chore(deps)(deps): bump the production-dependencies group across 1 directory with 41 updates

[dependabot]

Bumps the production-dependencies group with 41 updates in the / directory:

Package	From	To
@esbuild/darwin-arm64	0.28.1	0.28.2
@esbuild/darwin-x64	0.28.1	0.28.2
@esbuild/linux-x64	0.28.1	0.28.2
@img/sharp-darwin-arm64	0.34.5	0.35.4
@img/sharp-darwin-x64	0.34.5	0.35.4
@img/sharp-linux-x64	0.34.5	0.35.4
@img/sharp-libvips-linux-x64	1.2.4	1.3.3
@next/swc-darwin-arm64	15.5.23	15.5.24
@next/swc-darwin-x64	15.5.23	15.5.24
@next/swc-linux-x64-gnu	15.5.23	15.5.24
@next/swc-linux-x64-musl	15.5.23	15.5.24
@open-wallet-standard/core-darwin-arm64	1.2.4	1.4.2
@open-wallet-standard/core-darwin-x64	1.2.4	1.4.2
@open-wallet-standard/core-linux-x64-gnu	1.2.4	1.4.2
@rolldown/binding-darwin-arm64	1.1.4	1.2.6
@rolldown/binding-darwin-x64	1.1.4	1.2.6
@rolldown/binding-linux-x64-gnu	1.1.4	1.2.6
@rolldown/binding-linux-x64-musl	1.1.4	1.2.6
@tailwindcss/oxide-darwin-arm64	4.3.2	4.3.3
@tailwindcss/oxide-darwin-x64	4.3.2	4.3.3
@tailwindcss/oxide-linux-x64-gnu	4.3.2	4.3.3
@tailwindcss/oxide-linux-x64-musl	4.3.2	4.3.3
lightningcss-darwin-arm64	1.32.0	1.33.0
lightningcss-darwin-x64	1.32.0	1.33.0
lightningcss-linux-x64-gnu	1.32.0	1.33.0
lightningcss-linux-x64-musl	1.32.0	1.33.0
pg	8.22.0	8.23.0
@circle-fin/x402-batching	3.2.0	3.4.0
@x402/evm	2.18.0	2.24.0
fastify	5.10.0	5.12.1
viem	2.55.10	2.56.0
ws	8.21.0	8.21.3
@tabler/icons-react	3.44.0	3.46.0
@tanstack/react-query	5.101.4	5.102.8
driver.js	1.3.5	1.8.0
motion	12.42.2	12.43.0
next	15.5.23	15.5.24
react	19.2.7	19.2.8
react-dom	19.2.7	19.2.8
recharts	3.9.2	3.10.1
wagmi	3.7.6	3.7.7

Updates @esbuild/darwin-arm64 from 0.28.1 to 0.28.2

Release notes

Sourced from @​esbuild/darwin-arm64's releases.

v0.28.2

• Fix tree shaking bug due to TypeScript import alias (#4507)

  This release fixes a bug that could cause esbuild to incorrectly tree-shake imports that are used in a TypeScript type alias under certain circumstances. Affected code uses a TypeScript-specific import assignment and looks something like this:

  import Base from './dep.js';
  import Alias = Base.SomeType;

• Fix CSS minification bug involving & (#4497)

  This release fixes a bug where esbuild's CSS minifier incorrectly removed a & when it was unsafe to do so. Here is an example:

  /* Original code */
  .a .b {
    & .b:not(& .c) {
      color: red;
    }
  }
  /* Old output (with --minify) */
  .a .b{.b:not(& .c){color:red}}
  /* New output (with --minify) */
  .a .b{& .b:not(& .c){color:red}}

  This should match <span class="a"><span class="b"><span class="b">yes</span></span></span> but not <span class="a"><span class="b">no</span></span>. The old output incorrectly matched both.

• Avoid overwriting input files without --allow-overwrite (#4484)

  For example: esbuild input.js --outfile=input.js tells esbuild to overwrite input.js with the output of running esbuild on it. This was supposed to already be prevented by default, but it accidentally regressed in version 0.17.0 and apparently didn't have any test coverage. The error message was being printed but the input file was still being overwritten. Oops.

