Bump the npm group across 2 directories with 56 updates by dependabot[bot] · Pull Request #149 · hyperledger-firefly/sandbox

dependabot · 2026-07-08T15:43:48Z

Bumps the npm group with 32 updates in the /server directory:

Package	From	To
@hyperledger/firefly-sdk	`1.3.0`	`1.3.3`
body-parser	`1.20.3`	`2.3.0`
cors	`2.8.5`	`2.8.6`
@types/cors	`2.8.17`	`2.8.19`
express	`4.21.2`	`5.2.1`
@types/express	`4.17.21`	`5.0.6`
nanoid	`3.3.11`	`5.1.16`
npm	`10.9.3`	`11.18.0`
reflect-metadata	`0.1.14`	`0.2.2`
routing-controllers	`0.11.2`	`0.11.3`
strip-indent	`3.0.0`	`4.1.1`
ws	`8.18.3`	`8.21.0`
@types/ws	`8.5.10`	`8.18.1`
@types/body-parser	`1.19.5`	`1.19.6`
@types/multer	`1.4.11`	`2.2.0`
@types/swagger-ui-express	`4.1.6`	`4.1.8`
@typescript-eslint/eslint-plugin	`5.62.0`	`8.63.0`
@typescript-eslint/parser	`5.62.0`	`8.63.0`
eslint	`8.57.0`	`10.6.0`
eslint-plugin-import	`2.29.1`	`2.32.0`
eslint-plugin-jest	`26.9.0`	`29.15.4`
jest	`29.7.0`	`30.4.2`
@types/jest	`29.5.12`	`30.0.0`
prettier	`2.8.8`	`3.9.4`
rimraf	`3.0.2`	`6.1.3`
supertest	`6.3.4`	`7.2.2`
@types/supertest	`2.0.16`	`7.2.0`
swagger-jsdoc	`6.2.8`	`6.3.0`
ts-jest	`29.1.2`	`29.4.11`
typescript	`4.9.5`	`6.0.3`
underscore	`1.13.6`	`1.13.8`
@types/underscore	`1.11.15`	`1.13.0`

Bumps the npm group with 33 updates in the /ui directory:

Package	From	To
@typescript-eslint/eslint-plugin	`7.4.0`	`8.63.0`
@typescript-eslint/parser	`7.4.0`	`8.63.0`
eslint	`8.57.0`	`10.6.0`
jest	`29.7.0`	`30.4.2`
@types/jest	`29.5.12`	`30.0.0`
ts-jest	`29.1.2`	`29.4.11`
typescript	`5.4.3`	`6.0.3`
underscore	`1.13.6`	`1.13.8`
@types/underscore	`1.11.15`	`1.13.0`
@emotion/react	`11.11.4`	`11.14.0`
@emotion/styled	`11.11.0`	`11.14.1`
@mui/icons-material	`5.15.14`	`9.2.0`
@mui/material	`5.15.14`	`9.2.0`
dayjs	`1.11.10`	`1.11.21`
i18next	`21.10.0`	`26.3.5`
jotai	`1.13.1`	`2.20.1`
react	`18.2.0`	`19.2.7`
@types/react	`18.2.67`	`19.2.17`
react-copy-to-clipboard	`5.1.0`	`5.1.1`
react-dom	`18.2.0`	`19.2.7`
@types/react-dom	`18.2.22`	`19.2.3`
react-i18next	`11.18.6`	`17.0.8`
react-router	`6.22.3`	`8.1.0`
react-router-dom	`6.22.3`	`7.18.1`
react-syntax-highlighter	`15.6.1`	`16.1.1`
@testing-library/jest-dom	`6.4.2`	`6.9.1`
@testing-library/react	`14.2.2`	`16.3.2`
@types/react-syntax-highlighter	`15.5.11`	`15.5.13`
@vitejs/plugin-react	`4.6.0`	`6.0.3`
eslint-config-prettier	`9.1.0`	`10.1.8`
eslint-plugin-prettier	`5.1.3`	`5.5.6`
jest-environment-jsdom	`29.7.0`	`30.4.1`
vite	`7.3.2`	`8.1.3`

Updates @hyperledger/firefly-sdk from 1.3.0 to 1.3.3

Release notes

Sourced from @hyperledger/firefly-sdk's releases.

v1.3.3

What's Changed

Fix docs by @alex-semenyuk in hyperledger/firefly-sdk-nodejs#90

chore: Update CODEOWNERS by @ryjones in hyperledger/firefly-sdk-nodejs#91

Update versions actions/checkout and actions/setup-node by @alex-semenyuk in hyperledger/firefly-sdk-nodejs#92

Re-generate SDK schema for FireFly 1.3.3 by @awrichar in hyperledger/firefly-sdk-nodejs#96

New Contributors

@alex-semenyuk made their first contribution in hyperledger/firefly-sdk-nodejs#90

Full Changelog: hyperledger-firefly/sdk-nodejs@v1.3.1...v1.3.3

v1.3.1

What's Changed

Up ws version by @mjc-dev in hyperledger/firefly-sdk-nodejs#89

Full Changelog: hyperledger-firefly/sdk-nodejs@v1.3.0...v1.3.1

Commits

53a36b1 Merge pull request #96 from kaleido-io/schema-1.3.3
4ce9512 Bump version to 1.3.3
d009fa3 More transforms to avoid null and unknown
6660bd7 Re-generate new schema
5b88154 Update OpenAPI schema transforms
30ab663 Re-generate schema for v1.3.3
e8acb05 Update to fix vulnerabilities
3634f3a Update openapi-typescript to latest
d1dcef4 Merge pull request #92 from alex-semenyuk/fix_workflows
d9425ac Update versions
Additional commits viewable in compare view

Updates body-parser from 1.20.3 to 2.3.0

Release notes

Sourced from body-parser's releases.

v2.3.0

What's Changed

build(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 by @dependabot[bot] in expressjs/body-parser#681

build(deps): bump actions/checkout from 5.0.0 to 6.0.1 by @dependabot[bot] in expressjs/body-parser#682

build(deps): bump actions/setup-node from 6.0.0 to 6.1.0 by @dependabot[bot] in expressjs/body-parser#683

build(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 by @dependabot[bot] in expressjs/body-parser#685

build(deps): bump github/codeql-action from 4.31.2 to 4.31.9 by @dependabot[bot] in expressjs/body-parser#684

perf(urlencoded): move empty-body guard to avoid extra function closure by @Phillip9587 in expressjs/body-parser#647

