Skip to content

Create dependency-review.yml (#118) - #128

Open
Dargon789 wants to merge 2 commits into
mainfrom
circleci-project-setup
Open

Dargon789 wants to merge 2 commits into
mainfrom
circleci-project-setup

Conversation

@Dargon789

Copy link
Copy Markdown
Owner

Snyk has created this PR to upgrade react from 18.3.1 to 19.1.1.

See this package in npm:
react

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/79378c43-8a03-4d5f-b7f8-32c6d7868e2f?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

  • fix: upgrade eslint-config-next from 15.3.3 to 15.5.3

Snyk has created this PR to upgrade eslint-config-next from 15.3.3 to 15.5.3.

See this package in npm:
eslint-config-next

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/79378c43-8a03-4d5f-b7f8-32c6d7868e2f?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

The following vulnerabilities are fixed with an upgrade:

  • feat: upgrade eslint from 8.57.1 to 9.36.0

Snyk has created this PR to upgrade eslint from 8.57.1 to 9.36.0.

See this package in npm:
eslint

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/79378c43-8a03-4d5f-b7f8-32c6d7868e2f?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

  • feat: upgrade tailwindcss from 3.4.18 to 4.1.13

Snyk has created this PR to upgrade tailwindcss from 3.4.18 to 4.1.13.

See this package in npm:
tailwindcss

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/79378c43-8a03-4d5f-b7f8-32c6d7868e2f?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

  • feat: upgrade react-dom from 18.3.1 to 19.1.1

Snyk has created this PR to upgrade react-dom from 18.3.1 to 19.1.1.

See this package in npm:
react-dom

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/79378c43-8a03-4d5f-b7f8-32c6d7868e2f?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

The following vulnerabilities are fixed with an upgrade:

  • feat: upgrade react from 18.3.1 to 19.2.0

Snyk has created this PR to upgrade react from 18.3.1 to 19.2.0.

See this package in npm:
react

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/2d5d11a1-8d0b-4595-b781-4fcb8ec03598?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

  • feat: upgrade tailwindcss from 3.4.18 to 4.1.14

Snyk has created this PR to upgrade tailwindcss from 3.4.18 to 4.1.14.

See this package in npm:
tailwindcss

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/2d5d11a1-8d0b-4595-b781-4fcb8ec03598?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

  • fix: examples/minikit-example/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:

  • fix: packages/playground/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:

Summary by Sourcery
Bump onchainkit and create-onchain packages to version 1.1.2 and record the latest patch changes in the changelogs. Bug Fixes:
Document a patch fixing the rename of the allowedAddresses field to ownerAddress in onchainkit. Enhancements:
Document deprecation of the component and related functionality in onchainkit. Chores:
Remove consumed changeset files after publishing the 1.1.2 release.

The following vulnerabilities are fixed with an upgrade:

  • fix: packages/miniapp-manifest-generator/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:

  • fix: examples/minikit-example/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:

  • fix: packages/create-onchain/templates/next/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:

  • fix: packages/create-onchain/templates/next/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:

  • Update packages/create-onchain/templates/next/package.json

  • chore(deps): bump the npm_and_yarn group across 1 directory with 4 updates

Bumps the npm_and_yarn group with 2 updates in the / directory: vite and glob.

Updates vite from 5.4.19 to 5.4.21

Updates glob from 11.0.1 to 11.1.0

Updates next from 15.3.3 to 14.2.35

Updates sha.js from 2.4.11 to 2.4.12


updated-dependencies:

  • dependency-name: vite dependency-version: 5.4.21 dependency-type: direct:development dependency-group: npm_and_yarn
  • dependency-name: glob dependency-version: 11.1.0 dependency-type: direct:development dependency-group: npm_and_yarn
  • dependency-name: next dependency-version: 14.2.35 dependency-type: direct:production dependency-group: npm_and_yarn
  • dependency-name: sha.js dependency-version: 2.4.12 dependency-type: indirect dependency-group: npm_and_yarn ...
  • fix: examples/minikit-example/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:

  • fix: packages/playground/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:

  • fix: packages/playground/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:

  • chore(deps): bump the npm_and_yarn group across 4 directories with 4 updates

Bumps the npm_and_yarn group with 3 updates in the / directory: vite, glob and next.
Bumps the npm_and_yarn group with 1 update in the /examples/minikit-example directory: next.
Bumps the npm_and_yarn group with 1 update in the /templates/minikit-nextjs directory: next.
Bumps the npm_and_yarn group with 1 update in the /templates/onchainkit-nextjs directory: next.

Updates vite from 5.4.19 to 5.4.21

Updates glob from 11.0.1 to 11.1.0

Updates next from 15.3.4 to 15.4.10

Updates sha.js from 2.4.11 to 2.4.12

Updates next from 15.3.4 to 15.4.10

Updates next from 15.3.4 to 15.4.10

Updates next from 15.3.4 to 15.4.10


updated-dependencies:

  • dependency-name: vite dependency-version: 5.4.21 dependency-type: direct:development dependency-group: npm_and_yarn
  • dependency-name: glob dependency-version: 11.1.0 dependency-type: direct:development dependency-group: npm_and_yarn
  • dependency-name: next dependency-version: 15.4.10 dependency-type: direct:production dependency-group: npm_and_yarn
  • dependency-name: sha.js dependency-version: 2.4.12 dependency-type: indirect dependency-group: npm_and_yarn
  • dependency-name: next dependency-version: 15.4.10 dependency-type: direct:production dependency-group: npm_and_yarn
  • dependency-name: next dependency-version: 15.4.10 dependency-type: direct:production dependency-group: npm_and_yarn
  • dependency-name: next dependency-version: 15.4.10 dependency-type: direct:production dependency-group: npm_and_yarn ...

