build(deps): Bump the npm_and_yarn group across 1 directory with 7 updates by dependabot[bot] · Pull Request #8691 · thirdweb-dev/js

dependabot · 2026-02-26T18:57:36Z

Bumps the npm_and_yarn group with 6 updates in the / directory:

Package	From	To
happy-dom	`17.4.4`	`20.0.2`
storybook	`9.0.15`	`9.1.19`
vite	`7.1.7`	`7.1.11`
next	`15.3.8`	`15.5.10`
fast-xml-parser	`5.2.5`	`5.3.6`
ai	`5.0.25`	`5.0.52`

Updates happy-dom from 17.4.4 to 20.0.2

Release notes

Sourced from happy-dom's releases.

v20.0.2

👷‍♂️ Patch fixes

Adds frozen intrinsics flag to workers in @happy-dom/server-renderer - By @capricorn86 in task #1934

v20.0.1

👷‍♂️ Patch fixes

Adds warning for environment with unfrozen intrinsics (builtins) when JavaScript evaluation is enabled- By @capricorn86 in task #1932

A security advisory has been reported showing that the recommended preventive measure of running Node.js with --disallow-code-generation-from-strings wasn't enough to protect against attackers escaping the VM context and accessing process-level functions. Big thanks to @cristianstaicu for reporting this!

The documentation for how to run Happy DOM with JavaScript evaluation enabled in a safer way has been updated. Read more about it in the Wiki

v20.0.0

I avoid making breaking changes as much as possible in Happy DOM. When I have to make a breaking change, I try to keep it as minimal as possible. This could be a breaking change that impacts many projects, and I am truly sorry if you are negatively affected by this.

💣 Breaking Changes

Due to security risks, JavaScript evaluation is now disabled by default - By @capricorn86 in task #1930

A security advisory (GHSA-37j7-fg3j-429f) has been reported that shows a security vulnerability where it's possible to escape the VM context and get access to process level functionality. Big thanks to @Mas0nShi for reporting this!

Due to this security risk, JavaScript evaluation is now disabled by default to prevent that consumers accidentally executes untrusted code without taking precautions

JavaScript evaluation can be enabled by setting enableJavaScriptEvaluation to "true". Read more about how to enable this in a safer way in the Wiki

v19.0.2

👷‍♂️ Patch fixes

Fixes issue related to CSS pseudo selector :scope that didn't work correctly for direct descendants to root - By @capricorn86 in task #1620

v19.0.1

👷‍♂️ Patch fixes

Fixes issue with sending in URLs as string in @happy-dom/server-renderer config using CLI - By @capricorn86 in task #1908

v19.0.0

💣 Breaking Changes

Removes support for CommonJS - By @capricorn86 in task #1730

Support for CommonJS is no longer needed as Node.js v18 is deprecated and v20 and above supports loading ES modules from CommonJS using require()

Updates Jest to v30 in the @happy-dom/jest-environment package - By @capricorn86 in task #1730

Makes Jest packages peer dependencies to make it easier to align versions with the project using @happy-dom/jest-environment - By @capricorn86 in task #1730

🎨 Features

Adds a new package called @happy-dom/server-renderer - By @capricorn86 in task #1730

This package provides a simple way to statically render (SSG) or server-side render (SSR) your client-side application

Read more in the Wiki under Server-Renderer

Adds support for import.meta to the ESM compiler - By @capricorn86 in task #1730

Adds support for the CSS pseudo selector :scope - By @capricorn86 in task #1620

Improves support for MediaList - By @capricorn86 in task #1730

Adds support for CSSKeywordValue, CSSStyleValue, StylePropertyMap, StylePropertyMap, StylePropertyMapReadOnly - By @capricorn86 in task #1730

Improves debug information in the ESM compiler - By @capricorn86 in task #1730

Adds validation of browser settings when creating a new Browser instance - By @capricorn86 in task #1730

Adds support for the browser setting navigation.beforeContentCallback which makes it possible to inject event listeners or logic before content is loaded to the document when navigating a browser frame - By @capricorn86 in task #1730

Adds support for the browser setting fetch.requestHeaders which provides with a declarative and simple way to add request headers - By @capricorn86 in task #1730

Adds support for setting an object to timer.preventTimerLoops which makes it possible to define different settings for setTimeout() and requestAnimationFrame() - By @capricorn86 in task #1730

Adds support for the browser setting viewport which makes it possible to define a default viewport size - By @capricorn86 in task #1730

... (truncated)

Commits

f4bd4eb fix: #0 Adds frozen intrinsics flag to server-renderer workers (#1934)
f45d92e fix: #0 Adds warning for environemnt with unfrozen builtins (#1932)
819d15b BREAKING CHANGE: #0 Changes JavaScript evaluation to be disabled by default...
c80a08f fix: #1620 Fixes issue related to CSS pseudo selector :scope (#1911)
220df23 fix: #1908 Fixes issue with sending in URLs as string in server-renderer co...
9849f8b chore: #1906 Fixes failing unit test caused by package version (#1907)
48d174e chore: #1904 Updates conventional commit package (#1905)
275efe5 BREAKING CHANGE: #1620 Release v18.0.0
cf74f5f fix: #1841 Addresses an issue where an error occurred if the Element ID was...
bfd0fff chore: #1154 Fixes failing unit test (#1843)
Additional commits viewable in compare view

Updates storybook from 9.0.15 to 9.1.19

Release notes

Sourced from storybook's releases.

v9.1.19

9.1.19

Harden websocket connection

v9.1.18

9.1.18

No-op release. No changes.

v9.1.17

9.1.17

Core: Fix .env-file parsing, thanks @jreinhold!

Changelog

Sourced from storybook's changelog.

9.1.19

Harden websocket connection

9.1.18

No-op release. No changes.

9.1.16

CLI: Fix Nextjs project creation in empty directories - #32828, thanks @yannbf!

Core: Add experimental_devServer preset - #32862, thanks @yannbf!

Telemetry: Fix preview-first-load event - #32859, thanks @shilman!

9.1.15

Core: Add preview-first-load telemetry - #32770, thanks @shilman!

Dependencies: Update vite-plugin-storybook-nextjs - #32821, thanks @ndelangen!

9.1.14

NextJS: Add NextJS 16 support - #32791, thanks @yannbf and @ndelangen!

Addon-Vitest: Support Vitest 4 - #32819, thanks @yannbf and @ndelangen!

CSF: Fix play-fn tag for methods - #32695, thanks @shilman!

9.1.13

Nextjs: Fix config access for Vite - #32759, thanks @valentinpalkovic!

9.1.12

Maintenance: Hotfix for missing nextjs dts files, thanks @ndelangen!

9.1.11

Automigration: Improve the viewport/backgrounds automigration - #32619, thanks @valentinpalkovic!

Mocking: Fix sb.mock usage in Storybook's deployed in subpaths - #32678, thanks @valentinpalkovic!

NextJS-Vite: Automatically fix bad PostCSS configuration - #32691, thanks @ndelangen!

React Native Web: Fix REACT_NATIVE_AND_RNW should detect vite builder - #32718, thanks @dannyhw!

Telemetry: Add metadata for react routers - #32615, thanks @shilman!

9.1.10

Automigrations: Add automigration for viewport and backgrounds - #31614, thanks @valentinpalkovic!

Telemetry: Log userAgent in onboarding - #32566, thanks @shilman!

9.1.9

Angular: Enable experimental zoneless detection on Angular v21 - #32580, thanks @yannbf!

Svelte: Ignore inherited HTMLAttributes docgen when using utility types - #32173, thanks @steciuk!

... (truncated)

Commits

20887f1 Bump version from "9.1.18" to "9.1.19" [skip ci]
66b2d8e Fix test
31f16c4 fix linting
62dd25b Core: Require token for websocket connections
bbe61e3 Bump version from "9.1.17" to "9.1.18" [skip ci]
d0d5a3d Bump version from 9.1.16 to 9.1.17 MANUALLY
a06c257 filter env vars from .env files
a54a04c Bump version from "9.1.15" to "9.1.16" [skip ci]
ebd7ff5 Merge pull request #32859 from storybookjs/shilman/first-load-new-user
da2da6e Merge pull request #32862 from storybookjs/yann/patch-dev-server-preset
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for storybook since your current version.

Updates vite from 7.1.7 to 7.1.11

Release notes

Sourced from vite's releases.

v7.1.11

Please refer to CHANGELOG.md for details.

v7.1.10

Please refer to CHANGELOG.md for details.

v7.1.9

Please refer to CHANGELOG.md for details.

v7.1.8

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

7.1.11 (2025-10-20)

Bug Fixes

dev: trim trailing slash before server.fs.deny check (#20968) (f479cc5)

Miscellaneous Chores

deps: update all non-major dependencies (#20966) (6fb41a2)

Code Refactoring

use subpath imports for types module reference (#20921) (d0094af)

Build System

remove cjs reference in files field (#20945) (ef411ce)

remove hash from built filenames (#20946) (a817307)

7.1.10 (2025-10-14)

Bug Fixes

css: avoid duplicate style for server rendered stylesheet link and client inline style during dev (#20767) (3a92bc7)

css: respect emitAssets when cssCodeSplit=false (#20883) (d3e7eee)

deps: update all non-major dependencies (879de86)

deps: update all non-major dependencies (#20894) (3213f90)

dev: allow aliases starting with // (#20760) (b95fa2a)

dev: remove timestamp query consistently (#20887) (6537d15)

esbuild: inject esbuild helpers correctly for esbuild 0.25.9+ (#20906) (446eb38)

normalize path before calling fileToBuiltUrl (#20898) (73b6d24)

preserve original sourcemap file field when combining sourcemaps (#20926) (c714776)

Documentation

correct WebSocket spelling (#20890) (29e98dc)

Miscellaneous Chores

deps: update rolldown-related dependencies (#20923) (a5e3b06)

7.1.9 (2025-10-03)

Reverts

server: drain stdin when not interactive (#20885) (12d72b0)

7.1.8 (2025-10-02)

Bug Fixes

css: improve url escape characters handling (#20847) (24a61a3)

deps: update all non-major dependencies (#20855) (788a183)

deps: update artichokie to 0.4.2 (#20864) (e670799)

... (truncated)

Commits

8b69c9e release: v7.1.11
f479cc5 fix(dev): trim trailing slash before server.fs.deny check (#20968)
6fb41a2 chore(deps): update all non-major dependencies (#20966)
a817307 build: remove hash from built filenames (#20946)
ef411ce build: remove cjs reference in files field (#20945)
d0094af refactor: use subpath imports for types module reference (#20921)
ed4a0dc release: v7.1.10
c714776 fix: preserve original sourcemap file field when combining sourcemaps (#20926)
446eb38 fix(esbuild): inject esbuild helpers correctly for esbuild 0.25.9+ (#20906)
879de86 fix(deps): update all non-major dependencies
Additional commits viewable in compare view

Updates next from 15.3.8 to 15.5.10

Release notes

Sourced from next's releases.

v15.5.10

Please refer the following changelogs for more information about this security release:

https://vercel.com/changelog/summaries-of-cve-2025-59471-and-cve-2025-59472

https://vercel.com/changelog/summary-of-cve-2026-23864

v15.4.11

Please see this changelog for more information about this security patch.

v15.3.9

Please see this changelog for more information about this security patch.

Commits

60a2aa9 v15.5.10
e5b834d fetch(next/image): reduce maximumResponseBody from 300MB to 50MB (#88588)
39a2f6a feat(next/image)!: add images.maximumResponseBody config (#88183)
bf9f084 Sync DoS mitigations for React Flight
c5de33e v15.5.9
dd23399 Backport facebook/react#35351 for 15.5.8 (#87086)
7526cd6 v15.5.8
1e9ec41 Update React Version (#41)
16141e5 Update React Version (#30)
e01e589 Backport Next.js changes to v15.5.8 (#23)
Additional commits viewable in compare view

Updates fast-xml-parser from 5.2.5 to 5.3.6

Release notes

Sourced from fast-xml-parser's releases.

Entity security and performance

Improve security and performance of entity processing

new options maxEntitySize, maxExpansionDepth, maxTotalExpansions, maxExpandedLength, allowedTags,tagFilter

fast return when no edtity is present

improvement replacement logic to reduce number of calls

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.3.5...v5.3.6

v5.3.5

What's Changed

Add missing exports to fxp commonjs types by @jeremymeng in NaturalIntelligence/fast-xml-parser#782

fix: Escape regex char in entity name

update strnum to 2.1.2

New Contributors

@jeremymeng made their first contribution in NaturalIntelligence/fast-xml-parser#782

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.3.4...v5.3.5

fix: handle HTML numeric and hex entities when out of range

No release notes provided.

bug fix and performance improvements

fix #775: transformTagName with allowBooleanAttributes adds an unnecessary attribute

Performance improvement for stopNodes (By Maciek Lamberski)

Replace Buffer with Uint8Array

Launched Separate CLI module

Replace Buffer with Uint8Array

Changelog

Sourced from fast-xml-parser's changelog.

Note: If you find missing information about particular minor version, that version must have been changed without any functional change in this library.

Note: Due to some last quick changes on v4, detail of v4.5.3 & v4.5.4 are not updated here. v4.5.4x is the last tag of v4 in github repository. I'm extremely sorry for the confusion

5.4.1 / 2026-02-25

fix (#785) unpairedTag node should not have tag content

5.4.0 / 2026-02-25

migrate to fast-xml-builder

5.3.9 / 2026-02-25

support strictReservedNames

5.3.8 / 2026-02-25

support maxNestedTags

handle non-array input for XML builder when preserveOrder is true (By Angelo Coetzee)

save use of js properies

5.3.7 / 2026-02-20

fix typings for CJS (By Corentin Girard)

5.3.6 / 2026-02-14

Improve security and performance of entity processing

new options maxEntitySize, maxExpansionDepth, maxTotalExpansions, maxExpandedLength, allowedTags,tagFilter

fast return when no edtity is present

improvement replacement logic to reduce number of calls

5.3.5 / 2026-02-08

fix: Escape regex char in entity name

update strnum to 2.1.2

add missing exports in CJS typings

5.3.4 / 2026-01-30

fix: handle HTML numeric and hex entities when out of range

5.3.3 / 2025-12-12

fix #775: transformTagName with allowBooleanAttributes adds an unnecessary attribute

5.3.2 / 2025-11-14

fix for import statement for v6

5.3.1 / 2025-11-03

Performance improvement for stopNodes (By Maciek Lamberski)

5.3.0 / 2025-10-03

... (truncated)

Commits

ecb2ca1 update release info
910dae5 fix entities performance & security issues
fe9a852 update strnum and release detail
943ef0e fix: Escape regex char in entity name
ddcd0ac Escape regex char in entity name
341b582 Add missing exports to fxp commonjs types (#782)
753e770 update release details
4e387f6 handle html entities when out of range
088b47a correct typo (#780)
f335cbf update publish detail
Additional commits viewable in compare view

Updates ai from 5.0.25 to 5.0.52

Commits

63d5f66 Version Packages (#8895)
930399b Backport: fix(ai): download files when intermediate file cannot be downloaded...
7ca78f1 Backport: feat(provider/gateway): Add new Qwen models to Gateway model string...
1cfc209 Backport: feat(provider/openai): OpenAILanguageModelOptions type (#8858)
347b7ec ci: rename v5.0 branch to release-v*
85909a9 Backport: chore(ai): update test message (#8875)
c56822d Backport: fix(ai): update uiMessageChunkSchema to satisfy the `UIMessageChu...
1461adf Backport: chore(examples): remove redundant OpenAI reasoning examples (#8871)
6bd07df Version Packages (#8853)
a45d61a ci(release): remove incorrect changeset bump for @ai-sdk/baseten
Additional commits viewable in compare view

Updates undici from 6.21.3 to 6.23.0

Release notes

Sourced from undici's releases.

v6.23.0

⚠️ Security Release

This fixes GHSA-g9mf-h72j-4rw9 and CVE-2026-22036.

Full Changelog: nodejs/undici@v6.22.0...v6.23.0

v6.22.0

What's Changed

fix: fix wrong stream canceled up after cloning (v6) by @snyamathi in nodejs/undici#4414

[Backport v6.x] fix: fix EnvHttpProxyAgent for the Node.js bundle by @github-actions[bot] in nodejs/undici#4432

feat(ProxyAgent): match Curl behavior in HTTP->HTTP Proxy connections (#4180) by @metcoder95 in nodejs/undici#4433

feat(ProxyAgent) improve Curl-y behavior in HTTP->HTTP Proxy connections (#4180) (#4340) by @metcoder95 in nodejs/undici#4445

Backport 4472 to v6.x by @Uzlopak in nodejs/undici#4480

Full Changelog: nodejs/undici@v6.21.3...v6.22.0

Commits

fbc31e2 Bumped v6.23.0
3477c94 chore: release flow using provenance
d3aafea fix: limit Content-Encoding chain to 5 to prevent resource exhaustion
f9c9185 Bumped v6.22.0
f670f2a feat: make UndiciErrors reliable to instanceof (#4472) (#4480)
422e397 feat(ProxyAgent) improve Curl-y behavior in HTTP->HTTP Proxy connections (#41...
4a06ffe feat(ProxyAgent): match Curl behavior in HTTP->HTTP Proxy connections (#4180)...
4cb3974 fix: fix EnvHttpProxyAgent for the Node.js bundle (#4064) (#4432)
44c23e5 fix: fix wrong stream canceled up after cloning (v6) (#4414)
See full diff in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for undici since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

…dates Bumps the npm_and_yarn group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [happy-dom](https://github.com/capricorn86/happy-dom) | `17.4.4` | `20.0.2` | | [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core) | `9.0.15` | `9.1.19` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `7.1.7` | `7.1.11` | | [next](https://github.com/vercel/next.js) | `15.3.8` | `15.5.10` | | [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `5.2.5` | `5.3.6` | | [ai](https://github.com/vercel/ai) | `5.0.25` | `5.0.52` | Updates `happy-dom` from 17.4.4 to 20.0.2 - [Release notes](https://github.com/capricorn86/happy-dom/releases) - [Commits](capricorn86/happy-dom@v17.4.4...v20.0.2) Updates `storybook` from 9.0.15 to 9.1.19 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/v9.1.19/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v9.1.19/code/core) Updates `vite` from 7.1.7 to 7.1.11 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v7.1.11/packages/vite) Updates `next` from 15.3.8 to 15.5.10 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v15.3.8...v15.5.10) Updates `fast-xml-parser` from 5.2.5 to 5.3.6 - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v5.2.5...v5.3.6) Updates `ai` from 5.0.25 to 5.0.52 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/main/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/compare/ai@5.0.25...ai@5.0.52) Updates `undici` from 6.21.3 to 6.23.0 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v6.21.3...v6.23.0) --- updated-dependencies: - dependency-name: happy-dom dependency-version: 20.0.2 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: storybook dependency-version: 9.1.19 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: vite dependency-version: 7.1.11 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: next dependency-version: 15.5.10 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: fast-xml-parser dependency-version: 5.3.6 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: ai dependency-version: 5.0.52 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: undici dependency-version: 6.23.0 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

vercel · 2026-02-26T18:57:43Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
docs-v2	Error		Feb 26, 2026 7:04pm
nebula	Ready	Preview, Comment	Feb 26, 2026 7:04pm
thirdweb_playground	Error		Feb 26, 2026 7:04pm
thirdweb-www	Error		Feb 26, 2026 7:04pm
wallet-ui	Ready	Preview, Comment	Feb 26, 2026 7:04pm

changeset-bot · 2026-02-26T18:57:45Z

⚠️ No Changeset found

Latest commit: 0fef8f3

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

socket-security · 2026-02-26T18:59:00Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Vulnerability	Quality	Maintenance
next@15.3.8 ⏵ 15.5.10		⁺²¹	⁺¹
@wagmi/cli@2.8.0 ⏵ 2.10.0	^-21		⁺¹	⁺³
vite@7.1.11
happy-dom@18.0.1 ⏵ 20.0.2	⁺⁵	⁺⁷⁵
storybook@9.0.15 ⏵ 9.1.19	⁺⁴	⁺²²	^-2	⁺¹
fast-xml-parser@5.2.5 ⏵ 5.3.6		⁺⁷⁵	⁺¹
ai@5.0.52

View full report

dependabot bot added Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Feb 26, 2026

dependabot bot requested review from a team as code owners February 26, 2026 18:57

dependabot bot added Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Feb 26, 2026

vercel bot had a problem deploying to Preview – docs-v2 February 26, 2026 19:00 Failure

vercel bot deployed to Preview – wallet-ui February 26, 2026 19:01 View deployment

vercel bot deployed to Preview – nebula February 26, 2026 19:01 View deployment

vercel bot had a problem deploying to Preview – thirdweb-www February 26, 2026 19:03 Failure

vercel bot had a problem deploying to Preview – thirdweb_playground February 26, 2026 19:04 Failure

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): Bump the npm_and_yarn group across 1 directory with 7 updates#8691

build(deps): Bump the npm_and_yarn group across 1 directory with 7 updates#8691
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/npm_and_yarn-99252a528a

dependabot bot commented on behalf of github Feb 26, 2026

Uh oh!

vercel bot commented Feb 26, 2026 •

edited

Loading

Uh oh!

changeset-bot bot commented Feb 26, 2026

Uh oh!

socket-security bot commented Feb 26, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Feb 26, 2026

v20.0.2

👷‍♂️ Patch fixes

v20.0.1

👷‍♂️ Patch fixes

v20.0.0

💣 Breaking Changes

v19.0.2

👷‍♂️ Patch fixes

v19.0.1

👷‍♂️ Patch fixes

v19.0.0

💣 Breaking Changes

🎨 Features

v9.1.19

9.1.19

v9.1.18

9.1.18

v9.1.17

9.1.17

9.1.19

9.1.18

9.1.16

9.1.15

9.1.14

9.1.13

9.1.12

9.1.11

9.1.10

9.1.9

v7.1.11

v7.1.10

v7.1.9

v7.1.8

7.1.11 (2025-10-20)

Bug Fixes

Miscellaneous Chores

Code Refactoring

Build System

7.1.10 (2025-10-14)

Bug Fixes

Documentation

Miscellaneous Chores

7.1.9 (2025-10-03)

Reverts

7.1.8 (2025-10-02)

Bug Fixes

v15.5.10

v15.4.11

v15.3.9

Entity security and performance

v5.3.5

What's Changed

New Contributors

fix: handle HTML numeric and hex entities when out of range

bug fix and performance improvements

Replace Buffer with Uint8Array

v6.23.0

⚠️ Security Release

v6.22.0

What's Changed

Uh oh!

vercel bot commented Feb 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

changeset-bot bot commented Feb 26, 2026

⚠️ No Changeset found

Uh oh!

socket-security bot commented Feb 26, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Replace `Buffer` with `Uint8Array`

vercel bot commented Feb 26, 2026 •

edited

Loading