  This release puts the original behavior back. With this release, esbuild should now actually avoid overwriting input files unless --allow-overwrite is explicitly present. This is done by not writing out any files when a build error is encountered.

• Fix incorrect code generated when using top-level await (#4498)

  Previously esbuild could generate code containing a syntax error in complex scenarios involving top-level await used in a dependency cycle. The problem was a missing async on one or more module wrapper closures. With this release, esbuild now uses a fixed-point iteration algorithm to correctly annotate all dependencies in the cycle as needing an async module wrapper.

• Fix a minification bug with lowered logical assignment operators (#4508)

  This release fixes a bug that could cause esbuild to generate incorrect code for logical assignment operators when lowering them to an older target environment. Specifically the lowering process requires duplicating the left-hand side, but esbuild incorrectly failed to count the duplicate as a new usage when the left-hand side is an identifier. That then caused the minifier to believe that the left-hand side was only used once and could attempt to incorrectly inline an initializer into the first usage. This bug has now been fixed:

  // Original code
  function foo() {
    let x
    bar(x ||= {})

... (truncated)

Changelog

Sourced from @​esbuild/darwin-arm64's changelog.

0.28.2

• Fix tree shaking bug due to TypeScript import alias (#4507)

  This release fixes a bug that could cause esbuild to incorrectly tree-shake imports that are used in a TypeScript type alias under certain circumstances. Affected code uses a TypeScript-specific import assignment and looks something like this:

  import Base from './dep.js';
  import Alias = Base.SomeType;

• Fix CSS minification bug involving & (#4497)

  This release fixes a bug where esbuild's CSS minifier incorrectly removed a & when it was unsafe to do so. Here is an example:

  /* Original code */
  .a .b {
    & .b:not(& .c) {
      color: red;
    }
  }
  /* Old output (with --minify) */
  .a .b{.b:not(& .c){color:red}}
  /* New output (with --minify) */
  .a .b{& .b:not(& .c){color:red}}

  This should match <span class="a"><span class="b"><span class="b">yes</span></span></span> but not <span class="a"><span class="b">no</span></span>. The old output incorrectly matched both.

• Avoid overwriting input files without --allow-overwrite (#4484)

  For example: esbuild input.js --outfile=input.js tells esbuild to overwrite input.js with the output of running esbuild on it. This was supposed to already be prevented by default, but it accidentally regressed in version 0.17.0 and apparently didn't have any test coverage. The error message was being printed but the input file was still being overwritten. Oops.

  This release puts the original behavior back. With this release, esbuild should now actually avoid overwriting input files unless --allow-overwrite is explicitly present. This is done by not writing out any files when a build error is encountered.

• Fix incorrect code generated when using top-level await (#4498)

  Previously esbuild could generate code containing a syntax error in complex scenarios involving top-level await used in a dependency cycle. The problem was a missing async on one or more module wrapper closures. With this release, esbuild now uses a fixed-point iteration algorithm to correctly annotate all dependencies in the cycle as needing an async module wrapper.

• Fix a minification bug with lowered logical assignment operators (#4508)

  This release fixes a bug that could cause esbuild to generate incorrect code for logical assignment operators when lowering them to an older target environment. Specifically the lowering process requires duplicating the left-hand side, but esbuild incorrectly failed to count the duplicate as a new usage when the left-hand side is an identifier. That then caused the minifier to believe that the left-hand side was only used once and could attempt to incorrectly inline an initializer into the first usage. This bug has now been fixed:

  // Original code
  function foo() {
    let x

... (truncated)

Commits

• 609683d publish 0.28.2 to npm
• 11b1fe4 add to release notes
• ab50d91 css: fix green/blue channel swap in oklch gamut mapping (#4488)
• 04627b6 fix #4498: async TLA checks need a worklist
• 5c15177 disable gopls in the go folder
• fc2ee9b css: adjust parser to allow --foo: {...}
• 209db54 release notes for css nesting bugfix
• c625d31 fix #4497: preserve nested ampersands during minification (#4500)
• 34474e2 better isolation of current part in js parser
• 07f6e8c fix #4507: import assignment tree-shaking bug
• Additional commits viewable in compare view

Updates @esbuild/darwin-x64 from 0.28.1 to 0.28.2

Release notes

Sourced from @​esbuild/darwin-x64's releases.

v0.28.2

• Fix tree shaking bug due to TypeScript import alias (#4507)

  This release fixes a bug that could cause esbuild to incorrectly tree-shake imports that are used in a TypeScript type alias under certain circumstances. Affected code uses a TypeScript-specific import assignment and looks something like this:

  import Base from './dep.js';
  import Alias = Base.SomeType;

• Fix CSS minification bug involving & (#4497)

  This release fixes a bug where esbuild's CSS minifier incorrectly removed a & when it was unsafe to do so. Here is an example:

  /* Original code */
  .a .b {
    & .b:not(& .c) {
      color: red;
    }
  }
  /* Old output (with --minify) */
  .a .b{.b:not(& .c){color:red}}
  /* New output (with --minify) */
  .a .b{& .b:not(& .c){color:red}}

  This should match <span class="a"><span class="b"><span class="b">yes</span></span></span> but not <span class="a"><span class="b">no</span></span>. The old output incorrectly matched both.

• Avoid overwriting input files without --allow-overwrite (#4484)

  For example: esbuild input.js --outfile=input.js tells esbuild to overwrite input.js with the output of running esbuild on it. This was supposed to already be prevented by default, but it accidentally regressed in version 0.17.0 and apparently didn't have any test coverage. The error message was being printed but the input file was still being overwritten. Oops.

  This release puts the original behavior back. With this release, esbuild should now actually avoid overwriting input files unless --allow-overwrite is explicitly present. This is done by not writing out any files when a build error is encountered.

• Fix incorrect code generated when using top-level await (#4498)

  Previously esbuild could generate code containing a syntax error in complex scenarios involving top-level await used in a dependency cycle. The problem was a missing async on one or more module wrapper closures. With this release, esbuild now uses a fixed-point iteration algorithm to correctly annotate all dependencies in the cycle as needing an async module wrapper.

• Fix a minification bug with lowered logical assignment operators (#4508)

  This release fixes a bug that could cause esbuild to generate incorrect code for logical assignment operators when lowering them to an older target environment. Specifically the lowering process requires duplicating the left-hand side, but esbuild incorrectly failed to count the duplicate as a new usage when the left-hand side is an identifier. That then caused the minifier to believe that the left-hand side was only used once and could attempt to incorrectly inline an initializer into the first usage. This bug has now been fixed:

  // Original code
  function foo() {
    let x
    bar(x ||= {})

... (truncated)

Changelog

Sourced from @​esbuild/darwin-x64's changelog.

0.28.2

• Fix tree shaking bug due to TypeScript import alias (#4507)

  This release fixes a bug that could cause esbuild to incorrectly tree-shake imports that are used in a TypeScript type alias under certain circumstances. Affected code uses a TypeScript-specific import assignment and looks something like this:

  import Base from './dep.js';
  import Alias = Base.SomeType;

• Fix CSS minification bug involving & (#4497)

  This release fixes a bug where esbuild's CSS minifier incorrectly removed a & when it was unsafe to do so. Here is an example:

  /* Original code */
  .a .b {
    & .b:not(& .c) {
      color: red;
    }
  }
  /* Old output (with --minify) */
  .a .b{.b:not(& .c){color:red}}
  /* New output (with --minify) */
  .a .b{& .b:not(& .c){color:red}}

  This should match <span class="a"><span class="b"><span class="b">yes</span></span></span> but not <span class="a"><span class="b">no</span></span>. The old output incorrectly matched both.

• Avoid overwriting input files without --allow-overwrite (#4484)

  For example: esbuild input.js --outfile=input.js tells esbuild to overwrite input.js with the output of running esbuild on it. This was supposed to already be prevented by default, but it accidentally regressed in version 0.17.0 and apparently didn't have any test coverage. The error message was being printed but the input file was still being overwritten. Oops.

  This release puts the original behavior back. With this release, esbuild should now actually avoid overwriting input files unless --allow-overwrite is explicitly present. This is done by not writing out any files when a build error is encountered.

• Fix incorrect code generated when using top-level await (#4498)

  Previously esbuild could generate code containing a syntax error in complex scenarios involving top-level await used in a dependency cycle. The problem was a missing async on one or more module wrapper closures. With this release, esbuild now uses a fixed-point iteration algorithm to correctly annotate all dependencies in the cycle as needing an async module wrapper.

• Fix a minification bug with lowered logical assignment operators (#4508)

  This release fixes a bug that could cause esbuild to generate incorrect code for logical assignment operators when lowering them to an older target environment. Specifically the lowering process requires duplicating the left-hand side, but esbuild incorrectly failed to count the duplicate as a new usage when the left-hand side is an identifier. That then caused the minifier to believe that the left-hand side was only used once and could attempt to incorrectly inline an initializer into the first usage. This bug has now been fixed:

  // Original code
  function foo() {
    let x

... (truncated)

Commits

• 609683d publish 0.28.2 to npm
• 11b1fe4 add to release notes
• ab50d91 css: fix green/blue channel swap in oklch gamut mapping (#4488)
• 04627b6 fix #4498: async TLA checks need a worklist
• 5c15177 disable gopls in the go folder
• fc2ee9b css: adjust parser to allow --foo: {...}
• 209db54 release notes for css nesting bugfix
• c625d31 fix #4497: preserve nested ampersands during minification (#4500)
• 34474e2 better isolation of current part in js parser
• 07f6e8c fix #4507: import assignment tree-shaking bug
• Additional commits viewable in compare view

Updates @esbuild/linux-x64 from 0.28.1 to 0.28.2

Release notes

Sourced from @​esbuild/linux-x64's releases.

v0.28.2

• Fix tree shaking bug due to TypeScript import alias (#4507)

  This release fixes a bug that could cause esbuild to incorrectly tree-shake imports that are used in a TypeScript type alias under certain circumstances. Affected code uses a TypeScript-specific import assignment and looks something like this:

  import Base from './dep.js';
  import Alias = Base.SomeType;

• Fix CSS minification bug involving & (#4497)

  This release fixes a bug where esbuild's CSS minifier incorrectly removed a & when it was unsafe to do so. Here is an example:

  /* Original code */
  .a .b {
    & .b:not(& .c) {
      color: red;
    }
  }
  /* Old output (with --minify) */
  .a .b{.b:not(& .c){color:red}}
  /* New output (with --minify) */
  .a .b{& .b:not(& .c){color:red}}

  This should match <span class="a"><span class="b"><span class="b">yes</span></span></span> but not <span class="a"><span class="b">no</span></span>. The old output incorrectly matched both.

• Avoid overwriting input files without --allow-overwrite (#4484)

  For example: esbuild input.js --outfile=input.js tells esbuild to overwrite input.js with the output of running esbuild on it. This was supposed to already be prevented by default, but it accidentally regressed in version 0.17.0 and apparently didn't have any test coverage. The error message was being printed but the input file was still being overwritten. Oops.

  This release puts the original behavior back. With this release, esbuild should now actually avoid overwriting input files unless --allow-overwrite is explicitly present. This is done by not writing out any files when a build error is encountered.

• Fix incorrect code generated when using top-level await (#4498)

  Previously esbuild could generate code containing a syntax error in complex scenarios involving top-level await used in a dependency cycle. The problem was a missing async on one or more module wrapper closures. With this release, esbuild now uses a fixed-point iteration algorithm to correctly annotate all dependencies in the cycle as needing an async module wrapper.

• Fix a minification bug with lowered logical assignment operators (#4508)

  This release fixes a bug that could cause esbuild to generate incorrect code for logical assignment operators when lowering them to an older target environment. Specifically the lowering process requires duplicating the left-hand side, but esbuild incorrectly failed to count the duplicate as a new usage when the left-hand side is an identifier. That then caused the minifier to believe that the left-hand side was only used once and could attempt to incorrectly inline an initializer into the first usage. This bug has now been fixed:

  // Original code
  function foo() {
    let x
    bar(x ||= {})

... (truncated)

Changelog

Sourced from @​esbuild/linux-x64's changelog.

0.28.2

• Fix tree shaking bug due to TypeScript import alias (#4507)

  This release fixes a bug that could cause esbuild to incorrectly tree-shake imports that are used in a TypeScript type alias under certain circumstances. Affected code uses a TypeScript-specific import assignment and looks something like this:

  import Base from './dep.js';
  import Alias = Base.SomeType;

• Fix CSS minification bug involving & (#4497)

  This release fixes a bug where esbuild's CSS minifier incorrectly removed a & when it was unsafe to do so. Here is an example:

  /* Original code */
  .a .b {
    & .b:not(& .c) {
      color: red;
    }
  }
  /* Old output (with --minify) */
  .a .b{.b:not(& .c){color:red}}
  /* New output (with --minify) */
  .a .b{& .b:not(& .c){color:red}}

  This should match <span class="a"><span class="b"><span class="b">yes</span></span></span> but not <span class="a"><span class="b">no</span></span>. The old output incorrectly matched both.

• Avoid overwriting input files without --allow-overwrite (#4484)

  For example: esbuild input.js --outfile=input.js tells esbuild to overwrite input.js with the output of running esbuild on it. This was supposed to already be prevented by default, but it accidentally regressed in version 0.17.0 and apparently didn't have any test coverage. The error message was being printed but the input file was still being overwritten. Oops.

  This release puts the original behavior back. With this release, esbuild should now actually avoid overwriting input files unless --allow-overwrite is explicitly present. This is done by not writing out any files when a build error is encountered.

• Fix incorrect code generated when using top-level await (#4498)

  Previously esbuild could generate code containing a syntax error in complex scenarios involving top-level await used in a dependency cycle. The problem was a missing async on one or more module wrapper closures. With this release, esbuild now uses a fixed-point iteration algorithm to correctly annotate all dependencies in the cycle as needing an async module wrapper.

• Fix a minification bug with lowered logical assignment operators (#4508)

  This release fixes a bug that could cause esbuild to generate incorrect code for logical assignment operators when lowering them to an older target environment. Specifically the lowering process requires duplicating the left-hand side, but esbuild incorrectly failed to count the duplicate as a new usage when the left-hand side is an identifier. That then caused the minifier to believe that the left-hand side was only used once and could attempt to incorrectly inline an initializer into the first usage. This bug has now been fixed:

  // Original code
  function foo() {
    let x

... (truncated)

Commits

• 609683d publish 0.28.2 to npm
• 11b1fe4 add to release notes
• ab50d91 css: fix green/blue channel swap in oklch gamut mapping (#4488)
• 04627b6 fix #4498: async TLA checks need a worklist
• 5c15177 disable gopls in the go folder
• fc2ee9b css: adjust parser to allow --foo: {...}
• 209db54 release notes for css nesting bugfix
• c625d31 fix #4497: preserve nested ampersands during minification (#4500)
• 34474e2 better isolation of current part in js parser
• 07f6e8c fix #4507: import assignment tree-shaking bug
• Additional commits viewable in compare view

Updates @img/sharp-darwin-arm64 from 0.34.5 to 0.35.4

Release notes

Sourced from @​img/sharp-darwin-arm64's releases.

v0.35.4

https://github.com/lovell/sharp-libvips/releases/tag/v1.3.3

• Bound resize dimensions to coordinate limit.

• Bound composite left and top to coordinate limit. #4564 @​metsw24-max

• Round palette bit depth up for png and gif colours. #4569 @​metsw24-max

• Ensure tiff.subifd input option is used. #4572 @​metsw24-max

• Ensure info.pages is correct when limiting input page range. #4578 @​metsw24-max

• Improve support for input Streams finishing before output is requested. #4584 @​Jaybhade

v0.35.4-rc.0

• Upgrade to libvips v8.18.6 for upstream bug fixes.