The following vulnerabilities are fixed with an upgrade:

  • fix: packages/playground/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:

CI:
Clean up the cli-minikit workflow name and CLI invocation to consistently target the minikit flow.

Clean up the onchainkit CLI verification workflow by resolving merge artifacts and aligning the test project generation step with the standard onchainkit CLI usage.

Enhancements:

Rename the workflow to target onchainkit explicitly and remove leftover merge conflict markers. Update the test project generation command to use the default onchainkit CLI flow instead of the mini variant.

Bumps the npm_and_yarn group with 3 updates in the / directory: vite, glob and next.
Bumps the npm_and_yarn group with 1 update in the /examples/minikit-example directory: next.
Bumps the npm_and_yarn group with 1 update in the /packages/playground directory: next.
Bumps the npm_and_yarn group with 1 update in the /templates/minikit-nextjs directory: next.
Bumps the npm_and_yarn group with 1 update in the /templates/onchainkit-nextjs directory: next.

Updates vite from 5.4.20 to 5.4.21

Updates glob from 11.0.1 to 11.1.0

Updates next from 15.3.6 to 15.4.10

Updates sha.js from 2.4.11 to 2.4.12

Updates next from 15.3.6 to 15.4.10

Updates next from 15.3.6 to 15.4.10

Updates next from 15.3.6 to 15.4.10

Updates next from 15.3.6 to 15.4.10


updated-dependencies:

  • dependency-name: vite dependency-version: 5.4.21 dependency-type: direct:development dependency-group: npm_and_yarn
  • dependency-name: glob dependency-version: 11.1.0 dependency-type: direct:development dependency-group: npm_and_yarn
  • dependency-name: next dependency-version: 15.4.10 dependency-type: direct:production dependency-group: npm_and_yarn
  • dependency-name: sha.js dependency-version: 2.4.12 dependency-type: indirect dependency-group: npm_and_yarn
  • dependency-name: next dependency-version: 15.4.10 dependency-type: direct:production dependency-group: npm_and_yarn
  • dependency-name: next dependency-version: 15.4.10 dependency-type: direct:production dependency-group: npm_and_yarn
  • dependency-name: next dependency-version: 15.4.10 dependency-type: direct:production dependency-group: npm_and_yarn
  • dependency-name: next dependency-version: 15.4.10 dependency-type: direct:production dependency-group: npm_and_yarn ...

The following vulnerabilities are fixed with an upgrade:

The following vulnerabilities are fixed with an upgrade:

Snyk has created this PR to upgrade eslint-plugin-react-hooks from 5.2.0 to 7.0.0.

See this package in npm:
eslint-plugin-react-hooks

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/2d5d11a1-8d0b-4595-b781-4fcb8ec03598?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

Snyk has created this PR to upgrade eslint-config-next from 15.3.3 to 15.5.4.

See this package in npm:
eslint-config-next

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/2d5d11a1-8d0b-4595-b781-4fcb8ec03598?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

Snyk has created this PR to upgrade react-dom from 18.3.1 to 19.2.0.

See this package in npm:
react-dom

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/2d5d11a1-8d0b-4595-b781-4fcb8ec03598?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

  • fix: packages/create-onchain/templates/minikit-basic/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:

Updated dependencies to fix Next.js and React CVE vulnerabilities.

The fix-react2shell-next tool automatically updated the following packages to their secure versions:

  • next
  • react-server-dom-webpack
  • react-server-dom-parcel
  • react-server-dom-turbopack

All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory.

The following vulnerabilities are fixed with an upgrade:

This reverts commit 7333229.

  • fix: packages/create-onchain/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:

  • Fix React Server Components CVE vulnerabilities

Updated dependencies to fix Next.js and React CVE vulnerabilities.

The fix-react2shell-next tool automatically updated the following packages to their secure versions:

  • next
  • react-server-dom-webpack
  • react-server-dom-parcel
  • react-server-dom-turbopack

All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory.

  • chore(deps-dev): bump storybook

Bumps the npm_and_yarn group with 1 update in the / directory: storybook.

Updates storybook from 8.6.7 to 8.6.15


updated-dependencies:

  • dependency-name: storybook dependency-version: 8.6.15 dependency-type: direct:development dependency-group: npm_and_yarn ...
  • Delete .circleci directory

  • Update cli-minikit.yml

b5970f8

This reverts commit c5ca6c2.

ai help pin sha 7333229


This reverts commit e1b37c5.


What changed? Why?

Notes to reviewers

How has it been tested?

* test

* test

* Add .circleci/config.yml (#2)

* initial

* chore: deprecate code (coinbase#2312)

* feat: upgrade tailwind to v4 (coinbase#2313)

* chore: refactor fund components (coinbase#2311)

* Deprecate ock classes  (coinbase#2325)

* chore: remove deprecated default components (coinbase#2328)

* feat: <Connected /> component (coinbase#2317)

Co-authored-by: Alissa Crane <alissacranespam@gmail.com>

* v1: Fix lint issues (coinbase#2338)

* chore: Add onchainkit-v1 to CI test/lint/format workflows (coinbase#2340)

* chore: Merge main into onchainkit-v1 (coinbase#2346)

* chore: merge main (coinbase#2356)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Daniel Schlabach <31226559+dschlabach@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Alissa Crane <alissacranespam@gmail.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: Dan Cortes <3639170+dgca@users.noreply.github.com>
Co-authored-by: GarmashAlex <garmasholeksii@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Feat: React 19 + Nextjs 15 upgrade (coinbase#2337)

* feat: explore render prop for transaction (coinbase#2316)

* Create dependency-review.yml

Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>

* chore: switch enums -> object consts (coinbase#2363)

* chore: token audit (coinbase#2357)

* Create stale.yml (#5)

Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>

* Feat: TextInput updates (coinbase#2361)

* chore: update txn types (coinbase#2370)

* [feat] Update popover (coinbase#2374)

* chore: Buy component audit (coinbase#2371)

* chore: remove useValue usage (coinbase#2381)

* chore: audit identity (coinbase#2382)

* [feat][1/n] Update internal components (coinbase#2387)

* chore: audit earn (coinbase#2380)

* chore: rename nft types (coinbase#2386)

* chore: rename appchain types (coinbase#2388)

* chore: rename checkout types  (coinbase#2385)

* [feat][2/n] Update rest of internal components (coinbase#2389)

* v1: Signature audit pt 1 (coinbase#2360)

Co-authored-by: Alissa Crane <alissacranespam@gmail.com>

* [feat] Update toast (coinbase#2397)

* chore: cleanup types and export utils (coinbase#2394)

* [feat] swap audit (coinbase#2379)

* [chore] core/api folder audit (coinbase#2392)

* chore: Make theming based on data-attribute (coinbase#2410)

* chore: Merge main into ock-v1 (coinbase#2411)

* chore: Prefix component classnames (coinbase#2310)

* v1: Wallet audit (coinbase#2383)

* refactor: MiniKit and OnchainKit audit (coinbase#2412)

* chore: Merge main into onchainkit-v1 (coinbase#2414)

* Bump onchainkit version to v1

* chore: Publish create-onchain@alpha (coinbase#2416)

* chore: add 'use client' directive to core provider modules for Next.j… (coinbase#2418)

* chore: Create new templates directory and add basic OnchainKit template (coinbase#2419)

* chore: Simplify MiniKit template (coinbase#2420)

* chore: Update create-onchain CLI tool to handle new templates (coinbase#2421)

* Update publish-prerelease.js (#7)

Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>

* refactor: Use floating UI for wallet dropdown (coinbase#2433)

* fix: Move wallet click outside logic to WalletDropdown (coinbase#2447)

* fix: Get alpha into mergable state (coinbase#2452)

* frame-sdk => miniapp-sdk

* Remove notifications in playground

* Skip create-onchain test if on alpha branch, since it checks out @latest

* refactor: Use Mantine for minikit example app (coinbase#2458)

* chore: Set account association in MiniKit example app (coinbase#2459)

* Add name to example minikit app fc:frame

* Add logging to useUserInfo

* Add logging to getUrlHost

* Try to get the hostname from request headers

* Clean up minikit example app hostname resolution

* feat: Add batched transaction example to MiniKit Example App (coinbase#2460)

* fix: ConnectWallet render prop (coinbase#2454)

* feat: Update Sign in with Base wallet UI (coinbase#2456)

* chore: Upgrade guides + minor tweaks (coinbase#2464)

* Add new project section to upgrade guide

* Fix lint issues

* fix: Include .gitignore in alpha projects (coinbase#2467)

* See context

* pre

* Overflow scroll context

* Test logging quickauth payload

* feat: Add optional `defaultPublicClients` prop to allow creating custom RPC clients (coinbase#2473)

* feat: adding support for custom unmounted content for wallet

* Create Hardhat.yml (#10)

Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>

* feat: Add ock.css stylesheet with fully scoped styles

* Add ock.css to exports

* ock.css => onchainkit.css

* Fix lint issues

* Ensure all vars are prefixed

* Fix UI issue

* Fix lint errors

* Fix tests

* Full test coverage

* Don't layer onchainkit

* Fix tests

* feat: upgrade react from 18.3.1 to 19.1.1

Snyk has created this PR to upgrade react from 18.3.1 to 19.1.1.

See this package in npm:
react

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/79378c43-8a03-4d5f-b7f8-32c6d7868e2f?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

* fix: upgrade eslint-config-next from 15.3.3 to 15.5.3

Snyk has created this PR to upgrade eslint-config-next from 15.3.3 to 15.5.3.

See this package in npm:
eslint-config-next

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/79378c43-8a03-4d5f-b7f8-32c6d7868e2f?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

* fix: packages/miniapp-manifest-generator/package.json to reduce vulnerabilities (#16)

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8187303

Co-authored-by: snyk-io[bot] <141718529+snyk-io[bot]@users.noreply.github.com>

* feat: upgrade eslint from 8.57.1 to 9.36.0

Snyk has created this PR to upgrade eslint from 8.57.1 to 9.36.0.

See this package in npm:
eslint

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/79378c43-8a03-4d5f-b7f8-32c6d7868e2f?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

* feat: upgrade tailwindcss from 3.4.18 to 4.1.13

Snyk has created this PR to upgrade tailwindcss from 3.4.18 to 4.1.13.

See this package in npm:
tailwindcss

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/79378c43-8a03-4d5f-b7f8-32c6d7868e2f?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

* feat: upgrade react-dom from 18.3.1 to 19.1.1

Snyk has created this PR to upgrade react-dom from 18.3.1 to 19.1.1.

See this package in npm:
react-dom

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/79378c43-8a03-4d5f-b7f8-32c6d7868e2f?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

* Potential fix for code scanning alert no. 31: Server-side request forgery

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>

* fix: packages/playground/package.json to reduce vulnerabilities (#20)

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-NEXT-12299318

Co-authored-by: snyk-io[bot] <141718529+snyk-io[bot]@users.noreply.github.com>

* feat: upgrade react from 18.3.1 to 19.2.0

Snyk has created this PR to upgrade react from 18.3.1 to 19.2.0.

See this package in npm:
react

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/2d5d11a1-8d0b-4595-b781-4fcb8ec03598?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

* feat: upgrade tailwindcss from 3.4.18 to 4.1.14

Snyk has created this PR to upgrade tailwindcss from 3.4.18 to 4.1.14.

See this package in npm:
tailwindcss

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/2d5d11a1-8d0b-4595-b781-4fcb8ec03598?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

* fix: examples/minikit-example/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8187303

* fix: packages/playground/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8187303

* chore: version packages 🚀 (coinbase#2529) (#30)

Summary by Sourcery
Bump onchainkit and create-onchain packages to version 1.1.2 and record the latest patch changes in the changelogs.
Bug Fixes:
Document a patch fixing the rename of the allowedAddresses field to ownerAddress in onchainkit.
Enhancements:
Document deprecation of the component and related functionality in onchainkit.
Chores:
Remove consumed changeset files after publishing the 1.1.2 release.
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

* chore: fix fund components to mandate session-token (coinbase#2542)

* fix: packages/onchainkit/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8187303

* fix: packages/miniapp-manifest-generator/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8187303

* fix: examples/minikit-example/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-NEXT-14173355

* fix: packages/create-onchain/templates/next/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-NEXT-14173355

* fix: packages/create-onchain/templates/next/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-NEXT-14400636
- https://snyk.io/vuln/SNYK-JS-NEXT-14400644

* Update packages/create-onchain/templates/next/package.json

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>

* chore(deps): bump the npm_and_yarn group across 1 directory with 4 updates

Bumps the npm_and_yarn group with 2 updates in the / directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) and [glob](https://github.com/isaacs/node-glob).


Updates `vite` from 5.4.19 to 5.4.21
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v5.4.21/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v5.4.21/packages/vite)

Updates `glob` from 11.0.1 to 11.1.0
- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)
- [Commits](isaacs/node-glob@v11.0.1...v11.1.0)

Updates `next` from 15.3.3 to 14.2.35
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.3.3...v14.2.35)

Updates `sha.js` from 2.4.11 to 2.4.12
- [Changelog](https://github.com/browserify/sha.js/blob/master/CHANGELOG.md)
- [Commits](browserify/sha.js@v2.4.11...v2.4.12)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 5.4.21
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: glob
  dependency-version: 11.1.0
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 14.2.35
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: sha.js
  dependency-version: 2.4.12
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix: examples/minikit-example/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-NEXT-14400636
- https://snyk.io/vuln/SNYK-JS-NEXT-14400644

* fix: packages/playground/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-NEXT-14400636

* fix: packages/playground/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-NEXT-10598338
- https://snyk.io/vuln/SNYK-JS-NEXT-12265451
- https://snyk.io/vuln/SNYK-JS-NEXT-12299318
- https://snyk.io/vuln/SNYK-JS-NEXT-12301496
- https://snyk.io/vuln/SNYK-JS-NEXT-14173355
- https://snyk.io/vuln/SNYK-JS-NEXT-14400636
- https://snyk.io/vuln/SNYK-JS-NEXT-14400644

* chore(deps): bump the npm_and_yarn group across 4 directories with 4 updates

Bumps the npm_and_yarn group with 3 updates in the / directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite), [glob](https://github.com/isaacs/node-glob) and [next](https://github.com/vercel/next.js).
Bumps the npm_and_yarn group with 1 update in the /examples/minikit-example directory: [next](https://github.com/vercel/next.js).
Bumps the npm_and_yarn group with 1 update in the /templates/minikit-nextjs directory: [next](https://github.com/vercel/next.js).
Bumps the npm_and_yarn group with 1 update in the /templates/onchainkit-nextjs directory: [next](https://github.com/vercel/next.js).


