!

vercel Bot commented Jul 2, 2026 •

edited

Loading

Uh oh!

changeset-bot Bot commented Jul 2, 2026

Uh oh!

github-actions Bot commented Jul 10, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 2, 2026 • edited by pr-codex Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v7.3.5

v7.3.3

v7.3.2

v7.3.1

v7.3.0

v7.2.7

v7.2.6

v7.2.5

v7.2.4

v7.2.3

v7.2.2

v7.2.1

v7.2.0

v7.2.0-beta.1

v7.2.0-beta.0

v7.1.12

7.3.5 (2026-06-01)

Bug Fixes

Miscellaneous Chores

7.3.4 (2026-06-01)

Bug Fixes

7.3.3 (2026-05-07)

Bug Fixes

7.3.2 (2026-04-06)

Bug Fixes

7.3.1 (2026-01-07)

Features

7.3.0 (2025-12-15)

Features

7.2.7 (2025-12-08)

Bug Fixes

7.2.6 (2025-12-01)

7.2.5 (2025-12-01)

Bug Fixes

v15.5.18

v15.5.16

8.5.10

8.5.9

8.5.8

8.5.7

8.5.10

8.5.9

8.5.8

8.5.7

@​hey-api/openapi-ts@​0.95.0

Minor Changes

Validator request schemas

Removed plugin.getSymbol() function

Validator request schemas

0.97.3

Patch Changes

Updated Dependencies:

0.97.2

Patch Changes

@​hey-api/openapi-ts@​0.95.0

Minor Changes

Validator request schemas

Removed plugin.getSymbol() function

Validator request schemas

0.97.3

Patch Changes

Updated Dependencies:

0.97.2

Patch Changes

@​hey-api/openapi-ts@​0.95.0

Minor Changes

Validator request schemas

Removed plugin.getSymbol() function

Validator request schemas

0.97.3

Patch Changes

Updated Dependencies:

0.97.2

Patch Changes

@​hey-api/openapi-ts@​0.95.0

Minor Changes

dependabot Bot commented on behalf of github Jul 2, 2026 •

edited by pr-codex Bot

Loading

`@hey-api/openapi-ts@0`.95.0

Removed `plugin.getSymbol()` function

`@hey-api/openapi-ts@0`.95.0

Removed `plugin.getSymbol()` function

`@hey-api/openapi-ts@0`.95.0

Removed `plugin.getSymbol()` function

`@hey-api/openapi-ts@0`.95.0

Removed `plugin.getSymbol()` function

vercel Bot commented Jul 2, 2026 •

edited

Loading