Skip to content

[Snyk] Upgrade eslint-plugin-react-hooks from 5.2.0 to 7.0.0 - #24

Merged
Dargon789 merged 1 commit into
mainfrom
snyk-upgrade-8bd1d1d5220f90ed3444ebf14a3bfb46
Dec 15, 2025
Merged

Dargon789 merged 1 commit into
mainfrom
snyk-upgrade-8bd1d1d5220f90ed3444ebf14a3bfb46

Conversation

@snyk-io

@snyk-io snyk-io Bot commented Oct 30, 2025

Copy link
Copy Markdown

snyk-top-banner

Snyk has created this PR to upgrade eslint-plugin-react-hooks from 5.2.0 to 7.0.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 168 versions ahead of your current version.

  • The recommended version was released 22 days ago.

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

Release notes
Package name: eslint-plugin-react-hooks
  • 7.0.0 - 2025-10-08
  • 7.0.0-canary-f6a48828-20251019 - 2025-10-20
  • 7.0.0-canary-ead92181-20251010 - 2025-10-12
  • 7.0.0-canary-d7215b49-20251013 - 2025-10-13
  • 7.0.0-canary-93f85932-20251016 - 2025-10-16
  • 7.0.0-canary-71b3a03c-20251021 - 2025-10-21
  • 7.0.0-canary-6160773f-20251023 - 2025-10-23
  • 7.0.0-canary-5f2b5718-20251014 - 2025-10-14
  • 7.0.0-canary-58bdc0bb-20251019 - 2025-10-19
  • 7.0.0-canary-56e84692-20251014 - 2025-10-14
  • 7.0.0-canary-4b3e662e-20251008 - 2025-10-08
  • 7.0.0-canary-2bcbf254-20251020 - 2025-10-20
  • 7.0.0-canary-1873ad79-20251015 - 2025-10-15
  • 7.0.0-canary-1324e1bb-20251016 - 2025-10-17
  • 7.0.0-canary-06fcc8f3-20251009 - 2025-10-10
  • 6.2.0-canary-c7862584-20251006 - 2025-10-06
  • 6.2.0-canary-a757cb76-20251002 - 2025-10-02
  • 6.2.0-canary-a4eb2dfa-20251006 - 2025-10-07
  • 6.2.0-canary-9724e3e6-20251008 - 2025-10-08
  • 6.2.0-canary-85c427d8-20251003 - 2025-10-03
  • 6.2.0-canary-4fdf7cf2-20251003 - 2025-10-03
  • 6.2.0-canary-3025aa39-20251007 - 2025-10-07
  • 6.2.0-canary-03c6454d-20251008 - 2025-10-08
  • 6.1.1 - 2025-10-03
  • 6.1.0 - 2025-10-01
  • 6.1.0-canary-fa3feba6-20250623 - 2025-06-23
  • 6.1.0-canary-f9ae0a4c-20250527 - 2025-05-27
  • 6.1.0-canary-f7396427-20250501 - 2025-05-02
  • 6.1.0-canary-f508edc8-20250818 - 2025-08-18
  • 6.1.0-canary-f3a80361-20250911 - 2025-09-11
  • 6.1.0-canary-f1e70b5e-20250811 - 2025-08-11
  • 6.1.0-canary-f1222f76-20250812 - 2025-08-13
  • 6.1.0-canary-ef8b6fa2-20250702 - 2025-07-03
  • 6.1.0-canary-ef889445-20250930 - 2025-09-30
  • 6.1.0-canary-edac0dde-20250723 - 2025-07-23
  • 6.1.0-canary-eaee5308-20250728 - 2025-07-28
  • 6.1.0-canary-e9db3cc2-20250501 - 2025-05-01
  • 6.1.0-canary-e9638c33-20250721 - 2025-07-21
  • 6.1.0-canary-e6dc25da-20250709 - 2025-07-09
  • 6.1.0-canary-e2332183-20250924 - 2025-09-24
  • 6.1.0-canary-dffacc7b-20250717 - 2025-07-17
  • 6.1.0-canary-df38ac9a-20250926 - 2025-09-26
  • 6.1.0-canary-de5a1b20-20250905 - 2025-09-05
  • 6.1.0-canary-d92056ef-20250627 - 2025-06-27
  • 6.1.0-canary-d85f86cf-20250514 - 2025-05-14
  • 6.1.0-canary-d85ec5f5-20250716 - 2025-07-16
  • 6.1.0-canary-d415fd3e-20250919 - 2025-09-19
  • 6.1.0-canary-d15d7fd7-20250929 - 2025-09-29
  • 6.1.0-canary-cee7939b-20250625 - 2025-06-25
  • 6.1.0-canary-c498bfce-20250426 - 2025-04-28
  • 6.1.0-canary-c4676e72-20250520 - 2025-05-20
  • 6.1.0-canary-c260b38d-20250731 - 2025-07-31
  • 6.1.0-canary-c129c242-20250505 - 2025-05-05
  • 6.1.0-canary-c0464aed-20250523 - 2025-05-26
  • 6.1.0-canary-befc1246-20250708 - 2025-07-08
  • 6.1.0-canary-be11cb5c-20250804 - 2025-08-04
  • 6.1.0-canary-bdb4a96f-20250801 - 2025-08-01
  • 6.1.0-canary-bbc13fa1-20250624 - 2025-06-24
  • 6.1.0-canary-bb6f0c8d-20250901 - 2025-09-01
  • 6.1.0-canary-b9cfa0d3-20250505 - 2025-05-05
  • 6.1.0-canary-b9a04536-20250904 - 2025-09-04
  • 6.1.0-canary-b94603b9-20250513 - 2025-05-13
  • 6.1.0-canary-b7e2de63-20250611 - 2025-06-11
  • 6.1.0-canary-b6c0aa88-20250609 - 2025-06-09
  • 6.1.0-canary-b4477d38-20250605 - 2025-06-05
  • 6.1.0-canary-b1b0955f-20250901 - 2025-09-01
  • 6.1.0-canary-b0c1dc01-20250925 - 2025-09-25
  • 6.1.0-canary-b07717d8-20250528 - 2025-05-28
  • 6.1.0-canary-ac7820a9-20250811 - 2025-08-11
  • 6.1.0-canary-ab859e31-20250606 - 2025-06-06
  • 6.1.0-canary-aad7c664-20250829 - 2025-08-29
  • 6.1.0-canary-a96a0f39-20250815 - 2025-08-15
  • 6.1.0-canary-a7a11657-20250708 - 2025-07-08
  • 6.1.0-canary-a00ca6f6-20250611 - 2025-06-11
  • 6.1.0-canary-9be531cd-20250729 - 2025-07-29
  • 6.1.0-canary-99efc627-20250523 - 2025-05-23
  • 6.1.0-canary-97cdd5d3-20250710 - 2025-07-11
  • 6.1.0-canary-9784cb37-20250730 - 2025-07-30
  • 6.1.0-canary-96c61b7f-20250709 - 2025-07-10
  • 6.1.0-canary-93d7aa69-20250912 - 2025-09-12
  • 6.1.0-canary-914319ae-20250423 - 2025-04-23
  • 6.1.0-canary-8e60cb7e-20250902 - 2025-09-02
  • 6.1.0-canary-8d7b5e49-20250827 - 2025-08-28
  • 6.1.0-canary-8ce15b0f-20250522 - 2025-05-22
  • 6.1.0-canary-8bb7241f-20250926 - 2025-09-26
  • 6.1.0-canary-8a8e9a7e-20250912 - 2025-09-12
  • 6.1.0-canary-89a803fc-20250828 - 2025-08-28
  • 6.1.0-canary-886b3d36-20250910 - 2025-09-10
  • 6.1.0-canary-873f7112-20250821 - 2025-08-21
  • 6.1.0-canary-86181134-20251001 - 2025-10-01
  • 6.1.0-canary-84af9085-20250917 - 2025-09-18
  • 6.1.0-canary-83c88ad4-20250923 - 2025-09-23
  • 6.1.0-canary-7deda941-20250804 - 2025-08-05
  • 6.1.0-canary-7a2c7045-20250506 - 2025-05-06
  • 6.1.0-canary-79d9aed7-20250620 - 2025-06-20
  • 6.1.0-canary-7513996f-20250722 - 2025-07-22
  • 6.1.0-canary-73aa744b-20250702 - 2025-07-02
  • 6.1.0-canary-7216c0f0-20250630 - 2025-07-01
  • 6.1.0-canary-72135096-20250421 - 2025-04-22
  • 6.1.0-canary-6eda5347-20250918 - 2025-09-19
  • 6.1.0-canary-6de32a5a-20250822 - 2025-08-22
  • 6.1.0-canary-6b70072c-20250909 - 2025-09-09
  • 6.1.0-canary-67a44bcd-20250915 - 2025-09-15
  • 6.1.0-canary-66f09bd0-20250806 - 2025-08-06
  • 6.1.0-canary-65c4decb-20250630 - 2025-06-30
  • 6.1.0-canary-60b5271a-20250709 - 2025-07-09
  • 6.1.0-canary-5e0c951b-20250916 - 2025-09-16
  • 6.1.0-canary-5dc00d6b-20250428 - 2025-04-28
  • 6.1.0-canary-5d87cd22-20250704 - 2025-07-04
  • 6.1.0-canary-56408a5b-20250610 - 2025-06-10
  • 6.1.0-canary-548235db-20251001 - 2025-10-01
  • 6.1.0-canary-534bed5f-20250813 - 2025-08-13
  • 6.1.0-canary-526dd340-20250602 - 2025-06-02
  • 6.1.0-canary-4db4b21c-20250626 - 2025-06-26
  • 6.1.0-canary-4a45ba92-20250515 - 2025-05-15
  • 6.1.0-canary-462d08f9-20250517 - 2025-05-19
  • 6.1.0-canary-4448b187-20250515 - 2025-05-16
  • 6.1.0-canary-4123f6b7-20250826 - 2025-08-26
  • 6.1.0-canary-408d055a-20250430 - 2025-04-30
  • 6.1.0-canary-3fb190f7-20250908 - 2025-09-08
  • 6.1.0-canary-3d14fcf0-20250724 - 2025-07-24
  • 6.1.0-canary-3958d5d8-20250807 - 2025-08-07
  • 6.1.0-canary-38ef6550-20250508 - 2025-05-08
  • 6.1.0-canary-3820740a-20250509 - 2025-05-12
  • 6.1.0-canary-379a083b-20250813 - 2025-08-14
  • 6.1.0-canary-37054867-20250604 - 2025-06-04
  • 6.1.0-canary-33a1095d-20250827 - 2025-08-27
  • 6.1.0-canary-3302d1f7-20250903 - 2025-09-03
  • 6.1.0-canary-2f0e7e57-20250715 - 2025-07-15
  • 6.1.0-canary-280ff6fe-20250606 - 2025-06-06
  • 6.1.0-canary-2805f0ed-20250903 - 2025-09-03
  • 6.1.0-canary-23884812-20250520 - 2025-05-21
  • 6.1.0-canary-223f81d8-20250707 - 2025-07-07
  • 6.1.0-canary-21fdf308-20250508 - 2025-05-09
  • 6.1.0-canary-1eca9a27-20250922 - 2025-09-22
  • 6.1.0-canary-1dc3bdea-20250812 - 2025-08-12
  • 6.1.0-canary-1bd1f01f-20251001 - 2025-10-01
  • 6.1.0-canary-1ae0a845-20250603 - 2025-06-03
  • 6.1.0-canary-19baee81-20250725 - 2025-07-25
  • 6.1.0-canary-197d6a04-20250424 - 2025-04-24
  • 6.1.0-canary-143d3e1b-20250425 - 2025-04-25
  • 6.1.0-canary-14094f80-20250529 - 2025-05-29
  • 6.1.0-canary-12bc60f5-20250613 - 2025-06-13
  • 6.1.0-canary-128abcfa-20250917 - 2025-09-17
  • 6.1.0-canary-0ff1d13b-20250507 - 2025-05-07
  • 6.1.0-canary-0bdb9206-20250818 - 2025-08-19
  • 6.1.0-canary-06e89951-20250620 - 2025-06-20
  • 6.1.0-canary-03fda05d-20250820 - 2025-08-20
  • 6.1.0-canary-0038c501-20250429 - 2025-04-29
  • 6.0.0 - 2025-04-21
  • 6.0.0-rc1 - 2025-04-15
  • 6.0.0-rc.2 - 2025-08-28
  • 6.0.0-rc.1 - 2025-04-18
  • 6.0.0-canary-ea05b750-20250408 - 2025-04-09
  • 6.0.0-canary-e5dd82a7-20250401 - 2025-04-01
  • 6.0.0-canary-c44e4a25-20250409 - 2025-04-10
  • 6.0.0-canary-bc6184dd-20250417 - 2025-04-18
  • 6.0.0-canary-b10cb4c0-20250403 - 2025-04-03
  • 6.0.0-canary-b04254fd-20250415 - 2025-04-16
  • 6.0.0-canary-6a7650c7-20250405 - 2025-04-05
  • 6.0.0-canary-63779030-20250328 - 2025-03-31
  • 6.0.0-canary-540cd652-20250403 - 2025-04-04
  • 6.0.0-canary-4a36d3ea-20250416 - 2025-04-17
  • 6.0.0-canary-3fbfb9ba-20250409 - 2025-04-09
  • 6.0.0-canary-39cad7af-20250411 - 2025-04-14
  • 6.0.0-canary-33661467-20250407 - 2025-04-07
  • 6.0.0-canary-1d6c8168-20250411 - 2025-04-11
  • 6.0.0-canary-040f8286-20250402 - 2025-04-02
  • 5.2.0 - 2025-02-28
from eslint-plugin-react-hooks GitHub release notes

Important

  • Warning: This PR contains a major version upgrade, and may be a breaking change.
  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade eslint-plugin-react-hooks from 5.2.0 to 7.0.0.

See this package in npm:
eslint-plugin-react-hooks

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/2d5d11a1-8d0b-4595-b781-4fcb8ec03598?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr
@vercel

vercel Bot commented Oct 30, 2025 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Preview Comments Updated (UTC)
my-onchainkit-app Ready Ready Preview Comment Oct 30, 2025 4:36pm
1 Skipped Deployment
Project Deployment Preview Comments Updated (UTC)
onchainkit-miniapp-manifest-generator Skipped Skipped Oct 30, 2025 4:36pm

@snyk-io

snyk-io Bot commented Oct 30, 2025

Copy link
Copy Markdown
Author

✅ Snyk checks have passed. No issues have been found so far.

Status Scanner Critical High Medium Low Total (0)
✅ Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@github-actions

Copy link
Copy Markdown

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
npm/eslint-plugin-react-hooks ^7.0.0 🟢 5.7
Details
CheckScoreReason
Code-Review🟢 7Found 22/30 approved changesets -- score normalized to 7
Maintained🟢 1030 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 2badge detected: InProgress
License🟢 10license file detected
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Signed-Releases⚠️ -1no releases found
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Binary-Artifacts🟢 9binaries present in source code
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Pinned-Dependencies⚠️ 1dependency not pinned by hash detected -- score normalized to 1
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities⚠️ 0229 existing vulnerabilities detected

Scanned Files

  • packages/create-onchain/templates/minikit-snake/package.json

@Dargon789 Dargon789 linked an issue Nov 24, 2025 that may be closed by this pull request
@Dargon789
Dargon789 merged commit ba915b3 into main Dec 15, 2025
15 of 24 checks passed
@Dargon789
Dargon789 deleted the snyk-upgrade-8bd1d1d5220f90ed3444ebf14a3bfb46 branch December 15, 2025 10:12
Dargon789 added a commit that referenced this pull request May 14, 2026
* test

* test

* Add .circleci/config.yml (#2)

* initial

* chore: deprecate code (coinbase#2312)

* feat: upgrade tailwind to v4 (coinbase#2313)

* chore: refactor fund components (coinbase#2311)

* Deprecate ock classes  (coinbase#2325)

* chore: remove deprecated default components (coinbase#2328)

* feat: <Connected /> component (coinbase#2317)

Co-authored-by: Alissa Crane <alissacranespam@gmail.com>

* v1: Fix lint issues (coinbase#2338)

* chore: Add onchainkit-v1 to CI test/lint/format workflows (coinbase#2340)

* chore: Merge main into onchainkit-v1 (coinbase#2346)

* chore: merge main (coinbase#2356)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Daniel Schlabach <31226559+dschlabach@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Alissa Crane <alissacranespam@gmail.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: Dan Cortes <3639170+dgca@users.noreply.github.com>
Co-authored-by: GarmashAlex <garmasholeksii@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Feat: React 19 + Nextjs 15 upgrade (coinbase#2337)

* feat: explore render prop for transaction (coinbase#2316)

* Create dependency-review.yml

Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>

* chore: switch enums -> object consts (coinbase#2363)

* chore: token audit (coinbase#2357)

* Create stale.yml (#5)

Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>

* Feat: TextInput updates (coinbase#2361)

* chore: update txn types (coinbase#2370)

* [feat] Update popover (coinbase#2374)

* chore: Buy component audit (coinbase#2371)

* chore: remove useValue usage (coinbase#2381)

* chore: audit identity (coinbase#2382)

* [feat][1/n] Update internal components (coinbase#2387)

* chore: audit earn (coinbase#2380)

* chore: rename nft types (coinbase#2386)

* chore: rename appchain types (coinbase#2388)

* chore: rename checkout types  (coinbase#2385)

* [feat][2/n] Update rest of internal components (coinbase#2389)

* v1: Signature audit pt 1 (coinbase#2360)

Co-authored-by: Alissa Crane <alissacranespam@gmail.com>

* [feat] Update toast (coinbase#2397)

* chore: cleanup types and export utils (coinbase#2394)

* [feat] swap audit (coinbase#2379)

* [chore] core/api folder audit (coinbase#2392)

* chore: Make theming based on data-attribute (coinbase#2410)

* chore: Merge main into ock-v1 (coinbase#2411)

* chore: Prefix component classnames (coinbase#2310)

* v1: Wallet audit (coinbase#2383)

* refactor: MiniKit and OnchainKit audit (coinbase#2412)

* chore: Merge main into onchainkit-v1 (coinbase#2414)

* Bump onchainkit version to v1

* chore: Publish create-onchain@alpha (coinbase#2416)

* chore: add 'use client' directive to core provider modules for Next.j… (coinbase#2418)

* chore: Create new templates directory and add basic OnchainKit template (coinbase#2419)

* chore: Simplify MiniKit template (coinbase#2420)

* chore: Update create-onchain CLI tool to handle new templates (coinbase#2421)

* Update publish-prerelease.js (#7)

Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>

* refactor: Use floating UI for wallet dropdown (coinbase#2433)

* fix: Move wallet click outside logic to WalletDropdown (coinbase#2447)

* fix: Get alpha into mergable state (coinbase#2452)

* frame-sdk => miniapp-sdk

* Remove notifications in playground

* Skip create-onchain test if on alpha branch, since it checks out @latest

* refactor: Use Mantine for minikit example app (coinbase#2458)

* chore: Set account association in MiniKit example app (coinbase#2459)

* Add name to example minikit app fc:frame

* Add logging to useUserInfo

* Add logging to getUrlHost

* Try to get the hostname from request headers

* Clean up minikit example app hostname resolution

* feat: Add batched transaction example to MiniKit Example App (coinbase#2460)

* fix: ConnectWallet render prop (coinbase#2454)

* feat: Update Sign in with Base wallet UI (coinbase#2456)

* chore: Upgrade guides + minor tweaks (coinbase#2464)

* Add new project section to upgrade guide

* Fix lint issues

* fix: Include .gitignore in alpha projects (coinbase#2467)

* See context

* pre

* Overflow scroll context

* Test logging quickauth payload

* feat: Add optional `defaultPublicClients` prop to allow creating custom RPC clients (coinbase#2473)

* feat: adding support for custom unmounted content for wallet

* Create Hardhat.yml (#10)

Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>

* feat: Add ock.css stylesheet with fully scoped styles

* Add ock.css to exports

* ock.css => onchainkit.css

* Fix lint issues

* Ensure all vars are prefixed

* Fix UI issue

* Fix lint errors

* Fix tests

* Full test coverage

* Don't layer onchainkit

* Fix tests

* feat: upgrade react from 18.3.1 to 19.1.1

Snyk has created this PR to upgrade react from 18.3.1 to 19.1.1.

See this package in npm:
react

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/79378c43-8a03-4d5f-b7f8-32c6d7868e2f?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

* fix: upgrade eslint-config-next from 15.3.3 to 15.5.3

Snyk has created this PR to upgrade eslint-config-next from 15.3.3 to 15.5.3.

See this package in npm:
eslint-config-next

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/79378c43-8a03-4d5f-b7f8-32c6d7868e2f?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

* fix: packages/miniapp-manifest-generator/package.json to reduce vulnerabilities (#16)

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8187303

Co-authored-by: snyk-io[bot] <141718529+snyk-io[bot]@users.noreply.github.com>

* feat: upgrade eslint from 8.57.1 to 9.36.0

Snyk has created this PR to upgrade eslint from 8.57.1 to 9.36.0.

See this package in npm:
eslint

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/79378c43-8a03-4d5f-b7f8-32c6d7868e2f?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

* feat: upgrade tailwindcss from 3.4.18 to 4.1.13

Snyk has created this PR to upgrade tailwindcss from 3.4.18 to 4.1.13.

See this package in npm:
tailwindcss

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/79378c43-8a03-4d5f-b7f8-32c6d7868e2f?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

* feat: upgrade react-dom from 18.3.1 to 19.1.1

Snyk has created this PR to upgrade react-dom from 18.3.1 to 19.1.1.

See this package in npm:
react-dom

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/79378c43-8a03-4d5f-b7f8-32c6d7868e2f?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

* Potential fix for code scanning alert no. 31: Server-side request forgery

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>

* fix: packages/playground/package.json to reduce vulnerabilities (#20)

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-NEXT-12299318

Co-authored-by: snyk-io[bot] <141718529+snyk-io[bot]@users.noreply.github.com>

* feat: upgrade react from 18.3.1 to 19.2.0

Snyk has created this PR to upgrade react from 18.3.1 to 19.2.0.

See this package in npm:
react

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/2d5d11a1-8d0b-4595-b781-4fcb8ec03598?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

* feat: upgrade tailwindcss from 3.4.18 to 4.1.14

Snyk has created this PR to upgrade tailwindcss from 3.4.18 to 4.1.14.

See this package in npm:
tailwindcss

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/2d5d11a1-8d0b-4595-b781-4fcb8ec03598?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

* fix: examples/minikit-example/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8187303

* fix: packages/playground/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8187303

* chore: version packages 🚀 (coinbase#2529) (#30)

Summary by Sourcery
Bump onchainkit and create-onchain packages to version 1.1.2 and record the latest patch changes in the changelogs.
Bug Fixes:
Document a patch fixing the rename of the allowedAddresses field to ownerAddress in onchainkit.
Enhancements:
Document deprecation of the component and related functionality in onchainkit.
Chores:
Remove consumed changeset files after publishing the 1.1.2 release.
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

* chore: fix fund components to mandate session-token (coinbase#2542)

* fix: packages/onchainkit/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8187303

* fix: packages/miniapp-manifest-generator/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8187303

* fix: examples/minikit-example/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-NEXT-14173355

* fix: packages/create-onchain/templates/next/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-NEXT-14173355

* fix: packages/create-onchain/templates/next/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-NEXT-14400636
- https://snyk.io/vuln/SNYK-JS-NEXT-14400644

* Update packages/create-onchain/templates/next/package.json

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>

* chore(deps): bump the npm_and_yarn group across 1 directory with 4 updates

Bumps the npm_and_yarn group with 2 updates in the / directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) and [glob](https://github.com/isaacs/node-glob).


Updates `vite` from 5.4.19 to 5.4.21
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v5.4.21/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v5.4.21/packages/vite)

Updates `glob` from 11.0.1 to 11.1.0
- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)
- [Commits](isaacs/node-glob@v11.0.1...v11.1.0)

Updates `next` from 15.3.3 to 14.2.35
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.3.3...v14.2.35)

Updates `sha.js` from 2.4.11 to 2.4.12
- [Changelog](https://github.com/browserify/sha.js/blob/master/CHANGELOG.md)
- [Commits](browserify/sha.js@v2.4.11...v2.4.12)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 5.4.21
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: glob
  dependency-version: 11.1.0
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 14.2.35
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: sha.js
  dependency-version: 2.4.12
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix: examples/minikit-example/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-NEXT-14400636
- https://snyk.io/vuln/SNYK-JS-NEXT-14400644

* fix: packages/playground/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-NEXT-14400636

* fix: packages/playground/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-NEXT-10598338
- https://snyk.io/vuln/SNYK-JS-NEXT-12265451
- https://snyk.io/vuln/SNYK-JS-NEXT-12299318
- https://snyk.io/vuln/SNYK-JS-NEXT-12301496
- https://snyk.io/vuln/SNYK-JS-NEXT-14173355
- https://snyk.io/vuln/SNYK-JS-NEXT-14400636
- https://snyk.io/vuln/SNYK-JS-NEXT-14400644

* chore(deps): bump the npm_and_yarn group across 4 directories with 4 updates

Bumps the npm_and_yarn group with 3 updates in the / directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite), [glob](https://github.com/isaacs/node-glob) and [next](https://github.com/vercel/next.js).
Bumps the npm_and_yarn group with 1 update in the /examples/minikit-example directory: [next](https://github.com/vercel/next.js).
Bumps the npm_and_yarn group with 1 update in the /templates/minikit-nextjs directory: [next](https://github.com/vercel/next.js).
Bumps the npm_and_yarn group with 1 update in the /templates/onchainkit-nextjs directory: [next](https://github.com/vercel/next.js).


Updates `vite` from 5.4.19 to 5.4.21
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v5.4.21/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v5.4.21/packages/vite)

Updates `glob` from 11.0.1 to 11.1.0
- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)
- [Commits](isaacs/node-glob@v11.0.1...v11.1.0)

Updates `next` from 15.3.4 to 15.4.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.3.4...v15.4.10)

Updates `sha.js` from 2.4.11 to 2.4.12
- [Changelog](https://github.com/browserify/sha.js/blob/master/CHANGELOG.md)
- [Commits](browserify/sha.js@v2.4.11...v2.4.12)

Updates `next` from 15.3.4 to 15.4.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.3.4...v15.4.10)

Updates `next` from 15.3.4 to 15.4.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.3.4...v15.4.10)

Updates `next` from 15.3.4 to 15.4.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.3.4...v15.4.10)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 5.4.21
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: glob
  dependency-version: 11.1.0
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.4.10
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: sha.js
  dependency-version: 2.4.12
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.4.10
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.4.10
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.4.10
  dependency-type: direct:production
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix: packages/create-onchain/templates/next/package.json to reduce vulnerabilities (#44)

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-NEXT-12265451
- https://snyk.io/vuln/SNYK-JS-NEXT-12299318
- https://snyk.io/vuln/SNYK-JS-NEXT-12301496
- https://snyk.io/vuln/SNYK-JS-NEXT-14400636
- https://snyk.io/vuln/SNYK-JS-NEXT-14400644

Co-authored-by: snyk-bot <snyk-bot@snyk.io>

* fix: packages/playground/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-NEXT-12265451
- https://snyk.io/vuln/SNYK-JS-NEXT-12299318
- https://snyk.io/vuln/SNYK-JS-NEXT-12301496
- https://snyk.io/vuln/SNYK-JS-NEXT-14400636
- https://snyk.io/vuln/SNYK-JS-NEXT-14400644

* Update cli-minikit.yml (#49)

CI:
Clean up the cli-minikit workflow name and CLI invocation to consistently target the minikit flow.
Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>

* Update cli-verify-onchainkit-template.yml (#48)

Clean up the onchainkit CLI verification workflow by resolving merge artifacts and aligning the test project generation step with the standard onchainkit CLI usage.

Enhancements:

Rename the workflow to target onchainkit explicitly and remove leftover merge conflict markers.
Update the test project generation command to use the default onchainkit CLI flow instead of the mini variant.
Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>

* chore: bump react/next due to recent cve (coinbase#2554) (#51)

Co-authored-by: Dylan Steck <dylancsteck@gmail.com>

* chore(deps): bump the npm_and_yarn group across 5 directories with 4 updates (#50)

Bumps the npm_and_yarn group with 3 updates in the / directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite), [glob](https://github.com/isaacs/node-glob) and [next](https://github.com/vercel/next.js).
Bumps the npm_and_yarn group with 1 update in the /examples/minikit-example directory: [next](https://github.com/vercel/next.js).
Bumps the npm_and_yarn group with 1 update in the /packages/playground directory: [next](https://github.com/vercel/next.js).
Bumps the npm_and_yarn group with 1 update in the /templates/minikit-nextjs directory: [next](https://github.com/vercel/next.js).
Bumps the npm_and_yarn group with 1 update in the /templates/onchainkit-nextjs directory: [next](https://github.com/vercel/next.js).


Updates `vite` from 5.4.20 to 5.4.21
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v5.4.21/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v5.4.21/packages/vite)

Updates `glob` from 11.0.1 to 11.1.0
- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)
- [Commits](isaacs/node-glob@v11.0.1...v11.1.0)

Updates `next` from 15.3.6 to 15.4.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.3.6...v15.4.10)

Updates `sha.js` from 2.4.11 to 2.4.12
- [Changelog](https://github.com/browserify/sha.js/blob/master/CHANGELOG.md)
- [Commits](browserify/sha.js@v2.4.11...v2.4.12)

Updates `next` from 15.3.6 to 15.4.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.3.6...v15.4.10)

Updates `next` from 15.3.6 to 15.4.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.3.6...v15.4.10)

Updates `next` from 15.3.6 to 15.4.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.3.6...v15.4.10)

Updates `next` from 15.3.6 to 15.4.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.3.6...v15.4.10)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 5.4.21
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: glob
  dependency-version: 11.1.0
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.4.10
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: sha.js
  dependency-version: 2.4.12
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.4.10
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.4.10
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.4.10
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.4.10
  dependency-type: direct:production
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Circleci project setup (#43)

* Add .circleci/config.yml

* chore: add context exports (coinbase#2261)

* feat: Add batch ENS / Basename resolution with useAddresses hook and getAddresses utility (coinbase#2277)

* chore: add provider exports back (coinbase#2278)

* refactor: Replace Packemon with Vite (coinbase#2227)

* fix: Don't clean out out dir when building in dev mode (coinbase#2279)

* fix wallet modal (coinbase#2282)

* fix: Separate deafult Wagmi and Query providers (coinbase#2280)

* chore: show connect button when disconnected in Identity demo (coinbase#2285)

* Fix: Flaky AppchainBridgeProvider network toggle test (coinbase#2288)

* refactor: send display name (coinbase#2283)

* chore: Refactor getNames utility to leverage batch processing with getAddresses (coinbase#2281)

* chore: fix typos in documentation (coinbase#2286)

* chore: Dynamically set version in version.ts (coinbase#2290)

* fix: viem version (coinbase#2291)

* fix: viem (coinbase#2293)

* fix: viem (coinbase#2295)

* chore: Add @farcaster/frame-sdk dependency to minikit templates (coinbase#2297)

* chore: bump cli templates deps (coinbase#2296)

* chore: remove smart wallet check from cli prompt (coinbase#2287)

* fix: ready options (coinbase#2300)

* fix: authenticate against user fid (coinbase#2299)

* chore: version packages v 0.38.8 🌊 (coinbase#2276)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Dan Cortes <3639170+dgca@users.noreply.github.com>

* fix: OnchainKit package.json publishConfig.access = public (coinbase#2306)

* chore: add redirect for `getOnrampBuyUrl` (coinbase#2104)

* fix: signature provider unmount reset (coinbase#2172)

* fix: Updates playground to remove outdated imports (coinbase#2294)

* chore(deps): bump next from 14.2.25 to 14.2.26 (coinbase#2215)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore: update `create-onchain` version (coinbase#2315)

* fix: rpcUrl (coinbase#2319)

* chore: update release workflows (coinbase#2314)

* fix: fix root build command (coinbase#2320)

* fix: fix build command in workflow (coinbase#2321)

* fix: narrow filtering for release workflow (coinbase#2322)

* chore: version packages  v0.38.9 🌊 (coinbase#2323)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Alissa Crane <alissacranespam@gmail.com>

* fix: support an insecure fallback for session id to allow for testing on http contexts (coinbase#2318)

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

* chore: Make create-onchain library public (coinbase#2324)

* chore: Don't ask to generate manifest during app creation in create-onchain (coinbase#2326)

* fix: Basenames bidirectional validation (coinbase#2329)

* chore: version packages v0.38.10 🌊 (coinbase#2330)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Alissa Crane <alissacranespam@gmail.com>

* fix: getSocials (coinbase#2333)

* docs: fix broken link (coinbase#2331)

* feat: Make sign up button optional (coinbase#2332)

* chore: Release changesets (coinbase#2342)

* Chore: workflow improvement for vscode/cursor users (coinbase#2334)

* chore: version packages 🚀 (coinbase#2343)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Dan Cortes <3639170+dgca@users.noreply.github.com>

* chore: enable paymaster for wallet advanced Send (coinbase#2335)

* fix: MiniKit frames connector (coinbase#2347)

* chore: version packages 🚀 (coinbase#2348)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Dan Cortes <3639170+dgca@users.noreply.github.com>

* fix: Update wagmi config if connectors change (coinbase#2350)

* chore: version packages 🚀 (coinbase#2352)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Dan Cortes <3639170+dgca@users.noreply.github.com>

* chore(deps-dev): bump vite from 6.2.3 to 6.2.7 (coinbase#2327)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore: Use signed commits for Changesets action (coinbase#2351)

* chore: Update MiniKit mini app manifest (coinbase#2355)

* chore: version packages 🚀 (coinbase#2362)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Dan Cortes <3639170+dgca@users.noreply.github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Alissa Crane <alissacranespam@gmail.com>
Co-authored-by: Paul Cramer <paulccramer@gmail.com>
Co-authored-by: Dan Cortes <3639170+dgca@users.noreply.github.com>
Co-authored-by: Brendan from DeFi <brendan.forster@coinbase.com>
Co-authored-by: leopardracer <136604165+leopardracer@users.noreply.github.com>
Co-authored-by: Adam <alessey@gmail.com>
Co-authored-by: Zach Blake <ztb@pm.me>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Daniel Schlabach <31226559+dschlabach@users.noreply.github.com>
Co-authored-by: Teimur Gasanov <teymurgg321@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: xtbase <teaonbase@gmail.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: GarmashAlex <garmasholeksii@gmail.com>

* fix: packages/playground/package.json to reduce vulnerabilities (#47)

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-NEXT-12265451
- https://snyk.io/vuln/SNYK-JS-NEXT-12299318
- https://snyk.io/vuln/SNYK-JS-NEXT-12301496
- https://snyk.io/vuln/SNYK-JS-NEXT-14400636
- https://snyk.io/vuln/SNYK-JS-NEXT-14400644

Co-authored-by: snyk-io[bot] <141718529+snyk-io[bot]@users.noreply.github.com>

* fix: examples/minikit-example/package.json to reduce vulnerabilities (#46)

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-NEXT-12265451
- https://snyk.io/vuln/SNYK-JS-NEXT-12299318
- https://snyk.io/vuln/SNYK-JS-NEXT-12301496
- https://snyk.io/vuln/SNYK-JS-NEXT-14400636
- https://snyk.io/vuln/SNYK-JS-NEXT-14400644

Co-authored-by: snyk-io[bot] <141718529+snyk-io[bot]@users.noreply.github.com>

* feat: upgrade eslint-plugin-react-hooks from 5.2.0 to 7.0.0 (#24)

Snyk has created this PR to upgrade eslint-plugin-react-hooks from 5.2.0 to 7.0.0.

See this package in npm:
eslint-plugin-react-hooks

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/2d5d11a1-8d0b-4595-b781-4fcb8ec03598?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

Co-authored-by: snyk-io[bot] <141718529+snyk-io[bot]@users.noreply.github.com>

* fix: upgrade eslint-config-next from 15.3.3 to 15.5.4 (#23)

Snyk has created this PR to upgrade eslint-config-next from 15.3.3 to 15.5.4.

See this package in npm:
eslint-config-next

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/2d5d11a1-8d0b-4595-b781-4fcb8ec03598?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

Co-authored-by: snyk-io[bot] <141718529+snyk-io[bot]@users.noreply.github.com>

* feat: upgrade react-dom from 18.3.1 to 19.2.0 (#22)

Snyk has created this PR to upgrade react-dom from 18.3.1 to 19.2.0.

See this package in npm:
react-dom

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/2d5d11a1-8d0b-4595-b781-4fcb8ec03598?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

Co-authored-by: snyk-io[bot] <141718529+snyk-io[bot]@users.noreply.github.com>

* fix: packages/create-onchain/templates/minikit-basic/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116

* Delete .circleci/Hardhat.yml (#56)

Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>

* Create ci-foundry.yml (#57)

Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>

* Fix React Server Components CVE vulnerabilities

Updated dependencies to fix Next.js and React CVE vulnerabilities.

The fix-react2shell-next tool automatically updated the following packages to their secure versions:
- next
- react-server-dom-webpack
- react-server-dom-parcel  
- react-server-dom-turbopack

All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory.

Co-authored-by: Vercel <vercel[bot]@users.noreply.github.com>

* fix: packages/create-onchain/templates/next/package.json to reduce vulnerabilities (#79)

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-NEXT-15104645
- https://snyk.io/vuln/SNYK-JS-NEXT-15105315

Co-authored-by: snyk-bot <snyk-bot@snyk.io>

* Revert "Update cli-minikit.yml (#49)"

This reverts commit 7333229.

* fix: packages/create-onchain/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-QS-14724253

* Fix React Server Components CVE vulnerabilities

Updated dependencies to fix Next.js and React CVE vulnerabilities.

The fix-react2shell-next tool automatically updated the following packages to their secure versions:
- next
- react-server-dom-webpack
- react-server-dom-parcel  
- react-server-dom-turbopack

All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory.

Co-authored-by: Vercel <vercel[bot]@users.noreply.github.com>

* chore(deps-dev): bump storybook

Bumps the npm_and_yarn group with 1 update in the / directory: [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core).

Updates `storybook` from 8.6.7 to 8.6.15
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v8.6.15/code/core)

---
updated-dependencies:
- dependency-name: storybook
  dependency-version: 8.6.15
  dependency-type: direct:development
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>

* Delete .circleci directory

Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>

* Update cli-minikit.yml

b5970f8

Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>

* Revert "Circleci project setup (#43)"

This reverts commit c5ca6c2.

* Update cli-minikit.yml (#95)

ai help pin sha 7333229

Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>

* chore(ONRAMP-843): FundCard accept sessionToken param (coinbase#2501) (#86) (#90)

* Add quickAuth example to MiniKit example app (coinbase#2429)

* feat: Add Base Account connector support (coinbase#2435)

* chore: version packages 🚀 (coinbase#2432)




* extended validation to max 8 chars (coinbase#2437)

* chore: Use github changesets generator (coinbase#2438)

* chore: Manifest validator changeset (coinbase#2440)

* chore: Tweak changeset formatter order (coinbase#2442)

* feat: Add useSwapToken util (coinbase#2444)

* feat: useSendToken hook (coinbase#2445)

* fix: Export useSendToken, add example (coinbase#2446)

* chore: version packages 🚀 (coinbase#2441)



* fix: useFundCardSetupOnrampEventListeners unmount reset (coinbase#2182)

* feat: use crypto api for nonce generation (coinbase#2303)

* fix: useDebounce cleanup (coinbase#2305)

* chore(deps): bump next from 14.2.26 to 14.2.32 (coinbase#2471)




* chore(deps-dev): bump vite from 5.4.19 to 5.4.20 (coinbase#2483)




* feat: OnchainKit@v1 (coinbase#2415)

* chore: Remove deprecated schemaId prop (coinbase#2490)

* fix: Remove deprecated cacheTime arg (coinbase#2493)

* fix: Fix onchainkit and create-onchain versions (coinbase#2496)

* Release create-onchain v1 (coinbase#2497)

* chore: version packages 🚀 (coinbase#2498)




* chore: Release onchainkit and create-onchain at 1.0.2 (coinbase#2499)



* fix: Minikit template prepends process.env.VERCEL_URL with https:// (coinbase#2502)

* fix: Add `baseBuilder.allowedAddresses` to template + call `setFrameReady()` automatically (coinbase#2503)

* chore: Add changeset to create-onchain (coinbase#2504)

* chore: version packages 🚀 (coinbase#2505)




* chore(ONRAMP-843): FundCard accept sessionToken param (coinbase#2501)

* feat: Allow useOpenUrl to specify fallback behavior (coinbase#2500)

* fix: Rename setFrameReady and isFrameReady (coinbase#2510)

* fix: Update GetOnrampUrl type (coinbase#2511)

* chore: version packages 🚀 (coinbase#2509)



* fix: Allow additional properties in `withValidManifest` (coinbase#2515)

* chore: version packages 🚀 (coinbase#2516)



* fix: Deprecate useNotifications hook (coinbase#2527)

* fix: Deprecate Checkout component (coinbase#2528)

* fix: Rename allowedAddresses to ownerAddress (coinbase#2530)

* chore: version packages 🚀 (coinbase#2529)



* chore: fix fund components to mandate session-token (coinbase#2542)

* chore: bump react/next due to recent cve (coinbase#2554)
e1b37c5
---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Dan Cortes <3639170+dgca@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Sohey <soheimam@gmail.com>
Co-authored-by: Teimur Gasanov <teymurgg321@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Rustam Goygov <139204496+rustam-cb@users.noreply.github.com>
Co-authored-by: suryatejamandadi-cb <suryateja.mandadi@coinbase.com>
Co-authored-by: Dylan Steck <dylancsteck@gmail.com>

* Update issue templates (#87)

* Update issue templates

* Update .github/ISSUE_TEMPLATE/bug_report.md

Co-authored-by: sourcery-ai[bot] <58596630+sourcery-ai[bot]@users.noreply.github.com>
Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>

* Update .github/ISSUE_TEMPLATE/bug_report.md

Co-authored-by: sourcery-ai[bot] <58596630+sourcery-ai[bot]@users.noreply.github.com>
Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>

* Update .github/ISSUE_TEMPLATE/bug_report.md

Co-authored-by: sourcery-ai[bot] <58596630+sourcery-ai[bot]@users.noreply.github.com>
Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>

* Update .github/ISSUE_TEMPLATE/bug_report.md

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>

* Update .github/ISSUE_TEMPLATE/custom.md

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>

* Update .github/ISSUE_TEMPLATE/feature_request.md

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>

---------

Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>
Co-authored-by: sourcery-ai[bot] <58596630+sourcery-ai[bot]@users.noreply.github.com>
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>

* Potential fix for pull request finding 'CodeQL / Workflow does not contain permissions'

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>

* Potential fix for pull request finding 'CodeQL / Workflow does not contain permissions'

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>

* Update packages/onchainkit/plugins/__tests__/vite-dual-css.test.ts

Co-authored-by: sourcery-ai[bot] <58596630+sourcery-ai[bot]@users.noreply.github.com>
Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>

* Potential fix for code scanning alert no. 29: Workflow does not contain permissions (#120)

Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

* Revert "chore: bump react/next due to recent cve (coinbase#2554)" (#117)

This reverts commit e1b37c5.

Co-authored-by: googleworkspace-bot <googleworkspace-bot@google.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>
Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>
Co-authored-by: Alissa Crane <alissa.crane@coinbase.com>
Co-authored-by: Alissa Crane <alissacranespam@gmail.com>
Co-authored-by: xtbase <teaonbase@gmail.com>
Co-authored-by: Dan Cortes <3639170+dgca@users.noreply.github.com>
Co-authored-by: Daniel Schlabach <31226559+dschlabach@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: GarmashAlex <garmasholeksii@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: 0xFloyd <32312309+0xFloyd@users.noreply.github.com>
Co-authored-by: dgca <dgca@users.noreply.github.com>
Co-authored-by: snyk-io[bot] <141718529+snyk-io[bot]@users.noreply.github.com>
Co-authored-by: suryatejamandadi-cb <suryateja.mandadi@coinbase.com>
Co-authored-by: snyk-bot <snyk-bot@snyk.io>
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: Dylan Steck <dylancsteck@gmail.com>
Co-authored-by: Paul Cramer <paulccramer@gmail.com>
Co-authored-by: Brendan from DeFi <brendan.forster@coinbase.com>
Co-authored-by: leopardracer <136604165+leopardracer@users.noreply.github.com>
Co-authored-by: Adam <alessey@gmail.com>
Co-authored-by: Zach Blake <ztb@pm.me>
Co-authored-by: Teimur Gasanov <teymurgg321@gmail.com>
Co-authored-by: Vercel <vercel[bot]@users.noreply.github.com>
Co-authored-by: Sohey <soheimam@gmail.com>
Co-authored-by: Rustam Goygov <139204496+rustam-cb@users.noreply.github.com>
Co-authored-by: sourcery-ai[bot] <58596630+sourcery-ai[bot]@users.noreply.github.com>
Co-authored-by: googleworkspace-bot <googleworkspace-bot@google.com>

This branch was successfully deployed

1 active and 1 inactive deployments
Preview – my-onchainkit-app — 720f8b7a Deployed Oct 30, 2025 by vercel[bot]
Preview – onchainkit-miniapp-manifest-generator — 720f8b7a Deployed Oct 30, 2025 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

#AutoConnect in MiniKitProvider

1 participant