build(deps): bump the npm-non-major group across 1 directory with 21 updates by dependabot[bot] · Pull Request #1560 · chunks-labz/predinex-stellar

dependabot · 2026-11-09T19:28:10Z

Bumps the npm-non-major group with 21 updates in the /web directory:

Package	From	To
@stacks/network	`7.6.0`	`7.7.0`
@stacks/transactions	`7.6.0`	`7.7.0`
@tanstack/react-query	`5.103.2`	`5.106.1`
lucide-react	`1.48.0`	`1.70.0`
next	`16.3.6`	`16.4.5`
react	`19.3.0`	`19.3.1`
react-dom	`19.3.0`	`19.3.1`
viem	`2.56.9`	`2.57.16`
@axe-core/react	`4.13.0`	`4.14.0`
@playwright/test	`1.63.0`	`1.65.0`
@stacks/encryption	`7.6.0`	`7.7.0`
@tailwindcss/postcss	`4.3.3`	`4.3.5`
@testing-library/user-event	`14.6.7`	`14.6.8`
@types/node	`26.6.2`	`26.6.6`
@vitejs/plugin-react	`6.1.1`	`6.2.1`
axe-core	`4.13.0`	`4.14.0`
eslint	`10.11.0`	`10.14.0`
eslint-config-next	`16.3.6`	`16.4.5`
pino-pretty	`13.1.3`	`13.2.0`
tailwindcss	`4.3.3`	`4.3.5`
typescript-eslint	`8.70.1`	`8.72.1`

Updates @stacks/network from 7.6.0 to 7.7.0

Release notes

Sourced from @stacks/network's releases.

@stacks/network@7.7.0

Patch Changes

#1882 dd6a2ff - Remove unused cross-fetch dependency from @stacks/network and @stacks/auth. Neither package has imported it since v7; network calls rely on the global fetch via @stacks/common.

Updated dependencies []:

@stacks/common@7.7.0

Changelog

Sourced from @stacks/network's changelog.

7.7.0 (2026-10-27)

@stacks/api, @stacks/bitcoin-staking, @stacks/bns, @stacks/common, @stacks/encryption, @stacks/internal, @stacks/profile, @stacks/stacking, @stacks/storage, @stacks/wallet-sdk

Note: Updated sibling dependencies only.

@stacks/auth, @stacks/network

Patch Changes

#1882 dd6a2ff - Remove unused cross-fetch dependency from @stacks/network and @stacks/auth. Neither package has imported it since v7; network calls rely on the global fetch via @stacks/common.

@stacks/cli

Minor Changes

#1890 d10d71d - Replace the legacy blockstack dependency with Stacks packages.

#1879 e6084a5 - Use the /extended/v3/principals/{principal}/balances/stx endpoint for the stacking balance check instead of the deprecated /extended/v1/address/{address}/balances. The stack command now compares the stacking amount against the spendable (unlocked) balance rather than the total balance.

@stacks/transactions

Minor Changes

#1888 f8d95c5 - Allow Pc.principal(…).willSendEq(…).ft() to take a single fully-qualified asset name (<contract-address>.<contract-name>::<token-name>) as an alternative to the contract id and token name pair. Malformed ft asset names now throw instead of serializing a truncated asset.

#1879 e6084a5 - Replace the deprecated /extended/v1/address/{address}/nonces endpoint with /extended/v3/principals/{principal}/nonces in fetchNonce. The function's signature and return value are unchanged.

Patch Changes

#1857 f95f2bb - Remove lodash.clonedeep dependency in favor of native structuredClone; fixes ESM bundling error "default is not exported by lodash.clonedeep" (#1782). Requires Node.js 17+ or a browser with structuredClone.

Commits

9df41fb chore: version packages (#1883)
f8d95c5 feat: Allow asset id string overload for ft post-condition (#1888)
c263879 docs: fix root readme links, badges, and package list (#1887)
e6084a5 fix: migrate balance and nonce api calls from v1 to v3 (#1879)
d10d71d chore(cli): remove blockstack dependency (#1890)
fdbe4bd chore: update dependencies to fix audit vulnerabilities (#1880)
e270c61 chore: fix critical npm audit vulnerabilities and drop blockchain-api-client ...
22d07bc chore: add pre commit signed check (#1853)
05be4fb chore: remove unused dependencies, dead files, and internal exports found by ...
f95f2bb fix: Remove lodash dependency, requires Node.js 17+ (#1857)
Additional commits viewable in compare view

Updates @stacks/transactions from 7.6.0 to 7.7.0

Release notes

Sourced from @stacks/transactions's releases.

@stacks/transactions@7.7.0

Minor Changes

#1888 f8d95c5 - Allow Pc.principal(…).willSendEq(…).ft() to take a single fully-qualified asset name (<contract-address>.<contract-name>::<token-name>) as an alternative to the contract id and token name pair. Malformed ft asset names now throw instead of serializing a truncated asset.

#1879 e6084a5 - Replace the deprecated /extended/v1/address/{address}/nonces endpoint with /extended/v3/principals/{principal}/nonces in fetchNonce. The function's signature and return value are unchanged.

Patch Changes

#1857 f95f2bb - Remove lodash.clonedeep dependency in favor of native structuredClone; fixes ESM bundling error "default is not exported by lodash.clonedeep" (#1782). Requires Node.js 17+ or a browser with structuredClone.

Updated dependencies [dd6a2ff]:

@stacks/network@7.7.0

@stacks/common@7.7.0

Changelog

Sourced from @stacks/transactions's changelog.

7.7.0 (2026-10-27)

@stacks/api, @stacks/bitcoin-staking, @stacks/bns, @stacks/common, @stacks/encryption, @stacks/internal, @stacks/profile, @stacks/stacking, @stacks/storage, @stacks/wallet-sdk

Note: Updated sibling dependencies only.

@stacks/auth, @stacks/network

Patch Changes

#1882 dd6a2ff - Remove unused cross-fetch dependency from @stacks/network and @stacks/auth. Neither package has imported it since v7; network calls rely on the global fetch via @stacks/common.

@stacks/cli

Minor Changes

#1890 d10d71d - Replace the legacy blockstack dependency with Stacks packages.

#1879 e6084a5 - Use the /extended/v3/principals/{principal}/balances/stx endpoint for the stacking balance check instead of the deprecated /extended/v1/address/{address}/balances. The stack command now compares the stacking amount against the spendable (unlocked) balance rather than the total balance.

@stacks/transactions

Minor Changes

#1888 f8d95c5 - Allow Pc.principal(…).willSendEq(…).ft() to take a single fully-qualified asset name (<contract-address>.<contract-name>::<token-name>) as an alternative to the contract id and token name pair. Malformed ft asset names now throw instead of serializing a truncated asset.

#1879 e6084a5 - Replace the deprecated /extended/v1/address/{address}/nonces endpoint with /extended/v3/principals/{principal}/nonces in fetchNonce. The function's signature and return value are unchanged.

Patch Changes

#1857 f95f2bb - Remove lodash.clonedeep dependency in favor of native structuredClone; fixes ESM bundling error "default is not exported by lodash.clonedeep" (#1782). Requires Node.js 17+ or a browser with structuredClone.

Commits

9df41fb chore: version packages (#1883)
f8d95c5 feat: Allow asset id string overload for ft post-condition (#1888)
c263879 docs: fix root readme links, badges, and package list (#1887)
e6084a5 fix: migrate balance and nonce api calls from v1 to v3 (#1879)
d10d71d chore(cli): remove blockstack dependency (#1890)
fdbe4bd chore: update dependencies to fix audit vulnerabilities (#1880)
e270c61 chore: fix critical npm audit vulnerabilities and drop blockchain-api-client ...
22d07bc chore: add pre commit signed check (#1853)
05be4fb chore: remove unused dependencies, dead files, and internal exports found by ...
f95f2bb fix: Remove lodash dependency, requires Node.js 17+ (#1857)
Additional commits viewable in compare view

Updates @tanstack/react-query from 5.103.2 to 5.106.1

Release notes

Sourced from @tanstack/react-query's releases.

@tanstack/react-query-devtools@5.106.1

Patch Changes

#12528 c4ed956 - fix({query,react-query,preact-query}-devtools): always render the devtools left-to-right regardless of the page direction or browser language

Updated dependencies [c4ed956]:

@tanstack/query-devtools@5.106.1

@tanstack/react-query@5.106.1

@tanstack/react-query-next-experimental@5.106.1

Patch Changes

Updated dependencies []:

@tanstack/react-query@5.106.1

@tanstack/react-query-persist-client@5.106.1

Patch Changes

Updated dependencies []:

@tanstack/query-persist-client-core@5.106.1

@tanstack/react-query@5.106.1

@tanstack/react-query@5.106.1

Patch Changes

Updated dependencies []:

@tanstack/query-core@5.106.1

@tanstack/react-query-devtools@5.106.0

Patch Changes

#12499 46d0477 - Let inline devtools panels fill their container height while keeping a 500px default height when the container has no set height.

Updated dependencies [46d0477, f69b28a, 1176d37, 254350f]:

@tanstack/query-devtools@5.106.0

@tanstack/react-query@5.106.0

@tanstack/react-query-next-experimental@5.106.0

Patch Changes

Updated dependencies []:

@tanstack/react-query@5.106.0

@tanstack/react-query-persist-client@5.106.0

Patch Changes

Updated dependencies []:

@tanstack/query-persist-client-core@5.106.0

@tanstack/react-query@5.106.0

@tanstack/react-query@5.106.0

Patch Changes

... (truncated)

Changelog

Sourced from @tanstack/react-query's changelog.

5.106.1

Patch Changes

Updated dependencies []:

@tanstack/query-core@5.106.1

5.106.0

Patch Changes

Updated dependencies []:

@tanstack/query-core@5.106.0

5.105.3

Patch Changes

Updated dependencies [3f4de1b, 969e580]:

@tanstack/query-core@5.105.3

5.105.2

Patch Changes

#12230 1e1caa5 - Update the observer options before subscribing so revealing an <Activity> tree whose query key changed while hidden no longer fetches the previous key.

#12480 8d0dc27 - Exclude status from the filters accepted by QueryClient.isMutating, useIsMutating, and injectIsMutating. These APIs always count mutations with status: 'pending'.

Updated dependencies [2ee2fd9, 8d0dc27, e69cac6, f2215d2, 86e7957, b6576b3, af0e0ef, 05d9b6a]:

@tanstack/query-core@5.105.2

5.105.1

Patch Changes

#11373 7ccba6e - fix({react,preact,angular,solid,vue}-query/infiniteQueryOptions): correct the overload selected for a possibly-undefined 'initialData'

#12390 18e54bf - Exclude fetchStatus from the filters accepted by QueryClient.isFetching, useIsFetching, and injectIsFetching. These APIs always count queries with fetchStatus: 'fetching'.

Updated dependencies [6f8a48d, 18e54bf]:

@tanstack/query-core@5.105.1

5.105.0

Patch Changes

Updated dependencies []:

@tanstack/query-core@5.105.0

5.104.5

... (truncated)

Commits

284abac ci: Version Packages (#12526)
925168e ci: Version Packages (#12501)
7bf1e0f ci: Version Packages (#12498)
3f4de1b fix(query-core): skip pausing cancelled retries (#11537)
d6b2b64 ci: Version Packages (#12476)
8d0dc27 fix(query-core): exclude status from mutation count filters (#12480)
1e1caa5 fix({react,preact}-query): set the observer options before subscribing (#12230)
a6be1ce ci: Version Packages (#12391)
979695d docs({react,preact,angular,solid,svelte,vue}-query): describe when the 'Defin...
7ccba6e fix({react,preact,angular,solid,vue}-query/infiniteQueryOptions): correct the...
Additional commits viewable in compare view

Updates lucide-react from 1.48.0 to 1.70.0

Release notes

Sourced from lucide-react's releases.

Version 1.70.0

What's Changed

fix(site): fix vercel.json redirects that land on 404 by @ericfennis in lucide-icons/lucide#5157

feat(icons): added square-dashed-search icon by @domarku in lucide-icons/lucide#5119

fix(lucide-react-native): emit runtime files for alias icon subpaths by @tlq5l in lucide-icons/lucide#5055

feat(icons): added moped icon by @jamiemlaw in lucide-icons/lucide#3373

feat(icons): added user-exclamation-point, user-round-exclamation-point icons by @ericfennis in lucide-icons/lucide#5144

feat(icons): added grid-3x3-off icon by @gridalchemy in lucide-icons/lucide#5071

New Contributors

@domarku made their first contribution in lucide-icons/lucide#5119

@tlq5l made their first contribution in lucide-icons/lucide#5055

@gridalchemy made their first contribution in lucide-icons/lucide#5071

Full Changelog: lucide-icons/lucide@1.69.0...1.70.0

Version 1.69.0

What's Changed

feat(icons): added package-pen icon by @ericfennis in lucide-icons/lucide#5154

feat(icons): added package-question-mark icon by @ericfennis in lucide-icons/lucide#5155

feat(icons): added opacity icon by @ilyavred in lucide-icons/lucide#4222

feat(icons): added circle-fading-check icon by @n2duc in lucide-icons/lucide#4089

New Contributors

@ilyavred made their first contribution in lucide-icons/lucide#4222

@n2duc made their first contribution in lucide-icons/lucide#4089

Full Changelog: lucide-icons/lucide@1.68.0...1.69.0

Version 1.68.0

What's Changed

fix(site): keep sponsor tiers within content width by @ffgenius in lucide-icons/lucide#5149

feat(icons): added mango icon by @Prsenapati09 in lucide-icons/lucide#4902

chore(icons): Renamed *-warning and *-alert to *-exclamation-point by @ericfennis in lucide-icons/lucide#5143

New Contributors

@ffgenius made their first contribution in lucide-icons/lucide#5149

@Prsenapati09 made their first contribution in lucide-icons/lucide#4902

Full Changelog: lucide-icons/lucide@1.67.0...1.68.0

Version 1.67.0

What's Changed

feat(site): Add sponsor page by @ericfennis in lucide-icons/lucide#5132

fix(icons): changed chef-hat icon by @karsa-mistmere in lucide-icons/lucide#4577

fix(icons): changed (circle|square)-letter-j by @karsa-mistmere in lucide-icons/lucide#5138

feat(icons): added globe-ban icon by @PrimeTestLab in lucide-icons/lucide#5020

chore(deps): bump playwright to 1.64.1 to support ubuntu 26.04 runners by @ericfennis in lucide-icons/lucide#5140

chore(deps): bump the svelte-deps group across 1 directory with 3 updates by @dependabot[bot] in lucide-icons/lucide#5139

feat(icons): added diagram-flow-horizontal, diagram-flow-vertical icons by @karsa-mistmere in lucide-icons/lucide#5125

... (truncated)

Commits

b196797 Update deps (#5146)
588113e test(build-icons): cover Windows file URL imports (#4862)
14cab02 feat(site): Add sponsor page (#5132)
1668a0c chore(deps): bump rollup to 4.65.1 and keep typescript on v6 (#5110)
e8f86fc fix(lucide-react): ignore stale DynamicIcon loads after the name changes (#5060)
6657faa chore(deps-dev): bump vite from 8.3.2 to 8.3.3 (#5052)
1802f33 feat(lucide-react): add package exports for per-icon imports without changing...
20aef31 chore(packages): Update sponsors (#5034)
fa238cf chore(deps): bump the react-deps group across 1 directory with 2 updates (#5026)
3f1255e chore(deps-dev): bump @vitejs/plugin-react (#4995)
Additional commits viewable in compare view

Updates next from 16.3.6 to 16.4.5

Release notes

Sourced from next's releases.

v16.4.5

This release contains security fixes for the following advisories:

Moderate

Cross-tenant sensitive information disclosure in Next.js 'use cache' when called through unstable_cache

Cache leak across root param values in nested 'use cache' functions (follow-up)

Cache poisoning of shared fallback shells in Cache Components via request-supplied placeholder route params

Cross-user cache disclosure and poisoning in Next.js use cache with binary arguments

Cross-client response injection and disclosure in self-hosted Next.js applications forwarding fetched responses

SVG rejection bypass in Next.js image optimization

HttpOnly cookie exposure through internal response header on Next.js Edge runtime routes

v16.4.4

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary. The announced security released for November will be published tomorrow.

Core Changes

[lts-active] test: disable the reads fallback params after a client navigation deployment test (#100668)

[lts-active] Reload on missed Turbopack startup CSS updates (#100619)

[lts-active] Revert "Optimize strict module factory chunks (#98421)" (#100866)

[lts-active] Emit the Turbopack shared-runtime bootstrap in the PPR resume so it gets the CSP nonce (#100907)

[lts-active] [ci] Pin deploy test deployments to Node.js 22.x (#100886)

[lts-active] fix(analyze): use route summaries as the analyzer route index (#100974)

[lts-active] Use fast-jwt instead of jsonwebtoken (#100885)

Credits

Huge thanks to @icyJoseph, @mischnic, @wbinnssmith, @lukesandberg, and @eps1lon for helping!

v16.4.3

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

[lts-active] Fix extensionless Google font URLs in both bundlers (#100277)

[lts-active] Don't load the app-page runtime in proxy.ts (#100423)

[lts-active] Revert "Turbopack: loader change invalidation (#95732)" (#100438)

[lts-active][cd] Gate release bot credentials behind GitHub environments (#100123)

[lts-active] test: Pin react-virtualized (#100545)

[lts-active][cd] Move release un-draft to a follow-up job in bot-autonomous (#100572)

[lts-active] Keep OpenTelemetry request traces together (#100349, #100294, #100324, #100350, #100552, #100583) (#100542)

[lts-active] Avoid loading standalone React in server bootstrap (#100610)

Credits

Huge thanks to @mischnic, @lukesandberg, @acdlite, @eps1lon, and @sokra for helping!

... (truncated)

Commits

4e5335a v16.4.5
809be72 [lts-active] Strip internal middleware cookie headers from edge responses (#282)
2842833 [lts-active] Fix stale compressed framing for forwarded fetch responses (#281)
6596840 [lts-active] [use cache] Fix cache key when binary args are used (#280)
18eeffb [lts-active] Fix shared shell poisoning from request-supplied placeholder par...
e66e656 [lts-active] [next/image] Fix false-positive AVIF/HEIC detection (#278)
d605874 [lts-active] Fix unstable_cache leaking cold 'use cache' fills across roo...
80c96ed [lts-active] Fix outer 'use cache' entries reused across root param values ...
b175f52 v16.4.4
ba4a4c1 [lts-active] Use fast-jwt instead of jsonwebtoken (#100885)
Additional commits viewable in compare view

Updates react from 19.3.0 to 19.3.1

Release notes

Sourced from react's releases.

19.3.1 (October 14th, 2026)

React Server Components

Improve transport protocol (#37845 by @unstubbable and @eps1lon)

Commits

61aa00d [19.3.x][Flight] Improve transport protocol (#37845)
See full diff in compare view

Updates react-dom from 19.3.0 to 19.3.1

Release notes

Sourced from react-dom's releases.

19.3.1 (October 14th, 2026)

React Server Components

Improve transport protocol (#37845 by @unstubbable and @eps1lon)

Commits

61aa00d [19.3.x][Flight] Improve transport protocol (#37845)
See full diff in compare view

Updates viem from 2.56.9 to 2.57.16

Release notes

Sourced from viem's releases.

viem@2.57.16

Patch Changes

#5395 c60ca26e030706610bcf61689331008a30a3db2a Thanks @jxom! - viem/tempo: gatewayActions paid in the Gateway currency the Client account held most of, threw Gateway.InsufficientFundsError (with the account's balances) when it couldn't pay, and explained how to pay in Gateway.PaymentRequiredError.

#5392 9348d386a9f62fd6713124e25360d6040e4a34cf Thanks @gakonst! - Stopped retrying JSON-RPC method-not-found (-32601) and method-not-supported (-32004) errors from non-2xx HTTP responses, since a retry gets the same refusal.

#5392 9348d386a9f62fd6713124e25360d6040e4a34cf Thanks @gakonst! - Reduced per-request overhead of the http, webSocket and ipc transports by building the onFetchRequest Request only when the hook is set and the TimeoutError only when a request times out, and fetched the withdrawal receipt once in the ZKsync finalizeWithdrawal and isWithdrawalFinalized actions.

#5392 9348d386a9f62fd6713124e25360d6040e4a34cf Thanks @gakonst! - Cached signature hashes in toSignatureHash, so selector lookups in decodeFunctionData, decodeEventLog, decodeErrorResult and encodeFunctionData no longer hash every ABI item on each call.

#5391 721d6824516514195c0a98971731c6d81b2f9032 Thanks @jxom! - viem/tempo: Added experimental Gateway and gatewayActions (client.ai, client.bucket, client.compute, client.kv), with standalone Actions.ai, Actions.bucket, Actions.compute, and Actions.kv, with client.gateway.getCapabilities, Actions.gateway.getCapabilities and defaults for every option (gatewayActions()), for wallet-paid inference (including streamed text), object storage, metered and streamed CPU and GPU compute, and key-value state on a Tempo Gateway paid with a local Client account through the optional mppx peer dependency, with Tempo Wallet through the Accounts SDK, or with an app-supplied payment-aware fetch.

viem@2.57.15

Patch Changes

#5339 a864b864b8b9031d970910fb8247471924d09280 Thanks @mortezashojaei! - Fixed getAbiItem to throw AbiItemAmbiguityError for overloads that JavaScript cannot distinguish, such as bytes vs bytes32, uint256 vs int256, and uint256[] vs uint256[2], while resolving distinguishable values by byte length and integer range.

#5321 af062571382ec3631cf1901aeda9b58a87c8fad5 Thanks @evanaronson! - Removed a trailing slash to the ZKsync explorer URL.

#5358 179a53682d9bf2ac2b7a65a86ec312fca0c7c9a8 Thanks @Turkchain1919! - Added Turkchain Mainnet (Chain ID: 1919) to the supported chains.

#5375 bb12b94649962cd7f03c339c226399c614b49805 Thanks @jxom! - Fixed decodeEventLog and parseEventLogs to decode anonymous event logs when eventName names the event or every event in abi is anonymous, as with getLogs and watchEvent given a single anonymous event.

#5364 8f2a79ba8b4d235a24c4c101f4ef04a824c3e429 Thanks @jxom! - ccip: Applied the HTTP transport timeout (including its override) and 10 MiB response cap to CCIP-Read gateway requests, refused non-HTTP(S) gateway URLs (including data: URLs, which previously worked), and limited one lookup to 4 nested callbacks, 4 nested local batches, 256 gateway requests and 16 concurrent requests.

#5372 f32ef6c41e623683b99989422eac7ac6cea5c107 Thanks @jxom! - Fixed estimateGas and estimateContractGas returning a gas limit filled by eth_fillTransaction that ignored blockNumber, blockTag, and stateOverride.

#5360 41801d827e339b96d1b4dd775f4dd379f17cc610 Thanks @jxom! - Raised the default expiring nonce validBefore from 25 to 270 seconds, capped Relay.feePayer expiring nonce windows at 300 seconds, added Transaction.expiringNonceMaxExpiry, and replaced the random expiring nonce validAfter with a random nonce discriminator.

#5360 41801d827e339b96d1b4dd775f4dd379f17cc610 Thanks @jxom! - Fixed sponsored prepareTransactionRequest fills keeping a requested feeToken that the fee payer did not sign, which made the fee payer signature invalid.

#5378 cbdd61078378012368464c9b0e4a76804a5ea987 Thanks @mmv08! - Fixed fillTransaction and prepareTransactionRequest returning gasPrice next to EIP-1559 fees on Anvil, which made estimateGas and sendTransaction fail on Anvil 1.8.5 and later with "both gasPrice and (maxFeePerGas or maxPriorityFeePerGas) specified".

#5346 7156f80f77c47c0a3f9df479b0a6e856029edb3b Thanks @KieranAltman! - Updated HashKey Chain and HashKey Chain Testnet display names, native currency name, and block explorer URLs.

#5373 ddc2d365d093793f9d8f5818743f169c98eed8d7 Thanks @jxom! - Added an optional nonce to NonceManager reset parameters, which sendTransaction and sendTransactionSync now set to the consumed nonce when a send fails after consume returned.

#5371 035c519b6b6b3f179fa741953751a501f05132a2 Thanks @jxom! - Fixed parseTransaction to accept an EIP-7702 authorization yParity from 2 to 255 so a serialized transaction parses back, and made recoverAuthorizationAddress throw InvalidYParityError (and verifyAuthorization return false) for a yParity other than 0 or 1, which EIP-7702 treats as having no authority.

#5318 57db085e896dfee3a3387fb7573bf7f7ebc6170d Thanks @jxom! - Fixed parseTransaction not raising TipAboveFeeCapError when the encoded maxFeePerGas is zero.

#5377 42c41ca3c42792e56a2e1f64d3007c28adc9fbba Thanks @mmv08! - Fixed sendTransactionSync and writeContractSync failing at once and freeing the nonce when the node had accepted the transaction but stopped waiting for its receipt (eth_sendRawTransactionSync error code 4), even if the error had no transaction hash, and stopped fallback from sending that transaction to the next node.

#5388 141f8c0ed7f5fdeafbfc514131781638e9340bd9 Thanks @jxom! - Added Account.serialize and Account.deserialize to viem/tempo, which store a configurable account (TIP-1107) as JSON and rebuild it with passkey owners that sign, and Account.AddressMismatchError for a version-zero config that does not derive the stored address. Added a keyAuthorization option to access key accounts, which attaches a signed key authorization to the account's transactions until the chain registers the access key.

#5318 57db085e896dfee3a3387fb7573bf7f7ebc6170d Thanks @jxom! - Fixed maxPriorityFeePerGas above a maxFeePerGas of 0n not raising TipAboveFeeCapError or MaxFeePerGasTooLowError (including in actions that validate requests before calling the node, such as call and estimateGas), and fixed fee error messages dropping 0n values.

#5370 18b6b9041ef9d19421d182e6b0ca4b1caf5be09e Thanks @jxom! - Fixed validateTypedData (and so hashTypedData and signTypedData) accepting field types that are not EIP-712 types, such as uint7, uint264, uint08, int0 or bytes0, and field types that reference a struct missing from types, including in structs only referenced as array elements; it now throws InvalidTypedDataTypeError.

... (truncated)

Commits

98aa491 chore: raise viem/ens size limit (#5398)
71241b2 chore: version package (#5393)
e1329c9 fix(tempo): check Gateway chain and refresh balances before payment errors (#...
c60ca26 feat(tempo): fund-a...
Description has been truncated

…updates Bumps the npm-non-major group with 21 updates in the /web directory: | Package | From | To | | --- | --- | --- | | [@stacks/network](https://github.com/stx-labs/stacks.js) | `7.6.0` | `7.7.0` | | [@stacks/transactions](https://github.com/stx-labs/stacks.js) | `7.6.0` | `7.7.0` | | [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.103.2` | `5.106.1` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.48.0` | `1.70.0` | | [next](https://github.com/vercel/next.js) | `16.3.6` | `16.4.5` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.3.0` | `19.3.1` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.3.0` | `19.3.1` | | [viem](https://github.com/wevm/viem) | `2.56.9` | `2.57.16` | | [@axe-core/react](https://github.com/dequelabs/axe-core-npm) | `4.13.0` | `4.14.0` | | [@playwright/test](https://github.com/microsoft/playwright) | `1.63.0` | `1.65.0` | | [@stacks/encryption](https://github.com/stx-labs/stacks.js) | `7.6.0` | `7.7.0` | | [@tailwindcss/postcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss) | `4.3.3` | `4.3.5` | | [@testing-library/user-event](https://github.com/testing-library/user-event) | `14.6.7` | `14.6.8` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.2` | `26.6.6` | | [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.1.1` | `6.2.1` | | [axe-core](https://github.com/dequelabs/axe-core) | `4.13.0` | `4.14.0` | | [eslint](https://github.com/eslint/eslint) | `10.11.0` | `10.14.0` | | [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.3.6` | `16.4.5` | | [pino-pretty](https://github.com/pinojs/pino-pretty) | `13.1.3` | `13.2.0` | | [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.3.3` | `4.3.5` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.70.1` | `8.72.1` | Updates `@stacks/network` from 7.6.0 to 7.7.0 - [Release notes](https://github.com/stx-labs/stacks.js/releases) - [Changelog](https://github.com/stx-labs/stacks.js/blob/main/CHANGELOG.md) - [Commits](https://github.com/stx-labs/stacks.js/compare/@stacks/common@7.6.0...@stacks/network@7.7.0) Updates `@stacks/transactions` from 7.6.0 to 7.7.0 - [Release notes](https://github.com/stx-labs/stacks.js/releases) - [Changelog](https://github.com/stx-labs/stacks.js/blob/main/CHANGELOG.md) - [Commits](https://github.com/stx-labs/stacks.js/compare/@stacks/common@7.6.0...@stacks/transactions@7.7.0) Updates `@tanstack/react-query` from 5.103.2 to 5.106.1 - [Release notes](https://github.com/TanStack/query/releases) - [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md) - [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.106.1/packages/react-query) Updates `lucide-react` from 1.48.0 to 1.70.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.70.0/packages/lucide-react) Updates `next` from 16.3.6 to 16.4.5 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.3.6...v16.4.5) Updates `react` from 19.3.0 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react) Updates `react-dom` from 19.3.0 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom) Updates `viem` from 2.56.9 to 2.57.16 - [Release notes](https://github.com/wevm/viem/releases) - [Commits](https://github.com/wevm/viem/compare/viem@2.56.9...viem@2.57.16) Updates `@axe-core/react` from 4.13.0 to 4.14.0 - [Release notes](https://github.com/dequelabs/axe-core-npm/releases) - [Changelog](https://github.com/dequelabs/axe-core-npm/blob/develop/CHANGELOG.md) - [Commits](dequelabs/axe-core-npm@v4.13.0...v4.14.0) Updates `@playwright/test` from 1.63.0 to 1.65.0 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.63.0...v1.65.0) Updates `@stacks/encryption` from 7.6.0 to 7.7.0 - [Release notes](https://github.com/stx-labs/stacks.js/releases) - [Changelog](https://github.com/stx-labs/stacks.js/blob/main/CHANGELOG.md) - [Commits](https://github.com/stx-labs/stacks.js/compare/@stacks/encryption@7.6.0...@stacks/encryption@7.7.0) Updates `@tailwindcss/postcss` from 4.3.3 to 4.3.5 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.5/packages/@tailwindcss-postcss) Updates `@testing-library/user-event` from 14.6.7 to 14.6.8 - [Release notes](https://github.com/testing-library/user-event/releases) - [Changelog](https://github.com/testing-library/user-event/blob/main/CHANGELOG.md) - [Commits](testing-library/user-event@v14.6.7...v14.6.8) Updates `@types/node` from 26.6.2 to 26.6.6 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@vitejs/plugin-react` from 6.1.1 to 6.2.1 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.2.1/packages/plugin-react) Updates `axe-core` from 4.13.0 to 4.14.0 - [Release notes](https://github.com/dequelabs/axe-core/releases) - [Changelog](https://github.com/dequelabs/axe-core/blob/develop/CHANGELOG.md) - [Commits](dequelabs/axe-core@v4.13.0...v4.14.0) Updates `eslint` from 10.11.0 to 10.14.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.11.0...v10.14.0) Updates `eslint-config-next` from 16.3.6 to 16.4.5 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v16.4.5/packages/eslint-config-next) Updates `pino-pretty` from 13.1.3 to 13.2.0 - [Release notes](https://github.com/pinojs/pino-pretty/releases) - [Commits](pinojs/pino-pretty@v13.1.3...v13.2.0) Updates `tailwindcss` from 4.3.3 to 4.3.5 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.5/packages/tailwindcss) Updates `typescript-eslint` from 8.70.1 to 8.72.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.1/packages/typescript-eslint) --- updated-dependencies: - dependency-name: "@stacks/network" dependency-version: 7.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-non-major - dependency-name: "@stacks/transactions" dependency-version: 7.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-non-major - dependency-name: "@tanstack/react-query" dependency-version: 5.106.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-non-major - dependency-name: lucide-react dependency-version: 1.70.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-non-major - dependency-name: next dependency-version: 16.4.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-non-major - dependency-name: react dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-non-major - dependency-name: react-dom dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-non-major - dependency-name: viem dependency-version: 2.57.16 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-non-major - dependency-name: "@axe-core/react" dependency-version: 4.14.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-non-major - dependency-name: "@playwright/test" dependency-version: 1.65.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-non-major - dependency-name: "@stacks/encryption" dependency-version: 7.7.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-non-major - dependency-name: "@tailwindcss/postcss" dependency-version: 4.3.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-non-major - dependency-name: "@testing-library/user-event" dependency-version: 14.6.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-non-major - dependency-name: "@types/node" dependency-version: 26.6.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-non-major - dependency-name: "@vitejs/plugin-react" dependency-version: 6.2.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-non-major - dependency-name: axe-core dependency-version: 4.14.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-non-major - dependency-name: eslint dependency-version: 10.14.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-non-major - dependency-name: eslint-config-next dependency-version: 16.4.5 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-non-major - dependency-name: pino-pretty dependency-version: 13.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-non-major - dependency-name: tailwindcss dependency-version: 4.3.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-non-major - dependency-name: typescript-eslint dependency-version: 8.72.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-non-major ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-11-09T19:28:13Z

Labels

The following labels could not be found: dependencies, npm. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

github-actions · 2026-11-09T19:28:41Z

❌ Preview Deployment Failed

The preview deployment for commit 40f79a4 failed.

View workflow logs for details.

Common causes: missing Vercel secrets, build errors, or npm install failures.
See preview deployment docs for troubleshooting.

dependabot Bot requested a review from dimka90 as a code owner November 9, 2026 19:28

github-actions Bot added the area: web label Nov 9, 2026

Navigation Menu

Repository navigation

build(deps): bump the npm-non-major group across 1 directory with 21 updates - #1560

build(deps): bump the npm-non-major group across 1 directory with 21 updates#1560
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/web/npm-non-major-ed3e98688f

dependabot Bot commented on behalf of github Nov 9, 2026

Uh oh!

dependabot Bot commented on behalf of github Nov 9, 2026

Uh oh!

github-actions Bot commented Nov 9, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 9, 2026

@​stacks/network@​7.7.0

Patch Changes

7.7.0 (2026-10-27)

@​stacks/api, @​stacks/bitcoin-staking, @​stacks/bns, @​stacks/common, @​stacks/encryption, @​stacks/internal, @​stacks/profile, @​stacks/stacking, @​stacks/storage, @​stacks/wallet-sdk

@​stacks/auth, @​stacks/network

Patch Changes

@​stacks/cli

Minor Changes

@​stacks/transactions

Minor Changes

Patch Changes

@​stacks/transactions@​7.7.0

Minor Changes

Patch Changes

7.7.0 (2026-10-27)

@​stacks/api, @​stacks/bitcoin-staking, @​stacks/bns, @​stacks/common, @​stacks/encryption, @​stacks/internal, @​stacks/profile, @​stacks/stacking, @​stacks/storage, @​stacks/wallet-sdk

@​stacks/auth, @​stacks/network

Patch Changes

@​stacks/cli

Minor Changes

@​stacks/transactions

Minor Changes

Patch Changes

@​tanstack/react-query-devtools@​5.106.1

Patch Changes

@​tanstack/react-query-next-experimental@​5.106.1

Patch Changes

@​tanstack/react-query-persist-client@​5.106.1

Patch Changes

@​tanstack/react-query@​5.106.1

Patch Changes

@​tanstack/react-query-devtools@​5.106.0

Patch Changes

@​tanstack/react-query-next-experimental@​5.106.0

Patch Changes

@​tanstack/react-query-persist-client@​5.106.0

Patch Changes

@​tanstack/react-query@​5.106.0

Patch Changes

5.106.1

Patch Changes

5.106.0

Patch Changes

5.105.3

Patch Changes

5.105.2

Patch Changes

5.105.1

Patch Changes

5.105.0

Patch Changes

5.104.5

Version 1.70.0

What's Changed

New Contributors

Version 1.69.0

What's Changed

New Contributors

Version 1.68.0

What's Changed

New Contributors

Version 1.67.0

What's Changed

v16.4.5

Moderate

v16.4.4

Core Changes

Credits

v16.4.3

Core Changes

Credits

19.3.1 (October 14th, 2026)

React Server Components

19.3.1 (October 14th, 2026)

React Server Components

viem@2.57.16

Patch Changes

viem@2.57.15

`@stacks/network@7`.7.0

`@stacks/api`, `@stacks/bitcoin-staking`, `@stacks/bns`, `@stacks/common`, `@stacks/encryption`, `@stacks/internal`, `@stacks/profile`, `@stacks/stacking`, `@stacks/storage`, `@stacks/wallet-sdk`

`@stacks/auth`, `@stacks/network`

`@stacks/cli`

`@stacks/transactions`

`@stacks/transactions@7`.7.0

`@stacks/api`, `@stacks/bitcoin-staking`, `@stacks/bns`, `@stacks/common`, `@stacks/encryption`, `@stacks/internal`, `@stacks/profile`, `@stacks/stacking`, `@stacks/storage`, `@stacks/wallet-sdk`

`@stacks/auth`, `@stacks/network`

`@stacks/cli`

`@stacks/transactions`

`@tanstack/react-query-devtools@5`.106.1

`@tanstack/react-query-next-experimental@5`.106.1

`@tanstack/react-query-persist-client@5`.106.1

`@tanstack/react-query@5`.106.1

`@tanstack/react-query-devtools@5`.106.0

`@tanstack/react-query-next-experimental@5`.106.0

`@tanstack/react-query-persist-client@5`.106.0

`@tanstack/react-query@5`.106.0