Skip to content

deps: consolidated dependabot npm bumps (Jun) — group #2843 + 4 transitive - #2849

Merged
piyalbasu merged 5 commits into
masterfrom
dependabot-consolidated-npm-jun
Jun 18, 2026
Merged

piyalbasu merged 5 commits into
masterfrom
dependabot-consolidated-npm-jun

Conversation

@piyalbasu

@piyalbasu piyalbasu commented Jun 18, 2026 •

Copy link
Copy Markdown
Contributor

TL;DR

Consolidates the open npm/yarn dependabot PRs into one. Folds the big minor-and-patch group (#2843, 66+39+1 updates across root/extension/@shared) together with four standalone transitive security bumps (joi, hono, shell-quote, brace-expansion), then runs yarn dedupe. Supersedes 6 dependabot PRs: #2843, #2842, #2837, #2836, #2824, plus the two redundant js-yaml PRs (#2847, #2848) that the group already covers.

This does not touch the GitHub Actions group (#2832) or the Ruby/bundler group (#2703) — those live in separate ecosystems/lockfiles and should merge on their own.

Implementation details (for agents)

What changed:

Verification (on 6dc6595f2a43d203478e8b05339fd63986b0d57b):

  • yarn install --immutable — clean, lockfile consistent with manifests
  • yarn build:freighter-api — webpack compiled
  • yarn build:extension — webpack compiled (needs extension/.env with INDEXER_URL/INDEXER_V2_URL)
  • yarn build:docs — generated static files
  • yarn test:ci — 1050 passed, 53 skipped, 0 failures (131/137 suites, 6 skipped)

Follow-ups / out of scope:

🤖 Generated with Claude Code

dependabot Bot and others added 2 commits June 15, 2026 17:21
Bumps the minor-and-patch group with 66 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.25.8` | `7.29.7` |
| [@babel/eslint-parser](https://github.com/babel/babel/tree/HEAD/eslint/babel-eslint-parser) | `7.25.8` | `7.29.7` |
| [@babel/plugin-proposal-optional-chaining](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-proposal-optional-chaining) | `7.18.9` | `7.21.0` |
| [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) | `7.25.8` | `7.29.7` |
| [@babel/preset-react](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-react) | `7.26.3` | `7.29.7` |
| [@babel/preset-typescript](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-typescript) | `7.25.7` | `7.29.7` |
| [@testing-library/dom](https://github.com/testing-library/dom-testing-library) | `10.4.0` | `10.4.1` |
| [@testing-library/jest-dom](https://github.com/testing-library/jest-dom) | `6.6.3` | `6.9.1` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.20.0` | `8.61.0` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.20.0` | `8.61.0` |
| [@vercel/ncc](https://github.com/vercel/ncc) | `0.38.3` | `0.44.0` |
| [babel-loader](https://github.com/babel/babel-loader) | `10.0.0` | `10.1.1` |
| [eslint-config-prettier](https://github.com/prettier/eslint-config-prettier) | `10.0.1` | `10.1.8` |
| [eslint-plugin-import](https://github.com/import-js/eslint-plugin-import) | `2.31.0` | `2.32.0` |
| [eslint-plugin-prettier](https://github.com/prettier/eslint-plugin-prettier) | `5.2.3` | `5.5.6` |
| [eslint-plugin-react](https://github.com/jsx-eslint/eslint-plugin-react) | `7.37.4` | `7.37.5` |
| [jest-localstorage-mock](https://github.com/clarkbw/jest-localstorage-mock) | `2.4.3` | `2.4.26` |
| [prettier](https://github.com/prettier/prettier) | `3.5.1` | `3.8.4` |
| [pretty-quick](https://github.com/prettier/pretty-quick) | `4.0.0` | `4.2.2` |
| [ts-loader](https://github.com/TypeStrong/ts-loader) | `9.5.1` | `9.6.0` |
| [webpack](https://github.com/webpack/webpack) | `5.104.1` | `5.107.2` |
| [webpack-dev-server](https://github.com/webpack/webpack-dev-server) | `5.2.3` | `5.2.5` |
| [jest-fixed-jsdom](https://github.com/mswjs/jest-fixed-jsdom) | `0.0.9` | `0.0.11` |
| [@docusaurus/core](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus) | `3.6.3` | `3.10.1` |
| [@docusaurus/preset-classic](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic) | `3.6.3` | `3.10.1` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.0.3` | `19.2.7` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.0.12` | `19.2.17` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.0.3` | `19.2.7` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.0.3` | `19.2.3` |
| [react-is](https://github.com/facebook/react/tree/HEAD/packages/react-is) | `19.0.3` | `19.2.7` |
| [styled-components](https://github.com/styled-components/styled-components) | `6.1.14` | `6.4.2` |
| [@amplitude/analytics-browser](https://github.com/amplitude/Amplitude-TypeScript) | `2.37.0` | `2.44.1` |
| [@amplitude/experiment-js-client](https://github.com/amplitude/experiment-js-client/tree/HEAD/packages/experiment-browser) | `1.20.4` | `1.21.1` |
| [@ledgerhq/hw-app-str](https://github.com/LedgerHQ/ledger-live) | `7.2.0` | `7.7.4` |
| [@ledgerhq/hw-transport-webhid](https://github.com/LedgerHQ/ledger-live) | `6.30.6` | `6.35.4` |
| [@radix-ui/react-dialog](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dialog) | `1.1.15` | `1.1.16` |
| [@radix-ui/react-popover](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/popover) | `1.1.15` | `1.1.16` |
| [@reduxjs/toolkit](https://github.com/reduxjs/redux-toolkit) | `2.5.0` | `2.12.0` |
| [@stellar/design-system](https://github.com/stellar/stellar-design-system) | `3.2.7` | `3.2.8` |
| [@tailwindcss/postcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss) | `4.1.18` | `4.3.1` |
| [@testing-library/react](https://github.com/testing-library/react-testing-library) | `16.3.0` | `16.3.2` |
| [@types/chrome](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/chrome) | `0.0.287` | `0.1.43` |
| [@types/webextension-polyfill](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/webextension-polyfill) | `0.12.0` | `0.12.5` |
| [css-loader](https://github.com/webpack/css-loader) | `7.1.2` | `7.1.4` |
| [formik](https://github.com/jaredpalmer/formik) | `2.4.6` | `2.4.9` |
| [html-webpack-plugin](https://github.com/jantimon/html-webpack-plugin) | `5.6.3` | `5.6.7` |
| [i18next-browser-languagedetector](https://github.com/i18next/i18next-browser-languageDetector) | `8.0.5` | `8.2.1` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.1` | `4.2.0` |
| [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` |
| [@types/lodash](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/lodash) | `4.17.16` | `4.17.24` |
| [mini-css-extract-plugin](https://github.com/webpack/mini-css-extract-plugin) | `2.9.2` | `2.10.2` |
| [react-copy-to-clipboard](https://github.com/nkbt/react-copy-to-clipboard) | `5.1.0` | `5.1.1` |
| [react-redux](https://github.com/reduxjs/react-redux) | `9.2.0` | `9.3.0` |
| [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.5.1` | `7.17.0` |
| [sass](https://github.com/sass/dart-sass) | `1.86.3` | `1.101.0` |
| [semver](https://github.com/npm/node-semver) | `7.7.1` | `7.8.4` |
| [@types/semver](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/semver) | `7.5.8` | `7.7.1` |
| [svg-url-loader](https://github.com/bhovhannes/svg-url-loader) | `8.0.0` | `8.1.0` |
| [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.1.18` | `4.3.1` |
| [yup](https://github.com/jquense/yup) | `1.6.1` | `1.7.1` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.57.0` | `1.61.0` |
| [postcss](https://github.com/postcss/postcss) | `8.5.6` | `8.5.15` |
| [postcss-loader](https://github.com/webpack/postcss-loader) | `8.2.0` | `8.2.1` |
| [speed-measure-webpack-plugin](https://github.com/stephencookdev/speed-measure-webpack-plugin) | `1.5.0` | `1.6.0` |
| [terser-webpack-plugin](https://github.com/webpack/minimizer-webpack-plugin) | `5.3.14` | `5.6.1` |
| [url](https://github.com/defunctzombie/node-url) | `0.11.1` | `0.11.4` |

Bumps the minor-and-patch group with 1 update in the /@shared/api directory: [prettier](https://github.com/prettier/prettier).
Bumps the minor-and-patch group with 39 updates in the /extension directory:

| Package | From | To |
| --- | --- | --- |
| [prettier](https://github.com/prettier/prettier) | `3.5.3` | `3.8.4` |
| [pretty-quick](https://github.com/prettier/pretty-quick) | `4.1.1` | `4.2.2` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.0.3` | `19.2.7` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.0.12` | `19.2.17` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.0.3` | `19.2.7` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.1.2` | `19.2.3` |
| [@ledgerhq/hw-app-str](https://github.com/LedgerHQ/ledger-live) | `7.2.0` | `7.7.4` |
| [@ledgerhq/hw-transport-webhid](https://github.com/LedgerHQ/ledger-live) | `6.30.6` | `6.35.4` |
| [@radix-ui/react-dialog](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dialog) | `1.1.15` | `1.1.16` |
| [@radix-ui/react-popover](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/popover) | `1.1.15` | `1.1.16` |
| [@reduxjs/toolkit](https://github.com/reduxjs/redux-toolkit) | `2.5.0` | `2.12.0` |
| [@stellar/design-system](https://github.com/stellar/stellar-design-system) | `3.2.7` | `3.2.8` |
| [@tailwindcss/postcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss) | `4.1.18` | `4.3.1` |
| [@testing-library/react](https://github.com/testing-library/react-testing-library) | `16.3.0` | `16.3.2` |
| [@types/chrome](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/chrome) | `0.0.287` | `0.1.43` |
| [@types/webextension-polyfill](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/webextension-polyfill) | `0.12.0` | `0.12.5` |
| [css-loader](https://github.com/webpack/css-loader) | `7.1.2` | `7.1.4` |
| [formik](https://github.com/jaredpalmer/formik) | `2.4.6` | `2.4.9` |
| [html-webpack-plugin](https://github.com/jantimon/html-webpack-plugin) | `5.6.3` | `5.6.7` |
| [i18next-browser-languagedetector](https://github.com/i18next/i18next-browser-languageDetector) | `8.0.5` | `8.2.1` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.1` | `4.2.0` |
| [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` |
| [@types/lodash](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/lodash) | `4.17.16` | `4.17.24` |
| [mini-css-extract-plugin](https://github.com/webpack/mini-css-extract-plugin) | `2.9.2` | `2.10.2` |
| [react-copy-to-clipboard](https://github.com/nkbt/react-copy-to-clipboard) | `5.1.0` | `5.1.1` |
| [react-redux](https://github.com/reduxjs/react-redux) | `9.2.0` | `9.3.0` |
| [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.5.1` | `7.17.0` |
| [sass](https://github.com/sass/dart-sass) | `1.86.3` | `1.101.0` |
| [semver](https://github.com/npm/node-semver) | `7.7.1` | `7.8.4` |
| [@types/semver](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/semver) | `7.5.8` | `7.7.1` |
| [svg-url-loader](https://github.com/bhovhannes/svg-url-loader) | `8.0.0` | `8.1.0` |
| [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.1.18` | `4.3.1` |
| [yup](https://github.com/jquense/yup) | `1.6.1` | `1.7.1` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.57.0` | `1.61.0` |
| [postcss](https://github.com/postcss/postcss) | `8.5.6` | `8.5.15` |
| [postcss-loader](https://github.com/webpack/postcss-loader) | `8.2.0` | `8.2.1` |
| [speed-measure-webpack-plugin](https://github.com/stephencookdev/speed-measure-webpack-plugin) | `1.5.0` | `1.6.0` |
| [terser-webpack-plugin](https://github.com/webpack/minimizer-webpack-plugin) | `5.3.14` | `5.6.1` |
| [url](https://github.com/defunctzombie/node-url) | `0.11.1` | `0.11.4` |



Updates `@babel/core` from 7.25.8 to 7.29.7
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-core)

Updates `@babel/eslint-parser` from 7.25.8 to 7.29.7
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.7/eslint/babel-eslint-parser)

Updates `@babel/plugin-proposal-optional-chaining` from 7.18.9 to 7.21.0
- [Release notes](https://github.com/babel/babel/releases)
- [Commits](https://github.com/babel/babel/commits/v7.21.0/packages/babel-plugin-proposal-optional-chaining)

Updates `@babel/preset-env` from 7.25.8 to 7.29.7
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-preset-env)

Updates `@babel/preset-react` from 7.26.3 to 7.29.7
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-preset-react)

Updates `@babel/preset-typescript` from 7.25.7 to 7.29.7
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-preset-typescript)

Updates `@testing-library/dom` from 10.4.0 to 10.4.1
- [Release notes](https://github.com/testing-library/dom-testing-library/releases)
- [Changelog](https://github.com/testing-library/dom-testing-library/blob/main/CHANGELOG.md)
- [Commits](https://github.com/testing-library/dom-testing-library/compare/v10.4.0...v10.4.1)

Updates `@testing-library/jest-dom` from 6.6.3 to 6.9.1
- [Release notes](https://github.com/testing-library/jest-dom/releases)
- [Changelog](https://github.com/testing-library/jest-dom/blob/main/CHANGELOG.md)
- [Commits](https://github.com/testing-library/jest-dom/compare/v6.6.3...v6.9.1)

Updates `@typescript-eslint/eslint-plugin` from 8.20.0 to 8.61.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.61.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.20.0 to 8.61.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.61.0/packages/parser)

Updates `@vercel/ncc` from 0.38.3 to 0.44.0
- [Release notes](https://github.com/vercel/ncc/releases)
- [Commits](https://github.com/vercel/ncc/compare/0.38.3...0.44.0)

Updates `babel-loader` from 10.0.0 to 10.1.1
- [Release notes](https://github.com/babel/babel-loader/releases)
- [Changelog](https://github.com/babel/babel-loader/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel-loader/compare/v10.0.0...v10.1.1)

Updates `eslint-config-prettier` from 10.0.1 to 10.1.8
- [Release notes](https://github.com/prettier/eslint-config-prettier/releases)
- [Changelog](https://github.com/prettier/eslint-config-prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/eslint-config-prettier/compare/v10.0.1...v10.1.8)

Updates `eslint-plugin-import` from 2.31.0 to 2.32.0
- [Release notes](https://github.com/import-js/eslint-plugin-import/releases)
- [Changelog](https://github.com/import-js/eslint-plugin-import/blob/main/CHANGELOG.md)
- [Commits](https://github.com/import-js/eslint-plugin-import/compare/v2.31.0...v2.32.0)

Updates `eslint-plugin-prettier` from 5.2.3 to 5.5.6
- [Release notes](https://github.com/prettier/eslint-plugin-prettier/releases)
- [Changelog](https://github.com/prettier/eslint-plugin-prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/eslint-plugin-prettier/compare/v5.2.3...v5.5.6)

Updates `eslint-plugin-react` from 7.37.4 to 7.37.5
- [Release notes](https://github.com/jsx-eslint/eslint-plugin-react/releases)
- [Changelog](https://github.com/jsx-eslint/eslint-plugin-react/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jsx-eslint/eslint-plugin-react/compare/v7.37.4...v7.37.5)

Updates `jest-localstorage-mock` from 2.4.3 to 2.4.26
- [Release notes](https://github.com/clarkbw/jest-localstorage-mock/releases)
- [Commits](https://github.com/clarkbw/jest-localstorage-mock/compare/v2.4.3...v2.4.26)

Updates `prettier` from 3.5.1 to 3.8.4
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/3.5.1...3.8.4)

Updates `pretty-quick` from 4.0.0 to 4.2.2
- [Release notes](https://github.com/prettier/pretty-quick/releases)
- [Changelog](https://github.com/prettier/pretty-quick/blob/v4.2.2/CHANGELOG.md)
- [Commits](https://github.com/prettier/pretty-quick/compare/v4.0.0...v4.2.2)

Updates `ts-loader` from 9.5.1 to 9.6.0
- [Release notes](https://github.com/TypeStrong/ts-loader/releases)
- [Changelog](https://github.com/TypeStrong/ts-loader/blob/main/CHANGELOG.md)
- [Commits](https://github.com/TypeStrong/ts-loader/compare/v9.5.1...v9.6.0)

Updates `webpack` from 5.104.1 to 5.107.2
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/webpack/compare/v5.104.1...v5.107.2)

Updates `webpack-dev-server` from 5.2.3 to 5.2.5
- [Release notes](https://github.com/webpack/webpack-dev-server/releases)
- [Changelog](https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/webpack-dev-server/compare/v5.2.3...v5.2.5)

Updates `jest-fixed-jsdom` from 0.0.9 to 0.0.11
- [Release notes](https://github.com/mswjs/jest-fixed-jsdom/releases)
- [Commits](https://github.com/mswjs/jest-fixed-jsdom/compare/v0.0.9...v0.0.11)

Updates `@docusaurus/core` from 3.6.3 to 3.10.1
- [Release notes](https://github.com/facebook/docusaurus/releases)
- [Changelog](https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/docusaurus/commits/v3.10.1/packages/docusaurus)

Updates `@docusaurus/preset-classic` from 3.6.3 to 3.10.1
- [Release notes](https://github.com/facebook/docusaurus/releases)
- [Changelog](https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/docusaurus/commits/v3.10.1/packages/docusaurus-preset-classic)

Updates `react` from 19.0.3 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react)

Updates `@types/react` from 19.0.12 to 19.2.17
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 19.0.3 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-dom)

Updates `@types/react-dom` from 19.0.3 to 19.2.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `react-is` from 19.0.3 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-is)

Updates `styled-components` from 6.1.14 to 6.4.2
- [Release notes](https://github.com/styled-components/styled-components/releases)
- [Commits](https://github.com/styled-components/styled-components/compare/styled-components@6.1.14...styled-components@6.4.2)

Updates `@amplitude/analytics-browser` from 2.37.0 to 2.44.1
- [Release notes](https://github.com/amplitude/Amplitude-TypeScript/releases)
- [Commits](https://github.com/amplitude/Amplitude-TypeScript/compare/@amplitude/analytics-browser@2.37.0...@amplitude/analytics-browser@2.44.1)

Updates `@amplitude/experiment-js-client` from 1.20.4 to 1.21.1
- [Release notes](https://github.com/amplitude/experiment-js-client/releases)
- [Changelog](https://github.com/amplitude/experiment-js-client/blob/main/packages/experiment-browser/CHANGELOG.md)
- [Commits](https://github.com/amplitude/experiment-js-client/commits/@amplitude/experiment-js-client@1.21.1/packages/experiment-browser)

Updates `@ledgerhq/hw-app-str` from 7.2.0 to 7.7.4
- [Release notes](https://github.com/LedgerHQ/ledger-live/releases)
- [Commits](https://github.com/LedgerHQ/ledger-live/compare/@ledgerhq/hw-app-str@7.2.0...@ledgerhq/hw-app-str@7.7.4)

Updates `@ledgerhq/hw-transport-webhid` from 6.30.6 to 6.35.4
- [Release notes](https://github.com/LedgerHQ/ledger-live/releases)
- [Commits](https://github.com/LedgerHQ/ledger-live/compare/@ledgerhq/hw-transport-webhid@6.30.6...@ledgerhq/hw-transport-webhid@6.35.4)

Updates `@radix-ui/react-dialog` from 1.1.15 to 1.1.16
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dialog/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dialog)

Updates `@radix-ui/react-popover` from 1.1.15 to 1.1.16
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/popover/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/popover)

Updates `@reduxjs/toolkit` from 2.5.0 to 2.12.0
- [Release notes](https://github.com/reduxjs/redux-toolkit/releases)
- [Commits](https://github.com/reduxjs/redux-toolkit/compare/v2.5.0...v2.12.0)

Updates `@stellar/design-system` from 3.2.7 to 3.2.8
- [Release notes](https://github.com/stellar/stellar-design-system/releases)
- [Commits](https://github.com/stellar/stellar-design-system/compare/v3.2.7...v3.2.8)

Updates `@tailwindcss/postcss` from 4.1.18 to 4.3.1
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.1/packages/@tailwindcss-postcss)

Updates `@testing-library/react` from 16.3.0 to 16.3.2
- [Release notes](https://github.com/testing-library/react-testing-library/releases)
- [Changelog](https://github.com/testing-library/react-testing-library/blob/main/CHANGELOG.md)
- [Commits](https://github.com/testing-library/react-testing-library/compare/v16.3.0...v16.3.2)

Updates `@types/chrome` from 0.0.287 to 0.1.43
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/chrome)

Updates `@types/webextension-polyfill` from 0.12.0 to 0.12.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/webextension-polyfill)

Updates `css-loader` from 7.1.2 to 7.1.4
- [Release notes](https://github.com/webpack/css-loader/releases)
- [Changelog](https://github.com/webpack/css-loader/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/css-loader/compare/v7.1.2...v7.1.4)

Updates `formik` from 2.4.6 to 2.4.9
- [Release notes](https://github.com/jaredpalmer/formik/releases)
- [Commits](https://github.com/jaredpalmer/formik/compare/formik@2.4.6...formik@2.4.9)

Updates `html-webpack-plugin` from 5.6.3 to 5.6.7
- [Release notes](https://github.com/jantimon/html-webpack-plugin/releases)
- [Changelog](https://github.com/jantimon/html-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jantimon/html-webpack-plugin/compare/v5.6.3...v5.6.7)

Updates `i18next-browser-languagedetector` from 8.0.5 to 8.2.1
- [Changelog](https://github.com/i18next/i18next-browser-languageDetector/blob/master/CHANGELOG.md)
- [Commits](https://github.com/i18next/i18next-browser-languageDetector/compare/v8.0.5...v8.2.1)

Updates `js-yaml` from 4.1.1 to 4.2.0
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/commits)

Updates `lodash` from 4.17.21 to 4.18.1
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.18.1)

Updates `@types/lodash` from 4.17.16 to 4.17.24
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/lodash)

Updates `mini-css-extract-plugin` from 2.9.2 to 2.10.2
- [Release notes](https://github.com/webpack/mini-css-extract-plugin/releases)
- [Changelog](https://github.com/webpack/mini-css-extract-plugin/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/mini-css-extract-plugin/compare/v2.9.2...v2.10.2)

Updates `react-copy-to-clipboard` from 5.1.0 to 5.1.1
- [Release notes](https://github.com/nkbt/react-copy-to-clipboard/releases)
- [Commits](https://github.com/nkbt/react-copy-to-clipboard/compare/v5.1.0...v5.1.1)

Updates `react-redux` from 9.2.0 to 9.3.0
- [Release notes](https://github.com/reduxjs/react-redux/releases)
- [Changelog](https://github.com/reduxjs/react-redux/blob/master/CHANGELOG.md)
- [Commits](https://github.com/reduxjs/react-redux/compare/v9.2.0...v9.3.0)

Updates `react-router-dom` from 7.5.1 to 7.17.0
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.17.0/packages/react-router-dom)

Updates `sass` from 1.86.3 to 1.101.0
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sass/dart-sass/compare/1.86.3...1.101.0)

Updates `semver` from 7.7.1 to 7.8.4
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](https://github.com/npm/node-semver/compare/v7.7.1...v7.8.4)

Updates `@types/semver` from 7.5.8 to 7.7.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/semver)

Updates `svg-url-loader` from 8.0.0 to 8.1.0
- [Release notes](https://github.com/bhovhannes/svg-url-loader/releases)
- [Commits](https://github.com/bhovhannes/svg-url-loader/compare/v8.0.0...v8.1.0)

Updates `tailwindcss` from 4.1.18 to 4.3.1
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.1/packages/tailwindcss)

Updates `yup` from 1.6.1 to 1.7.1
- [Release notes](https://github.com/jquense/yup/releases)
- [Changelog](https://github.com/jquense/yup/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jquense/yup/commits)

Updates `@playwright/test` from 1.57.0 to 1.61.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](https://github.com/microsoft/playwright/compare/v1.57.0...v1.61.0)

Updates `@types/semver` from 7.5.8 to 7.7.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/semver)

Updates `postcss` from 8.5.6 to 8.5.15
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/postcss/postcss/compare/8.5.6...8.5.15)

Updates `postcss-loader` from 8.2.0 to 8.2.1
- [Release notes](https://github.com/webpack/postcss-loader/releases)
- [Changelog](https://github.com/webpack/postcss-loader/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/postcss-loader/compare/v8.2.0...v8.2.1)

Updates `speed-measure-webpack-plugin` from 1.5.0 to 1.6.0
- [Release notes](https://github.com/stephencookdev/speed-measure-webpack-plugin/releases)
- [Commits](https://github.com/stephencookdev/speed-measure-webpack-plugin/compare/v1.5.0...v1.6.0)

Updates `terser-webpack-plugin` from 5.3.14 to 5.6.1
- [Release notes](https://github.com/webpack/minimizer-webpack-plugin/releases)
- [Changelog](https://github.com/webpack/minimizer-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/minimizer-webpack-plugin/compare/v5.3.14...v5.6.1)

Updates `url` from 0.11.1 to 0.11.4
- [Commits](https://github.com/defunctzombie/node-url/compare/v0.11.1...v0.11.4)

Updates `prettier` from 3.5.1 to 3.8.4
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/3.5.1...3.8.4)

Updates `@amplitude/analytics-browser` from 2.37.0 to 2.44.1
- [Release notes](https://github.com/amplitude/Amplitude-TypeScript/releases)
- [Commits](https://github.com/amplitude/Amplitude-TypeScript/compare/@amplitude/analytics-browser@2.37.0...@amplitude/analytics-browser@2.44.1)

Updates `@amplitude/experiment-js-client` from 1.20.4 to 1.21.1
- [Release notes](https://github.com/amplitude/experiment-js-client/releases)
- [Changelog](https://github.com/amplitude/experiment-js-client/blob/main/packages/experiment-browser/CHANGELOG.md)
- [Commits](https://github.com/amplitude/experiment-js-client/commits/@amplitude/experiment-js-client@1.21.1/packages/experiment-browser)

Updates `@ledgerhq/hw-app-str` from 7.2.0 to 7.7.4
- [Release notes](https://github.com/LedgerHQ/ledger-live/releases)
- [Commits](https://github.com/LedgerHQ/ledger-live/compare/@ledgerhq/hw-app-str@7.2.0...@ledgerhq/hw-app-str@7.7.4)

Updates `@ledgerhq/hw-transport-webhid` from 6.30.6 to 6.35.4
- [Release notes](https://github.com/LedgerHQ/ledger-live/releases)
- [Commits](https://github.com/LedgerHQ/ledger-live/compare/@ledgerhq/hw-transport-webhid@6.30.6...@ledgerhq/hw-transport-webhid@6.35.4)

Updates `@radix-ui/react-dialog` from 1.1.15 to 1.1.16
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dialog/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dialog)

Updates `@radix-ui/react-popover` from 1.1.15 to 1.1.16
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/popover/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/popover)

Updates `@reduxjs/toolkit` from 2.5.0 to 2.12.0
- [Release notes](https://github.com/reduxjs/redux-toolkit/releases)
- [Commits](https://github.com/reduxjs/redux-toolkit/compare/v2.5.0...v2.12.0)

Updates `@stellar/design-system` from 3.2.7 to 3.2.8
- [Release notes](https://github.com/stellar/stellar-design-system/releases)
- [Commits](https://github.com/stellar/stellar-design-system/compare/v3.2.7...v3.2.8)

Updates `@tailwindcss/postcss` from 4.1.18 to 4.3.1
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.1/packages/@tailwindcss-postcss)

Updates `@testing-library/react` from 16.3.0 to 16.3.2
- [Release notes](https://github.com/testing-library/react-testing-library/releases)
- [Changelog](https://github.com/testing-library/react-testing-library/blob/main/CHANGELOG.md)
- [Commits](https://github.com/testing-library/react-testing-library/compare/v16.3.0...v16.3.2)

Updates `@types/chrome` from 0.0.287 to 0.1.43
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/chrome)

Updates `@types/lodash` from 4.17.16 to 4.17.24
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/lodash)

Updates `@types/react` from 19.0.12 to 19.2.17
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 19.0.3 to 19.2.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `@types/webextension-polyfill` from 0.12.0 to 0.12.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/webextension-polyfill)

Updates `css-loader` from 7.1.2 to 7.1.4
- [Release notes](https://github.com/webpack/css-loader/releases)
- [Changelog](https://github.com/webpack/css-loader/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/css-loader/compare/v7.1.2...v7.1.4)

Updates `formik` from 2.4.6 to 2.4.9
- [Release notes](https://github.com/jaredpalmer/formik/releases)
- [Commits](https://github.com/jaredpalmer/formik/compare/formik@2.4.6...formik@2.4.9)

Updates `html-webpack-plugin` from 5.6.3 to 5.6.7
- [Release notes](https://github.com/jantimon/html-webpack-plugin/releases)
- [Changelog](https://github.com/jantimon/html-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jantimon/html-webpack-plugin/compare/v5.6.3...v5.6.7)

Updates `i18next-browser-languagedetector` from 8.0.5 to 8.2.1
- [Changelog](https://github.com/i18next/i18next-browser-languageDetector/blob/master/CHANGELOG.md)
- [Commits](https://github.com/i18next/i18next-browser-languageDetector/compare/v8.0.5...v8.2.1)

Updates `js-yaml` from 4.1.1 to 4.2.0
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/commits)

Updates `lodash` from 4.17.21 to 4.18.1
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.18.1)

Updates `mini-css-extract-plugin` from 2.9.2 to 2.10.2
- [Release notes](https://github.com/webpack/mini-css-extract-plugin/releases)
- [Changelog](https://github.com/webpack/mini-css-extract-plugin/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/mini-css-extract-plugin/compare/v2.9.2...v2.10.2)

Updates `prettier` from 3.5.1 to 3.8.4
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/3.5.1...3.8.4)

Updates `pretty-quick` from 4.0.0 to 4.2.2
- [Release notes](https://github.com/prettier/pretty-quick/releases)
- [Changelog](https://github.com/prettier/pretty-quick/blob/v4.2.2/CHANGELOG.md)
- [Commits](https://github.com/prettier/pretty-quick/compare/v4.0.0...v4.2.2)

Updates `react` from 19.0.3 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react)

Updates `react-copy-to-clipboard` from 5.1.0 to 5.1.1
- [Release notes](https://github.com/nkbt/react-copy-to-clipboard/releases)
- [Commits](https://github.com/nkbt/react-copy-to-clipboard/compare/v5.1.0...v5.1.1)

Updates `react-dom` from 19.0.3 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-dom)

Updates `react-redux` from 9.2.0 to 9.3.0
- [Release notes](https://github.com/reduxjs/react-redux/releases)
- [Changelog](https://github.com/reduxjs/react-redux/blob/master/CHANGELOG.md)
- [Commits](https://github.com/reduxjs/react-redux/compare/v9.2.0...v9.3.0)

Updates `react-router-dom` from 7.5.1 to 7.17.0
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.17.0/packages/react-router-dom)

Updates `sass` from 1.86.3 to 1.101.0
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sass/dart-sass/compare/1.86.3...1.101.0)

Updates `semver` from 7.7.1 to 7.8.4
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](https://github.com/npm/node-semver/compare/v7.7.1...v7.8.4)

Updates `svg-url-loader` from 8.0.0 to 8.1.0
- [Release notes](https://github.com/bhovhannes/svg-url-loader/releases)
- [Commits](https://github.com/bhovhannes/svg-url-loader/compare/v8.0.0...v8.1.0)

Updates `tailwindcss` from 4.1.18 to 4.3.1
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.1/packages/tailwindcss)

Updates `yup` from 1.6.1 to 1.7.1
- [Release notes](https://github.com/jquense/yup/releases)
- [Changelog](https://github.com/jquense/yup/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jquense/yup/commits)

Updates `@playwright/test` from 1.57.0 to 1.61.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](https://github.com/microsoft/playwright/compare/v1.57.0...v1.61.0)

Updates `@types/semver` from 7.5.8 to 7.7.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/semver)

Updates `postcss` from 8.5.6 to 8.5.15
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/postcss/postcss/compare/8.5.6...8.5.15)

Updates `postcss-loader` from 8.2.0 to 8.2.1
- [Release notes](https://github.com/webpack/postcss-loader/releases)
- [Changelog](https://github.com/webpack/postcss-loader/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/postcss-loader/compare/v8.2.0...v8.2.1)

Updates `speed-measure-webpack-plugin` from 1.5.0 to 1.6.0
- [Release notes](https://github.com/stephencookdev/speed-measure-webpack-plugin/releases)
- [Commits](https://github.com/stephencookdev/speed-measure-webpack-plugin/compare/v1.5.0...v1.6.0)

Updates `terser-webpack-plugin` from 5.3.14 to 5.6.1
- [Release notes](https://github.com/webpack/minimizer-webpack-plugin/releases)
- [Changelog](https://github.com/webpack/minimizer-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/minimizer-webpack-plugin/compare/v5.3.14...v5.6.1)

Updates `url` from 0.11.1 to 0.11.4
- [Commits](https://github.com/defunctzombie/node-url/compare/v0.11.1...v0.11.4)

Updates `prettier` from 3.5.3 to 3.8.4
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/3.5.1...3.8.4)

Updates `prettier` from 3.5.3 to 3.8.4
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/3.5.1...3.8.4)

Updates `prettier` from 3.5.3 to 3.8.4
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/3.5.1...3.8.4)

Updates `prettier` from 3.5.3 to 3.8.4
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/3.5.1...3.8.4)

Updates `pretty-quick` from 4.1.1 to 4.2.2
- [Release notes](https://github.com/prettier/pretty-quick/releases)
- [Changelog](https://github.com/prettier/pretty-quick/blob/v4.2.2/CHANGELOG.md)
- [Commits](https://github.com/prettier/pretty-quick/compare/v4.0.0...v4.2.2)

Updates `react` from 19.0.3 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react)

Updates `@types/react` from 19.0.12 to 19.2.17
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 19.0.3 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-dom)

Updates `@types/react-dom` from 19.1.2 to 19.2.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `@ledgerhq/hw-app-str` from 7.2.0 to 7.7.4
- [Release notes](https://github.com/LedgerHQ/ledger-live/releases)
- [Commits](https://github.com/LedgerHQ/ledger-live/compare/@ledgerhq/hw-app-str@7.2.0...@ledgerhq/hw-app-str@7.7.4)

Updates `@ledgerhq/hw-transport-webhid` from 6.30.6 to 6.35.4
- [Release notes](https://github.com/LedgerHQ/ledger-live/releases)
- [Commits](https://github.com/LedgerHQ/ledger-live/compare/@ledgerhq/hw-transport-webhid@6.30.6...@ledgerhq/hw-transport-webhid@6.35.4)

Updates `@radix-ui/react-dialog` from 1.1.15 to 1.1.16
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dialog/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dialog)

Updates `@radix-ui/react-popover` from 1.1.15 to 1.1.16
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/popover/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/popover)

Updates `@reduxjs/toolkit` from 2.5.0 to 2.12.0
- [Release notes](https://github.com/reduxjs/redux-toolkit/releases)
- [Commits](https://github.com/reduxjs/redux-toolkit/compare/v2.5.0...v2.12.0)

Updates `@stellar/design-system` from 3.2.7 to 3.2.8
- [Release notes](https://github.com/stellar/stellar-design-system/releases)
- [Commits](https://github.com/stellar/stellar-design-system/compare/v3.2.7...v3.2.8)

Updates `@tailwindcss/postcss` from 4.1.18 to 4.3.1
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.1/packages/@tailwindcss-postcss)

Updates `@testing-library/react` from 16.3.0 to 16.3.2
- [Release notes](https://github.com/testing-library/react-testing-library/releases)
- [Changelog](https://github.com/testing-library/react-testing-library/blob/main/CHANGELOG.md)
- [Commits](https://github.com/testing-library/react-testing-library/compare/v16.3.0...v16.3.2)

Updates `@types/chrome` from 0.0.287 to 0.1.43
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/chrome)

Updates `@types/webextension-polyfill` from 0.12.0 to 0.12.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/webextension-polyfill)

Updates `css-loader` from 7.1.2 to 7.1.4
- [Release notes](https://github.com/webpack/css-loader/releases)
- [Changelog](https://github.com/webpack/css-loader/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/css-loader/compare/v7.1.2...v7.1.4)

Updates `formik` from 2.4.6 to 2.4.9
- [Release notes](https://github.com/jaredpalmer/formik/releases)
- [Commits](https://github.com/jaredpalmer/formik/compare/formik@2.4.6...formik@2.4.9)

Updates `html-webpack-plugin` from 5.6.3 to 5.6.7
- [Release notes](https://github.com/jantimon/html-webpack-plugin/releases)
- [Changelog](https://github.com/jantimon/html-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jantimon/html-webpack-plugin/compare/v5.6.3...v5.6.7)

Updates `i18next-browser-languagedetector` from 8.0.5 to 8.2.1
- [Changelog](https://github.com/i18next/i18next-browser-languageDetector/blob/master/CHANGELOG.md)
- [Commits](https://github.com/i18next/i18next-browser-languageDetector/compare/v8.0.5...v8.2.1)

Updates `js-yaml` from 4.1.1 to 4.2.0
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/commits)

Updates `lodash` from 4.17.21 to 4.18.1
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.18.1)

Updates `@types/lodash` from 4.17.16 to 4.17.24
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/lodash)

Updates `mini-css-extract-plugin` from 2.9.2 to 2.10.2
- [Release notes](https://github.com/webpack/mini-css-extract-plugin/releases)
- [Changelog](https://github.com/webpack/mini-css-extract-plugin/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/mini-css-extract-plugin/compare/v2.9.2...v2.10.2)

Updates `react-copy-to-clipboard` from 5.1.0 to 5.1.1
- [Release notes](https://github.com/nkbt/react-copy-to-clipboard/releases)
- [Commits](https://github.com/nkbt/react-copy-to-clipboard/compare/v5.1.0...v5.1.1)

Updates `react-redux` from 9.2.0 to 9.3.0
- [Release notes](https://github.com/reduxjs/react-redux/releases)
- [Changelog](https://github.com/reduxjs/react-redux/blob/master/CHANGELOG.md)
- [Commits](https://github.com/reduxjs/react-redux/compare/v9.2.0...v9.3.0)

Updates `react-router-dom` from 7.5.1 to 7.17.0
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.17.0/packages/react-router-dom)

Updates `sass` from 1.86.3 to 1.101.0
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sass/dart-sass/compare/1.86.3...1.101.0)

Updates `semver` from 7.7.1 to 7.8.4
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](https://github.com/npm/node-semver/compare/v7.7.1...v7.8.4)

Updates `@types/semver` from 7.5.8 to 7.7.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/semver)

Updates `svg-url-loader` from 8.0.0 to 8.1.0
- [Release notes](https://github.com/bhovhannes/svg-url-loader/releases)
- [Commits](https://github.com/bhovhannes/svg-url-loader/compare/v8.0.0...v8.1.0)

Updates `tailwindcss` from 4.1.18 to 4.3.1
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.1/packages/tailwindcss)

Updates `yup` from 1.6.1 to 1.7.1
- [Release notes](https://github.com/jquense/yup/releases)
- [Changelog](https://github.com/jquense/yup/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jquense/yup/commits)

Updates `@playwright/test` from 1.57.0 to 1.61.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](https://github.com/microsoft/playwright/compare/v1.57.0...v1.61.0)

Updates `@types/semver` from 7.5.8 to 7.7.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/semver)

Updates `postcss` from 8.5.6 to 8.5.15
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/postcss/postcss/compare/8.5.6...8.5.15)

Updates `postcss-loader` from 8.2.0 to 8.2.1
- [Release notes](https://github.com/webpack/postcss-loader/releases)
- [Changelog](https://github.com/webpack/postcss-loader/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/postcss-loader/compare/v8.2.0...v8.2.1)

Updates `speed-measure-webpack-plugin` from 1.5.0 to 1.6.0
- [Release notes](https://github.com/stephencookdev/speed-measure-webpack-plugin/releases)
- [Commits](https://github.com/stephencookdev/speed-measure-webpack-plugin/compare/v1.5.0...v1.6.0)

Updates `terser-webpack-plugin` from 5.3.14 to 5.6.1
- [Release notes](https://github.com/webpack/minimizer-webpack-plugin/releases)
- [Changelog](https://github.com/webpack/minimizer-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/minimizer-webpack-plugin/compare/v5.3.14...v5.6.1)

Updates `url` from 0.11.1 to 0.11.4
- [Commits](https://github.com/defunctzombie/node-url/compare/v0.11.1...v0.11.4)

Updates `prettier` from 3.5.3 to 3.8.4
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/3.5.1...3.8.4)

Updates `@ledgerhq/hw-app-str` from 7.2.0 to 7.7.4
- [Release notes](https://github.com/LedgerHQ/ledger-live/releases)
- [Commits](https://github.com/LedgerHQ/ledger-live/compare/@ledgerhq/hw-app-str@7.2.0...@ledgerhq/hw-app-str@7.7.4)

Updates `@ledgerhq/hw-transport-webhid` from 6.30.6 to 6.35.4
- [Release notes](https://github.com/LedgerHQ/ledger-live/releases)
- [Commits](https://github.com/LedgerHQ/ledger-live/compare/@ledgerhq/hw-transport-webhid@6.30.6...@ledgerhq/hw-transport-webhid@6.35.4)

Updates `@radix-ui/react-dialog` from 1.1.15 to 1.1.16
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dialog/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dialog)

Updates `@radix-ui/react-popover` from 1.1.15 to 1.1.16
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/popover/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/popover)

Updates `@reduxjs/toolkit` from 2.5.0 to 2.12.0
- [Release notes](https://github.com/reduxjs/redux-toolkit/releases)
- [Commits](https://github.com/reduxjs/redux-toolkit/compare/v2.5.0...v2.12.0)

Updates `@stellar/design-system` from 3.2.7 to 3.2.8
- [Release notes](https://github.com/stellar/stellar-design-system/releases)
- [Commits](https://github.com/stellar/stellar-design-system/compare/v3.2.7...v3.2.8)

Updates `@tailwindcss/postcss` from 4.1.18 to 4.3.1
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.1/packages/@tailwindcss-postcss)

Updates `@testing-library/react` from 16.3.0 to 16.3.2
- [Release notes](https://github.com/testing-library/react-testing-library/releases)
- [Changelog](https://github.com/testing-library/react-testing-library/blob/main/CHANGELOG.md)
- [Commits](https://github.com/testing-library/react-testing-library/compare/v16.3.0...v16.3.2)

Updates `@types/chrome` from 0.0.287 to 0.1.43
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/chrome)

Updates `@types/lodash` from 4.17.16 to 4.17.24
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/lodash)

Updates `@types/react` from 19.0.12 to 19.2.17
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 19.1.2 to 19.2.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `@types/webextension-polyfill` from 0.12.0 to 0.12.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/webextension-polyfill)

Updates `css-loader` from 7.1.2 to 7.1.4
- [Release notes](https://github.com/webpack/css-loader/releases)
- [Changelog](https://github.com/webpack/css-loader/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/css-loader/compare/v7.1.2...v7.1.4)

Updates `formik` from 2.4.6 to 2.4.9
- [Release notes](https://github.com/jaredpalmer/formik/releases)
- [Commits](https://github.com/jaredpalmer/formik/compare/formik@2.4.6...formik@2.4.9)

Updates `html-webpack-plugin` from 5.6.3 to 5.6.7
- [Release notes](https://github.com/jantimon/html-webpack-plugin/releases)
- [Changelog](https://github.com/jantimon/html-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jantimon/html-webpack-plugin/compare/v5.6.3...v5.6.7)

Updates `i18next-browser-languagedetector` from 8.0.5 to 8.2.1
- [Changelog](https://github.com/i18next/i18next-browser-languageDetector/blob/master/CHANGELOG.md)
- [Commits](https://github.com/i18next/i18next-browser-languageDetector/compare/v8.0.5...v8.2.1)

Updates `js-yaml` from 4.1.1 to 4.2.0
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/commits)

Updates `lodash` from 4.17.21 to 4.18.1
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.18.1)

Updates `mini-css-extract-plugin` from 2.9.2 to 2.10.2
- [Release notes](https://github.com/webpack/mini-css-extract-plugin/releases)
- [Changelog](https://github.com/webpack/mini-css-extract-plugin/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/mini-css-extract-plugin/compare/v2.9.2...v2.10.2)

Updates `prettier` from 3.5.3 to 3.8.4
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/3.5.1...3.8.4)

Updates `pretty-quick` from 4.1.1 to 4.2.2
- [Release notes](https://github.com/prettier/pretty-quick/releases)
- [Changelog](https://github.com/prettier/pretty-quick/blob/v4.2.2/CHANGELOG.md)
- [Commits](https://github.com/prettier/pretty-quick/compare/v4.0.0...v4.2.2)

Updates `react` from 19.0.3 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react)

Updates `react-copy-to-clipboard` from 5.1.0 to 5.1.1
- [Release notes](https://github.com/nkbt/react-copy-to-clipboard/releases)
- [Commits](https://github.com/nkbt/react-copy-to-clipboard/compare/v5.1.0...v5.1.1)

Updates `react-dom` from 19.0.3 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-dom)

Updates `react-redux` from 9.2.0 to 9.3.0
- [Release notes](https://github.com/reduxjs/react-redux/releases)
- [Changelog](https://github.com/reduxjs/react-redux/blob/master/CHANGELOG.md)
- [Commits](https://github.com/reduxjs/react-redux/compare/v9.2.0...v9.3.0)

Updates `react-router-dom` from 7.5.1 to 7.17.0
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.17.0/packages/react-router-dom)

Updates `sass` from 1.86.3 to 1.101.0
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sass/dart-sass/compare/1.86.3...1.101.0)

Updates `semver` from 7.7.1 to 7.8.4
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](https://github.com/npm/node-semver/compare/v7.7.1...v7.8.4)

Updates `svg-url-loader` from 8.0.0 to 8.1.0
- [Release notes](https://github.com/bhovhannes/svg-url-loader/releases)
- [Commits](https://github.com/bhovhannes/svg-url-loader/compare/v8.0.0...v8.1.0)

Updates `tailwindcss` from 4.1.18 to 4.3.1
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.1/packages/tailwindcss)

Updates `yup` from 1.6.1 to 1.7.1
- [Release notes](https://github.com/jquense/yup/releases)
- [Changelog](https://github.com/jquense/yup/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jquense/yup/commits)

Updates `@playwright/test` from 1.57.0 to 1.61.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](https://github.com/microsoft/playwright/compare/v1.57.0...v1.61.0)

Updates `@types/semver` from 7.5.8 to 7.7.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/semver)

Updates `postcss` from 8.5.6 to 8.5.15
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/postcss/postcss/compare/8.5.6...8.5.15)

Updates `postcss-loader` from 8.2.0 to 8.2.1
- [Release notes](https://github.com/webpack/postcss-loader/releases)
- [Changelog](https://github.com/webpack/postcss-loader/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/postcss-loader/compare/v8.2.0...v8.2.1)

Updates `speed-measure-webpack-plugin` from 1.5.0 to 1.6.0
- [Release notes](https://github.com/stephencookdev/speed-measure-webpack-plugin/releases)
- [Commits](https://github.com/stephencookdev/speed-measure-webpack-plugin/compare/v1.5.0...v1.6.0)

Updates `terser-webpack-plugin` from 5.3.14 to 5.6.1
- [Release notes](https://github.com/webpack/minimizer-webpack-plugin/releases)
- [Changelog](https://github.com/webpack/minimizer-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/minimizer-webpack-plugin/compare/v5.3.14...v5.6.1)

Updates `url` from 0.11.1 to 0.11.4
- [Commits](https://github.com/defunctzombie/node-url/compare/v0.11.1...v0.11.4)

---
updated-dependencies:
- dependency-name: "@amplitude/analytics-browser"
  dependency-version: 2.44.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@amplitude/analytics-browser"
  dependency-version: 2.44.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@amplitude/experiment-js-client"
  dependency-version: 1.21.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@amplitude/experiment-js-client"
  dependency-version: 1.21.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@babel/core"
  dependency-version: 7.29.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@babel/eslint-parser"
  dependency-version: 7.29.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@babel/plugin-proposal-optional-chaining"
  dependency-version: 7.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@babel/preset-env"
  dependency-version: 7.29.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@babel/preset-react"
  dependency-version: 7.29.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@babel/preset-typescript"
  dependency-version: 7.29.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@docusaurus/core"
  dependency-version: 3.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@docusaurus/preset-classic"
  dependency-version: 3.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@ledgerhq/hw-app-str"
  dependency-version: 7.7.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@ledgerhq/hw-app-str"
  dependency-version: 7.7.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@ledgerhq/hw-app-str"
  dependency-version: 7.7.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@ledgerhq/hw-app-str"
  dependency-version: 7.7.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@ledgerhq/hw-transport-webhid"
  dependency-version: 6.35.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@ledgerhq/hw-transport-webhid"
  dependency-version: 6.35.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@ledgerhq/hw-transport-webhid"
  dependency-version: 6.35.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@ledgerhq/hw-transport-webhid"
  dependency-version: 6.35.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@playwright/test"
  dependency-version: 1.60.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@playwright/test"
  dependency-version: 1.60.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@playwright/test"
  dependency-version: 1.60.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@playwright/test"
  dependency-version: 1.60.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@radix-ui/react-dialog"
  dependency-version: 1.1.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@radix-ui/react-dialog"
  dependency-version: 1.1.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@radix-ui/react-dialog"
  dependency-version: 1.1.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@radix-ui/react-dialog"
  dependency-version: 1.1.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@radix-ui/react-popover"
  dependency-version: 1.1.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@radix-ui/react-popover"
  dependency-version: 1.1.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@radix-ui/react-popover"
  dependency-version: 1.1.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@radix-ui/react-popover"
  dependency-version: 1.1.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@reduxjs/toolkit"
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@reduxjs/toolkit"
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@reduxjs/toolkit"
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type:...

Signed-off-by: dependabot[bot] <support@github.com>
…d-patch-e2aa973e0e' into dependabot-consolidated-npm-jun
@socket-security

socket-security Bot commented Jun 18, 2026 •

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatednpm/​@​babel/​plugin-proposal-optional-chaining@​7.18.9 ⏵ 7.21.01001007450100
Updatednpm/​react-router-dom@​7.5.1 ⏵ 7.17.01001006598100
Updatednpm/​@​docusaurus/​preset-classic@​3.6.3 ⏵ 3.10.19910070 +199 +2100
Updatednpm/​@​babel/​preset-react@​7.26.3 ⏵ 7.29.71001007197100
Updatednpm/​@​typescript-eslint/​parser@​8.20.0 ⏵ 8.61.0100 +110071 +198100
Updatednpm/​@​radix-ui/​react-popover@​1.1.15 ⏵ 1.1.1699 +11007199 +1100
Updatednpm/​@​radix-ui/​react-dialog@​1.1.15 ⏵ 1.1.1699 +11007199 +1100
Updatednpm/​@​babel/​preset-typescript@​7.28.5 ⏵ 7.29.71001007397100
Updatednpm/​@​amplitude/​experiment-js-client@​1.20.4 ⏵ 1.21.181 -1710075 +194 +2100
Updatednpm/​@​types/​semver@​7.5.8 ⏵ 7.7.110010075 +181100
Updatednpm/​@​types/​react-dom@​19.1.2 ⏵ 19.2.3100 +110075 +185100
Updatednpm/​@​docusaurus/​core@​3.6.3 ⏵ 3.10.198 +110076 +199 +2100
Updatednpm/​@​babel/​preset-env@​7.25.8 ⏵ 7.29.7971007798 +2100
Updatednpm/​@​babel/​eslint-parser@​7.25.8 ⏵ 7.29.710010077 -2397 +2100
Updatednpm/​@​amplitude/​analytics-browser@​2.37.0 ⏵ 2.44.178 +110094 +199100
Updatednpm/​@​types/​react@​19.0.12 ⏵ 19.2.171001007995 -1100
Updatednpm/​@​types/​webextension-polyfill@​0.12.0 ⏵ 0.12.510010079 +181 -3100
Updatednpm/​@​types/​chrome@​0.0.287 ⏵ 0.1.4380 +110079 +194100
Updatednpm/​@​babel/​core@​7.28.6 ⏵ 7.29.797100 +180 +198100
Updatednpm/​@​types/​lodash@​4.17.16 ⏵ 4.17.2410010080 +184100
Updatednpm/​@​typescript-eslint/​eslint-plugin@​8.20.0 ⏵ 8.61.088 -1010080 +198100
Updatednpm/​jest-localstorage-mock@​2.4.3 ⏵ 2.4.2610010010080100
Updatednpm/​@​stellar/​design-system@​3.2.7 ⏵ 3.2.881 +110010096 +6100
Updatednpm/​lodash@​4.17.21 ⏵ 4.18.181 +1100 +1987 +182100
Updatednpm/​react-copy-to-clipboard@​5.1.0 ⏵ 5.1.1100 +110010081100
Updatednpm/​speed-measure-webpack-plugin@​1.5.0 ⏵ 1.6.010010010081100
Updatednpm/​jest-fixed-jsdom@​0.0.9 ⏵ 0.0.11100 +110090 +181100
Updatednpm/​formik@​2.4.6 ⏵ 2.4.997 +110090 +181100
Updatednpm/​webpack@​5.104.1 ⏵ 5.107.282 -131009397100
Updatednpm/​yup@​1.7.0 ⏵ 1.7.1100 +110010082100
Updatednpm/​eslint-plugin-react@​7.37.4 ⏵ 7.37.58810010082100
Updatednpm/​postcss@​8.5.6 ⏵ 8.5.15100 +1100 +28291100
See 34 more rows in the dashboard

View full report

@socket-security

socket-security Bot commented Jun 18, 2026 •

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: npm @amplitude/plugin-custom-enrichment-browser is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: ? → npm/@amplitude/analytics-browser@2.44.1 → npm/@amplitude/plugin-custom-enrichment-browser@0.1.11

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@amplitude/plugin-custom-enrichment-browser@0.1.11. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm @emnapi/runtime is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: ? → npm/@tailwindcss/postcss@4.3.1 → npm/@emnapi/runtime@1.11.1

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@emnapi/runtime@1.11.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm @typescript-eslint/eslint-plugin is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: package.json → npm/@typescript-eslint/eslint-plugin@8.61.0

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@typescript-eslint/eslint-plugin@8.61.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm eslint-plugin-react is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: package.json → npm/eslint-plugin-react@7.37.5

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/eslint-plugin-react@7.37.5. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm immer is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: ? → npm/@reduxjs/toolkit@2.12.0 → npm/immer@11.1.8

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/immer@11.1.8. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm js-yaml is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: extension/package.json → npm/js-yaml@4.2.0

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/js-yaml@4.2.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
License policy violation: npm lightningcss-android-arm64 under MPL-2.0

Location: Package overview

From: ? → npm/@tailwindcss/postcss@4.3.1 → npm/lightningcss-android-arm64@1.32.0

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/lightningcss-android-arm64@1.32.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
License policy violation: npm lightningcss-darwin-arm64 under MPL-2.0

Location: Package overview

From: ? → npm/@tailwindcss/postcss@4.3.1 → npm/lightningcss-darwin-arm64@1.32.0

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/lightningcss-darwin-arm64@1.32.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
License policy violation: npm lightningcss-darwin-x64 under MPL-2.0

Location: Package overview

From: ? → npm/@tailwindcss/postcss@4.3.1 → npm/lightningcss-darwin-x64@1.32.0

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/lightningcss-darwin-x64@1.32.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
License policy violation: npm lightningcss-freebsd-x64 under MPL-2.0

Location: Package overview

From: ? → npm/@tailwindcss/postcss@4.3.1 → npm/lightningcss-freebsd-x64@1.32.0

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/lightningcss-freebsd-x64@1.32.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
License policy violation: npm lightningcss-linux-arm-gnueabihf under MPL-2.0

Location: Package overview

From: ? → npm/@tailwindcss/postcss@4.3.1 → npm/lightningcss-linux-arm-gnueabihf@1.32.0

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/lightningcss-linux-arm-gnueabihf@1.32.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
License policy violation: npm lightningcss-linux-arm64-gnu under MPL-2.0

Location: Package overview

From: ? → npm/@tailwindcss/postcss@4.3.1 → npm/lightningcss-linux-arm64-gnu@1.32.0

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/lightningcss-linux-arm64-gnu@1.32.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
License policy violation: npm lightningcss-linux-arm64-musl under MPL-2.0

Location: Package overview

From: ? → npm/@tailwindcss/postcss@4.3.1 → npm/lightningcss-linux-arm64-musl@1.32.0

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/lightningcss-linux-arm64-musl@1.32.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
License policy violation: npm lightningcss-linux-x64-gnu under MPL-2.0

Location: Package overview

From: ? → npm/@tailwindcss/postcss@4.3.1 → npm/lightningcss-linux-x64-gnu@1.32.0

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/lightningcss-linux-x64-gnu@1.32.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
License policy violation: npm lightningcss-linux-x64-musl under MPL-2.0

Location: Package overview

From: ? → npm/@tailwindcss/postcss@4.3.1 → npm/lightningcss-linux-x64-musl@1.32.0

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/lightningcss-linux-x64-musl@1.32.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
License policy violation: npm lightningcss-win32-arm64-msvc under MPL-2.0

Location: Package overview

From: ? → npm/@tailwindcss/postcss@4.3.1 → npm/lightningcss-win32-arm64-msvc@1.32.0

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/lightningcss-win32-arm64-msvc@1.32.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
License policy violation: npm lightningcss-win32-x64-msvc under MPL-2.0

Location: Package overview

From: ? → npm/@tailwindcss/postcss@4.3.1 → npm/lightningcss-win32-x64-msvc@1.32.0

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/lightningcss-win32-x64-msvc@1.32.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
License policy violation: npm lightningcss under MPL-2.0

Location: Package overview

From: ? → npm/@tailwindcss/postcss@4.3.1 → npm/lightningcss@1.32.0

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/lightningcss@1.32.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm webpack is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: package.json → npm/webpack@5.107.2

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/webpack@5.107.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Consolidates multiple Dependabot npm/yarn updates across the Freighter monorepo into a single set of manifest bumps (and corresponding lockfile resolution per PR description), aiming to keep workspace dependencies aligned and security patches applied.

Changes:

  • Bumped a broad set of root toolchain/dev dependencies (Babel, ESLint tooling, Jest helpers, Webpack, Prettier, etc.).
  • Updated the extension workspace’s runtime + build dependencies (React, react-router-dom, Redux Toolkit, Tailwind, Playwright, and various supporting libs).
  • Updated docs (Docusaurus + React + styled-components) and aligned shared workspace versions (e.g., semver, prettier).

Reviewed changes

Copilot reviewed 5 out of 6 changed files in this pull request and generated no comments.

Show a summary per file
File Description
package.json Updates root build/lint/test toolchain dependency versions.
extension/package.json Updates extension runtime/build dependency versions (React ecosystem, tooling, and security-related transitive bumps).
docs/package.json Updates docs site dependencies (Docusaurus + React + styled-components).
@stellar/freighter-api/package.json Bumps semver dependency used by the published SDK package.
@shared/api/package.json Aligns prettier version within the shared API workspace.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Layers the four lockfile-only dependabot security/transitive bumps on top
of the #2843 minor-and-patch group merge, then runs `yarn dedupe`:

  joi             17.13.3 -> 17.13.4   (#2842)
  hono            4.11.8  -> 4.12.25   (#2837)
  shell-quote     1.8.3   -> 1.8.4     (#2836)
  brace-expansion 1.1.12  -> 1.1.15    (#2824)

hono is pinned to 4.12.25 (the dependabot target) rather than the
highest in-range 4.12.26.

js-yaml 4.1.1 -> 4.2.0 (#2847/#2848) is already included via the #2843
minor-and-patch group, so those two PRs are redundant.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@piyalbasu
piyalbasu force-pushed the dependabot-consolidated-npm-jun branch from 6dc6595 to 4cc5700 Compare June 18, 2026 16:39
The minor-and-patch group bumps surfaced type errors that webpack's
transpile-only build missed but fork-ts-checker (CI) catches:

- @types/webextension-polyfill 0.12.5: onMessage.addListener callback
  params no longer get a contextual type -> annotate message/request as
  unknown and sender as browser.Runtime.MessageSender (background/index.ts).
- @types/chrome 0.1.43: StorageArea now requires getBytesInUse + getKeys
  -> add them to the mock storage api (test-helpers.ts).
- @reduxjs/toolkit 2.12: AsyncThunk action-creator arg for an opaque
  generic resolves to `Arg & undefined` -> cast the dispatched arg
  accordingly (useSetupSigningFlow.ts).

Verified: tsc --noEmit clean, build:extension exit 0 (fork-ts-checker),
test:ci 1050 pass.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@github-actions

github-actions Bot commented Jun 18, 2026 •

Copy link
Copy Markdown
Contributor

PR Preview build is ready: https://github.com/stellar/freighter/releases/tag/untagged-5c002b0a396a7881beb7 (SDF collaborators only — install instructions in the release description)

Comment thread extension/src/popup/helpers/useSetupSigningFlow.ts Outdated
…cast

Per review feedback: `as Arg & undefined` collapses to `never` for an
object payload, giving no real type safety. The hook only ever dispatches
`{ uuid, apiVersion? }`, so make that shape concrete (SigningPayload) and
type signFn as AppThunk<SigningPayload> — no cast needed. All three call
sites (signTransaction, signEntry, signBlob) remain assignable.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@piyalbasu
piyalbasu merged commit bfd5c65 into master Jun 18, 2026
11 checks passed
@piyalbasu
piyalbasu deleted the dependabot-consolidated-npm-jun branch June 18, 2026 19:25
aristidesstaffieri added a commit that referenced this pull request Jun 18, 2026
…2860)

* bump versions to 5.42.0 (#2845)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

* Replace 24h absolute auto-lock with configurable idle timer (#2802)

* Replace 24h absolute auto-lock with configurable idle timer

Replaces the hardcoded 24-hour 'session length' alarm with a pure
idle-based auto-lock timer. The browser session locks after a
configurable number of minutes of user inactivity (1, 5, 15, 30, 60),
defaulting to 15. Genuine user interaction in any extension page pings
the background via a new USER_ACTIVITY message, which rearms the alarm.

- @shared/constants/autoLock.ts: single source of truth for valid
  timeouts, default, and coercion helpers.
- SessionTimer: rewritten as a class that reads the persisted timeout
  on every reset; same-name browser.alarms.create atomically replaces
  the in-flight deadline.
- saveSettings: validates and persists the new field; when the new
  timeout is shorter than the elapsed idle time on an unlocked wallet,
  locks immediately rather than scheduling an alarm in the past.
- userActivity handler: gated by isFromExtensionPage in
  popupMessageListener so dApp content scripts cannot extend a session.
  Rejects pings when the wallet is locked.
- useActivityPing + ActivityTracker: mousedown/keydown/touchstart/wheel
  listeners on window with 5s leading-edge throttle; only active when
  the wallet is unlocked.
- Preferences UI: dropdown driven by VALID_AUTO_LOCK_TIMEOUT_MINUTES.
- Tests cover SessionTimer, userActivity, save/load validation, and
  the elapsed-idle short-circuit; mock fixtures updated to include
  the new field.

Closes #2082

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Address PR review feedback from Copilot reviewer

- Preferences: provide grammatically correct English defaultValue
  fallbacks in formatTimeoutLabel so missing i18n keys don't render
  "5 minute" / "5 hour" in dev or partial locales. Keys are now
  scoped (autoLockTimeout.minutes / autoLockTimeout.hours) so the
  fallback is unambiguous.
- Preferences: type autoLockTimeoutMinutesValue as string (the
  runtime value from Formik/<select>) and make the conversion in
  handleSubmit explicit rather than relying on the field type
  being narrower than reality.
- useActivityPing: send activePublicKey as an empty string instead
  of null to match BaseMessage typing. The background's mismatch
  check (`request.activePublicKey && …`) treats empty-string
  exactly like the previous null (skip the check).
- useActivityPing test: update expectation to match the empty string.
- Prettier: reflow newly added autoLockTimeoutMinutes fields in
  SignTransaction.test.tsx / Account.test.tsx test fixtures (and
  three other lightly drifted spots prettier picked up at the same
  time).

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Address PR review feedback: treat shortened-timeout save as activity; simplify userActivity

Two reviewer questions on PR #2802:

1. saveSettings.ts: when the user shortens the auto-lock timeout, the
   save itself is a user action — we should rearm the timer with the
   new timeout, not synthesize an immediate lock just because the
   elapsed-idle time of the in-flight alarm exceeds the new threshold.
   Remove the elapsed-idle / immediate-lock branch entirely along with
   the previousAutoLockTimeoutMinutes capture, the existingAlarm
   inspection, and the wasLocked round-trip.

2. userActivity.ts: a USER_ACTIVITY ping cannot arrive on a locked
   wallet by design — the popup-side useActivityPing hook only attaches
   event listeners while unlocked, and popupMessageListener gates the
   message behind isFromExtensionPage. Drop the redundant in-handler
   unlocked check (and its dependencies on sessionStore /
   buildHasPrivateKeySelector / localStore); the handler now just
   delegates to sessionTimer.resetSession.

Knock-on cleanups:

- Remove the wasLocked field from saveSettings's return type, from the
  @shared/api/internal saveSettings response, and from the popup
  settings thunk; drop the lockAccount dispatch in that thunk.
- Remove the now-unused lockAccount reducer / action from
  popup/ducks/accountServices.
- Update tests: loadSaveSettings.test.ts now asserts that shortening
  the timeout rearms (rather than locking); userActivity.test.ts
  collapses to a single "always rearms" case; settings.test.ts
  verifies the popup auth slice is left untouched after save.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Strengthen shortened-timeout regression test

Internal review-fix flagged the new "rearms when timeout is shortened"
test as too weak — without an alarmsGet stub the parent implementation
resetSession(), so the test could not distinguish parent from current
behavior. Mock alarmsGet to return an in-flight alarm whose elapsed
idle time (59 min) far exceeds the new 5 min timeout: that is the
exact scenario where the parent code would have synthesized an
immediate lock. The current implementation must just rearm.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Flip popup to unlock screen when idle auto-lock fires

The previous PR locked the wallet on the background side (cleared the
hashKey via timeoutAccountAccess + lockHardwareWallet) but did not
notify any open extension UI surface. The popup, sidebar, and
standalone signing/grant-access windows kept rendering whichever view
they were on — Account, Assets, History — and the user only learned
the wallet had locked when they tried to take a private-key-requiring
action and were ambushed by a password prompt mid-flow.

Make the background broadcast a SESSION_LOCKED runtime message after
clearSession runs in the alarm handler. Add a SessionLockListener
mounted inside the Router (so it has access to useNavigate) that
dispatches a new lockAccount reducer (clearing hasPrivateKey,
publicKey, allAccounts, bipPath, tokenIdList) and navigates to
ROUTES.unlockAccount. applicationState is left untouched so
<UnlockAccountRoute> still renders <UnlockAccount> rather than
redirecting to <Welcome>.

The mechanism mirrors the original PR description's intent — a
push-based notification from background to popup so the UI flip is
not gated on the next useGetAppData refetch — but applies to the
regular idle-alarm path that was missed when the shortened-timeout
immediate-lock variant was simplified out earlier in review.

Tests added:
  - background/__tests__/initAlarmListener.test.ts — broadcast happens
    after clearSession; sendMessage rejection (no receivers) is swallowed;
    unrelated alarms are ignored.
  - popup/ducks/__tests__/accountServices.test.ts — lockAccount clears
    private-key-derived state and preserves applicationState.
  - popup/components/__tests__/SessionLockListener.test.tsx — listener
    registers/unregisters, dispatches lockAccount + navigates on
    SESSION_LOCKED, ignores unrelated messages.

Addresses https://github.com/stellar/freighter/pull/2802#pullrequestreview-3439015700

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Preserve interrupted route context across auto-lock

Internal review-fix round identified that the previous commit dropped
location.state.from and location.search when navigating to the unlock
screen on SESSION_LOCKED. UnlockAccount reads state.from.pathname +
location.search to return the user to the interrupted flow after a
successful unlock — without this, a user auto-locked mid-grant-access
or mid-signing was returned to the default Account page on unlock
rather than back into the approval flow, exactly the way SignTransaction
and GrantAccess already preserve context for their own reroutes.

Capture useLocation() in SessionLockListener and navigate with
{state: {from: location}} + location.search appended, mirroring the
<Navigate to={...} state={{from: location}} replace /> pattern used by
the in-flow reroutes. Also short-circuit when the current pathname is
already /unlock-account so a redundant broadcast cannot clobber a
state.from already set by an earlier reroute (e.g. UnlockAccountRoute
firing before the SESSION_LOCKED message arrives).

Tests extended to cover:
  - state.from + location.search preserved from /grant-access?...
  - no-op when already on /unlock-account

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Address PR review feedback: idle auto-lock cross-surface consistency

Fixes three correctness bugs in the idle auto-lock flow reported by
@leofelix077 on PR #2802:

Bug A — Popup stays on Account after auto-lock fires. useGetAppData
clearSession deliberately keeps publicKey and only wipes hashKey. Now
after the alarm fires lands on the unlock screen.

Bug B — clearSession's redux dispatch raced service-worker
termination. buildStore's subscribe(saveStore) call was fire-and-forget;
when the alarm fired with no popup open, chrome.storage.session.set
often didn't complete before SW termination and the next popup read
stale hashKey. Fix:

  - Export flushSessionStore(store) from background/store.ts that
    explicitly awaits chrome.storage.session.set, and route the
    subscribe-based save through it too so persistence is unified.
  - Await flushSessionStore in clearSession (between the dispatches
    and the TEMPORARY_STORE_ID removal) and in signOut (between
    dispatch(logOut()) and the TEMPORARY_STORE_ID removal).
  - Defense-in-depth in buildHasPrivateKeySelector: treat TEMPORARY_STORE_ID
    absence as authoritative, so a partial lock cannot leave the wallet
    looking unlocked even if a future flush ever races.

Bug C — Unlocking one surface didn't unlock the others. Each surface
owns its own redux store, so only the surface that submitted the
password saw confirmPassword.fulfilled. Fix:

  - New SERVICE_TYPES.SESSION_UNLOCKED.
  - New broadcastSessionState(type) helper (background/messageListener/
    helpers/broadcast-session-state.ts) that wraps the
    browser.runtime.sendMessage + no-receiver swallow pattern.
  - initAlarmListener replaces its inline try/catch with the helper.
  - signOut now broadcasts SESSION_LOCKED after the lock work, so
    explicit sign-out also flips other surfaces' UI.
  - loginToAllAccounts awaits flushSessionStore then broadcasts
    SESSION_UNLOCKED on the success path.
  - SessionLockListener handles SESSION_UNLOCKED: loadAccount +
    dispatch(saveAccount), and navigate to ROUTES.account only when on
    ROUTES.unlockAccount or ROUTES.verifyAccount. Does not restore
    state.from cross-surface (only the surface that entered the
    password restores its own interrupted flow).

Tests:
  - loadSaveSettings.test.ts — makeLocalStore now seeds TEMPORARY_STORE_ID
    by default and accepts an opt-out for locked-wallet cases.
  - SessionLockListener.test.tsx — new SESSION_UNLOCKED cases.
  - session.test.ts — clearSession awaits flushSessionStore.
  - signOut.test.ts (new) — signOut awaits flushSessionStore then
    broadcasts SESSION_LOCKED.
  - login-all-accounts.test.ts (new) — loginToAllAccounts awaits
    flushSessionStore then broadcasts SESSION_UNLOCKED on success.

yarn test:ci: 983 passed, 72 skipped, 0 failed.
yarn build:extension: clean.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Address internal review: require hasPrivateKey in useGetAppData cache fast path

Internal review-fix round 1 (CONCERNS) noted Bug A was only partially
addressed: the post-loadAccount reroute in useGetAppData correctly
useGetAppData.tsx:58 short-circuited on currentAccount.publicKey alone.
After a locked loadAccount response is saved into Redux (saveAccount),
a later cached fetchData could still return RESOLVED for
publicKey-present + hasPrivateKey:false and bypass the reroute.

Fix: also require currentAccount.hasPrivateKey in the cache fast path,
so the publicKey-vs-hasPrivateKey invariant is consistent across both
the cached and freshly-loaded paths.

Tests:
  - useGetAppData.test.tsx (new) — direct regression test for Bug A:
    cached publicKey + hasPrivateKey:false re-routes to unlockAccount;
    cached publicKey + hasPrivateKey:true short-circuits to RESOLVED.
  - Backfilled hasPrivateKey: true in five existing test files whose
    Redux preloadedState seeded an unlocked account with only publicKey:
    AddFunds.test.tsx, GrantAccess.test.tsx, SearchAsset.test.tsx,
    useGetWalletsData.test.tsx, useGetAssetDomainsWithBalances.test.tsx.

yarn test:ci: 985 passed, 72 skipped, 0 failed.
yarn build:extension: clean.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Make SessionLockListener handler synchronous to avoid claiming runtime.onMessage response slot

When multiple Freighter UI surfaces are open (popup, sidebar, fullscreen),
they each mount a SessionLockListener that registers a runtime.onMessage
listener. browser.runtime.sendMessage delivers to every extension context
except the sender, so cross-surface requests (LOAD_ACCOUNT,
GET_IS_ACCOUNT_MISMATCH, CONFIRM_PASSWORD, etc.) also reach the other
surfaces' SessionLockListener handler.

The previous handler was an async function, which always returned a
Promise. Chrome interprets a Promise return as 'this listener will
respond', and that immediately-resolved Promise(undefined) could win the
race against the background's real handler. The sender then received
undefined/null instead of the real payload, surfacing as:

- 'Cannot read properties of null (reading \'publicKey\')' when opening
  a second surface (the chained appData fetch dereferenced the null
  account).
- 'Cannot read properties of null (reading \'error\')' beneath the
  password input when entering the password on one surface while another
  was open (activePublicKeyMiddleware fires getIsAccountMismatch on every
  pending action; its internal client does 'if (response.error)' which
  throws on a null response, and the thrown message lands in authError).

Fix: the handler is now synchronous. For unrelated message types it
returns undefined immediately, leaving the response slot to the
background. For SESSION_LOCKED / SESSION_UNLOCKED it still returns
undefined synchronously (the background's broadcast doesn't await a
reply); the SESSION_UNLOCKED loadAccount round-trip runs as a
fire-and-forget side effect.

Adds two regression tests asserting the handler returns undefined
synchronously for unrelated messages and for the broadcast types.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Move post-unlock navigation from SessionLockListener to UnlockAccount

The SessionLockListener was navigating to /account on SESSION_UNLOCKED
from the /unlock-account route. Because runtime.sendMessage broadcasts
to every extension context — including the popup that initiated the
unlock via confirmPassword — this navigation raced the UnlockAccount
post-submit navigation. In the grant-access flow that meant the popup
sometimes landed on /account instead of the /grant-access destination
preserved via state.from, which broke the
freighterApiIntegration.test.ts "should get public key when logged
out" e2e test.

Move navigation responsibility to UnlockAccount itself: it watches
hasPrivateKey in redux and navigates to from || /account on the
false → true transition. This unifies both surfaces — the one that
submitted the password and the passive surface that received the
cross-surface SESSION_UNLOCKED broadcast — through a single code path
and removes the race.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Reset idle alarm when a new Freighter surface mounts unlocked

Previously the idle auto-lock alarm only rearmed on user input events
(mousedown, keydown, touchstart, wheel). When a dApp triggered a flow
that opened a new popup near the end of the idle window, the user
could be locked out mid-flow before they ever interacted with the new
surface.

Ping USER_ACTIVITY once when useActivityPing mounts in the unlocked
state. Opening any Freighter surface (popup, sidebar, fullscreen) is
itself an act of user intent and is enough signal to treat the user
as active. The existing throttle and isUnlocked guard naturally
suppress the mount ping when the wallet is locked or when an input
event fires within the same throttle window.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Fire surface-mount activity ping unconditionally; gate on lock state in background

The previous mount ping in useActivityPing was gated on the popup-side
isUnlocked signal, which is read from redux and only flips true after
loadAccount roundtrips to the background and dispatches saveAccount.
On a freshly-spawned dApp popup that gate is racy at best and silently
fails to fire at worst — users still saw the wallet auto-lock partway
through a signing flow because the new surface never managed to rearm
the alarm before the previous deadline elapsed.

Fix it by separating the two responsibilities:

  - The popup fires the mount ping unconditionally, exactly once per
    surface mount, in its own dependency-less useEffect. Opening any
    Freighter UI is itself a user-initiated action.
  - The background's userActivity handler is now the authoritative
    gate: it reads hashKey and isHardwareWalletActive directly from
    its own state and only rearms the idle alarm when the wallet is
    actually unlocked (hot or HW). A ping that arrives on a locked
    wallet is dropped — there is no live session to extend.

This matches the user's stated requirement ('reset the timer when a
new instance opens, as long as Freighter is currently unlocked') while
removing the dependency on a redux signal that the popup cannot
guarantee has hydrated by the time the ping needs to fire.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* TEMP: instrument auto-lock path for diagnosis (will be reverted)

Adds console.warn at four points so we can pinpoint which link in the
chain is failing:

  1. popup useActivityPing.sendPing — fires when the popup attempts
     to send USER_ACTIVITY (mount or event-driven).
  2. popup useActivityPing.sendPing response/error — fires when the
     background response (or rejection) lands back in the popup.
  3. background userActivity handler — fires when BG receives the
     ping, with hot/HW unlock state.
  4. background SessionTimer.resetSession — fires when the alarm is
     about to be rearmed, with the resolved delay.
  5. background initAlarmListener onAlarm — fires when the alarm
     actually fires (i.e. wallet about to lock).

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Accept extension-origin tab senders in popupMessageListener gate

Root cause of the auto-lock-doesn't-reset-on-new-popup bug found via
runtime instrumentation: the popup's USER_ACTIVITY mount ping was being
rejected by popupMessageListener with { error: 'Unauthorized' }.

The isFromExtensionPage check, introduced with sidebar support, was:

  const isFromExtensionPage =

The intent was to reject content scripts (dApp pages) which always
carry a sender.tab. The flaw: dApp-spawned signing popups created via
browser.windows.create({ type: 'popup', url: 'index.html#...' }) are
also full tabs and therefore also have sender.tab set. Their USER_ACTIVITY
pings (and REJECT_SIGNING_REQUEST, OPEN_SIDEBAR) were being dropped as
Unauthorized — so the new popup never reset the idle alarm, and the
user got auto-locked partway through signing, exactly as reported.

The reliable distinguishing signal is sender.url: extension pages —
whether tabless (browser-action popup, sidepanel) or tabbed (popup
window, options page, fullscreen) — have a chrome-extension:// URL,
while content scripts have the dApp's page URL.

The new check:

  - sender.id matches our own extension (same as before), AND
  - either sender.tab is absent (legacy fast path for popup/sidepanel)
    OR sender.url starts with our extension origin (covers all tabbed
    extension pages).

Adds a regression test in sidebar.test.ts for the windows.create
popup case to lock in the fix. The other isFromExtensionPage call
sites (REJECT_SIGNING_REQUEST, OPEN_SIDEBAR) had the same latent
issue and are fixed by the same change.

Reverts the earlier diagnostic console.warn instrumentation.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Drop surface-mount USER_ACTIVITY ping; only user input resets the idle timer

Previously, mounting any Freighter surface (popup, sidebar, fullscreen,
dApp-spawned signing popup) fired a USER_ACTIVITY ping that reset the
idle auto-lock alarm. The intent was to avoid mid-flow lockout when a
dApp opens a fresh popup near the end of the idle window.

The tradeoff: dApp-triggered signing popups are programmatic. A
malicious or compromised dApp could call requestSign() on a timer to
spawn fresh popups indefinitely, each one resetting the idle alarm
without any actual user presence. This effectively neutralizes the
user's auto-lock setting.

Align with MetaMask and Phantom: only direct user input inside the
Freighter UI (mousedown, keydown, touchstart, wheel) resets the timer.
Surface mounts no longer ping. A surface that opens within the idle
window still has whatever time was left on the clock; if the user
engages with it, the throttled event handler rearms the alarm as
expected.

The popupMessageListener gate widening from c0f2e163 is retained: it
benefits OPEN_SIDEBAR, REJECT_SIGNING_REQUEST, and event-driven
USER_ACTIVITY pings sent from extension-origin tabbed surfaces (popup
windows, fullscreen, options). The background-side authoritative
unlock gate from b3868f9c is also retained as cheap defense-in-depth
against stale popup-side redux state.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Address review feedback: scope-drift cleanup and small hardening

Addresses the consolidated review asks from PR #2802 rounds 1-3,
all of which are local cleanups; no externally-observable behavior
change beyond the two flagged hardening fixes (saveSettings
validation drop and handleSignedHwPayload rearm narrowing).

userActivity.ts handler:
  Rewrite the doc comment to match the shipped behavior. The previous
  text still described an unconditional surface-mount ping that was
  removed in 7b3e4dd8 for the security reason captured in that
  commit message (dApp-spawned signing popups would otherwise extend
  the alarm without user presence).

saveSettings.ts handler:
  Drop the {error: 'Invalid autoLockTimeoutMinutes'} early-return.
  The response type has no error variant the popup could surface,
  and the only producer is a <Select> populated from
  VALID_AUTO_LOCK_TIMEOUT_MINUTES and coerced before dispatch.
  Coerce malformed input to the default instead, matching what the
  storage-read path already does. Tests updated accordingly.

handleSignedHwPayload.ts handler:
  Move sessionTimer.resetSession() into the success branch. A
  malformed request (missing uuid, or no matching queue entry) is
  never a legitimate signal of user presence and must not extend
  the idle deadline. Tests flipped + a new no-matching-uuid case
  added.

signOut.ts handler:
  Stop the auto-lock alarm BEFORE mutating session state, flushing,
  and removing the temporary store. Eliminates the race window
  where a pending alarm could fire clearSession on already-cleared
  state and emit a duplicate SESSION_LOCKED broadcast. Test asserts
  the full new ordering: stop < dispatch < flush < remove <
  broadcast.

broadcast-session-state.ts:
  Replace bare 'catch {}' with a catch that warns on errors which
  are NOT the well-known 'no receivers' patterns. The common case
  (no UI surfaces open) stays silent; genuine broadcast failures
  are no longer invisible.

SessionLockListener:
  Move 'location' into a useRef so the runtime.onMessage listener
  doesn't re-register on every navigation. Functionally identical
  (cleanup unregisters first), but avoids re-binding the listener
  on a hot path.

loadSaveSettings.test.ts:
  Drop the entire unreferenced browser.alarms shim (alarmsGet /
  alarmsCreate / alarmsClear and the beforeEach that installs them
  on the polyfill). The current saveSettings handler operates
  entirely through the injected sessionTimer mock; the shim was
  scaffolding from the removed elapsed-idle short-circuit path.
  Also remove both '(result as any).wasLocked).toBeUndefined()'
  assertions, since the response type no longer admits the field,
  and rewrite the shortened-timeout test comment to describe the
  current save-as-activity behavior rather than the removed
  immediate-lock branch.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Address PR review feedback from @piyalbasu

Six concrete code issues raised on PR #2802:

1. signOut handler now dispatches lockHardwareWallet() alongside
   logOut() so HW sessions are locked on explicit sign-out. logOut
   resets state to initialState (isHardwareWalletLocked: false) but
   KEY_ID (hw: prefix) is intentionally not cleared, so without this
   the HW branch of buildHasPrivateKeySelector would report UNLOCKED
   after sign-out.

2. loginToAllAccounts's two catch blocks now rethrow after
   clearSession(). Previously execution fell through to
   startSession() + broadcastSessionState(SESSION_UNLOCKED), arming an
   idle alarm and telling every Freighter surface the wallet was
   unlocked even though it had just been cleared.

3. importHardwareWallet now arms the idle auto-lock alarm.
   popupMessageListener threads sessionTimer into the handler so
   HW-only sessions imported via this path are subject to the same
   auto-lock guarantees as hot-wallet sessions.

4. SessionLockListener wraps the SESSION_UNLOCKED fire-and-forget
   loadAccount in try/catch, and guards against an undefined response.
   Previously a rejection or undefined result could crash the surface
   with 'Cannot destructure property hasPrivateKey of undefined'.

5. SessionLockListener now dispatches lockAccount() unconditionally on
   SESSION_LOCKED; only the navigate is suppressed when the surface is
   already on /unlock-account. Without this, a surface parked on
   /unlock-account kept hasPrivateKey: true in redux while the
   background was locked, and ActivityTracker kept sending pings.

6. saveSettings now uses a precise SaveSettingsResponse type end-to-end
   (handler return, @shared/api client, popup duck thunk), removing
   the 'as unknown as typeof response' cast at the client boundary.
   sendMessageToBackground is generic over the response type so
   handler boundaries can be typed without per-call coercion.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Drop loadSettings cast using generic sendMessageToBackground

Folds in the adjacent cleanup flagged by internal review: loadSettings
was the last remaining 'as unknown as Promise<...>' cast in the client
API surface. Now that sendMessageToBackground is generic, it can carry
the return type directly.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Add dedicated Auto-Lock Timer settings page under Security

Move the auto-lock timer from a dropdown in Preferences to a
dedicated full-page selector under Security, matching the Figma
design at node 5578:17977.

Changes:
- @shared/constants/autoLock.ts: expand VALID_AUTO_LOCK_TIMEOUT_MINUTES
  to [1, 5, 15, 30, 60, 240, 1440] (adds 4h and 24h options); move
  formatTimeoutLabel helper here from Preferences
- Security/index.tsx: add Auto-lock timer nav item with Icon.ClockSnooze
- AutoLockTimer/index.tsx: new view with tap-to-select list; reads live
  selected value from Redux (autoLockTimeoutMinutesSelector), saves
  immediately on tap with isSaving guard
- AutoLockTimer/styles.scss: card-style option rows with dividers and
  check icon
- Preferences/index.tsx: remove auto-lock timer section; pass through
  current Redux value unchanged on form submit
- routes.ts, metricsNames.ts, metrics/views.ts: register new route
- Router.tsx: add route for AutoLockTimer

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Change 4h option to 6h, add 12h option, default to 12h

- Replace 240 min (4h) with 360 min (6h) in VALID_AUTO_LOCK_TIMEOUT_MINUTES
- Add 720 min (12h) to the list
- Change DEFAULT_AUTO_LOCK_TIMEOUT_MINUTES from 15 to 720 (12h)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Restore saveSettings error envelope check

The background's popupMessageListener returns { error: "..." } when
activePublicKey doesn't match (e.g. account switched in another surface).
Commit c9487e61 removed the only path that surfaced this envelope, so the
error object was silently treated as a SaveSettingsResponse — writing
undefined into every redux field and crashing downstream selectors.

Restore a runtime check that throws on error envelopes before returning
the response. The sendMessageToBackground generic is widened to include
the error shape so the 'in' narrowing is type-safe without needing a
type assertion.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Piyal Basu <pbasu235@gmail.com>

* deps: consolidated dependabot npm bumps (Jun) — group #2843 + 4 transitive (#2849)

* Bump the minor-and-patch group across 3 directories with 66 updates

Bumps the minor-and-patch group with 66 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.25.8` | `7.29.7` |
| [@babel/eslint-parser](https://github.com/babel/babel/tree/HEAD/eslint/babel-eslint-parser) | `7.25.8` | `7.29.7` |
| [@babel/plugin-proposal-optional-chaining](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-proposal-optional-chaining) | `7.18.9` | `7.21.0` |
| [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) | `7.25.8` | `7.29.7` |
| [@babel/preset-react](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-react) | `7.26.3` | `7.29.7` |
| [@babel/preset-typescript](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-typescript) | `7.25.7` | `7.29.7` |
| [@testing-library/dom](https://github.com/testing-library/dom-testing-library) | `10.4.0` | `10.4.1` |
| [@testing-library/jest-dom](https://github.com/testing-library/jest-dom) | `6.6.3` | `6.9.1` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.20.0` | `8.61.0` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.20.0` | `8.61.0` |
| [@vercel/ncc](https://github.com/vercel/ncc) | `0.38.3` | `0.44.0` |
| [babel-loader](https://github.com/babel/babel-loader) | `10.0.0` | `10.1.1` |
| [eslint-config-prettier](https://github.com/prettier/eslint-config-prettier) | `10.0.1` | `10.1.8` |
| [eslint-plugin-import](https://github.com/import-js/eslint-plugin-import) | `2.31.0` | `2.32.0` |
| [eslint-plugin-prettier](https://github.com/prettier/eslint-plugin-prettier) | `5.2.3` | `5.5.6` |
| [eslint-plugin-react](https://github.com/jsx-eslint/eslint-plugin-react) | `7.37.4` | `7.37.5` |
| [jest-localstorage-mock](https://github.com/clarkbw/jest-localstorage-mock) | `2.4.3` | `2.4.26` |
| [prettier](https://github.com/prettier/prettier) | `3.5.1` | `3.8.4` |
| [pretty-quick](https://github.com/prettier/pretty-quick) | `4.0.0` | `4.2.2` |
| [ts-loader](https://github.com/TypeStrong/ts-loader) | `9.5.1` | `9.6.0` |
| [webpack](https://github.com/webpack/webpack) | `5.104.1` | `5.107.2` |
| [webpack-dev-server](https://github.com/webpack/webpack-dev-server) | `5.2.3` | `5.2.5` |
| [jest-fixed-jsdom](https://github.com/mswjs/jest-fixed-jsdom) | `0.0.9` | `0.0.11` |
| [@docusaurus/core](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus) | `3.6.3` | `3.10.1` |
| [@docusaurus/preset-classic](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic) | `3.6.3` | `3.10.1` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.0.3` | `19.2.7` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.0.12` | `19.2.17` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.0.3` | `19.2.7` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.0.3` | `19.2.3` |
| [react-is](https://github.com/facebook/react/tree/HEAD/packages/react-is) | `19.0.3` | `19.2.7` |
| [styled-components](https://github.com/styled-components/styled-components) | `6.1.14` | `6.4.2` |
| [@amplitude/analytics-browser](https://github.com/amplitude/Amplitude-TypeScript) | `2.37.0` | `2.44.1` |
| [@amplitude/experiment-js-client](https://github.com/amplitude/experiment-js-client/tree/HEAD/packages/experiment-browser) | `1.20.4` | `1.21.1` |
| [@ledgerhq/hw-app-str](https://github.com/LedgerHQ/ledger-live) | `7.2.0` | `7.7.4` |
| [@ledgerhq/hw-transport-webhid](https://github.com/LedgerHQ/ledger-live) | `6.30.6` | `6.35.4` |
| [@radix-ui/react-dialog](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dialog) | `1.1.15` | `1.1.16` |
| [@radix-ui/react-popover](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/popover) | `1.1.15` | `1.1.16` |
| [@reduxjs/toolkit](https://github.com/reduxjs/redux-toolkit) | `2.5.0` | `2.12.0` |
| [@stellar/design-system](https://github.com/stellar/stellar-design-system) | `3.2.7` | `3.2.8` |
| [@tailwindcss/postcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss) | `4.1.18` | `4.3.1` |
| [@testing-library/react](https://github.com/testing-library/react-testing-library) | `16.3.0` | `16.3.2` |
| [@types/chrome](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/chrome) | `0.0.287` | `0.1.43` |
| [@types/webextension-polyfill](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/webextension-polyfill) | `0.12.0` | `0.12.5` |
| [css-loader](https://github.com/webpack/css-loader) | `7.1.2` | `7.1.4` |
| [formik](https://github.com/jaredpalmer/formik) | `2.4.6` | `2.4.9` |
| [html-webpack-plugin](https://github.com/jantimon/html-webpack-plugin) | `5.6.3` | `5.6.7` |
| [i18next-browser-languagedetector](https://github.com/i18next/i18next-browser-languageDetector) | `8.0.5` | `8.2.1` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.1` | `4.2.0` |
| [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` |
| [@types/lodash](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/lodash) | `4.17.16` | `4.17.24` |
| [mini-css-extract-plugin](https://github.com/webpack/mini-css-extract-plugin) | `2.9.2` | `2.10.2` |
| [react-copy-to-clipboard](https://github.com/nkbt/react-copy-to-clipboard) | `5.1.0` | `5.1.1` |
| [react-redux](https://github.com/reduxjs/react-redux) | `9.2.0` | `9.3.0` |
| [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.5.1` | `7.17.0` |
| [sass](https://github.com/sass/dart-sass) | `1.86.3` | `1.101.0` |
| [semver](https://github.com/npm/node-semver) | `7.7.1` | `7.8.4` |
| [@types/semver](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/semver) | `7.5.8` | `7.7.1` |
| [svg-url-loader](https://github.com/bhovhannes/svg-url-loader) | `8.0.0` | `8.1.0` |
| [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.1.18` | `4.3.1` |
| [yup](https://github.com/jquense/yup) | `1.6.1` | `1.7.1` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.57.0` | `1.61.0` |
| [postcss](https://github.com/postcss/postcss) | `8.5.6` | `8.5.15` |
| [postcss-loader](https://github.com/webpack/postcss-loader) | `8.2.0` | `8.2.1` |
| [speed-measure-webpack-plugin](https://github.com/stephencookdev/speed-measure-webpack-plugin) | `1.5.0` | `1.6.0` |
| [terser-webpack-plugin](https://github.com/webpack/minimizer-webpack-plugin) | `5.3.14` | `5.6.1` |
| [url](https://github.com/defunctzombie/node-url) | `0.11.1` | `0.11.4` |

Bumps the minor-and-patch group with 1 update in the /@shared/api directory: [prettier](https://github.com/prettier/prettier).
Bumps the minor-and-patch group with 39 updates in the /extension directory:

| Package | From | To |
| --- | --- | --- |
| [prettier](https://github.com/prettier/prettier) | `3.5.3` | `3.8.4` |
| [pretty-quick](https://github.com/prettier/pretty-quick) | `4.1.1` | `4.2.2` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.0.3` | `19.2.7` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.0.12` | `19.2.17` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.0.3` | `19.2.7` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.1.2` | `19.2.3` |
| [@ledgerhq/hw-app-str](https://github.com/LedgerHQ/ledger-live) | `7.2.0` | `7.7.4` |
| [@ledgerhq/hw-transport-webhid](https://github.com/LedgerHQ/ledger-live) | `6.30.6` | `6.35.4` |
| [@radix-ui/react-dialog](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dialog) | `1.1.15` | `1.1.16` |
| [@radix-ui/react-popover](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/popover) | `1.1.15` | `1.1.16` |
| [@reduxjs/toolkit](https://github.com/reduxjs/redux-toolkit) | `2.5.0` | `2.12.0` |
| [@stellar/design-system](https://github.com/stellar/stellar-design-system) | `3.2.7` | `3.2.8` |
| [@tailwindcss/postcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss) | `4.1.18` | `4.3.1` |
| [@testing-library/react](https://github.com/testing-library/react-testing-library) | `16.3.0` | `16.3.2` |
| [@types/chrome](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/chrome) | `0.0.287` | `0.1.43` |
| [@types/webextension-polyfill](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/webextension-polyfill) | `0.12.0` | `0.12.5` |
| [css-loader](https://github.com/webpack/css-loader) | `7.1.2` | `7.1.4` |
| [formik](https://github.com/jaredpalmer/formik) | `2.4.6` | `2.4.9` |
| [html-webpack-plugin](https://github.com/jantimon/html-webpack-plugin) | `5.6.3` | `5.6.7` |
| [i18next-browser-languagedetector](https://github.com/i18next/i18next-browser-languageDetector) | `8.0.5` | `8.2.1` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.1` | `4.2.0` |
| [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` |
| [@types/lodash](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/lodash) | `4.17.16` | `4.17.24` |
| [mini-css-extract-plugin](https://github.com/webpack/mini-css-extract-plugin) | `2.9.2` | `2.10.2` |
| [react-copy-to-clipboard](https://github.com/nkbt/react-copy-to-clipboard) | `5.1.0` | `5.1.1` |
| [react-redux](https://github.com/reduxjs/react-redux) | `9.2.0` | `9.3.0` |
| [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.5.1` | `7.17.0` |
| [sass](https://github.com/sass/dart-sass) | `1.86.3` | `1.101.0` |
| [semver](https://github.com/npm/node-semver) | `7.7.1` | `7.8.4` |
| [@types/semver](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/semver) | `7.5.8` | `7.7.1` |
| [svg-url-loader](https://github.com/bhovhannes/svg-url-loader) | `8.0.0` | `8.1.0` |
| [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.1.18` | `4.3.1` |
| [yup](https://github.com/jquense/yup) | `1.6.1` | `1.7.1` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.57.0` | `1.61.0` |
| [postcss](https://github.com/postcss/postcss) | `8.5.6` | `8.5.15` |
| [postcss-loader](https://github.com/webpack/postcss-loader) | `8.2.0` | `8.2.1` |
| [speed-measure-webpack-plugin](https://github.com/stephencookdev/speed-measure-webpack-plugin) | `1.5.0` | `1.6.0` |
| [terser-webpack-plugin](https://github.com/webpack/minimizer-webpack-plugin) | `5.3.14` | `5.6.1` |
| [url](https://github.com/defunctzombie/node-url) | `0.11.1` | `0.11.4` |



Updates `@babel/core` from 7.25.8 to 7.29.7
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-core)

Updates `@babel/eslint-parser` from 7.25.8 to 7.29.7
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.7/eslint/babel-eslint-parser)

Updates `@babel/plugin-proposal-optional-chaining` from 7.18.9 to 7.21.0
- [Release notes](https://github.com/babel/babel/releases)
- [Commits](https://github.com/babel/babel/commits/v7.21.0/packages/babel-plugin-proposal-optional-chaining)

Updates `@babel/preset-env` from 7.25.8 to 7.29.7
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-preset-env)

Updates `@babel/preset-react` from 7.26.3 to 7.29.7
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-preset-react)

Updates `@babel/preset-typescript` from 7.25.7 to 7.29.7
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-preset-typescript)

Updates `@testing-library/dom` from 10.4.0 to 10.4.1
- [Release notes](https://github.com/testing-library/dom-testing-library/releases)
- [Changelog](https://github.com/testing-library/dom-testing-library/blob/main/CHANGELOG.md)
- [Commits](https://github.com/testing-library/dom-testing-library/compare/v10.4.0...v10.4.1)

Updates `@testing-library/jest-dom` from 6.6.3 to 6.9.1
- [Release notes](https://github.com/testing-library/jest-dom/releases)
- [Changelog](https://github.com/testing-library/jest-dom/blob/main/CHANGELOG.md)
- [Commits](https://github.com/testing-library/jest-dom/compare/v6.6.3...v6.9.1)

Updates `@typescript-eslint/eslint-plugin` from 8.20.0 to 8.61.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.61.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.20.0 to 8.61.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.61.0/packages/parser)

Updates `@vercel/ncc` from 0.38.3 to 0.44.0
- [Release notes](https://github.com/vercel/ncc/releases)
- [Commits](https://github.com/vercel/ncc/compare/0.38.3...0.44.0)

Updates `babel-loader` from 10.0.0 to 10.1.1
- [Release notes](https://github.com/babel/babel-loader/releases)
- [Changelog](https://github.com/babel/babel-loader/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel-loader/compare/v10.0.0...v10.1.1)

Updates `eslint-config-prettier` from 10.0.1 to 10.1.8
- [Release notes](https://github.com/prettier/eslint-config-prettier/releases)
- [Changelog](https://github.com/prettier/eslint-config-prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/eslint-config-prettier/compare/v10.0.1...v10.1.8)

Updates `eslint-plugin-import` from 2.31.0 to 2.32.0
- [Release notes](https://github.com/import-js/eslint-plugin-import/releases)
- [Changelog](https://github.com/import-js/eslint-plugin-import/blob/main/CHANGELOG.md)
- [Commits](https://github.com/import-js/eslint-plugin-import/compare/v2.31.0...v2.32.0)

Updates `eslint-plugin-prettier` from 5.2.3 to 5.5.6
- [Release notes](https://github.com/prettier/eslint-plugin-prettier/releases)
- [Changelog](https://github.com/prettier/eslint-plugin-prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/eslint-plugin-prettier/compare/v5.2.3...v5.5.6)

Updates `eslint-plugin-react` from 7.37.4 to 7.37.5
- [Release notes](https://github.com/jsx-eslint/eslint-plugin-react/releases)
- [Changelog](https://github.com/jsx-eslint/eslint-plugin-react/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jsx-eslint/eslint-plugin-react/compare/v7.37.4...v7.37.5)

Updates `jest-localstorage-mock` from 2.4.3 to 2.4.26
- [Release notes](https://github.com/clarkbw/jest-localstorage-mock/releases)
- [Commits](https://github.com/clarkbw/jest-localstorage-mock/compare/v2.4.3...v2.4.26)

Updates `prettier` from 3.5.1 to 3.8.4
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/3.5.1...3.8.4)

Updates `pretty-quick` from 4.0.0 to 4.2.2
- [Release notes](https://github.com/prettier/pretty-quick/releases)
- [Changelog](https://github.com/prettier/pretty-quick/blob/v4.2.2/CHANGELOG.md)
- [Commits](https://github.com/prettier/pretty-quick/compare/v4.0.0...v4.2.2)

Updates `ts-loader` from 9.5.1 to 9.6.0
- [Release notes](https://github.com/TypeStrong/ts-loader/releases)
- [Changelog](https://github.com/TypeStrong/ts-loader/blob/main/CHANGELOG.md)
- [Commits](https://github.com/TypeStrong/ts-loader/compare/v9.5.1...v9.6.0)

Updates `webpack` from 5.104.1 to 5.107.2
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/webpack/compare/v5.104.1...v5.107.2)

Updates `webpack-dev-server` from 5.2.3 to 5.2.5
- [Release notes](https://github.com/webpack/webpack-dev-server/releases)
- [Changelog](https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/webpack-dev-server/compare/v5.2.3...v5.2.5)

Updates `jest-fixed-jsdom` from 0.0.9 to 0.0.11
- [Release notes](https://github.com/mswjs/jest-fixed-jsdom/releases)
- [Commits](https://github.com/mswjs/jest-fixed-jsdom/compare/v0.0.9...v0.0.11)

Updates `@docusaurus/core` from 3.6.3 to 3.10.1
- [Release notes](https://github.com/facebook/docusaurus/releases)
- [Changelog](https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/docusaurus/commits/v3.10.1/packages/docusaurus)

Updates `@docusaurus/preset-classic` from 3.6.3 to 3.10.1
- [Release notes](https://github.com/facebook/docusaurus/releases)
- [Changelog](https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/docusaurus/commits/v3.10.1/packages/docusaurus-preset-classic)

Updates `react` from 19.0.3 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react)

Updates `@types/react` from 19.0.12 to 19.2.17
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 19.0.3 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-dom)

Updates `@types/react-dom` from 19.0.3 to 19.2.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `react-is` from 19.0.3 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-is)

Updates `styled-components` from 6.1.14 to 6.4.2
- [Release notes](https://github.com/styled-components/styled-components/releases)
- [Commits](https://github.com/styled-components/styled-components/compare/styled-components@6.1.14...styled-components@6.4.2)

Updates `@amplitude/analytics-browser` from 2.37.0 to 2.44.1
- [Release notes](https://github.com/amplitude/Amplitude-TypeScript/releases)
- [Commits](https://github.com/amplitude/Amplitude-TypeScript/compare/@amplitude/analytics-browser@2.37.0...@amplitude/analytics-browser@2.44.1)

Updates `@amplitude/experiment-js-client` from 1.20.4 to 1.21.1
- [Release notes](https://github.com/amplitude/experiment-js-client/releases)
- [Changelog](https://github.com/amplitude/experiment-js-client/blob/main/packages/experiment-browser/CHANGELOG.md)
- [Commits](https://github.com/amplitude/experiment-js-client/commits/@amplitude/experiment-js-client@1.21.1/packages/experiment-browser)

Updates `@ledgerhq/hw-app-str` from 7.2.0 to 7.7.4
- [Release notes](https://github.com/LedgerHQ/ledger-live/releases)
- [Commits](https://github.com/LedgerHQ/ledger-live/compare/@ledgerhq/hw-app-str@7.2.0...@ledgerhq/hw-app-str@7.7.4)

Updates `@ledgerhq/hw-transport-webhid` from 6.30.6 to 6.35.4
- [Release notes](https://github.com/LedgerHQ/ledger-live/releases)
- [Commits](https://github.com/LedgerHQ/ledger-live/compare/@ledgerhq/hw-transport-webhid@6.30.6...@ledgerhq/hw-transport-webhid@6.35.4)

Updates `@radix-ui/react-dialog` from 1.1.15 to 1.1.16
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dialog/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dialog)

Updates `@radix-ui/react-popover` from 1.1.15 to 1.1.16
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/popover/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/popover)

Updates `@reduxjs/toolkit` from 2.5.0 to 2.12.0
- [Release notes](https://github.com/reduxjs/redux-toolkit/releases)
- [Commits](https://github.com/reduxjs/redux-toolkit/compare/v2.5.0...v2.12.0)

Updates `@stellar/design-system` from 3.2.7 to 3.2.8
- [Release notes](https://github.com/stellar/stellar-design-system/releases)
- [Commits](https://github.com/stellar/stellar-design-system/compare/v3.2.7...v3.2.8)

Updates `@tailwindcss/postcss` from 4.1.18 to 4.3.1
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.1/packages/@tailwindcss-postcss)

Updates `@testing-library/react` from 16.3.0 to 16.3.2
- [Release notes](https://github.com/testing-library/react-testing-library/releases)
- [Changelog](https://github.com/testing-library/react-testing-library/blob/main/CHANGELOG.md)
- [Commits](https://github.com/testing-library/react-testing-library/compare/v16.3.0...v16.3.2)

Updates `@types/chrome` from 0.0.287 to 0.1.43
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/chrome)

Updates `@types/webextension-polyfill` from 0.12.0 to 0.12.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/webextension-polyfill)

Updates `css-loader` from 7.1.2 to 7.1.4
- [Release notes](https://github.com/webpack/css-loader/releases)
- [Changelog](https://github.com/webpack/css-loader/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/css-loader/compare/v7.1.2...v7.1.4)

Updates `formik` from 2.4.6 to 2.4.9
- [Release notes](https://github.com/jaredpalmer/formik/releases)
- [Commits](https://github.com/jaredpalmer/formik/compare/formik@2.4.6...formik@2.4.9)

Updates `html-webpack-plugin` from 5.6.3 to 5.6.7
- [Release notes](https://github.com/jantimon/html-webpack-plugin/releases)
- [Changelog](https://github.com/jantimon/html-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jantimon/html-webpack-plugin/compare/v5.6.3...v5.6.7)

Updates `i18next-browser-languagedetector` from 8.0.5 to 8.2.1
- [Changelog](https://github.com/i18next/i18next-browser-languageDetector/blob/master/CHANGELOG.md)
- [Commits](https://github.com/i18next/i18next-browser-languageDetector/compare/v8.0.5...v8.2.1)

Updates `js-yaml` from 4.1.1 to 4.2.0
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/commits)

Updates `lodash` from 4.17.21 to 4.18.1
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.18.1)

Updates `@types/lodash` from 4.17.16 to 4.17.24
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/lodash)

Updates `mini-css-extract-plugin` from 2.9.2 to 2.10.2
- [Release notes](https://github.com/webpack/mini-css-extract-plugin/releases)
- [Changelog](https://github.com/webpack/mini-css-extract-plugin/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/mini-css-extract-plugin/compare/v2.9.2...v2.10.2)

Updates `react-copy-to-clipboard` from 5.1.0 to 5.1.1
- [Release notes](https://github.com/nkbt/react-copy-to-clipboard/releases)
- [Commits](https://github.com/nkbt/react-copy-to-clipboard/compare/v5.1.0...v5.1.1)

Updates `react-redux` from 9.2.0 to 9.3.0
- [Release notes](https://github.com/reduxjs/react-redux/releases)
- [Changelog](https://github.com/reduxjs/react-redux/blob/master/CHANGELOG.md)
- [Commits](https://github.com/reduxjs/react-redux/compare/v9.2.0...v9.3.0)

Updates `react-router-dom` from 7.5.1 to 7.17.0
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.17.0/packages/react-router-dom)

Updates `sass` from 1.86.3 to 1.101.0
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sass/dart-sass/compare/1.86.3...1.101.0)

Updates `semver` from 7.7.1 to 7.8.4
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](https://github.com/npm/node-semver/compare/v7.7.1...v7.8.4)

Updates `@types/semver` from 7.5.8 to 7.7.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/semver)

Updates `svg-url-loader` from 8.0.0 to 8.1.0
- [Release notes](https://github.com/bhovhannes/svg-url-loader/releases)
- [Commits](https://github.com/bhovhannes/svg-url-loader/compare/v8.0.0...v8.1.0)

Updates `tailwindcss` from 4.1.18 to 4.3.1
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.1/packages/tailwindcss)

Updates `yup` from 1.6.1 to 1.7.1
- [Release notes](https://github.com/jquense/yup/releases)
- [Changelog](https://github.com/jquense/yup/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jquense/yup/commits)

Updates `@playwright/test` from 1.57.0 to 1.61.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](https://github.com/microsoft/playwright/compare/v1.57.0...v1.61.0)

Updates `@types/semver` from 7.5.8 to 7.7.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/semver)

Updates `postcss` from 8.5.6 to 8.5.15
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/postcss/postcss/compare/8.5.6...8.5.15)

Updates `postcss-loader` from 8.2.0 to 8.2.1
- [Release notes](https://github.com/webpack/postcss-loader/releases)
- [Changelog](https://github.com/webpack/postcss-loader/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/postcss-loader/compare/v8.2.0...v8.2.1)

Updates `speed-measure-webpack-plugin` from 1.5.0 to 1.6.0
- [Release notes](https://github.com/stephencookdev/speed-measure-webpack-plugin/releases)
- [Commits](https://github.com/stephencookdev/speed-measure-webpack-plugin/compare/v1.5.0...v1.6.0)

Updates `terser-webpack-plugin` from 5.3.14 to 5.6.1
- [Release notes](https://github.com/webpack/minimizer-webpack-plugin/releases)
- [Changelog](https://github.com/webpack/minimizer-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/minimizer-webpack-plugin/compare/v5.3.14...v5.6.1)

Updates `url` from 0.11.1 to 0.11.4
- [Commits](https://github.com/defunctzombie/node-url/compare/v0.11.1...v0.11.4)

Updates `prettier` from 3.5.1 to 3.8.4
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/3.5.1...3.8.4)

Updates `@amplitude/analytics-browser` from 2.37.0 to 2.44.1
- [Release notes](https://github.com/amplitude/Amplitude-TypeScript/releases)
- [Commits](https://github.com/amplitude/Amplitude-TypeScript/compare/@amplitude/analytics-browser@2.37.0...@amplitude/analytics-browser@2.44.1)

Updates `@amplitude/experiment-js-client` from 1.20.4 to 1.21.1
- [Release notes](https://github.com/amplitude/experiment-js-client/releases)
- [Changelog](https://github.com/amplitude/experiment-js-client/blob/main/packages/experiment-browser/CHANGELOG.md)
- [Commits](https://github.com/amplitude/experiment-js-client/commits/@amplitude/experiment-js-client@1.21.1/packages/experiment-browser)

Updates `@ledgerhq/hw-app-str` from 7.2.0 to 7.7.4
- [Release notes](https://github.com/LedgerHQ/ledger-live/releases)
- [Commits](https://github.com/LedgerHQ/ledger-live/compare/@ledgerhq/hw-app-str@7.2.0...@ledgerhq/hw-app-str@7.7.4)

Updates `@ledgerhq/hw-transport-webhid` from 6.30.6 to 6.35.4
- [Release notes](https://github.com/LedgerHQ/ledger-live/releases)
- [Commits](https://github.com/LedgerHQ/ledger-live/compare/@ledgerhq/hw-transport-webhid@6.30.6...@ledgerhq/hw-transport-webhid@6.35.4)

Updates `@radix-ui/react-dialog` from 1.1.15 to 1.1.16
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dialog/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dialog)

Updates `@radix-ui/react-popover` from 1.1.15 to 1.1.16
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/popover/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/popover)

Updates `@reduxjs/toolkit` from 2.5.0 to 2.12.0
- [Release notes](https://github.com/reduxjs/redux-toolkit/releases)
- [Commits](https://github.com/reduxjs/redux-toolkit/compare/v2.5.0...v2.12.0)

Updates `@stellar/design-system` from 3.2.7 to 3.2.8
- [Release notes](https://github.com/stellar/stellar-design-system/releases)
- [Commits](https://github.com/stellar/stellar-design-system/compare/v3.2.7...v3.2.8)

Updates `@tailwindcss/postcss` from 4.1.18 to 4.3.1
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.1/packages/@tailwindcss-postcss)

Updates `@testing-library/react` from 16.3.0 to 16.3.2
- [Release notes](https://github.com/testing-library/react-testing-library/releases)
- [Changelog](https://github.com/testing-library/react-testing-library/blob/main/CHANGELOG.md)
- [Commits](https://github.com/testing-library/react-testing-library/compare/v16.3.0...v16.3.2)

Updates `@types/chrome` from 0.0.287 to 0.1.43
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/chrome)

Updates `@types/lodash` from 4.17.16 to 4.17.24
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/lodash)

Updates `@types/react` from 19.0.12 to 19.2.17
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 19.0.3 to 19.2.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `@types/webextension-polyfill` from 0.12.0 to 0.12.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/webextension-polyfill)

Updates `css-loader` from 7.1.2 to 7.1.4
- [Release notes](https://github.com/webpack/css-loader/releases)
- [Changelog](https://github.com/webpack/css-loader/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/css-loader/compare/v7.1.2...v7.1.4)

Updates `formik` from 2.4.6 to 2.4.9
- [Release notes](https://github.com/jaredpalmer/formik/releases)
- [Commits](https://github.com/jaredpalmer/formik/compare/formik@2.4.6...formik@2.4.9)

Updates `html-webpack-plugin` from 5.6.3 to 5.6.7
- [Release notes](https://github.com/jantimon/html-webpack-plugin/releases)
- [Changelog](https://github.com/jantimon/html-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jantimon/html-webpack-plugin/compare/v5.6.3...v5.6.7)

Updates `i18next-browser-languagedetector` from 8.0.5 to 8.2.1
- [Changelog](https://github.com/i18next/i18next-browser-languageDetector/blob/master/CHANGELOG.md)
- [Commits](https://github.com/i18next/i18next-browser-languageDetector/compare/v8.0.5...v8.2.1)

Updates `js-yaml` from 4.1.1 to 4.2.0
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/commits)

Updates `lodash` from 4.17.21 to 4.18.1
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.18.1)

Updates `mini-css-extract-plugin` from 2.9.2 to 2.10.2
- [Release notes](https://github.com/webpack/mini-css-extract-plugin/releases)
- [Changelog](https://github.com/webpack/mini-css-extract-plugin/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/mini-css-extract-plugin/compare/v2.9.2...v2.10.2)

Updates `prettier` from 3.5.1 to 3.8.4
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/3.5.1...3.8.4)

Updates `pretty-quick` from 4.0.0 to 4.2.2
- [Release notes](https://github.com/prettier/pretty-quick/releases)
- [Changelog](https://github.com/prettier/pretty-quick/blob/v4.2.2/CHANGELOG.md)
- [Commits](https://github.com/prettier/pretty-quick/compare/v4.0.0...v4.2.2)

Updates `react` from 19.0.3 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react)

Updates `react-copy-to-clipboard` from 5.1.0 to 5.1.1
- [Release notes](https://github.com/nkbt/react-copy-to-clipboard/releases)
- [Commits](https://github.com/nkbt/react-copy-to-clipboard/compare/v5.1.0...v5.1.1)

Updates `react-dom` from 19.0.3 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-dom)

Updates `react-redux` from 9.2.0 to 9.3.0
- [Release notes](https://github.com/reduxjs/react-redux/releases)
- [Changelog](https://github.com/reduxjs/react-redux/blob/master/CHANGELOG.md)
- [Commits](https://github.com/reduxjs/react-redux/compare/v9.2.0...v9.3.0)

Updates `react-router-dom` from 7.5.1 to 7.17.0
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.17.0/packages/react-router-dom)

Updates `sass` from 1.86.3 to 1.101.0
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob…
@github-actions github-actions Bot mentioned this pull request Jul 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants