chore(deps-dev): bump the npm-development group across 1 directory with 8 updates by dependabot[bot] · Pull Request #884 · wevm/mppx

dependabot · 2026-09-09T16:20:43Z

Bumps the npm-development group with 8 updates in the / directory:

Package	From	To
@changesets/cli	`3.0.0`	`3.0.1`
@x402/hono	`2.22.0`	`2.24.0`
@x402/mcp	`2.22.0`	`2.24.0`
@x402/next	`2.22.0`	`2.24.0`
elysia	`1.4.29`	`1.4.30`
rolldown	`1.2.4`	`1.2.7`
@types/react-dom	`19.2.4`	`19.2.5`
@vitejs/plugin-react	`6.0.5`	`6.1.1`

Updates @changesets/cli from 3.0.0 to 3.0.1

Release notes

Sourced from @changesets/cli's releases.

@changesets/cli@3.0.1

Patch Changes

#2239 fdfdc93 Thanks @bluwy! - Update links in default generated .changeset/README.md file

Updated dependencies [d0386b6]:

@changesets/write@1.0.1

Changelog

Sourced from @changesets/cli's changelog.

3.0.1

Patch Changes

#2239 fdfdc93 Thanks @bluwy! - Update links in default generated .changeset/README.md file

Updated dependencies [d0386b6]:

@changesets/write@1.0.1

Commits

bed4581 Version Packages (#2242)
fdfdc93 Update default generated readme (#2239)
d5f5ae8 Fix Windows PTY snapshot normalization (#2233)
See full diff in compare view

Updates @x402/hono from 2.22.0 to 2.24.0

Commits

b703a0e Update docs/sdk-features.md (#3286)
8ac521c chore(go): release (#3289)
d22ae96 chore: version python package (#3288)
f257584 chore: version typescript packages (#3287)
44f6b17 feat(ts/go): auth-capture client v1.1 (#3283)
8468e3a Fix SVM upto facilitator RPC configuration examples (#3277)
acaa904 fix(ts/go): refactor svm upto rpc config (#3274)
b32b564 fix: upto proxy canonical address (#3276)
ab1b418 feat(evm): add Upto-only deployment entrypoint (#3199)
b1a88ef Update docs/schemes/exact.mdx (#3272)
Additional commits viewable in compare view

Updates @x402/mcp from 2.22.0 to 2.24.0

Commits

b703a0e Update docs/sdk-features.md (#3286)
8ac521c chore(go): release (#3289)
d22ae96 chore: version python package (#3288)
f257584 chore: version typescript packages (#3287)
44f6b17 feat(ts/go): auth-capture client v1.1 (#3283)
8468e3a Fix SVM upto facilitator RPC configuration examples (#3277)
acaa904 fix(ts/go): refactor svm upto rpc config (#3274)
b32b564 fix: upto proxy canonical address (#3276)
ab1b418 feat(evm): add Upto-only deployment entrypoint (#3199)
b1a88ef Update docs/schemes/exact.mdx (#3272)
Additional commits viewable in compare view

Updates @x402/next from 2.22.0 to 2.24.0

Commits

b703a0e Update docs/sdk-features.md (#3286)
8ac521c chore(go): release (#3289)
d22ae96 chore: version python package (#3288)
f257584 chore: version typescript packages (#3287)
44f6b17 feat(ts/go): auth-capture client v1.1 (#3283)
8468e3a Fix SVM upto facilitator RPC configuration examples (#3277)
acaa904 fix(ts/go): refactor svm upto rpc config (#3274)
b32b564 fix: upto proxy canonical address (#3276)
ab1b418 feat(evm): add Upto-only deployment entrypoint (#3199)
b1a88ef Update docs/schemes/exact.mdx (#3272)
Additional commits viewable in compare view

Updates elysia from 1.4.29 to 1.4.30

Release notes

Sourced from elysia's releases.

1.4.30

What's changed

The current development effort will be focused in Elysia 2, see kiana and beta release note.

1.4.x will only publish security updates, no new features.

Chore:

update test case for Bun 1.4

Advisory:

GHSA-gmm9-qwx3-2m3h

GHSA-2p5p-r4r9-f9jm

GHSA-3958-wq4x-729c

GHSA-46qc-v7pw-4j7j

GHSA-mx4m-hmpr-4w39

Full Changelog: elysiajs/elysia@1.4.29...1.4.30

Changelog

Sourced from elysia's changelog.

1.4.30 - 26 Aug 2026

Chore:

update test case for Bun 1.4

Advisory:

GHSA-gmm9-qwx3-2m3h

GHSA-2p5p-r4r9-f9jm

GHSA-3958-wq4x-729c

GHSA-46qc-v7pw-4j7j

GHSA-mx4m-hmpr-4w39

Commits

e037eca 🧹 chore: correct spelling mistake in changelog
acea3a7 🧹 chore: add SECURITY.md
a6b9fc7 🧹 chore: update for bun 1.4
b1c325f Merge branch 'main' of https://github.com/elysiajs/elysia
b8256cc 🧹 chore: update for bun 1.4
767bad1 Merge commit from fork
be31c27 🔧 fix: escape schema default keys and values to prevent code injection
89088df 🧹 chore: remove blank issue
2c8b61d 🧹 chore: 'I have nothing but my burger and I want nothing more' disclosure
7e7dabd 🧹 chore: 'I have nothing but my burger and I want nothing more' disclosure
Additional commits viewable in compare view

Updates rolldown from 1.2.4 to 1.2.7

Release notes

Sourced from rolldown's releases.

v1.2.7

[1.2.7] - 2026-09-02

🐛 Bug Fixes

rolldown_binding: make PreRenderedChunk.facadeModuleId nullable like Rollup (#10810) by @IWANABETHATGUY

plugin_timings: reword the warning so it does not contradict itself (#10788) by @IWANABETHATGUY

model a facade's host import in the fold cycle check (#10743) by @ulrichstark

🧪 Testing

dev: add circular reexport test (#10563) by @sapphi-red

⚙️ Miscellaneous Tasks

deps: update npm packages (#10795) by @renovate[bot]

deps: update rust crates (#10794) by @renovate[bot]

deps: update dependency rolldown-plugin-dts to v0.28.3 (#10805) by @renovate[bot]

renovate: disable oxc auto-updates (#10813) by @IWANABETHATGUY

deps: upgrade oxc to 0.148.0 (#10809) by @camc314

deps: update pnpm to v11.24.0 (#10803) by @renovate[bot]

deps: update crate-ci/typos action to v1.50.0 (#10806) by @renovate[bot]

deps: update test262 submodule for tests (#10808) by @rolldown-guard[bot]

deps: update rollup submodule for tests to v4.63.1 (#10807) by @rolldown-guard[bot]

deps: update crate-ci/typos action to v1.49.1 (#10796) by @renovate[bot]

deps: update github actions (#10749) by @renovate[bot]

Co-authored-by: shulaoda 165626830+shulaoda@users.noreply.github.com

v1.2.6

[1.2.6] - 2026-08-26

🚀 Features

minify: support property name mangling (#10374) by @Dunqing

add tsconfig: string option to transform (#10727) by @sapphi-red

rolldown_plugin_vite_transform: add tsconfig option (#10725) by @sapphi-red

rolldown_plugin_vite_resolve: add top-level tsconfig option (#10724) by @sapphi-red

dev: expose module graph queries on the dev engine handle (#10716) by @h-a-n-a

🐛 Bug Fixes

dev: assign import bindings before initializing dependencies (#10783) by @h-a-n-a

dev: copy star re-exports before initializing dependencies (#10761) by @h-a-n-a

dev: register an empty exports object for a module without exports (#10772) by @h-a-n-a

name the module when a codeSplitting group callback returns a wrong type (#10753) by @IWANABETHATGUY

dev: map dev rename events like build watch (#10758) by @shulaoda

clear resolution cache when TsconfigCache::clear is called (#10726) by @sapphi-red

dev: resolve in-flight ensureLatestBuildOutput when the engine closes (#10730) by @h-a-n-a

binding: replace undeclared BindingErrorsOr with BindingResult in hook types (#10717) by @h-a-n-a

... (truncated)

Changelog

Sourced from rolldown's changelog.

[1.2.7] - 2026-09-02

🐛 Bug Fixes

rolldown_binding: make PreRenderedChunk.facadeModuleId nullable like Rollup (#10810) by @IWANABETHATGUY

plugin_timings: reword the warning so it does not contradict itself (#10788) by @IWANABETHATGUY

model a facade's host import in the fold cycle check (#10743) by @ulrichstark

🧪 Testing

dev: add circular reexport test (#10563) by @sapphi-red

⚙️ Miscellaneous Tasks

deps: update npm packages (#10795) by @renovate[bot]

deps: update rust crates (#10794) by @renovate[bot]

deps: update dependency rolldown-plugin-dts to v0.28.3 (#10805) by @renovate[bot]

renovate: disable oxc auto-updates (#10813) by @IWANABETHATGUY

deps: upgrade oxc to 0.148.0 (#10809) by @camc314

deps: update pnpm to v11.24.0 (#10803) by @renovate[bot]

deps: update crate-ci/typos action to v1.50.0 (#10806) by @renovate[bot]

deps: update test262 submodule for tests (#10808) by @rolldown-guard[bot]

deps: update rollup submodule for tests to v4.63.1 (#10807) by @rolldown-guard[bot]

deps: update crate-ci/typos action to v1.49.1 (#10796) by @renovate[bot]

deps: update github actions (#10749) by @renovate[bot]

[1.2.6] - 2026-08-26

🚀 Features

minify: support property name mangling (#10374) by @Dunqing

add tsconfig: string option to transform (#10727) by @sapphi-red

rolldown_plugin_vite_transform: add tsconfig option (#10725) by @sapphi-red

rolldown_plugin_vite_resolve: add top-level tsconfig option (#10724) by @sapphi-red

dev: expose module graph queries on the dev engine handle (#10716) by @h-a-n-a

🐛 Bug Fixes

dev: assign import bindings before initializing dependencies (#10783) by @h-a-n-a

dev: copy star re-exports before initializing dependencies (#10761) by @h-a-n-a

dev: register an empty exports object for a module without exports (#10772) by @h-a-n-a

name the module when a codeSplitting group callback returns a wrong type (#10753) by @IWANABETHATGUY

dev: map dev rename events like build watch (#10758) by @shulaoda

clear resolution cache when TsconfigCache::clear is called (#10726) by @sapphi-red

dev: resolve in-flight ensureLatestBuildOutput when the engine closes (#10730) by @h-a-n-a

binding: replace undeclared BindingErrorsOr with BindingResult in hook types (#10717) by @h-a-n-a

🚜 Refactor

... (truncated)

Commits

26b4c6e release: v1.2.7 (#10814)
a03ca5f fix(rolldown_binding): make PreRenderedChunk.facadeModuleId nullable like R...
3ce2f28 fix(plugin_timings): reword the warning so it does not contradict itself (#10...
5375362 release: v1.2.6 (#10784)
cba0a90 test: use an absolute filename for transform tsconfig path (#10782)
2ba4bdf feat(minify): support property name mangling (#10374)
224f40b fix(dev): register an empty exports object for a module without exports (#10772)
4f052e4 fix: name the module when a codeSplitting group callback returns a wrong ty...
f86be54 perf: batch codeSplitting group test / name calls (#10745)
4f81096 perf: enable compiler cache via module.enableCompileCache() (#10678)
Additional commits viewable in compare view

Updates @types/react-dom from 19.2.4 to 19.2.5

Commits

See full diff in compare view

Updates @vitejs/plugin-react from 6.0.5 to 6.1.1

Release notes

Sourced from @vitejs/plugin-react's releases.

plugin-react@6.1.1

Add compiler.logDiagnostics option

Recoverable React Compiler diagnostics are no longer logged by default. Set compiler.logDiagnostics to true to log them through Vite. Fatal diagnostics are always logged and fail the transform.

Respect environment sourcemap option for React Compiler transform when builder.sharedPlugins is enabled (#1439)

The React Compiler transform was using the top-level sourcemap option instead of the environment sourcemap option. This caused a problem when the experimental builder.sharedPlugins was enabled.

plugin-react@6.1.0

Add experimental native React Compiler support (#1419)

Add experimental native React Compiler support.

You can use it by installing oxc-transform-react and enabling it via the compiler option:
npm install -D oxc-transform-react
import { defineConfig } from 'vite'
import react from '@vitejs/plugin-react'
export default defineConfig({
plugins: [
react({ compiler: true })
]
})

Changelog

Sourced from @vitejs/plugin-react's changelog.

6.1.1 (2026-08-28)

Add compiler.logDiagnostics option

Recoverable React Compiler diagnostics are no longer logged by default. Set compiler.logDiagnostics to true to log them through Vite. Fatal diagnostics are always logged and fail the transform.

Respect environment sourcemap option for React Compiler transform when builder.sharedPlugins is enabled (#1439)

The React Compiler transform was using the top-level sourcemap option instead of the environment sourcemap option. This caused a problem when the experimental builder.sharedPlugins was enabled.

6.1.0 (2026-08-19)

Add experimental native React Compiler support (#1419)

Add experimental native React Compiler support.

You can use it by installing oxc-transform-react and enabling it via the compiler option:
npm install -D oxc-transform-react
import { defineConfig } from 'vite'
import react from '@vitejs/plugin-react'
export default defineConfig({
plugins: [
react({ compiler: true })
]
})

Commits

04cac50 release: plugin-react@6.1.1 (#1440)
82d35ab fix(react): respect environment sourcemap option when builder.sharedPlugins...
397e847 fix(react): make logging diagnostics an opt-in for React Compiler (#1431)
61006e6 fix(deps): update all non-major dependencies (#1433)
e2a649c chore: use deps.neverBundle instead of external in tsdown config (#1430)
fb2d6f3 fix(deps): update all non-major dependencies (#1427)
39b3173 release: plugin-react@6.1.0 (#1428)
f1340b0 feat(react): add native React Compiler support (#1419)
9ab698e fix(deps): update all non-major dependencies (#1375)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…th 8 updates Bumps the npm-development group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@changesets/cli](https://github.com/changesets/changesets/tree/HEAD/packages/cli) | `3.0.0` | `3.0.1` | | [@x402/hono](https://github.com/x402-foundation/x402) | `2.22.0` | `2.24.0` | | [@x402/mcp](https://github.com/x402-foundation/x402) | `2.22.0` | `2.24.0` | | [@x402/next](https://github.com/x402-foundation/x402) | `2.22.0` | `2.24.0` | | [elysia](https://github.com/elysiajs/elysia) | `1.4.29` | `1.4.30` | | [rolldown](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.2.4` | `1.2.7` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.2.5` | | [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.0.5` | `6.1.1` | Updates `@changesets/cli` from 3.0.0 to 3.0.1 - [Release notes](https://github.com/changesets/changesets/releases) - [Changelog](https://github.com/changesets/changesets/blob/main/packages/cli/CHANGELOG.md) - [Commits](https://github.com/changesets/changesets/commits/@changesets/cli@3.0.1/packages/cli) Updates `@x402/hono` from 2.22.0 to 2.24.0 - [Commits](https://github.com/x402-foundation/x402/compare/npm-@x402/hono@v2.22.0...npm-@x402/hono@v2.24.0) Updates `@x402/mcp` from 2.22.0 to 2.24.0 - [Commits](https://github.com/x402-foundation/x402/compare/npm-@x402/mcp@v2.22.0...npm-@x402/mcp@v2.24.0) Updates `@x402/next` from 2.22.0 to 2.24.0 - [Commits](https://github.com/x402-foundation/x402/compare/npm-@x402/next@v2.22.0...npm-@x402/next@v2.24.0) Updates `elysia` from 1.4.29 to 1.4.30 - [Release notes](https://github.com/elysiajs/elysia/releases) - [Changelog](https://github.com/elysiajs/elysia/blob/main/CHANGELOG.md) - [Commits](elysiajs/elysia@1.4.29...1.4.30) Updates `rolldown` from 1.2.4 to 1.2.7 - [Release notes](https://github.com/rolldown/rolldown/releases) - [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md) - [Commits](https://github.com/rolldown/rolldown/commits/v1.2.7/packages/rolldown) Updates `@types/react-dom` from 19.2.4 to 19.2.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `@vitejs/plugin-react` from 6.0.5 to 6.1.1 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.1.1/packages/plugin-react) --- updated-dependencies: - dependency-name: "@changesets/cli" dependency-version: 3.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: "@x402/hono" dependency-version: 2.24.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: "@x402/mcp" dependency-version: 2.24.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: "@x402/next" dependency-version: 2.24.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: elysia dependency-version: 1.4.30 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: rolldown dependency-version: 1.2.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: "@types/react-dom" dependency-version: 19.2.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: "@vitejs/plugin-react" dependency-version: 6.1.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development ... Signed-off-by: dependabot[bot] <support@github.com>

socket-security · 2026-09-09T16:21:31Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
@changesets/cli@3.0.0 ⏵ 3.0.1
@types/react-dom@19.2.4 ⏵ 19.2.5	⁺¹	⁺¹
elysia@1.4.29 ⏵ 1.4.30		⁺¹	⁺¹
rolldown@1.2.4 ⏵ 1.2.7		⁺¹
@types/node@26.5.0
tsx@4.23.13
@x402/mcp@2.22.0 ⏵ 2.24.0	⁺³	⁺¹	⁺¹
@x402/next@2.22.0 ⏵ 2.24.0	⁺³	⁺¹	⁺²
@vitejs/plugin-react@6.0.5 ⏵ 6.1.1		⁺¹
@x402/hono@2.22.0 ⏵ 2.24.0	⁺³	⁺¹	⁺²

View full report

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 9, 2026

Navigation Menu

Uh oh!

Uh oh!

chore(deps-dev): bump the npm-development group across 1 directory with 8 updates - #884

chore(deps-dev): bump the npm-development group across 1 directory with 8 updates#884
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-development-965b9e1132

dependabot Bot commented on behalf of github Sep 9, 2026

Uh oh!

socket-security Bot commented Sep 9, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 9, 2026

@​changesets/cli@​3.0.1

Patch Changes

3.0.1

Patch Changes

1.4.30

What's changed

1.4.30 - 26 Aug 2026

v1.2.7

[1.2.7] - 2026-09-02

🐛 Bug Fixes

🧪 Testing

⚙️ Miscellaneous Tasks

v1.2.6

[1.2.6] - 2026-08-26

🚀 Features

🐛 Bug Fixes

[1.2.7] - 2026-09-02

🐛 Bug Fixes

🧪 Testing

⚙️ Miscellaneous Tasks

[1.2.6] - 2026-08-26

🚀 Features

🐛 Bug Fixes

🚜 Refactor

plugin-react@6.1.1

Add compiler.logDiagnostics option

Respect environment sourcemap option for React Compiler transform when builder.sharedPlugins is enabled (#1439)

plugin-react@6.1.0

Add experimental native React Compiler support (#1419)

6.1.1 (2026-08-28)

Add compiler.logDiagnostics option

Respect environment sourcemap option for React Compiler transform when builder.sharedPlugins is enabled (#1439)

6.1.0 (2026-08-19)

Add experimental native React Compiler support (#1419)

Uh oh!

socket-security Bot commented Sep 9, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`@changesets/cli@3`.0.1

Add `compiler.logDiagnostics` option

Respect environment sourcemap option for React Compiler transform when `builder.sharedPlugins` is enabled (#1439)

Add `compiler.logDiagnostics` option

Respect environment sourcemap option for React Compiler transform when `builder.sharedPlugins` is enabled (#1439)