• Bound resize dimensions to coordinate limit.

• Bound composite left and top to coordinate limit. #4564 @​metsw24-max

• Round palette bit depth up for png and gif colours. #4569 @​metsw24-max

• Ensure tiff.subifd input option is used. #4572 @​metsw24-max

• Ensure info.pages is correct when limiting input page range. #4578 @​metsw24-max

• Improve support for input Streams finishing before output is requested. #4584 @​Jaybhade

... (truncated)

Commits

• 7f1a0a2 Release v0.35.4
• f927818 Upgrade to sharp-libvips v1.3.3
• e802092 Prerelease v0.35.4-rc.0
• a82a0b3 Upgrade to libvips v8.18.6
• 1018449 Release v0.35.3
• ba303a7 Prerelease v0.35.3-rc.2
• 4f94fc5 Upgrade to sharp-libvips v1.3.2
• e000d0b Prerelease v0.35.3-rc.1
• 9554ca9 Prerelease v0.35.3-rc.0
• d67facf Upgrade to sharp-libvips v1.3.2-rc.0
• Additional commits viewable in compare view

Updates @img/sharp-darwin-x64 from 0.34.5 to 0.35.4

Release notes

Sourced from @​img/sharp-darwin-x64's releases.

v0.35.4

https://github.com/lovell/sharp-libvips/releases/tag/v1.3.3

• Bound resize dimensions to coordinate limit.

• Bound composite left and top to coordinate limit. #4564 @​metsw24-max

• Round palette bit depth up for png and gif colours. #4569 @​metsw24-max

• Ensure tiff.subifd input option is used. #4572 @​metsw24-max

• Ensure info.pages is correct when limiting input page range. #4578 @​metsw24-max

• Improve support for input Streams finishing before output is requested. #4584 @​Jaybhade

v0.35.4-rc.0

• Upgrade to libvips v8.18.6 for upstream bug fixes.

• Bound resize dimensions to coordinate limit.

• Bound composite left and top to coordinate limit. #4564 @​metsw24-max

• Round palette bit depth up for png and gif colours. #4569 @​metsw24-max

• Ensure tiff.subifd input option is used. #4572 @​metsw24-max

• Ensure info.pages is correct when limiting input page range. #4578 @​metsw24-max

• Improve support for input Streams finishing before output is requested. #4584 @​Jaybhade

... (truncated)

Commits

• 7f1a0a2 Release v0.35.4
• f927818 Upgrade to sharp-libvips v1.3.3
• e802092 Prerelease v0.35.4-rc.0
• a82a0b3 Upgrade to libvips v8.18.6
• 1018449 Release v0.35.3
• ba303a7 Prerelease v0.35.3-rc.2
• 4f94fc5 Upgrade to sharp-libvips v1.3.2
• e000d0b Prerelease v0.35.3-rc.1
• 9554ca9 Prerelease v0.35.3-rc.0
• d67facf Upgrade to sharp-libvips v1.3.2-rc.0
• Additional commits viewable in compare view

Updates @img/sharp-linux-x64 from 0.34.5 to 0.35.4

Release notes

Sourced from @​img/sharp-linux-x64's releases.

v0.35.4

https://github.com/lovell/sharp-libvips/releases/tag/v1.3.3

• Bound resize dimensions to coordinate limit.

• Bound composite left and top to coordinate limit. #4564 @​metsw24-max

• Round palette bit depth up for png and gif colours. #4569 @​metsw24-max

• Ensure tiff.subifd input option is used. #4572 @​metsw24-max

• Ensure info.pages is correct when limiting input page range. #4578 @​metsw24-max

• Improve support for input Streams finishing before output is requested. #4584 @​Jaybhade

v0.35.4-rc.0

• Upgrade to libvips v8.18.6 for upstream bug fixes.

• Bound resize dimensions to coordinate limit.