Improve ESM compatibility by @Phillip9587 in expressjs/body-parser#697

docs: add recommendations for configuring payload limits by @bjohansebas in expressjs/body-parser#699

build(deps): bump actions/setup-node from 6.1.0 to 6.2.0 by @dependabot[bot] in expressjs/body-parser#701

build(deps): bump github/codeql-action from 4.31.10 to 4.32.0 by @dependabot[bot] in expressjs/body-parser#702

build(deps): bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in expressjs/body-parser#700

chore: add explicit type commonjs to package.json by @Phillip9587 in expressjs/body-parser#711

deps: update dependencies to latest versions by @Phillip9587 in expressjs/body-parser#708

build(deps): bump actions/download-artifact from 7.0.0 to 8.0.0 by @dependabot[bot] in expressjs/body-parser#712

build(deps): bump github/codeql-action from 4.32.0 to 4.32.4 by @dependabot[bot] in expressjs/body-parser#713

build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 by @dependabot[bot] in expressjs/body-parser#714

fix: improve limit option validation by @Phillip9587 in expressjs/body-parser#698

build(deps): bump github/codeql-action from 4.32.4 to 4.35.1 by @dependabot[bot] in expressjs/body-parser#719

build(deps): bump actions/setup-node from 6.2.0 to 6.3.0 by @dependabot[bot] in expressjs/body-parser#718

build(deps): bump actions/download-artifact from 8.0.0 to 8.0.1 by @dependabot[bot] in expressjs/body-parser#717

perf: eliminate conditional check in json strict mode hot path by @Phillip9587 in expressjs/body-parser#651

ci: add node.js 26 to text matrix by @Phillip9587 in expressjs/body-parser#726

build(deps): bump actions/setup-node from 6.3.0 to 6.4.0 by @dependabot[bot] in expressjs/body-parser#725

build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by @dependabot[bot] in expressjs/body-parser#724

build(deps): bump github/codeql-action from 4.35.1 to 4.35.3 by @dependabot[bot] in expressjs/body-parser#723

Upgrade "content-type" by @blakeembrey in expressjs/body-parser#728

refactor: switch to const/let and enable eslint no-var rule by @Phillip9587 in expressjs/body-parser#729

Update outdated reference to MDN docs by @krzysdz in expressjs/body-parser#730

build(deps): bump github/codeql-action from 4.35.3 to 4.36.1 by @dependabot[bot] in expressjs/body-parser#731

build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in expressjs/body-parser#732

chore: updated deps to latest by @Phillip9587 in expressjs/body-parser#733

2.3.0 by @UlisesGascon in expressjs/body-parser#735

New Contributors

@krzysdz made their first contribution in expressjs/body-parser#730

Full Changelog: expressjs/body-parser@v2.2.2...v2.3.0

v2.2.2

What's Changed

docs: update README links by @efekrskl in expressjs/body-parser#673

docs: release notes for the v1.20.4 release by @Phillip9587 in expressjs/body-parser#674

docs: update URL-encoded parser description to include ISO-8859-1 encoding support by @Phillip9587 in expressjs/body-parser#679

docs: use standard jsdoc tags everywhere by @Phillip9587 in expressjs/body-parser#677

deps: qs@^6.14.1 by @UlisesGascon in expressjs/body-parser#689

refactor(json): simplify strict mode error string construction by @jonchurch in expressjs/body-parser#693

Release: 2.2.2 by @UlisesGascon in expressjs/body-parser#691

... (truncated)

Changelog

Sourced from body-parser's changelog.

2.3.0 / 2026-06-15

fix: use static exports instead of lazy getters to improve ESM compatibility

feat: add subpath exports for individual parsers

fix: improve limit option validation (#698)

Invalid limit values (e.g. unparseable strings or NaN) now throw instead of being silently ignored, which previously disabled size limit enforcement

null and undefined fall back to the default 100kb limit

deps:

content-type@^2.0.0

http-errors@^2.0.1

iconv-lite^0.7.2

qs@^6.15.2

raw-body@^3.0.2

type-is@^2.1.0

2.2.2 / 2026-01-07

deps: qs@^6.14.1

refactor(json): simplify strict mode error string construction

2.2.1 / 2025-11-24

Security fix for GHSA-wqch-xfxh-vrr4

deps:

type-is@^2.0.1

iconv-lite@^0.7.0

Handle split surrogate pairs when encoding UTF-8

Avoid false positives in encodingExists by using prototype-less objects

raw-body@^3.0.1

debug@^4.4.3

2.2.0 / 2025-03-27

refactor: normalize common options for all parsers

deps:

iconv-lite@^0.6.3

2.1.0 / 2025-02-10

deps:

type-is@^2.0.0

debug@^4.4.0

Removed destroy

refactor: prefix built-in node module imports

use the node require cache instead of custom caching

... (truncated)

Commits

d0f2ace 2.3.0 (#735)
7d03f2f chore: updated deps to latest (#733)
8024ba7 build(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#732)
32b4ed4 build(deps): bump github/codeql-action from 4.35.3 to 4.36.1 (#731)
ff0f6b9 docs: update outdated reference to MDN docs (#730)
14d001a refactor: switch to const/let and enable eslint no-var rule (#729)
37f36a2 deps: update content-type and type-is (#728)
e1c244b build(deps): bump github/codeql-action from 4.35.1 to 4.35.3 (#723)
e01087f build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#724)
a7698d3 build(deps): bump actions/setup-node from 6.3.0 to 6.4.0 (#725)
Additional commits viewable in compare view

Updates cors from 2.8.5 to 2.8.6

Release notes

Sourced from cors's releases.

v2.8.6

What's Changed

Build: Node.js@12.16 and Node.js.13.12 by @smondal in expressjs/cors#189

Update README.md for origin function callback parameters by @dstudzinski in expressjs/cors#180

Suggest passing false for disallowed domains, not erroring by @shackpank in expressjs/cors#175

Changed the term whitelist to allowlist in Documentation by @jkasun in expressjs/cors#200