Updates `vite` from 5.4.19 to 5.4.21
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v5.4.21/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v5.4.21/packages/vite)

Updates `glob` from 11.0.1 to 11.1.0
- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)
- [Commits](isaacs/node-glob@v11.0.1...v11.1.0)

Updates `next` from 15.3.4 to 15.4.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.3.4...v15.4.10)

Updates `sha.js` from 2.4.11 to 2.4.12
- [Changelog](https://github.com/browserify/sha.js/blob/master/CHANGELOG.md)
- [Commits](browserify/sha.js@v2.4.11...v2.4.12)

Updates `next` from 15.3.4 to 15.4.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.3.4...v15.4.10)

Updates `next` from 15.3.4 to 15.4.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.3.4...v15.4.10)

Updates `next` from 15.3.4 to 15.4.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.3.4...v15.4.10)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 5.4.21
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: glob
  dependency-version: 11.1.0
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.4.10
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: sha.js
  dependency-version: 2.4.12
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.4.10
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.4.10
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.4.10
  dependency-type: direct:production
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix: packages/create-onchain/templates/next/package.json to reduce vulnerabilities (#44)

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-NEXT-12265451
- https://snyk.io/vuln/SNYK-JS-NEXT-12299318
- https://snyk.io/vuln/SNYK-JS-NEXT-12301496
- https://snyk.io/vuln/SNYK-JS-NEXT-14400636
- https://snyk.io/vuln/SNYK-JS-NEXT-14400644

Co-authored-by: snyk-bot <snyk-bot@snyk.io>

* fix: packages/playground/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-NEXT-12265451
- https://snyk.io/vuln/SNYK-JS-NEXT-12299318
- https://snyk.io/vuln/SNYK-JS-NEXT-12301496
- https://snyk.io/vuln/SNYK-JS-NEXT-14400636
- https://snyk.io/vuln/SNYK-JS-NEXT-14400644

* Update cli-minikit.yml (#49)

CI:
Clean up the cli-minikit workflow name and CLI invocation to consistently target the minikit flow.
Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>

* Update cli-verify-onchainkit-template.yml (#48)

Clean up the onchainkit CLI verification workflow by resolving merge artifacts and aligning the test project generation step with the standard onchainkit CLI usage.

Enhancements:

Rename the workflow to target onchainkit explicitly and remove leftover merge conflict markers.
Update the test project generation command to use the default onchainkit CLI flow instead of the mini variant.
Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>

* chore: bump react/next due to recent cve (coinbase#2554) (#51)

Co-authored-by: Dylan Steck <dylancsteck@gmail.com>

* chore(deps): bump the npm_and_yarn group across 5 directories with 4 updates (#50)

Bumps the npm_and_yarn group with 3 updates in the / directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite), [glob](https://github.com/isaacs/node-glob) and [next](https://github.com/vercel/next.js).
Bumps the npm_and_yarn group with 1 update in the /examples/minikit-example directory: [next](https://github.com/vercel/next.js).
Bumps the npm_and_yarn group with 1 update in the /packages/playground directory: [next](https://github.com/vercel/next.js).
Bumps the npm_and_yarn group with 1 update in the /templates/minikit-nextjs directory: [next](https://github.com/vercel/next.js).
Bumps the npm_and_yarn group with 1 update in the /templates/onchainkit-nextjs directory: [next](https://github.com/vercel/next.js).


Updates `vite` from 5.4.20 to 5.4.21
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v5.4.21/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v5.4.21/packages/vite)

Updates `glob` from 11.0.1 to 11.1.0
- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)
- [Commits](isaacs/node-glob@v11.0.1...v11.1.0)

Updates `next` from 15.3.6 to 15.4.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.3.6...v15.4.10)

Updates `sha.js` from 2.4.11 to 2.4.12
- [Changelog](https://github.com/browserify/sha.js/blob/master/CHANGELOG.md)
- [Commits](browserify/sha.js@v2.4.11...v2.4.12)

Updates `next` from 15.3.6 to 15.4.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.3.6...v15.4.10)

Updates `next` from 15.3.6 to 15.4.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.3.6...v15.4.10)

Updates `next` from 15.3.6 to 15.4.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.3.6...v15.4.10)

Updates `next` from 15.3.6 to 15.4.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.3.6...v15.4.10)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 5.4.21
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: glob
  dependency-version: 11.1.0
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.4.10
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: sha.js
  dependency-version: 2.4.12
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.4.10
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.4.10
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.4.10
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.4.10
  dependency-type: direct:production
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Circleci project setup (#43)

* Add .circleci/config.yml

* chore: add context exports (coinbase#2261)

* feat: Add batch ENS / Basename resolution with useAddresses hook and getAddresses utility (coinbase#2277)

* chore: add provider exports back (coinbase#2278)

* refactor: Replace Packemon with Vite (coinbase#2227)

* fix: Don't clean out out dir when building in dev mode (coinbase#2279)

* fix wallet modal (coinbase#2282)

* fix: Separate deafult Wagmi and Query providers (coinbase#2280)

* chore: show connect button when disconnected in Identity demo (coinbase#2285)

* Fix: Flaky AppchainBridgeProvider network toggle test (coinbase#2288)

* refactor: send display name (coinbase#2283)

* chore: Refactor getNames utility to leverage batch processing with getAddresses (coinbase#2281)

* chore: fix typos in documentation (coinbase#2286)

* chore: Dynamically set version in version.ts (coinbase#2290)

* fix: viem version (coinbase#2291)

* fix: viem (coinbase#2293)

* fix: viem (coinbase#2295)

* chore: Add @farcaster/frame-sdk dependency to minikit templates (coinbase#2297)

* chore: bump cli templates deps (coinbase#2296)

* chore: remove smart wallet check from cli prompt (coinbase#2287)

* fix: ready options (coinbase#2300)

* fix: authenticate against user fid (coinbase#2299)

* chore: version packages v 0.38.8 🌊 (coinbase#2276)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Dan Cortes <3639170+dgca@users.noreply.github.com>

* fix: OnchainKit package.json publishConfig.access = public (coinbase#2306)

* chore: add redirect for `getOnrampBuyUrl` (coinbase#2104)

* fix: signature provider unmount reset (coinbase#2172)

* fix: Updates playground to remove outdated imports (coinbase#2294)

* chore(deps): bump next from 14.2.25 to 14.2.26 (coinbase#2215)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore: update `create-onchain` version (coinbase#2315)

* fix: rpcUrl (coinbase#2319)

* chore: update release workflows (coinbase#2314)

* fix: fix root build command (coinbase#2320)

* fix: fix build command in workflow (coinbase#2321)

* fix: narrow filtering for release workflow (coinbase#2322)

* chore: version packages  v0.38.9 🌊 (coinbase#2323)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Alissa Crane <alissacranespam@gmail.com>

* fix: support an insecure fallback for session id to allow for testing on http contexts (coinbase#2318)

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

* chore: Make create-onchain library public (coinbase#2324)

* chore: Don't ask to generate manifest during app creation in create-onchain (coinbase#2326)

* fix: Basenames bidirectional validation (coinbase#2329)

* chore: version packages v0.38.10 🌊 (coinbase#2330)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Alissa Crane <alissacranespam@gmail.com>

* fix: getSocials (coinbase#2333)

* docs: fix broken link (coinbase#2331)

* feat: Make sign up button optional (coinbase#2332)

* chore: Release changesets (coinbase#2342)

* Chore: workflow improvement for vscode/cursor users (coinbase#2334)

* chore: version packages 🚀 (coinbase#2343)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Dan Cortes <3639170+dgca@users.noreply.github.com>

* chore: enable paymaster for wallet advanced Send (coinbase#2335)

* fix: MiniKit frames connector (coinbase#2347)

* chore: version packages 🚀 (coinbase#2348)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Dan Cortes <3639170+dgca@users.noreply.github.com>

* fix: Update wagmi config if connectors change (coinbase#2350)

* chore: version packages 🚀 (coinbase#2352)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Dan Cortes <3639170+dgca@users.noreply.github.com>

* chore(deps-dev): bump vite from 6.2.3 to 6.2.7 (coinbase#2327)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore: Use signed commits for Changesets action (coinbase#2351)

* chore: Update MiniKit mini app manifest (coinbase#2355)

* chore: version packages 🚀 (coinbase#2362)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Dan Cortes <3639170+dgca@users.noreply.github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Alissa Crane <alissacranespam@gmail.com>
Co-authored-by: Paul Cramer <paulccramer@gmail.com>
Co-authored-by: Dan Cortes <3639170+dgca@users.noreply.github.com>
Co-authored-by: Brendan from DeFi <brendan.forster@coinbase.com>
Co-authored-by: leopardracer <136604165+leopardracer@users.noreply.github.com>
Co-authored-by: Adam <alessey@gmail.com>
Co-authored-by: Zach Blake <ztb@pm.me>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Daniel Schlabach <31226559+dschlabach@users.noreply.github.com>
Co-authored-by: Teimur Gasanov <teymurgg321@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: xtbase <teaonbase@gmail.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: GarmashAlex <garmasholeksii@gmail.com>

* fix: packages/playground/package.json to reduce vulnerabilities (#47)

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-NEXT-12265451
- https://snyk.io/vuln/SNYK-JS-NEXT-12299318
- https://snyk.io/vuln/SNYK-JS-NEXT-12301496
- https://snyk.io/vuln/SNYK-JS-NEXT-14400636
- https://snyk.io/vuln/SNYK-JS-NEXT-14400644

Co-authored-by: snyk-io[bot] <141718529+snyk-io[bot]@users.noreply.github.com>

* fix: examples/minikit-example/package.json to reduce vulnerabilities (#46)

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-NEXT-12265451
- https://snyk.io/vuln/SNYK-JS-NEXT-12299318
- https://snyk.io/vuln/SNYK-JS-NEXT-12301496
- https://snyk.io/vuln/SNYK-JS-NEXT-14400636
- https://snyk.io/vuln/SNYK-JS-NEXT-14400644

Co-authored-by: snyk-io[bot] <141718529+snyk-io[bot]@users.noreply.github.com>

* feat: upgrade eslint-plugin-react-hooks from 5.2.0 to 7.0.0 (#24)

Snyk has created this PR to upgrade eslint-plugin-react-hooks from 5.2.0 to 7.0.0.

See this package in npm:
eslint-plugin-react-hooks

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/2d5d11a1-8d0b-4595-b781-4fcb8ec03598?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

Co-authored-by: snyk-io[bot] <141718529+snyk-io[bot]@users.noreply.github.com>

* fix: upgrade eslint-config-next from 15.3.3 to 15.5.4 (#23)

Snyk has created this PR to upgrade eslint-config-next from 15.3.3 to 15.5.4.

See this package in npm:
eslint-config-next

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/2d5d11a1-8d0b-4595-b781-4fcb8ec03598?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

Co-authored-by: snyk-io[bot] <141718529+snyk-io[bot]@users.noreply.github.com>

* feat: upgrade react-dom from 18.3.1 to 19.2.0 (#22)

Snyk has created this PR to upgrade react-dom from 18.3.1 to 19.2.0.

See this package in npm:
react-dom

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/2d5d11a1-8d0b-4595-b781-4fcb8ec03598?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

Co-authored-by: snyk-io[bot] <141718529+snyk-io[bot]@users.noreply.github.com>

* fix: packages/create-onchain/templates/minikit-basic/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116

* Delete .circleci/Hardhat.yml (#56)

Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>

* Create ci-foundry.yml (#57)

Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>

* Fix React Server Components CVE vulnerabilities

Updated dependencies to fix Next.js and React CVE vulnerabilities.

The fix-react2shell-next tool automatically updated the following packages to their secure versions:
- next
- react-server-dom-webpack
- react-server-dom-parcel  
- react-server-dom-turbopack

All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory.

Co-authored-by: Vercel <vercel[bot]@users.noreply.github.com>

* fix: packages/create-onchain/templates/next/package.json to reduce vulnerabilities (#79)

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-NEXT-15104645
- https://snyk.io/vuln/SNYK-JS-NEXT-15105315

Co-authored-by: snyk-bot <snyk-bot@snyk.io>

* Revert "Update cli-minikit.yml (#49)"

This reverts commit 7333229.

* fix: packages/create-onchain/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-QS-14724253

* Fix React Server Components CVE vulnerabilities

Updated dependencies to fix Next.js and React CVE vulnerabilities.

The fix-react2shell-next tool automatically updated the following packages to their secure versions:
- next
- react-server-dom-webpack
- react-server-dom-parcel  
- react-server-dom-turbopack

All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory.

Co-authored-by: Vercel <vercel[bot]@users.noreply.github.com>

* chore(deps-dev): bump storybook

Bumps the npm_and_yarn group with 1 update in the / directory: [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core).

Updates `storybook` from 8.6.7 to 8.6.15
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v8.6.15/code/core)

---
updated-dependencies:
- dependency-name: storybook
  dependency-version: 8.6.15
  dependency-type: direct:development
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>

* Delete .circleci directory

Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>

* Update cli-minikit.yml

b5970f8

Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>

* Revert "Circleci project setup (#43)"

This reverts commit c5ca6c2.

* Update cli-minikit.yml (#95)

ai help pin sha 7333229

Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>

* chore(ONRAMP-843): FundCard accept sessionToken param (coinbase#2501) (#86) (#90)

* Add quickAuth example to MiniKit example app (coinbase#2429)

* feat: Add Base Account connector support (coinbase#2435)

* chore: version packages 🚀 (coinbase#2432)




* extended validation to max 8 chars (coinbase#2437)

* chore: Use github changesets generator (coinbase#2438)

* chore: Manifest validator changeset (coinbase#2440)

* chore: Tweak changeset formatter order (coinbase#2442)

* feat: Add useSwapToken util (coinbase#2444)

* feat: useSendToken hook (coinbase#2445)

* fix: Export useSendToken, add example (coinbase#2446)

* chore: version packages 🚀 (coinbase#2441)



* fix: useFundCardSetupOnrampEventListeners unmount reset (coinbase#2182)

* feat: use crypto api for nonce generation (coinbase#2303)

* fix: useDebounce cleanup (coinbase#2305)

* chore(deps): bump next from 14.2.26 to 14.2.32 (coinbase#2471)




* chore(deps-dev): bump vite from 5.4.19 to 5.4.20 (coinbase#2483)




* feat: OnchainKit@v1 (coinbase#2415)

* chore: Remove deprecated schemaId prop (coinbase#2490)

* fix: Remove deprecated cacheTime arg (coinbase#2493)

* fix: Fix onchainkit and create-onchain versions (coinbase#2496)

* Release create-onchain v1 (coinbase#2497)

* chore: version packages 🚀 (coinbase#2498)




* chore: Release onchainkit and create-onchain at 1.0.2 (coinbase#2499)



* fix: Minikit template prepends process.env.VERCEL_URL with https:// (coinbase#2502)

* fix: Add `baseBuilder.allowedAddresses` to template + call `setFrameReady()` automatically (coinbase#2503)

* chore: Add changeset to create-onchain (coinbase#2504)

* chore: version packages 🚀 (coinbase#2505)




* chore(ONRAMP-843): FundCard accept sessionToken param (coinbase#2501)

* feat: Allow useOpenUrl to specify fallback behavior (coinbase#2500)

* fix: Rename setFrameReady and isFrameReady (coinbase#2510)

* fix: Update GetOnrampUrl type (coinbase#2511)

* chore: version packages 🚀 (coinbase#2509)



* fix: Allow additional properties in `withValidManifest` (coinbase#2515)

* chore: version packages 🚀 (coinbase#2516)



* fix: Deprecate useNotifications hook (coinbase#2527)

* fix: Deprecate Checkout component (coinbase#2528)

* fix: Rename allowedAddresses to ownerAddress (coinbase#2530)

* chore: version packages 🚀 (coinbase#2529)



* chore: fix fund components to mandate session-token (coinbase#2542)

* chore: bump react/next due to recent cve (coinbase#2554)
e1b37c5
---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Dan Cortes <3639170+dgca@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Sohey <soheimam@gmail.com>
Co-authored-by: Teimur Gasanov <teymurgg321@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Rustam Goygov <139204496+rustam-cb@users.noreply.github.com>
Co-authored-by: suryatejamandadi-cb <suryateja.mandadi@coinbase.com>
Co-authored-by: Dylan Steck <dylancsteck@gmail.com>

* Update issue templates (#87)

* Update issue templates

* Update .github/ISSUE_TEMPLATE/bug_report.md

Co-authored-by: sourcery-ai[bot] <58596630+sourcery-ai[bot]@users.noreply.github.com>
Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>

* Update .github/ISSUE_TEMPLATE/bug_report.md

Co-authored-by: sourcery-ai[bot] <58596630+sourcery-ai[bot]@users.noreply.github.com>
Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>

* Update .github/ISSUE_TEMPLATE/bug_report.md

Co-authored-by: sourcery-ai[bot] <58596630+sourcery-ai[bot]@users.noreply.github.com>
Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>

* Update .github/ISSUE_TEMPLATE/bug_report.md

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>

* Update .github/ISSUE_TEMPLATE/custom.md

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>

* Update .github/ISSUE_TEMPLATE/feature_request.md

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>

---------

Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>
Co-authored-by: sourcery-ai[bot] <58596630+sourcery-ai[bot]@users.noreply.github.com>
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>

* Potential fix for pull request finding 'CodeQL / Workflow does not contain permissions'

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>

* Potential fix for pull request finding 'CodeQL / Workflow does not contain permissions'

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>

* Update packages/onchainkit/plugins/__tests__/vite-dual-css.test.ts

Co-authored-by: sourcery-ai[bot] <58596630+sourcery-ai[bot]@users.noreply.github.com>
Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>

* Potential fix for code scanning alert no. 29: Workflow does not contain permissions (#120)

Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

* Revert "chore: bump react/next due to recent cve (coinbase#2554)" (#117)

This reverts commit e1b37c5.

Co-authored-by: googleworkspace-bot <googleworkspace-bot@google.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>
Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>
Co-authored-by: Alissa Crane <alissa.crane@coinbase.com>
Co-authored-by: Alissa Crane <alissacranespam@gmail.com>
Co-authored-by: xtbase <teaonbase@gmail.com>
Co-authored-by: Dan Cortes <3639170+dgca@users.noreply.github.com>
Co-authored-by: Daniel Schlabach <31226559+dschlabach@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: GarmashAlex <garmasholeksii@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: 0xFloyd <32312309+0xFloyd@users.noreply.github.com>
Co-authored-by: dgca <dgca@users.noreply.github.com>
Co-authored-by: snyk-io[bot] <141718529+snyk-io[bot]@users.noreply.github.com>
Co-authored-by: suryatejamandadi-cb <suryateja.mandadi@coinbase.com>
Co-authored-by: snyk-bot <snyk-bot@snyk.io>
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: Dylan Steck <dylancsteck@gmail.com>
Co-authored-by: Paul Cramer <paulccramer@gmail.com>
Co-authored-by: Brendan from DeFi <brendan.forster@coinbase.com>
Co-authored-by: leopardracer <136604165+leopardracer@users.noreply.github.com>
Co-authored-by: Adam <alessey@gmail.com>
Co-authored-by: Zach Blake <ztb@pm.me>
Co-authored-by: Teimur Gasanov <teymurgg321@gmail.com>
Co-authored-by: Vercel <vercel[bot]@users.noreply.github.com>
Co-authored-by: Sohey <soheimam@gmail.com>
Co-authored-by: Rustam Goygov <139204496+rustam-cb@users.noreply.github.com>
Co-authored-by: sourcery-ai[bot] <58596630+sourcery-ai[bot]@users.noreply.github.com>
Co-authored-by: googleworkspace-bot <googleworkspace-bot@google.com>
@vercel

vercel Bot commented May 14, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
my-onchainkit-app Ready Ready Preview, Comment May 14, 2026 2:16pm
onchainkit-minikit-example Ready Ready Preview, Comment May 14, 2026 2:16pm

@sourcery-ai sourcery-ai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sorry @Dargon789, you have reached your weekly rate limit of 500000 diff characters.

Please try again later or upgrade to continue using Sourcery

@snyk-io

snyk-io Bot commented May 14, 2026

Copy link
Copy Markdown

Snyk checks have failed. 1 issues have been found so far.

Status Scan Engine Critical High Medium Low Total (1)
Open Source Security 0 1 0 0 1 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@github-actions

Copy link
Copy Markdown

Dependency Review

The following issues were found:

  • ❌ 13 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 28 package(s) with unknown licenses.
  • ⚠️ 10 packages with OpenSSF Scorecard issues.

View full job summary

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request introduces several infrastructure and dependency updates, including the addition of GitHub issue templates and a new notification client for the MiniKit example. It implements a CSS scoping mechanism via new PostCSS and Vite plugins and updates the Babel plugin to support universal classes on HTML elements. Key feedback includes a critical syntax error and function redeclaration in the pre-release script, an invalid version number for the next dependency in a template, missing error handling for JSON parsing in the notification client, and a regex limitation in the CSS scoping plugin that fails to account for underscores in variable names.

Comment thread packages/onchainkit/scripts/publish-prerelease.js
Comment thread packages/create-onchain/templates/next/package.json Outdated
Comment thread examples/minikit-example/lib/notification-client.ts
Comment thread packages/onchainkit/plugins/postcss-create-scoped-styles.ts
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>
Repository owner deleted a comment from vercel Bot Jul 14, 2026
@github-actions

Copy link
Copy Markdown

Stale pull request message

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant