chore(deps): bump the npm_and_yarn group across 5 directories with 2 updates by dependabot[bot] · Pull Request #1744 · Crossmint/crossmint-sdk

dependabot · 2026-03-25T21:26:49Z

Bumps the npm_and_yarn group with 2 updates in the / directory: tsup and next.
Bumps the npm_and_yarn group with 1 update in the /apps/auth/nextjs-ssr directory: next.
Bumps the npm_and_yarn group with 1 update in the /apps/payments/nextjs directory: next.
Bumps the npm_and_yarn group with 1 update in the /apps/wallets/quickstart-devkit directory: next.
Bumps the npm_and_yarn group with 1 update in the /apps/wallets/smart-wallet/next directory: next.

Updates tsup from 8.1.0 to 8.3.5

Release notes

Sourced from tsup's releases.

... (truncated)

Commits

cd03e1e chore: release v8.3.5
fddd451 fix: run experimentalDts only once (#1236)
21b1193 chore: release v8.3.4
580e03d ci: fix release workflow
01b38f2 chore: release v8.3.3
4f5b71e ci: fix release workflow
e80dad6 chore: release v8.3.2
f4af79a ci: fix release workflow (#1241)
4b72d61 chore: release v8.3.1
41c98ff fix: support Node16 and NodeNext module resolution in experimentalDts (...
Additional commits viewable in compare view

Updates next from 15.3.9 to 15.5.14

Release notes

Sourced from next's releases.

Commits

d7b012d v15.5.14
2b05251 [backport] feat(next/image): add lru disk cache and `images.maximumDiskCacheS...
f88cee9 Backport: Fix(pages-router): restore Content-Length and ETag for /_next/data/...
cfd5f53 v15.5.13
15f2891 [backport]: fix: patch http-proxy to prevent request smuggling in rewrites (#...
d23f41c v15.5.12
8e75765 fix unlock in publish-native
6cef992 [backport] normalize CRLF line endings in jscodeshift tests on Windows (#8800...
7a94645 Apply needs for publishRelease
bbfd4e3 v15.5.11
Additional commits viewable in compare view

Updates next from 15.3.9 to 15.5.14

Release notes

Sourced from next's releases.

Commits

d7b012d v15.5.14
2b05251 [backport] feat(next/image): add lru disk cache and `images.maximumDiskCacheS...
f88cee9 Backport: Fix(pages-router): restore Content-Length and ETag for /_next/data/...
cfd5f53 v15.5.13
15f2891 [backport]: fix: patch http-proxy to prevent request smuggling in rewrites (#...
d23f41c v15.5.12
8e75765 fix unlock in publish-native
6cef992 [backport] normalize CRLF line endings in jscodeshift tests on Windows (#8800...
7a94645 Apply needs for publishRelease
bbfd4e3 v15.5.11
Additional commits viewable in compare view

Updates tsup from 8.1.0 to 8.3.5

Release notes

Sourced from tsup's releases.

... (truncated)

Commits

cd03e1e chore: release v8.3.5
fddd451 fix: run experimentalDts only once (#1236)
21b1193 chore: release v8.3.4
580e03d ci: fix release workflow
01b38f2 chore: release v8.3.3
4f5b71e ci: fix release workflow
e80dad6 chore: release v8.3.2
f4af79a ci: fix release workflow (#1241)
4b72d61 chore: release v8.3.1
41c98ff fix: support Node16 and NodeNext module resolution in experimentalDts (...
Additional commits viewable in compare view

Updates next from 15.3.9 to 15.5.14

Release notes

Sourced from next's releases.

Commits

d7b012d v15.5.14
2b05251 [backport] feat(next/image): add lru disk cache and `images.maximumDiskCacheS...
f88cee9 Backport: Fix(pages-router): restore Content-Length and ETag for /_next/data/...
cfd5f53 v15.5.13
15f2891 [backport]: fix: patch http-proxy to prevent request smuggling in rewrites (#...
d23f41c v15.5.12
8e75765 fix unlock in publish-native
6cef992 [backport] normalize CRLF line endings in jscodeshift tests on Windows (#8800...
7a94645 Apply needs for publishRelease
bbfd4e3 v15.5.11
Additional commits viewable in compare view

Updates tsup from 8.1.0 to 8.3.5

Release notes

Sourced from tsup's releases.

... (truncated)

Commits

cd03e1e chore: release v8.3.5
fddd451 fix: run experimentalDts only once (#1236)
21b1193 chore: release v8.3.4
580e03d ci: fix release workflow
01b38f2 chore: release v8.3.3
4f5b71e ci: fix release workflow
e80dad6 chore: release v8.3.2
f4af79a ci: fix release workflow (#1241)
4b72d61 chore: release v8.3.1
41c98ff fix: support Node16 and NodeNext module resolution in experimentalDts (...
Additional commits viewable in compare view

Updates next from 15.3.9 to 15.5.14

Release notes

Sourced from next's releases.

Commits

d7b012d v15.5.14
2b05251 [backport] feat(next/image): add lru disk cache and `images.maximumDiskCacheS...
f88cee9 Backport: Fix(pages-router): restore Content-Length and ETag for /_next/data/...
cfd5f53 v15.5.13
15f2891 [backport]: fix: patch http-proxy to prevent request smuggling in rewrites (#...
d23f41c v15.5.12
8e75765 fix unlock in publish-native
6cef992 [backport] normalize CRLF line endings in jscodeshift tests on Windows (#8800...
7a94645 Apply needs for publishRelease
bbfd4e3 v15.5.11
Additional commits viewable in compare view

Updates tsup from 8.1.0 to 8.3.5

Release notes

Sourced from tsup's releases.

... (truncated)

Commits

cd03e1e chore: release v8.3.5
fddd451 fix: run experimentalDts only once (#1236)
21b1193 chore: release v8.3.4
580e03d ci: fix release workflow
01b38f2 chore: release v8.3.3
4f5b71e ci: fix release workflow
e80dad6 chore: release v8.3.2
f4af79a ci: fix release workflow (#1241)
4b72d61 chore: release v8.3.1
41c98ff fix: support Node16 and NodeNext module resolution in experimentalDts (...
Additional commits viewable in compare view

Updates next from 15.3.9 to 15.5.14

Release notes

Sourced from next's releases.

Commits

d7b012d v15.5.14
2b05251 [backport] feat(next/image): add lru disk cache and `images.maximumDiskCacheS...
f88cee9 Backport: Fix(pages-router): restore Content-Length and ETag for /_next/data/...
cfd5f53 v15.5.13
15f2891 [backport]: fix: patch http-proxy to prevent request smuggling in rewrites (#...
d23f41c v15.5.12
8e75765 fix unlock in publish-native
6cef992 [backport] normalize CRLF line endings in jscodeshift tests on Windows (#8800...
7a94645 Apply needs for publishRelease
bbfd4e3 v15.5.11
Additional commits viewable in compare view

Updates tsup from 8.1.0 to 8.3.5

Release notes

Sourced from tsup's releases.

... (truncated)

Commits

cd03e1e chore: release v8.3.5
fddd451 fix: run experimentalDts only once (#1236)
21b1193 chore: release v8.3.4
580e03d ci: fix release workflow
01b38f2 chore: release v8.3.3
4f5b71e ci: fix release workflow
e80dad6 chore: release v8.3.2
f4af79a ci: fix release workflow (#1241)
4b72d61 chore: release v8.3.1
41c98ff fix: support Node16 and NodeNext module resolution in experimentalDts (...
Additional commits viewable in compare view

Updates next from 15.3.9 to 15.5.14

Release notes

Sourced from next's releases.

Commits

d7b012d v15.5.14
2b05251 [backport] feat(next/image): add lru disk cache and `images.maximumDiskCacheS...
f88cee9 Backport: Fix(pages-router): restore Content-Length and ETag for /_next/data/...
cfd5f53 v15.5.13
15f2891 [backport]: fix: patch http-proxy to prevent request smuggling in rewrites (#...
d23f41c v15.5.12
8e75765 fix unlock in publish-native
6cef992 [backport] normalize CRLF line endings in jscodeshift tests on Windows (#8800...
7a94645 Apply needs for publishRelease
bbfd4e3 v15.5.11
Additional commits viewable in compare view

Updates next from 15.3.9 to 15.5.14

Release notes

Sourced from next's releases.

Commits

d7b012d v15.5.14
2b05251 [backport] feat(next/image): add lru disk cache and `images.maximumDiskCacheS...
f88cee9 Backport: Fix(pages-router): restore Content-Length and ETag for /_next/data/...
cfd5f53 v15.5.13
15f2891 [backport]: fix: patch http-proxy to prevent request smuggling in rewrites (#...
d23f41c v15.5.12
8e75765 fix unlock in publish-native
6cef992 [backport] normalize CRLF line endings in jscodeshift tests on Windows (#8800...
7a94645 Apply needs for publishRelease
bbfd4e3 v15.5.11
Additional commits viewable in compare view

Updates next from 15.3.9 to 15.5.14

Release notes

Sourced from next's releases.

Commits

d7b012d v15.5.14
2b05251 [backport] feat(next/image): add lru disk cache and `images.maximumDiskCacheS...
f88cee9 Backport: Fix(pages-router): restore Content-Length and ETag for /_next/data/...
cfd5f53 v15.5.13
15f2891 [backport]: fix: patch http-proxy to prevent request smuggling in rewrites (#...
d23f41c v15.5.12
8e75765 fix unlock in publish-native
6cef992 [backport] normalize CRLF line endings in jscodeshift tests on Windows (#8800...
7a94645 Apply needs for publishRelease
bbfd4e3 v15.5.11
Additional commits viewable in compare view

Updates next from 15.3.9 to 15.5.14

Release notes

Sourced from next's releases.

Commits

d7b012d v15.5.14
2b05251 [backport] feat(next/image): add lru disk cache and `images.maximumDiskCacheS...
f88cee9 Backport: Fix(pages-router): restore Content-Length and ETag for /_next/data/...
cfd5f53 v15.5.13
15f2891 [backport]: fix: patch http-proxy to prevent request smuggling in rewrites (#...
d23f41c v15.5.12
8e75765 fix unlock in publish-native
6cef992 [backport] normalize CRLF line endings in jscodeshift tests on Windows (#8800...
7a94645 Apply needs for publishRelease
bbfd4e3 v15.5.11
Additional commits viewable in compare view

Updates next from 15.3.9 to 15.5.14

Release notes

Sourced from next'...

Description has been truncated

changeset-bot · 2026-03-25T21:26:56Z

⚠️ No Changeset found

Latest commit: e32e11d

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

greptile-apps · 2026-03-25T21:28:50Z

_{Reviews (1): Last reviewed commit: "chore(deps): bump the npm_and_yarn group..." | Re-trigger Greptile}

github-actions · 2026-03-25T21:33:22Z

🔥 Smoke Test Results

✅ Status: Passed

Statistics

Total Tests: 0
Passed: 0 ✅
Failed: 0
Skipped: 0
Duration: 3.01 min

✅ All smoke tests passed!

All critical flows are working correctly.

This is a non-blocking smoke test. Full regression tests run separately.

greptile-apps · 2026-03-27T07:24:24Z

_{Reviews (3): Last reviewed commit: "chore(deps): bump the npm_and_yarn group..." | Re-trigger Greptile}

greptile-apps · 2026-04-02T23:21:30Z

_{Reviews (4): Last reviewed commit: "chore(deps): bump the npm_and_yarn group..." | Re-trigger Greptile}

greptile-apps · 2026-04-03T19:29:08Z

_{Reviews (5): Last reviewed commit: "chore(deps): bump the npm_and_yarn group..." | Re-trigger Greptile}

greptile-apps · 2026-04-06T21:51:58Z

_{Reviews (6): Last reviewed commit: "chore(deps): bump the npm_and_yarn group..." | Re-trigger Greptile}

greptile-apps · 2026-04-07T23:23:14Z

Vulnerabilities

No security concerns identified. The next 15.5.13 update patches CVE-2026-29057 (request smuggling via http-proxy in rewrites), but none of the affected apps define a rewrites configuration, so they were not exposed prior to this update.

_{Reviews (7): Last reviewed commit: "chore(deps): bump the npm_and_yarn group..." | Re-trigger Greptile}

greptile-apps · 2026-04-09T00:51:02Z

Vulnerabilities

CVE-2026-29057 (HTTP request smuggling): This upgrade patches a vulnerability in http-proxy used by Next.js rewrites, backported in v15.5.13. Merging this PR resolves a confirmed security issue across all five affected apps.

_{Reviews (8): Last reviewed commit: "chore(deps): bump the npm_and_yarn group..." | Re-trigger Greptile}

…updates Bumps the npm_and_yarn group with 2 updates in the / directory: [tsup](https://github.com/egoist/tsup) and [next](https://github.com/vercel/next.js). Bumps the npm_and_yarn group with 1 update in the /apps/auth/nextjs-ssr directory: [next](https://github.com/vercel/next.js). Bumps the npm_and_yarn group with 1 update in the /apps/payments/nextjs directory: [next](https://github.com/vercel/next.js). Bumps the npm_and_yarn group with 1 update in the /apps/wallets/quickstart-devkit directory: [next](https://github.com/vercel/next.js). Bumps the npm_and_yarn group with 1 update in the /apps/wallets/smart-wallet/next directory: [next](https://github.com/vercel/next.js). Updates `tsup` from 8.1.0 to 8.3.5 - [Release notes](https://github.com/egoist/tsup/releases) - [Commits](egoist/tsup@v8.1.0...v8.3.5) Updates `next` from 15.3.9 to 15.5.14 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v15.3.9...v15.5.14) Updates `next` from 15.3.9 to 15.5.14 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v15.3.9...v15.5.14) Updates `next` from 15.3.9 to 15.5.14 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v15.3.9...v15.5.14) Updates `next` from 15.3.9 to 15.5.14 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v15.3.9...v15.5.14) Updates `next` from 15.3.9 to 15.5.14 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v15.3.9...v15.5.14) --- updated-dependencies: - dependency-name: tsup dependency-version: 8.3.5 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: next dependency-version: 15.5.14 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: next dependency-version: 15.5.14 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: next dependency-version: 15.5.14 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: next dependency-version: 15.5.14 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: next dependency-version: 15.5.14 dependency-type: direct:production dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

greptile-apps · 2026-04-10T01:10:09Z

_{Reviews (9): Last reviewed commit: "chore(deps): bump the npm_and_yarn group..." | Re-trigger Greptile}

dependabot · 2026-04-13T17:46:24Z

Superseded by #1787.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 25, 2026

dependabot Bot mentioned this pull request Mar 25, 2026

chore(deps): bump the npm_and_yarn group across 4 directories with 1 update #1737

Closed

dependabot Bot force-pushed the dependabot/npm_and_yarn/npm_and_yarn-c788a79ceb branch from cdfb2c7 to f54a5fc Compare March 27, 2026 07:21

dependabot Bot force-pushed the dependabot/npm_and_yarn/npm_and_yarn-c788a79ceb branch 2 times, most recently from 468fe9f to 07352a0 Compare April 2, 2026 23:20

dependabot Bot force-pushed the dependabot/npm_and_yarn/npm_and_yarn-c788a79ceb branch from 07352a0 to 4139d79 Compare April 3, 2026 19:28

dependabot Bot force-pushed the dependabot/npm_and_yarn/npm_and_yarn-c788a79ceb branch from 4139d79 to e70a75c Compare April 6, 2026 21:50

dependabot Bot force-pushed the dependabot/npm_and_yarn/npm_and_yarn-c788a79ceb branch from e70a75c to 3d961d2 Compare April 7, 2026 23:20

dependabot Bot force-pushed the dependabot/npm_and_yarn/npm_and_yarn-c788a79ceb branch from 3d961d2 to 219e5ba Compare April 9, 2026 00:50

dependabot Bot force-pushed the dependabot/npm_and_yarn/npm_and_yarn-c788a79ceb branch from 219e5ba to e32e11d Compare April 10, 2026 01:09

dependabot Bot closed this Apr 13, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/npm_and_yarn-c788a79ceb branch April 13, 2026 17:46

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the npm_and_yarn group across 5 directories with 2 updates#1744

chore(deps): bump the npm_and_yarn group across 5 directories with 2 updates#1744
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm_and_yarn-c788a79ceb

dependabot Bot commented on behalf of github Mar 25, 2026 •

edited

Loading

Uh oh!

changeset-bot Bot commented Mar 25, 2026 •

edited

Loading

Uh oh!

greptile-apps Bot commented Mar 25, 2026

Uh oh!

github-actions Bot commented Mar 25, 2026 •

edited

Loading

Uh oh!

greptile-apps Bot commented Mar 27, 2026 •

edited

Loading

Uh oh!

greptile-apps Bot commented Apr 2, 2026

Uh oh!

greptile-apps Bot commented Apr 3, 2026

Uh oh!

greptile-apps Bot commented Apr 6, 2026

Uh oh!

greptile-apps Bot commented Apr 7, 2026

Vulnerabilities

Uh oh!

greptile-apps Bot commented Apr 9, 2026

Vulnerabilities

Uh oh!

greptile-apps Bot commented Apr 10, 2026

Uh oh!

dependabot Bot commented on behalf of github Apr 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Mar 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v8.3.5

🐞 Bug Fixes

v8.3.4

v8.3.3

v8.3.1

🚀 Features

🐞 Bug Fixes

v8.3.0

8.3.0 (2024-09-17)

Bug Fixes

Features

v8.2.4

8.2.4 (2024-08-02)

v15.5.14

Core Changes

Credits

v15.5.13

Core Changes

Credits

v15.5.14

Core Changes

Credits

v15.5.13

Core Changes

Credits

v8.3.5

🐞 Bug Fixes

v8.3.4

v8.3.3

v8.3.1

🚀 Features

🐞 Bug Fixes

v8.3.0

8.3.0 (2024-09-17)

Bug Fixes

Features

v8.2.4

8.2.4 (2024-08-02)

v15.5.14

Core Changes

Credits

v15.5.13

Core Changes

Credits

v8.3.5

🐞 Bug Fixes

v8.3.4

v8.3.3

v8.3.1

🚀 Features

🐞 Bug Fixes

v8.3.0

8.3.0 (2024-09-17)

Bug Fixes

Features

v8.2.4

8.2.4 (2024-08-02)

v15.5.14

Core Changes

Credits

v15.5.13

Core Changes

Credits

v8.3.5

🐞 Bug Fixes

v8.3.4

v8.3.3

v8.3.1

🚀 Features

🐞 Bug Fixes

v8.3.0

8.3.0 (2024-09-17)

Bug Fixes

Features

v8.2.4

8.2.4 (2024-08-02)

v15.5.14

dependabot Bot commented on behalf of github Mar 25, 2026 •

edited

Loading