• Bound composite left and top to coordinate limit. #4564 @​metsw24-max

• Round palette bit depth up for png and gif colours. #4569 @​metsw24-max

• Ensure tiff.subifd input option is used. #4572 @​metsw24-max

• Ensure info.pages is correct when limiting input page range. #4578 @​metsw24-max

• Improve support for input Streams finishing before output is requested. #4584 @​Jaybhade

... (truncated)

Commits

• 7f1a0a2 Release v0.35.4
• f927818 Upgrade to sharp-libvips v1.3.3
• e802092 Prerelease v0.35.4-rc.0
• a82a0b3 Upgrade to libvips v8.18.6
• 1018449 Release v0.35.3
• ba303a7 Prerelease v0.35.3-rc.2
• 4f94fc5 Upgrade to sharp-libvips v1.3.2
• e000d0b Prerelease v0.35.3-rc.1
• 9554ca9 Prerelease v0.35.3-rc.0
• d67facf Upgrade to sharp-libvips v1.3.2-rc.0
• Additional commits viewable in compare view

Updates @img/sharp-libvips-linux-x64 from 1.2.4 to 1.3.3

Release notes

Sourced from @​img/sharp-libvips-linux-x64's releases.

v1.3.3

Dependency	Version
aom	3.15.0
archive	3.8.9
cairo	1.18.4
cgif	0.5.3
exif	0.6.26
expat	2.8.3
ffi	3.8.0
fontconfig	2.18.3
freetype	2.14.3
fribidi	1.0.16
glib	2.89.4
harfbuzz	14.3.1
heif	1.23.2
highway	1.4.0
imagequant	2.4.1
lcms	2.19.1
mozjpeg	0826579
pango	1.58.2
pixman	0.46.4
png	1.6.58
proxy-libintl	0.5
rsvg	2.62.91
tiff	4.7.2
uhdr	2.0.2
vips	8.18.6
webp	1.6.0
xml2	2.15.3
zlib-ng	2.3.3

v1.3.3-rc.0

Dependency	Version
aom	3.14.1
archive	3.8.9
cairo	1.18.4
cgif	0.5.3
exif	0.6.26
expat	2.8.3
ffi	3.8.0
fontconfig	2.18.3
freetype	2.14.3
fribidi	1.0.16
glib	2.89.4
harfbuzz	14.3.1
heif	1.23.2
highway	1.4.0
imagequant	2.4.1

... (truncated)

Commits

• 6e5971d Release v1.3.3
• 8cb41cd Prerelease v1.3.3-rc.0
• 4da6d14 Release v1.3.2
• 4b6459d Prerelease v1.3.2-rc.0
• 5f87522 macOS/Linux: Add exports entry for binary file
• 6d80db4 Release v1.3.1
• 68cd885 Prerelease v1.3.1-rc.0
• 17c6a69 Rename as 'stub' to help explain why rather than what
• b4bf74b macOS/Linux: Add empty.node file to aid tree-shaking bundlers
• 029dbbb Release v1.3.0
• Additional commits viewable in compare view

Updates @next/swc-darwin-arm64 from 15.5.23 to 15.5.24

Release notes

Sourced from @​next/swc-darwin-arm64's releases.

v15.5.24

This release contains security fixes for the following advisories:

Critical:

• Unauthenticated Remote Code Execution on windows-hosted servers
• Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used

Commits

• See full diff in compare view

Updates @next/swc-darwin-x64 from 15.5.23 to 15.5.24

Release notes

Sourced from @​next/swc-darwin-x64's releases.

v15.5.24

This release contains security fixes for the following advisories:

Critical:

• Unauthenticated Remote Code Execution on windows-hosted servers
• Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used

Commits

• See full diff in compare view

Updates @next/swc-linux-x64-gnu from 15.5.23 to 15.5.24

Release notes

Sourced from @​next/swc-linux-x64-gnu's releases.

v15.5.24

This release contains security fixes for the following advisories:

Critical:

• Unauthenticated Remote Code Execution on windows-hosted servers
• Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used

Commits

• See full diff in compare view

Updates @next/swc-linux-x64-musl from 15.5.23 to 15.5.24

Release notes

Sourced from @​next/swc-linux-x64-musl's releases.

v15.5.24

This release contains security fixes for the following advisories:

Critical:

• Unauthenticated Remote Code Execution on windows-hosted servers
• Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used

Commits

• See full diff in compare view

Updates @open-wallet-standard/core-darwin-arm64 from 1.2.4 to 1.4.2

Release notes

Sourced from @​open-wallet-standard/core-darwin-arm64's releases.

v1.4.2

What's Changed

• fix(node): add repository field to package.json for npm provenance by @​0xultravioleta in open-wallet-standard/core#238

Full Changelog: open-wallet-standard/core@v1.4.1...v1.4.2

v1.4.1

What's Changed

• ci(release): publish npm via OIDC trusted publishing, drop NPM_TOKEN by @​0xultravioleta in open-wallet-standard/core#236

Full Changelog: open-wallet-standard/core@v1.4.0...v1.4.1

v1.4.0 — NEAR, Bitcoin PSBT, XRPL signing

Highlights

• NEAR Protocol support — Ed25519 + Borsh + NEP-413 (#221)
• Bitcoin PSBT signing via sign_transaction (#201)
• XRPL signing hardening — sign the digest with k256 so leading-zero keys no longer fail (#233); inject SigningPubKey in the signer so callers pass unsigned transactions (#234)
• x402 usage-based settlement example + examples driven through the ows CLI (#212, #231, #207, #206)
• CLI — clearer "payment rejected by server" on x402 4xx (#191)

What's Changed

• chore: bump version to 1.3.2 by @​svc-sre in open-wallet-standard/core#214
• feat: add NEAR Protocol chain support (Ed25519 + Borsh + NEP-413) by @​0xultravioleta in open-wallet-standard/core#221
• docs: add policy-engine-implementation.md by @​ygd58 in open-wallet-standard/core#206
• examples: add x402 payment and agent policy examples by @​ygd58 in open-wallet-standard/core#207
• fix(examples): drive x402 examples through the ows CLI by @​0xultravioleta in open-wallet-standard/core#231
• examples: add x402 usage-based settlement guide by @​ygd58 in open-wallet-standard/core#212
• fix: only print "Paid" on successful x402 payment response by @​Sertug17 in open-wallet-standard/core#191
• feat(bitcoin): add PSBT signing via sign_transaction by @​dolepee in open-wallet-standard/core#201
• fix(xrpl): sign the digest with k256 so leading-zero keys don't fail by @​0xultravioleta in open-wallet-standard/core#233
• feat(xrpl): inject SigningPubKey in signer so callers pass unsigned transactions by @​Patel-Raj11 in open-wallet-standard/core#234

New Contributors

• @​0xultravioleta made their first contribution in open-wallet-standard/core#221
• @​ygd58 made their first contribution in open-wallet-standard/core#206

Full Changelog: open-wallet-standard/core@v1.3.2...v1.4.0

v1.3.2

What's Changed

• chore: bump version to 1.3.1 by @​svc-sre in open-wallet-standard/core#209
• Nj/add adapters readme by @​njdawn in open-wallet-standard/core#210

Full Changelog: open-wallet-standard/core@v1.3.1...v1.3.2

What's Changed

• chore: bump version to 1.3.1 by @​svc-sre in open-wallet-standard/core#209

... (truncated)

Commits

• 76c8c67 Merge pull request #238 from open-wallet-standard/fix/npm-provenance-repository
• 8a11701 fix(node): add repository field to package.json for npm provenance
• 2fc59f3 Merge pull request #236 from open-wallet-standard/fix/release-npm-oidc
• 76b16ac ci(release): publish npm via OIDC trusted publishing, drop NPM_TOKEN
• dc31522 feat(xrpl): inject SigningPubKey in signer so callers pass unsigned transacti...
• 01bde4e Merge pull request #233 from open-wallet-standard/fix/xrpl-leading-zero-key
• 844ae33 fix(xrpl): sign the digest with k256 so leading-zero keys don't fail
• 0e62e5f feat(bitcoin): add PSBT signing via sign_transaction (#201)
• 71e70b5 fix(cli): show "payment rejected by server" ...

  Description has been truncated

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.