Fix typo in README by @alex-grover in expressjs/cors#207

Added new link & website in the README by @manjunath00 in expressjs/cors#269

Fix functions call with extra parameter by @LuisEGR in expressjs/cors#245

🐛 Fix readme status badge by @homersimpsons in expressjs/cors#306

chore: add support for OSSF scorecard reporting by @inigomarquinez in expressjs/cors#321

ci: fix errors in ci github action for node 8 by @inigomarquinez in expressjs/cors#322

test: improved test robustness by @Alex-GF in expressjs/cors#320

chore: upgrade scorecard workflow pinned action versions by @carpasse in expressjs/cors#341

ci: add CodeQL (SAST) by @bjohansebas in expressjs/cors#340

docs: remove broken link to demo site by @dpopp07 in expressjs/cors#344

OSSF Scorecard recommendations by @UlisesGascon in expressjs/cors#350

build(deps): bump github/codeql-action from 3.24.7 to 3.28.19 by @dependabot[bot] in expressjs/cors#351

build(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 by @dependabot[bot] in expressjs/cors#353

build(deps): bump actions/checkout from 4.1.1 to 4.2.2 by @dependabot[bot] in expressjs/cors#354

build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.2 by @dependabot[bot] in expressjs/cors#355

build(deps-dev): bump express from 4.17.1 to 4.21.2 by @dependabot[bot] in expressjs/cors#356

build(deps): bump actions/upload-artifact from 4.5.0 to 4.6.2 by @dependabot[bot] in expressjs/cors#352

build(deps-dev): bump mocha from 9.1.1 to 9.2.2 by @dependabot[bot] in expressjs/cors#358

update the docs for per request config by @jonchurch in expressjs/cors#338

(fix): readme updated for #271 origin option for * by @dhananjaysa92 in expressjs/cors#289

ci: upgrade Node versions by @UlisesGascon in expressjs/cors#359

chore: add funding to package.json by @bjohansebas in expressjs/cors#363

build(deps): bump github/codeql-action from 3.28.19 to 4.31.2 by @dependabot[bot] in expressjs/cors#371

build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by @dependabot[bot] in expressjs/cors#370

docs: Cleanup README by @efekrskl in expressjs/cors#374

chore: add node v25 by @imangas in expressjs/cors#375

Extend CI test matrix by @imangas in expressjs/cors#376

docs: simplify code examples with header comments by @jonchurch in expressjs/cors#386

docs: tweak intro, add note w/ browser enforcement, FAQ by @jonchurch in expressjs/cors#385

chore: remove HISTORY.md and nonexistent CONTRIBUTING.md from tarball by @Phillip9587 in expressjs/cors#388

Release: 2.8.6 by @UlisesGascon in expressjs/cors#390

New Contributors

@smondal made their first contribution in expressjs/cors#189

@dstudzinski made their first contribution in expressjs/cors#180

@shackpank made their first contribution in expressjs/cors#175

@jkasun made their first contribution in expressjs/cors#200

@alex-grover made their first contribution in expressjs/cors#207

@manjunath00 made their first contribution in expressjs/cors#269

@LuisEGR made their first contribution in expressjs/cors#245

@homersimpsons made their first contribution in expressjs/cors#306

@inigomarquinez made their first contribution in expressjs/cors#321

@Alex-GF made their first contribution in expressjs/cors#320

@carpasse made their first contribution in expressjs/cors#341

... (truncated)

Changelog

Sourced from cors's changelog.

2.8.6 / 2026-01-22

Improve documentation (API, context, examples...)

Remove additional markdown files from tarball

Commits

f00a8c1 2.8.6 (#390)
848e2bd chore: remove HISTORY.md and nonexistent CONTRIBUTING.md from tarball (#388)
cf8947e docs: tweak intro, add note w/ browser enforcement, FAQ (#385)
bbf62a5 docs: simplify code examples with header comments (#386)
f442e77 Extend CI test matrix (#376)
d5cf6cd ci: add support for node@25 (#375)
7e6f7ee docs: revamp content (#374)
b25644c build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#370)
f881e91 build(deps): bump github/codeql-action from 3.28.19 to 4.31.2 (#371)
9a9a760 chore: add funding to package.json (#363)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for cors since your current version.

Updates @types/cors from 2.8.17 to 2.8.19

Commits

See full diff in compare view

Updates express from 4.21.2 to 5.2.1

Release notes

Sourced from express's releases.

v5.2.1

What's Changed

[!IMPORTANT]
The prior release (5.2.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

Release: 5.2.1 by @UlisesGascon in expressjs/express#6933

Full Changelog: expressjs/express@v5.2.0...v5.2.1

v5.2.0

Important: Security

Security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)

What's Changed

build(deps): bump github/codeql-action from 3.28.11 to 3.28.13 by @dependabot[bot] in expressjs/express#6429

Refactor: simplify acceptsLanguages implementation using spread operator by @Ayoub-Mabrouk in expressjs/express#6137

increased code coverage of utils.js file by @ashish3011 in expressjs/express#6386

chore: remove duplicate word by @dufucun in expressjs/express#6456

build(deps): bump github/codeql-action from 3.28.13 to 3.28.16 by @dependabot[bot] in expressjs/express#6498

build(deps): bump actions/setup-node from 4.3.0 to 4.4.0 by @dependabot[bot] in expressjs/express#6497

build(deps): bump actions/download-artifact from 4.2.1 to 4.3.0 by @dependabot[bot] in expressjs/express#6496

ci: add node.js 24 to test matrix by @Phillip9587 in expressjs/express#6504

ci: update codeql config by @Phillip9587 in expressjs/express#6488

chore: wider range for query test skip by @jonchurch in expressjs/express#6512

chore: fix typos in test by @noritaka1166 in expressjs/express#6535

ci: disable credential persistence for checkout actions by @mertssmnoglu in expressjs/express#6522

ci: allow manual triggering of workflow by @shivarm in expressjs/express#6515

test: add coverage for app.listen() variants by @kgarg1 in expressjs/express#6476

docs: move documentation and charters to the discussions and .github … by @bjohansebas in expressjs/express#6427

build(deps): bump github/codeql-action from 3.28.16 to 3.28.18 by @dependabot[bot] in expressjs/express#6549

