Bump axios, @solana/spl-token and @solana/wallet-adapter-wallets in /solana/explorer-clone-part-2/starter#409
Open
dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
Bumps [axios](https://github.com/axios/axios) to 1.15.0 and updates ancestor dependencies [axios](https://github.com/axios/axios), [@solana/spl-token](https://github.com/solana-labs/solana-program-library) and [@solana/wallet-adapter-wallets](https://github.com/anza-xyz/wallet-adapter). These dependencies need to be updated together. Updates `axios` from 0.21.4 to 1.15.0 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v0.21.4...v1.15.0) Updates `@solana/spl-token` from 0.2.0 to 0.4.14 - [Release notes](https://github.com/solana-labs/solana-program-library/releases) - [Commits](https://github.com/solana-labs/solana-program-library/commits) Updates `@solana/wallet-adapter-wallets` from 0.15.5 to 0.19.38 - [Release notes](https://github.com/anza-xyz/wallet-adapter/releases) - [Commits](https://github.com/anza-xyz/wallet-adapter/commits/@solana/wallet-adapter-wallets@0.19.38) --- updated-dependencies: - dependency-name: axios dependency-version: 1.15.0 dependency-type: indirect - dependency-name: "@solana/spl-token" dependency-version: 0.4.14 dependency-type: direct:production - dependency-name: "@solana/wallet-adapter-wallets" dependency-version: 0.19.38 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps axios to 1.15.0 and updates ancestor dependencies axios, @solana/spl-token and @solana/wallet-adapter-wallets. These dependencies need to be updated together.
Updates
axiosfrom 0.21.4 to 1.15.0Release notes
Sourced from axios's releases.
... (truncated)
Changelog
Sourced from axios's changelog.
... (truncated)
Commits
772a4e5chore(release): prepare release 1.15.0 (#10671)4b07137chore(deps-dev): bump vite from 8.0.0 to 8.0.5 in /tests/smoke/esm (#10663)51e57b3chore(deps-dev): bump vite from 8.0.2 to 8.0.5 (#10664)fba1a77chore(deps-dev): bump vite from 8.0.2 to 8.0.5 in /tests/module/esm (#10665)0bf6e28chore(deps): bump denoland/setup-deno in the github-actions group (#10669)8107157chore(deps-dev): bump the development_dependencies group with 4 updates (#10670)e66530eci: require npm-publish environment for releases (#10666)49f23cbchore(sponsor): update sponsor block (#10668)3631854fix: unrestricted cloud metadata exfiltration via header injection chain (#10...fb3befbfix: no_proxy hostname normalization bypass leads to ssrf (#10661)Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for axios since your current version.
Install script changes
This version adds
preparescript that runs during installation. Review the package contents before updating.Updates
@solana/spl-tokenfrom 0.2.0 to 0.4.14Release notes
Sourced from
@solana/spl-token's releases.... (truncated)
Commits
Maintainer changes
This version was pushed to npm by solana-devs, a new releaser for
@solana/spl-tokensince your current version.Updates
@solana/wallet-adapter-walletsfrom 0.15.5 to 0.19.38Release notes
Sourced from
@solana/wallet-adapter-wallets's releases.... (truncated)
Commits
Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for
@solana/wallet-adapter-walletssince your current version.Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.
Note
Low Risk
Primarily dependency/version updates (including
axiossecurity patches) with minimal direct code changes; risk is limited to potential runtime/compatibility regressions from the upgraded Solana JS libraries.Overview
Updates the
solana/explorer-clone-part-2/starterapp’s dependencies, bumpingaxiosto1.15.0and upgrading Solana-related packages to@solana/spl-token@0.4.14and@solana/wallet-adapter-wallets@0.19.38.Lockfiles are refreshed to reflect the new dependency graph brought in by these upgrades.
Reviewed by Cursor Bugbot for commit 3f9a00b. Bugbot is set up for automated code reviews on this repo. Configure here.