build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @dependabot[bot] in expressjs/express#6548

chore: enforce explicit Buffer import and add lint rule by @shivarm in expressjs/express#6525

chore: use node protocol for querystring by @shivarm in expressjs/express#6520

chore: fix typo by @mountdisk in expressjs/express#6609

build(deps): bump github/codeql-action from 3.28.18 to 3.29.2 by @dependabot[bot] in expressjs/express#6618

add deprecation warnings for redirect arguments undefined by @bjohansebas in expressjs/express#6405

ci: run CI when the markdown changes by @bjohansebas in expressjs/express#6632

doc: fix CONTRIBUTING link by @jonchurch in expressjs/express#6653

doc: update contributing guidelines and code of conduct links by @ShubhamOulkar in expressjs/express#6601

build(deps-dev): bump morgan from 1.10.0 to 1.10.1 by @dependabot[bot] in expressjs/express#6679

build(deps-dev): bump cookie-session from 2.1.0 to 2.1.1 by @dependabot[bot] in expressjs/express#6678

lint: add --fix flag to automatic fix linting issue by @shivarm in expressjs/express#6644

chore: ignore yarn.lock file and update example by @shivarm in expressjs/express#6588

lib: use req.socket over deprecated req.connection by @bjohansebas in expressjs/express#6705

doc: update express app example by @shivarm in expressjs/express#6718

build(deps): bump github/codeql-action from 3.29.2 to 3.29.5 by @dependabot[bot] in expressjs/express#6675

Remove history.md from being packaged on publish by @sheplu in expressjs/express#6780

... (truncated)

Changelog

Sourced from express's changelog.

5.2.1 / 2025-12-01

Revert security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)

The prior release (5.2.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

5.2.0 / 2025-12-01

Security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)

deps: body-parser@^2.2.1

A deprecation warning was added when using res.redirect with undefined arguments, Express now emits a warning to help detect calls that pass undefined as the status or URL and make them easier to fix.

5.1.0 / 2025-03-31

Add support for Uint8Array in res.send()

Add support for ETag option in res.sendFile()

Add support for multiple links with the same rel in res.links()

Add funding field to package.json

perf: use loop for acceptParams

refactor: prefix built-in node module imports

deps: remove setprototypeof

deps: remove safe-buffer

deps: remove utils-merge

deps: remove methods

deps: remove depd

deps: debug@^4.4.0

deps: body-parser@^2.2.0

deps: router@^2.2.0

deps: content-type@^1.0.5

deps: finalhandler@^2.1.0

deps: qs@^6.14.0

deps: server-static@2.2.0

deps: type-is@2.0.1

5.0.1 / 2024-10-08

Update cookie semver lock to address CVE-2024-47764

5.0.0 / 2024-09-10

remove:

path-is-absolute dependency - use path.isAbsolute instead

breaking:

res.status() accepts only integers, and input must be greater than 99 and less than 1000

will throw a RangeError: Invalid status code: ${code}. Status code must be greater than 99 and less than 1000. for inputs outside this range

will throw a TypeError: Invalid status code: ${code}. Status code must be an integer. for non integer inputs

deps: send@1.0.0

... (truncated)

Commits

dbac741 5.2.1
697547c Revert "sec: security patch for CVE-2024-51999"
4007ad1 Release: 5.2.0 (#6920)
2f64f68 sec: security patch for CVE-2024-51999
ed0ba3f build(deps): bump actions/checkout from 5.0.0 to 6.0.0 (#6928)
8eace46 build(deps): bump github/codeql-action from 4.31.2 to 4.31.6 (#6929)
30bae81 build(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 (#6930)
758d435 deps: body-parser@^2.2.1 (#6922)
77bcd52 docs: update emeritus triagers (#6890)
f33caf1 Nominate to @efekrskl for triage team (#6888)
Additional commits viewable in compare view

Updates @types/express from 4.17.21 to 5.0.6

Commits

See full diff in compare view

Updates nanoid from 3.3.11 to 5.1.16

Release notes

Sourced from nanoid's releases.

5.1.16

Fixed forever loop on negative size (by @spokodev).

5.1.15

Fixed random pool corruption on big ID sizes.

5.1.14

Fixed npm package size regression.

5.1.13

Fixed npm package size regression.

5.1.12

Moved to npm Provenance and Staged Publishing.

5.1.11

Fixed breaking Nano ID by requesting big ID.

5.1.10

Fixed breaking nanoid by requesting big ID (by @alanzabihi).

5.1.9

Fixed npm package size regression.

5.1.8

Made cusatomAlphabet 75% faster (by @saripovdenis).

5.1.7

Added --version to CLI (by @mahmoodhamdi).

Updated nanoid.js for CDN (by @mahmoodhamdi).

Fixed docs (by @mahmoodhamdi).

Fixed customRandom types (by @oguimbal).

5.1.6

Fixed infinite loop on 0 size for customAlphabet.

5.1.5

Fixed latest version on npm after 3.x release.

5.1.4

Fixed latest version on npm after 3.x release.

5.1.3

Fixed React Native support (by @steida).

5.1.2

Fixed module docs.

5.1.1

Fixed opaque types support for non-secure generator.

... (truncated)

Changelog

Sourced from nanoid's changelog.

5.1.16

Fixed forever loop on negative size (by @spokodev).

5.1.15

Fixed random pool corruption on big ID sizes.

5.1.14

Fixed npm package size regression.

5.1.13

Fixed npm package size regression.

5.1.12

Moved to npm Provenance and Staged Publishing.

5.1.11

Fixed breaking Nano ID by requesting big ID.

5.1.10

Fixed breaking Nano ID by requesting big ID (by @alanzabihi).

5.1.9

Fixed npm package size regression.

5.1.8

Made cusatomAlphabet 75% faster (by @saripovdenis).

5.1.7

Added --version to CLI (by @mahmoodhamdi).

Updated nanoid.js for CDN (by @mahmoodhamdi).

Fixed docs (by @mahmoodhamdi).

Fixed customRandom types (by @oguimbal).

5.1.6

Fixed infinite loop on 0 size for customAlphabet.

5.1.5

Fixed latest version on npm after 3.x release.

... (truncated)

Commits

6ccc67b Release 5.1.16 version
6de05d7 fix(non-secure): clamp negative size with a smaller guard (#600)
3925903 Update dependencies
0b69554 Release 5.1.15 version
333c5a0 Backport changelog changes for 3.x
266eb63 Remove debug code
a6a94d3 Do not allow to pollute pool
93fe197 Reduce ID size
e4b7a9a Release 5.1.14 version
6bf3469 Update release action
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for nanoid since your current version.

Updates npm from 10.9.3 to 11.18.0

Release notes

Sourced from npm's releases.

v11.18.0

11.18.0 (2026-06-29)

Features

3021ad6 #9694 arborist: extend replace-registry-host with URL prefix matching (#6110) (#9694) (@github-actions[bot], @u2mejc)

abd8c6b #9677 graduate the linked install strategy from experimental to stable (#9677) (@github-actions[bot], @manzoorwanijk)

9420673 #9662 install-scripts: prune unused allowScripts entries (#9662) (@github-actions[bot], @JamieMagee)

fc9d4c7 #9635 namespace install-script approval commands under npm install-scripts (#9635) (@manzoorwanijk)

073253f #9564 warn when min-release-age blocks an audit fix (#9564) (@github-actions[bot], @JamieMagee)

Bug Fixes

598ffdb #9693 sbom: percent-encode vcs_url qualifier in generated purls (#9693) (@github-actions[bot], @ubeddulla)

05793d0 #9691 output all the required parameters for npm token list (#9691) (@github-actions[bot], @rijildaniel)

cd57139 #9669 arborist: surface undeclared workspaces under the linked strategy (backport release/v11) (#9669) (@manzoorwanijk)

5b6ff9c #9667 reify: report added count for fresh linked installs (#9667) (@github-actions[bot], @manzoorwanijk, @owlstronaut)

8f13beb #9664 query: report logical dep location under linked strategy (#9664) (@github-actions[bot], @manzoorwanijk)

168ba30 #9663 allowScripts: clos...
Description has been truncated

Bumps the npm group with 32 updates in the /server directory: | Package | From | To | | --- | --- | --- | | [@hyperledger/firefly-sdk](https://github.com/hyperledger/firefly-sdk-nodejs) | `1.3.0` | `1.3.3` | | [body-parser](https://github.com/expressjs/body-parser) | `1.20.3` | `2.3.0` | | [cors](https://github.com/expressjs/cors) | `2.8.5` | `2.8.6` | | [@types/cors](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/cors) | `2.8.17` | `2.8.19` | | [express](https://github.com/expressjs/express) | `4.21.2` | `5.2.1` | | [@types/express](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/express) | `4.17.21` | `5.0.6` | | [nanoid](https://github.com/ai/nanoid) | `3.3.11` | `5.1.16` | | [npm](https://github.com/npm/cli) | `10.9.3` | `11.18.0` | | [reflect-metadata](https://github.com/rbuckton/reflect-metadata) | `0.1.14` | `0.2.2` | | [routing-controllers](https://github.com/typestack/routing-controllers) | `0.11.2` | `0.11.3` | | [strip-indent](https://github.com/sindresorhus/strip-indent) | `3.0.0` | `4.1.1` | | [ws](https://github.com/websockets/ws) | `8.18.3` | `8.21.0` | | [@types/ws](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/ws) | `8.5.10` | `8.18.1` | | [@types/body-parser](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/body-parser) | `1.19.5` | `1.19.6` | | [@types/multer](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/multer) | `1.4.11` | `2.2.0` | | [@types/swagger-ui-express](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/swagger-ui-express) | `4.1.6` | `4.1.8` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `5.62.0` | `8.63.0` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `5.62.0` | `8.63.0` | | [eslint](https://github.com/eslint/eslint) | `8.57.0` | `10.6.0` | | [eslint-plugin-import](https://github.com/import-js/eslint-plugin-import) | `2.29.1` | `2.32.0` | | [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) | `26.9.0` | `29.15.4` | | [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `29.7.0` | `30.4.2` | | [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest) | `29.5.12` | `30.0.0` | | [prettier](https://github.com/prettier/prettier) | `2.8.8` | `3.9.4` | | [rimraf](https://github.com/isaacs/rimraf) | `3.0.2` | `6.1.3` | | [supertest](https://github.com/ladjs/supertest) | `6.3.4` | `7.2.2` | | [@types/supertest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/supertest) | `2.0.16` | `7.2.0` | | [swagger-jsdoc](https://github.com/Surnet/swagger-jsdoc) | `6.2.8` | `6.3.0` | | [ts-jest](https://github.com/kulshekhar/ts-jest) | `29.1.2` | `29.4.11` | | [typescript](https://github.com/microsoft/TypeScript) | `4.9.5` | `6.0.3` | | [underscore](https://github.com/jashkenas/underscore) | `1.13.6` | `1.13.8` | | [@types/underscore](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/underscore) | `1.11.15` | `1.13.0` | Bumps the npm group with 33 updates in the /ui directory: | Package | From | To | | --- | --- | --- | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `7.4.0` | `8.63.0` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `7.4.0` | `8.63.0` | | [eslint](https://github.com/eslint/eslint) | `8.57.0` | `10.6.0` | | [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `29.7.0` | `30.4.2` | | [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest) | `29.5.12` | `30.0.0` | | [ts-jest](https://github.com/kulshekhar/ts-jest) | `29.1.2` | `29.4.11` | | [typescript](https://github.com/microsoft/TypeScript) | `5.4.3` | `6.0.3` | | [underscore](https://github.com/jashkenas/underscore) | `1.13.6` | `1.13.8` | | [@types/underscore](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/underscore) | `1.11.15` | `1.13.0` | | [@emotion/react](https://github.com/emotion-js/emotion) | `11.11.4` | `11.14.0` | | [@emotion/styled](https://github.com/emotion-js/emotion) | `11.11.0` | `11.14.1` | | [@mui/icons-material](https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material) | `5.15.14` | `9.2.0` | | [@mui/material](https://github.com/mui/material-ui/tree/HEAD/packages/mui-material) | `5.15.14` | `9.2.0` | | [dayjs](https://github.com/iamkun/dayjs) | `1.11.10` | `1.11.21` | | [i18next](https://github.com/i18next/i18next) | `21.10.0` | `26.3.5` | | [jotai](https://github.com/pmndrs/jotai) | `1.13.1` | `2.20.1` | | [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `18.2.0` | `19.2.7` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `18.2.67` | `19.2.17` | | [react-copy-to-clipboard](https://github.com/nkbt/react-copy-to-clipboard) | `5.1.0` | `5.1.1` | | [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `18.2.0` | `19.2.7` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `18.2.22` | `19.2.3` | | [react-i18next](https://github.com/i18next/react-i18next) | `11.18.6` | `17.0.8` | | [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router) | `6.22.3` | `8.1.0` | | [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `6.22.3` | `7.18.1` | | [react-syntax-highlighter](https://github.com/react-syntax-highlighter/react-syntax-highlighter) | `15.6.1` | `16.1.1` | | [@testing-library/jest-dom](https://github.com/testing-library/jest-dom) | `6.4.2` | `6.9.1` | | [@testing-library/react](https://github.com/testing-library/react-testing-library) | `14.2.2` | `16.3.2` | | [@types/react-syntax-highlighter](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-syntax-highlighter) | `15.5.11` | `15.5.13` | | [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `4.6.0` | `6.0.3` | | [eslint-config-prettier](https://github.com/prettier/eslint-config-prettier) | `9.1.0` | `10.1.8` | | [eslint-plugin-prettier](https://github.com/prettier/eslint-plugin-prettier) | `5.1.3` | `5.5.6` | | [jest-environment-jsdom](https://github.com/jestjs/jest/tree/HEAD/packages/jest-environment-jsdom) | `29.7.0` | `30.4.1` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `7.3.2` | `8.1.3` | Updates `@hyperledger/firefly-sdk` from 1.3.0 to 1.3.3 - [Release notes](https://github.com/hyperledger/firefly-sdk-nodejs/releases) - [Commits](hyperledger-firefly/sdk-nodejs@v1.3.0...v1.3.3) Updates `body-parser` from 1.20.3 to 2.3.0 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@1.20.3...v2.3.0) Updates `cors` from 2.8.5 to 2.8.6 - [Release notes](https://github.com/expressjs/cors/releases) - [Changelog](https://github.com/expressjs/cors/blob/master/HISTORY.md) - [Commits](expressjs/cors@v2.8.5...v2.8.6) Updates `@types/cors` from 2.8.17 to 2.8.19 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/cors) Updates `express` from 4.21.2 to 5.2.1 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.21.2...v5.2.1) Updates `@types/express` from 4.17.21 to 5.0.6 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/express) Updates `nanoid` from 3.3.11 to 5.1.16 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](ai/nanoid@3.3.11...5.1.16) Updates `npm` from 10.9.3 to 11.18.0 - [Release notes](https://github.com/npm/cli/releases) - [Changelog](https://github.com/npm/cli/blob/v11.18.0/CHANGELOG.md) - [Commits](npm/cli@v10.9.3...v11.18.0) Updates `reflect-metadata` from 0.1.14 to 0.2.2 - [Release notes](https://github.com/rbuckton/reflect-metadata/releases) - [Commits](https://github.com/rbuckton/reflect-metadata/commits) Updates `routing-controllers` from 0.11.2 to 0.11.3 - [Release notes](https://github.com/typestack/routing-controllers/releases) - [Changelog](https://github.com/typestack/routing-controllers/blob/develop/CHANGELOG.md) - [Commits](typestack/routing-controllers@v0.11.2...v0.11.3) Updates `strip-indent` from 3.0.0 to 4.1.1 - [Release notes](https://github.com/sindresorhus/strip-indent/releases) - [Commits](sindresorhus/strip-indent@v3.0.0...v4.1.1) Updates `ws` from 8.18.3 to 8.21.0 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.18.3...8.21.0) Updates `@types/ws` from 8.5.10 to 8.18.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/ws) Updates `@types/body-parser` from 1.19.5 to 1.19.6 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/body-parser) Updates `@types/cors` from 2.8.17 to 2.8.19 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/cors) Updates `@types/express` from 4.17.21 to 5.0.6 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/express) Updates `@types/multer` from 1.4.11 to 2.2.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/multer) Updates `@types/swagger-ui-express` from 4.1.6 to 4.1.8 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/swagger-ui-express) Updates `@types/ws` from 8.5.10 to 8.18.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/ws) Updates `@typescript-eslint/eslint-plugin` from 5.62.0 to 8.63.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.63.0/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 5.62.0 to 8.63.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.63.0/packages/parser) Updates `eslint` from 8.57.0 to 10.6.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v8.57.0...v10.6.0) Updates `eslint-plugin-import` from 2.29.1 to 2.32.0 - [Release notes](https://github.com/import-js/eslint-plugin-import/releases) - [Changelog](https://github.com/import-js/eslint-plugin-import/blob/main/CHANGELOG.md) - [Commits](import-js/eslint-plugin-import@v2.29.1...v2.32.0) Updates `eslint-plugin-jest` from 26.9.0 to 29.15.4 - [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases) - [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md) - [Commits](jest-community/eslint-plugin-jest@v26.9.0...v29.15.4) Updates `jest` from 29.7.0 to 30.4.2 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.4.2/packages/jest) Updates `@types/jest` from 29.5.12 to 30.0.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest) Updates `prettier` from 2.8.8 to 3.9.4 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@2.8.8...3.9.4) Updates `rimraf` from 3.0.2 to 6.1.3 - [Changelog](https://github.com/isaacs/rimraf/blob/main/CHANGELOG.md) - [Commits](isaacs/rimraf@v3.0.2...v6.1.3) Updates `supertest` from 6.3.4 to 7.2.2 - [Release notes](https://github.com/ladjs/supertest/releases) - [Commits](forwardemail/supertest@v6.3.4...v7.2.2) Updates `@types/supertest` from 2.0.16 to 7.2.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/supertest) Updates `swagger-jsdoc` from 6.2.8 to 6.3.0 - [Release notes](https://github.com/Surnet/swagger-jsdoc/releases) - [Changelog](https://github.com/Surnet/swagger-jsdoc/blob/master/CHANGELOG.md) - [Commits](Surnet/swagger-jsdoc@v6.2.8...v6.3.0) Updates `ts-jest` from 29.1.2 to 29.4.11 - [Release notes](https://github.com/kulshekhar/ts-jest/releases) - [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md) - [Commits](kulshekhar/ts-jest@v29.1.2...v29.4.11) Updates `typescript` from 4.9.5 to 6.0.3 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v4.9.5...v6.0.3) Updates `underscore` from 1.13.6 to 1.13.8 - [Commits](jashkenas/underscore@1.13.6...1.13.8) Updates `@types/underscore` from 1.11.15 to 1.13.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/underscore) Updates `@typescript-eslint/eslint-plugin` from 7.4.0 to 8.63.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.63.0/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 7.4.0 to 8.63.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.63.0/packages/parser) Updates `eslint` from 8.57.0 to 10.6.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v8.57.0...v10.6.0) Updates `jest` from 29.7.0 to 30.4.2 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.4.2/packages/jest) Updates `@types/jest` from 29.5.12 to 30.0.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest) Updates `ts-jest` from 29.1.2 to 29.4.11 - [Release notes](https://github.com/kulshekhar/ts-jest/releases) - [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md) - [Commits](kulshekhar/ts-jest@v29.1.2...v29.4.11) Updates `typescript` from 5.4.3 to 6.0.3 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v4.9.5...v6.0.3) Updates `underscore` from 1.13.6 to 1.13.8 - [Commits](jashkenas/underscore@1.13.6...1.13.8) Updates `@types/underscore` from 1.11.15 to 1.13.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/underscore) Updates `@emotion/react` from 11.11.4 to 11.14.0 - [Release notes](https://github.com/emotion-js/emotion/releases) - [Changelog](https://github.com/emotion-js/emotion/blob/main/CHANGELOG.md) - [Commits](https://github.com/emotion-js/emotion/compare/@emotion/react@11.11.4...@emotion/react@11.14.0) Updates `@emotion/styled` from 11.11.0 to 11.14.1 - [Release notes](https://github.com/emotion-js/emotion/releases) - [Changelog](https://github.com/emotion-js/emotion/blob/main/CHANGELOG.md) - [Commits](https://github.com/emotion-js/emotion/compare/@emotion/styled@11.11.0...@emotion/styled@11.14.1) Updates `@mui/icons-material` from 5.15.14 to 9.2.0 - [Release notes](https://github.com/mui/material-ui/releases) - [Changelog](https://github.com/mui/material-ui/blob/master/CHANGELOG.md) - [Commits](https://github.com/mui/material-ui/commits/v9.2.0/packages/mui-icons-material) Updates `@mui/material` from 5.15.14 to 9.2.0 - [Release notes](https://github.com/mui/material-ui/releases) - [Changelog](https://github.com/mui/material-ui/blob/master/CHANGELOG.md) - [Commits](https://github.com/mui/material-ui/commits/v9.2.0/packages/mui-material) Updates `dayjs` from 1.11.10 to 1.11.21 - [Release notes](https://github.com/iamkun/dayjs/releases) - [Changelog](https://github.com/iamkun/dayjs/blob/dev/CHANGELOG.md) - [Commits](iamkun/dayjs@v1.11.10...v1.11.21) Updates `i18next` from 21.10.0 to 26.3.5 - [Release notes](https://github.com/i18next/i18next/releases) - [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md) - [Commits](i18next/i18next@v21.10.0...v26.3.5) Updates `jotai` from 1.13.1 to 2.20.1 - [Release notes](https://github.com/pmndrs/jotai/releases) - [Commits](pmndrs/jotai@v1.13.1...v2.20.1) Updates `react` from 18.2.0 to 19.2.7 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react) Updates `@types/react` from 18.2.67 to 19.2.17 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-copy-to-clipboard` from 5.1.0 to 5.1.1 - [Release notes](https://github.com/nkbt/react-copy-to-clipboard/releases) - [Commits](nkbt/react-copy-to-clipboard@v5.1.0...v5.1.1) Updates `react-dom` from 18.2.0 to 19.2.7 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-dom) Updates `@types/react-dom` from 18.2.22 to 19.2.3 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `react-i18next` from 11.18.6 to 17.0.8 - [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md) - [Commits](i18next/react-i18next@v11.18.6...v17.0.8) Updates `react-router` from 6.22.3 to 8.1.0 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/react-router@8.1.0/packages/react-router) Updates `react-router-dom` from 6.22.3 to 7.18.1 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/react-router-dom@7.18.1/packages/react-router-dom/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.18.1/packages/react-router-dom) Updates `react-syntax-highlighter` from 15.6.1 to 16.1.1 - [Release notes](https://github.com/react-syntax-highlighter/react-syntax-highlighter/releases) - [Changelog](https://github.com/react-syntax-highlighter/react-syntax-highlighter/blob/master/CHANGELOG.MD) - [Commits](react-syntax-highlighter/react-syntax-highlighter@v15.6.1...v16.1.1) Updates `@testing-library/jest-dom` from 6.4.2 to 6.9.1 - [Release notes](https://github.com/testing-library/jest-dom/releases) - [Changelog](https://github.com/testing-library/jest-dom/blob/main/CHANGELOG.md) - [Commits](testing-library/jest-dom@v6.4.2...v6.9.1) Updates `@testing-library/react` from 14.2.2 to 16.3.2 - [Release notes](https://github.com/testing-library/react-testing-library/releases) - [Changelog](https://github.com/testing-library/react-testing-library/blob/main/CHANGELOG.md) - [Commits](testing-library/react-testing-library@v14.2.2...v16.3.2) Updates `@types/react` from 18.2.67 to 19.2.17 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@types/react-dom` from 18.2.22 to 19.2.3 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `@types/react-syntax-highlighter` from 15.5.11 to 15.5.13 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-syntax-highlighter) Updates `@vitejs/plugin-react` from 4.6.0 to 6.0.3 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.3/packages/plugin-react) Updates `eslint-config-prettier` from 9.1.0 to 10.1.8 - [Release notes](https://github.com/prettier/eslint-config-prettier/releases) - [Changelog](https://github.com/prettier/eslint-config-prettier/blob/main/CHANGELOG.md) - [Commits](prettier/eslint-config-prettier@v9.1.0...v10.1.8) Updates `eslint-plugin-prettier` from 5.1.3 to 5.5.6 - [Release notes](https://github.com/prettier/eslint-plugin-prettier/releases) - [Changelog](https://github.com/prettier/eslint-plugin-prettier/blob/main/CHANGELOG.md) - [Commits](prettier/eslint-plugin-prettier@v5.1.3...v5.5.6) Updates `jest-environment-jsdom` from 29.7.0 to 30.4.1 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.4.1/packages/jest-environment-jsdom) Updates `vite` from 7.3.2 to 8.1.3 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.1.3/packages/vite) --- updated-dependencies: - dependency-name: "@hyperledger/firefly-sdk" dependency-version: 1.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm - dependency-name: body-parser dependency-version: 2.3.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm - dependency-name: cors dependency-version: 2.8.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm - dependency-name: "@types/cors" dependency-version: 2.8.19 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: express dependency-version: 5.2.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm - dependency-name: "@types/express" dependency-version: 5.0.6 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm - dependency-name: nanoid dependency-version: 5.1.16 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm - dependency-name: npm dependency-version: 11.18.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm - dependency-name: reflect-metadata dependency-version: 0.2.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm - dependency-name: routing-controllers dependency-version: 0.11.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm - dependency-name: strip-indent dependency-version: 4.1.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm - dependency-name: ws dependency-version: 8.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@types/ws" dependency-version: 8.18.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@types/body-parser" dependency-version: 1.19.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: "@types/cors" dependency-version: 2.8.19 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: "@types/express" dependency-version: 5.0.6 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm - dependency-name: "@types/multer" dependency-version: 2.2.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm - dependency-name: "@types/swagger-ui-express" dependency-version: 4.1.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: "@types/ws" dependency-version: 8.18.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.63.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm - dependency-name: "@typescript-eslint/parser" dependency-version: 8.63.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm - dependency-name: eslint dependency-version: 10.6.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm - dependency-name: eslint-plugin-import dependency-version: 2.32.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: eslint-plugin-jest dependency-version: 29.15.4 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm - dependency-name: jest dependency-version: 30.4.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm - dependency-name: "@types/jest" dependency-version: 30.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm - dependency-name: prettier dependency-version: 3.9.4 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm - dependency-name: rimraf dependency-version: 6.1.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm - dependency-name: supertest dependency-version: 7.2.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm - dependency-name: "@types/supertest" dependency-version: 7.2.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm - dependency-name: swagger-jsdoc dependency-version: 6.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: ts-jest dependency-version: 29.4.11 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: typescript dependency-version: 6.0.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm - dependency-name: underscore dependency-version: 1.13.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: "@types/underscore" dependency-version: 1.13.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.63.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm - dependency-name: "@typescript-eslint/parser" dependency-version: 8.63.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm - dependency-name: eslint dependency-version: 10.6.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm - dependency-name: jest dependency-version: 30.4.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm - dependency-name: "@types/jest" dependency-version: 30.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm - dependency-name: ts-jest dependency-version: 29.4.11 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: typescript dependency-version: 6.0.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm - dependency-name: underscore dependency-version: 1.13.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm - dependency-name: "@types/underscore" dependency-version: 1.13.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@emotion/react" dependency-version: 11.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@emotion/styled" dependency-version: 11.14.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@mui/icons-material" dependency-version: 9.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm - dependency-name: "@mui/material" dependency-version: 9.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm - dependency-name: dayjs dependency-version: 1.11.21 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm - dependency-name: i18next dependency-version: 26.3.5 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm - dependency-name: jotai dependency-version: 2.20.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm - dependency-name: react dependency-version: 19.2.7 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm - dependency-name: "@types/react" dependency-version: 19.2.17 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm - dependency-name: react-copy-to-clipboard dependency-version: 5.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm - dependency-name: react-dom dependency-version: 19.2.7 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm - dependency-name: "@types/react-dom" dependency-version: 19.2.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm - dependency-name: react-i18next dependency-version: 17.0.8 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm - dependency-name: react-router dependency-version: 8.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm - dependency-name: react-router-dom dependency-version: 7.18.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm - dependency-name: react-syntax-highlighter dependency-version: 16.1.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm - dependency-name: "@testing-library/jest-dom" dependency-version: 6.9.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@testing-library/react" dependency-version: 16.3.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm - dependency-name: "@types/react" dependency-version: 19.2.17 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm - dependency-name: "@types/react-dom" dependency-version: 19.2.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm - dependency-name: "@types/react-syntax-highlighter" dependency-version: 15.5.13 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: "@vitejs/plugin-react" dependency-version: 6.0.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm - dependency-name: eslint-config-prettier dependency-version: 10.1.8 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm - dependency-name: eslint-plugin-prettier dependency-version: 5.5.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: jest-environment-jsdom dependency-version: 30.4.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm - dependency-name: vite dependency-version: 8.1.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot requested a review from a team as a code owner July 8, 2026 15:43

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 8, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the npm group across 2 directories with 56 updates#149

Bump the npm group across 2 directories with 56 updates#149
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/server/npm-7a1ae13cb6

dependabot Bot commented on behalf of github Jul 8, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 8, 2026

v1.3.3

What's Changed

New Contributors

v1.3.1

What's Changed

v2.3.0

What's Changed

New Contributors

v2.2.2

What's Changed

2.3.0 / 2026-06-15

2.2.2 / 2026-01-07

2.2.1 / 2025-11-24

2.2.0 / 2025-03-27

2.1.0 / 2025-02-10

v2.8.6

What's Changed

New Contributors

2.8.6 / 2026-01-22

v5.2.1

What's Changed

v5.2.0

Important: Security

What's Changed

5.2.1 / 2025-12-01

5.2.0 / 2025-12-01

5.1.0 / 2025-03-31

5.0.1 / 2024-10-08

5.0.0 / 2024-09-10

5.1.16

5.1.15

5.1.14

5.1.13

5.1.12

5.1.11

5.1.10

5.1.9

5.1.8

5.1.7

5.1.6

5.1.5

5.1.4

5.1.3

5.1.2

5.1.1

5.1.16

5.1.15

5.1.14

5.1.13

5.1.12

5.1.11

5.1.10

5.1.9

5.1.8

5.1.7

5.1.6

5.1.5

v11.18.0

11.18.0 (2026-06-29)

Features

Bug Fixes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants