build(deps): Bump the npm_and_yarn group across 11 directories with 3 updates by dependabot[bot] · Pull Request #8865 · thirdweb-dev/js

dependabot · 2026-07-31T00:40:24Z

Bumps the npm_and_yarn group with 1 update in the /apps/dashboard directory: next.
Bumps the npm_and_yarn group with 1 update in the /apps/nebula directory: next.
Bumps the npm_and_yarn group with 1 update in the /apps/playground-web directory: next.
Bumps the npm_and_yarn group with 1 update in the /apps/portal directory: next.
Bumps the npm_and_yarn group with 1 update in the /apps/wallet-ui directory: next.
Bumps the npm_and_yarn group with 1 update in the /packages/api directory: @hey-api/openapi-ts.
Bumps the npm_and_yarn group with 1 update in the /packages/engine directory: @hey-api/openapi-ts.
Bumps the npm_and_yarn group with 1 update in the /packages/insight directory: @hey-api/openapi-ts.
Bumps the npm_and_yarn group with 1 update in the /packages/nebula directory: @hey-api/openapi-ts.
Bumps the npm_and_yarn group with 1 update in the /packages/thirdweb directory: sharp.
Bumps the npm_and_yarn group with 1 update in the /packages/ui directory: next.

Updates next from 15.3.8 to 15.5.21

Release notes

Sourced from next's releases.

v15.5.21

This release contains security fixes for the following advisories:

High:

Denial of Service in App Router using Server Actions

Middleware / Proxy bypass in App Router applications using Turbopack and single locale

Server-Side Request Forgery in rewrites via attacker-controlled destination hostname

Server-Side Request Forgery in Server Actions on custom servers

Moderate:

Cache confusion of response bodies for requests with bodies

Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences

Denial of Service in the Image Optimization API using SVGs

Unauthenticated disclosure of internal Server Function endpoints

Unbounded Server Action payload in Edge runtime

v15.5.20

Contains no changes except publishing @next/swc-wasm-web which was accidentally not published since 15.5.15.

15.5.19

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

[15.5.x] Don't drop FormData entries (#94244)

Other

[15.5.x] Fix CI (#94281)

Credits

Huge thanks to @eps1lon for helping!

Commits

e26f6ff v15.5.21
7f5deeb [15.x] Improve performance of checking valid MPA form submissions
57c31f7 [15.x] Enforce serverActions.bodySizeLimit for Server Actions in Edge runtime
e3e5666 [15.x] Set correct origin for internal redirects in custom server
35f5013 [15.x] Ensure exotic rewrite param values are properly encoded
062f667 [15.x] fix(fetch-cache): key fetch(Request, init) by the effective request
577c9dc [15.x] fix(incremental-cache): byte-exact fetch cache key for binary bodies
530d4fa [15.x] fix(next/image): improve performance of detectContentType()
8fabaf3 [15.x] Performance improvements when decoding React Server function payloads
ff12a61 [15.x] Validate server reference IDs during manifest lookup
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for next since your current version.

Updates next from 15.3.8 to 15.5.21

Release notes

Sourced from next's releases.

v15.5.21

This release contains security fixes for the following advisories:

High:

Denial of Service in App Router using Server Actions

Middleware / Proxy bypass in App Router applications using Turbopack and single locale

Server-Side Request Forgery in rewrites via attacker-controlled destination hostname

Server-Side Request Forgery in Server Actions on custom servers

Moderate:

Cache confusion of response bodies for requests with bodies

Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences

Denial of Service in the Image Optimization API using SVGs

Unauthenticated disclosure of internal Server Function endpoints

Unbounded Server Action payload in Edge runtime

v15.5.20

Contains no changes except publishing @next/swc-wasm-web which was accidentally not published since 15.5.15.

15.5.19

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

[15.5.x] Don't drop FormData entries (#94244)

Other

[15.5.x] Fix CI (#94281)

Credits

Huge thanks to @eps1lon for helping!

Commits

e26f6ff v15.5.21
7f5deeb [15.x] Improve performance of checking valid MPA form submissions
57c31f7 [15.x] Enforce serverActions.bodySizeLimit for Server Actions in Edge runtime
e3e5666 [15.x] Set correct origin for internal redirects in custom server
35f5013 [15.x] Ensure exotic rewrite param values are properly encoded
062f667 [15.x] fix(fetch-cache): key fetch(Request, init) by the effective request
577c9dc [15.x] fix(incremental-cache): byte-exact fetch cache key for binary bodies
530d4fa [15.x] fix(next/image): improve performance of detectContentType()
8fabaf3 [15.x] Performance improvements when decoding React Server function payloads
ff12a61 [15.x] Validate server reference IDs during manifest lookup
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for next since your current version.

Updates next from 15.3.8 to 15.5.21

Release notes

Sourced from next's releases.

v15.5.21

This release contains security fixes for the following advisories:

High:

Denial of Service in App Router using Server Actions

Middleware / Proxy bypass in App Router applications using Turbopack and single locale

Server-Side Request Forgery in rewrites via attacker-controlled destination hostname

Server-Side Request Forgery in Server Actions on custom servers

Moderate:

Cache confusion of response bodies for requests with bodies

Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences

Denial of Service in the Image Optimization API using SVGs

Unauthenticated disclosure of internal Server Function endpoints

Unbounded Server Action payload in Edge runtime

v15.5.20

Contains no changes except publishing @next/swc-wasm-web which was accidentally not published since 15.5.15.

15.5.19

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

[15.5.x] Don't drop FormData entries (#94244)

Other

[15.5.x] Fix CI (#94281)

Credits

Huge thanks to @eps1lon for helping!

Commits

e26f6ff v15.5.21
7f5deeb [15.x] Improve performance of checking valid MPA form submissions
57c31f7 [15.x] Enforce serverActions.bodySizeLimit for Server Actions in Edge runtime
e3e5666 [15.x] Set correct origin for internal redirects in custom server
35f5013 [15.x] Ensure exotic rewrite param values are properly encoded
062f667 [15.x] fix(fetch-cache): key fetch(Request, init) by the effective request
577c9dc [15.x] fix(incremental-cache): byte-exact fetch cache key for binary bodies
530d4fa [15.x] fix(next/image): improve performance of detectContentType()
8fabaf3 [15.x] Performance improvements when decoding React Server function payloads
ff12a61 [15.x] Validate server reference IDs during manifest lookup
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for next since your current version.

Updates next from 15.3.8 to 15.5.21

Release notes

Sourced from next's releases.

v15.5.21

This release contains security fixes for the following advisories:

High:

Denial of Service in App Router using Server Actions

Middleware / Proxy bypass in App Router applications using Turbopack and single locale

Server-Side Request Forgery in rewrites via attacker-controlled destination hostname

Server-Side Request Forgery in Server Actions on custom servers

Moderate:

Cache confusion of response bodies for requests with bodies

Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences

Denial of Service in the Image Optimization API using SVGs

Unauthenticated disclosure of internal Server Function endpoints

Unbounded Server Action payload in Edge runtime

v15.5.20

Contains no changes except publishing @next/swc-wasm-web which was accidentally not published since 15.5.15.

15.5.19

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

[15.5.x] Don't drop FormData entries (#94244)

Other

[15.5.x] Fix CI (#94281)

Credits

Huge thanks to @eps1lon for helping!

Commits

e26f6ff v15.5.21
7f5deeb [15.x] Improve performance of checking valid MPA form submissions
57c31f7 [15.x] Enforce serverActions.bodySizeLimit for Server Actions in Edge runtime
e3e5666 [15.x] Set correct origin for internal redirects in custom server
35f5013 [15.x] Ensure exotic rewrite param values are properly encoded
062f667 [15.x] fix(fetch-cache): key fetch(Request, init) by the effective request
577c9dc [15.x] fix(incremental-cache): byte-exact fetch cache key for binary bodies
530d4fa [15.x] fix(next/image): improve performance of detectContentType()
8fabaf3 [15.x] Performance improvements when decoding React Server function payloads
ff12a61 [15.x] Validate server reference IDs during manifest lookup
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for next since your current version.

Updates next from 15.3.8 to 15.5.21

Release notes

Sourced from next's releases.

v15.5.21

This release contains security fixes for the following advisories:

High:

Denial of Service in App Router using Server Actions

Middleware / Proxy bypass in App Router applications using Turbopack and single locale

Server-Side Request Forgery in rewrites via attacker-controlled destination hostname

Server-Side Request Forgery in Server Actions on custom servers

Moderate:

Cache confusion of response bodies for requests with bodies

Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences

Denial of Service in the Image Optimization API using SVGs

Unauthenticated disclosure of internal Server Function endpoints

Unbounded Server Action payload in Edge runtime

v15.5.20

Contains no changes except publishing @next/swc-wasm-web which was accidentally not published since 15.5.15.

15.5.19

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

[15.5.x] Don't drop FormData entries (#94244)

Other

[15.5.x] Fix CI (#94281)

Credits

Huge thanks to @eps1lon for helping!

Commits

e26f6ff v15.5.21
7f5deeb [15.x] Improve performance of checking valid MPA form submissions
57c31f7 [15.x] Enforce serverActions.bodySizeLimit for Server Actions in Edge runtime
e3e5666 [15.x] Set correct origin for internal redirects in custom server
35f5013 [15.x] Ensure exotic rewrite param values are properly encoded
062f667 [15.x] fix(fetch-cache): key fetch(Request, init) by the effective request
577c9dc [15.x] fix(incremental-cache): byte-exact fetch cache key for binary bodies
530d4fa [15.x] fix(next/image): improve performance of detectContentType()
8fabaf3 [15.x] Performance improvements when decoding React Server function payloads
ff12a61 [15.x] Validate server reference IDs during manifest lookup
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for next since your current version.

Updates @hey-api/openapi-ts from 0.76.0 to 0.97.3

Release notes

Sourced from @hey-api/openapi-ts's releases.

@hey-api/openapi-ts@0.95.0

Minor Changes

plugin(valibot): remove request data schema (#3671) (96f60ad) by @mrlubos

Validator request schemas

Valibot plugin no longer exports composite request Data schemas. Instead, each layer is exported as a separate schema. If you're using validators with SDKs, you can preserve the composite schema with shouldExtract:
export default {
  input: "hey-api/backend", // sign up at app.heyapi.dev
  output: "src/client",
  plugins: [
    // ...other plugins
    {
      name: "sdk",
      validator: "valibot",
    },
    {
      name: "valibot",
      requests: {
        shouldExtract: true,
      },
    },
  ],
};
internal: remove plugin.getSymbol() function (#3671) (96f60ad) by @mrlubos

Removed plugin.getSymbol() function

This function has been removed. You can use plugin.querySymbol() instead. It accepts the same arguments and returns the same result.

plugin(zod): remove request data schema (#3671) (96f60ad) by @mrlubos

Validator request schemas

Zod plugin no longer exports composite request Data schemas. Instead, each layer is exported as a separate schema. If you're using validators with SDKs, you can preserve the composite schema with shouldExtract:
export default {
  input: "hey-api/backend", // sign up at app.heyapi.dev
  output: "src/client",
  plugins: [
    // ...other plugins
    {
      name: "sdk",
      validator: "zod",
</tr></table> 

... (truncated)

Changelog

Sourced from @hey-api/openapi-ts's changelog.

0.97.3

Patch Changes

plugin(@hey-api/client-axios): fix: correct return type in SSE (#3919) (a19b3a4) by @kitlangton

plugin(@tanstack/preact-query): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@hey-api/client-ofetch): fix: correct return type in SSE (#3919) (a19b3a4) by @kitlangton

plugin(@tanstack/svelte-query): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@tanstack/angular-query-experimental): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@tanstack/react-query): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@hey-api/client-fetch): fix: correct return type in SSE (#3919) (a19b3a4) by @kitlangton

plugin(@tanstack/react-query): add useGetQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@hey-api/client-ky): fix: correct return type in SSE (#3919) (a19b3a4) by @kitlangton

plugin(@tanstack/solid-query): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@hey-api/client-next): fix: correct return type in SSE (#3919) (a19b3a4) by @kitlangton

plugin(@tanstack/preact-query): add useGetQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@hey-api/client-angular): fix: correct return type in SSE (#3919) (58962a0) by @kitlangton

plugin(@hey-api/transformers): add support for Temporal API via temporal-polyfill in dates (#3916) (bfa457a) by @OptoCloud

plugin(@tanstack/vue-query): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(zod): fix: avoid invalid .extend() on z.record() when a discriminated union member is an empty object (#3915) (8fa9f3a) by @pullfrog

Updated Dependencies:

@hey-api/shared@0.4.5

@hey-api/codegen-core@0.8.2

0.97.2

Patch Changes

plugin(zod): use enums from TypeScript if available (#3884) (abc8ceb) by @mrlubos

plugin(@hey-api/client-next): fix: preserve query auth when when there are no other query parameters (#3853) (a6ee7eb) by @copilot-swe-agent

plugin(@hey-api/sdk): support valibot as response transformer (#3847) (6770f78) by @SukkaW

... (truncated)

Commits

d833f73 ci: release
4987bc3 docs: add changesets
30498ce Merge branch 'main' of https://github.com/hey-api/openapi-ts into feat/tansta...
9be7e7f chore: one more try
4c5916d chore: one more try
83b4464 chore: one more try
597e151 Merge branch 'main' into pullfrog/3914-zod-discriminated-union-empty-object
462c2e9 Merge branch 'main' into feat/transformers-temporal
3367e64 Merge branch 'main' into fix/sse-iterator-treturn-miswiring
e6d4416 refactor: valibot plugin
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @hey-api/openapi-ts since your current version.

Updates @hey-api/openapi-ts from 0.76.0 to 0.97.3

Release notes

Sourced from @hey-api/openapi-ts's releases.

@hey-api/openapi-ts@0.95.0

Minor Changes

plugin(valibot): remove request data schema (#3671) (96f60ad) by @mrlubos

Validator request schemas

Valibot plugin no longer exports composite request Data schemas. Instead, each layer is exported as a separate schema. If you're using validators with SDKs, you can preserve the composite schema with shouldExtract:
export default {
  input: "hey-api/backend", // sign up at app.heyapi.dev
  output: "src/client",
  plugins: [
    // ...other plugins
    {
      name: "sdk",
      validator: "valibot",
    },
    {
      name: "valibot",
      requests: {
        shouldExtract: true,
      },
    },
  ],
};
internal: remove plugin.getSymbol() function (#3671) (96f60ad) by @mrlubos

Removed plugin.getSymbol() function

This function has been removed. You can use plugin.querySymbol() instead. It accepts the same arguments and returns the same result.

plugin(zod): remove request data schema (#3671) (96f60ad) by @mrlubos

Validator request schemas

Zod plugin no longer exports composite request Data schemas. Instead, each layer is exported as a separate schema. If you're using validators with SDKs, you can preserve the composite schema with shouldExtract:
export default {
  input: "hey-api/backend", // sign up at app.heyapi.dev
  output: "src/client",
  plugins: [
    // ...other plugins
    {
      name: "sdk",
      validator: "zod",
</tr></table> 

... (truncated)

Changelog

Sourced from @hey-api/openapi-ts's changelog.

0.97.3

Patch Changes

plugin(@hey-api/client-axios): fix: correct return type in SSE (#3919) (a19b3a4) by @kitlangton

plugin(@tanstack/preact-query): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@hey-api/client-ofetch): fix: correct return type in SSE (#3919) (a19b3a4) by @kitlangton

plugin(@tanstack/svelte-query): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@tanstack/angular-query-experimental): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@tanstack/react-query): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@hey-api/client-fetch): fix: correct return type in SSE (#3919) (a19b3a4) by @kitlangton

plugin(@tanstack/react-query): add useGetQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@hey-api/client-ky): fix: correct return type in SSE (#3919) (a19b3a4) by @kitlangton

plugin(@tanstack/solid-query): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@hey-api/client-next): fix: correct return type in SSE (#3919) (a19b3a4) by @kitlangton

plugin(@tanstack/preact-query): add useGetQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@hey-api/client-angular): fix: correct return type in SSE (#3919) (58962a0) by @kitlangton

plugin(@hey-api/transformers): add support for Temporal API via temporal-polyfill in dates (#3916) (bfa457a) by @OptoCloud

plugin(@tanstack/vue-query): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(zod): fix: avoid invalid .extend() on z.record() when a discriminated union member is an empty object (#3915) (8fa9f3a) by @pullfrog

Updated Dependencies:

@hey-api/shared@0.4.5

@hey-api/codegen-core@0.8.2

0.97.2

Patch Changes

plugin(zod): use enums from TypeScript if available (#3884) (abc8ceb) by @mrlubos

plugin(@hey-api/client-next): fix: preserve query auth when when there are no other query parameters (#3853) (a6ee7eb) by @copilot-swe-agent

plugin(@hey-api/sdk): support valibot as response transformer (#3847) (6770f78) by @SukkaW

... (truncated)

Commits

d833f73 ci: release
4987bc3 docs: add changesets
30498ce Merge branch 'main' of https://github.com/hey-api/openapi-ts into feat/tansta...
9be7e7f chore: one more try
4c5916d chore: one more try
83b4464 chore: one more try
597e151 Merge branch 'main' into pullfrog/3914-zod-discriminated-union-empty-object
462c2e9 Merge branch 'main' into feat/transformers-temporal
3367e64 Merge branch 'main' into fix/sse-iterator-treturn-miswiring
e6d4416 refactor: valibot plugin
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @hey-api/openapi-ts since your current version.

Updates @hey-api/openapi-ts from 0.76.0 to 0.97.3

Release notes

Sourced from @hey-api/openapi-ts's releases.

@hey-api/openapi-ts@0.95.0

Minor Changes

plugin(valibot): remove request data schema (#3671) (96f60ad) by @mrlubos

Validator request schemas

Valibot plugin no longer exports composite request Data schemas. Instead, each layer is exported as a separate schema. If you're using validators with SDKs, you can preserve the composite schema with shouldExtract:
export default {
  input: "hey-api/backend", // sign up at app.heyapi.dev
  output: "src/client",
  plugins: [
    // ...other plugins
    {
      name: "sdk",
      validator: "valibot",
    },
    {
      name: "valibot",
      requests: {
        shouldExtract: true,
      },
    },
  ],
};
internal: remove plugin.getSymbol() function (#3671) (96f60ad) by @mrlubos

Removed plugin.getSymbol() function

This function has been removed. You can use plugin.querySymbol() instead. It accepts the same arguments and returns the same result.

plugin(zod): remove request data schema (#3671) (96f60ad) by @mrlubos

Validator request schemas

Zod plugin no longer exports composite request Data schemas. Instead, each layer is exported as a separate schema. If you're using validators with SDKs, you can preserve the composite schema with shouldExtract:
export default {
  input: "hey-api/backend", // sign up at app.heyapi.dev
  output: "src/client",
  plugins: [
    // ...other plugins
    {
      name: "sdk",
      validator: "zod",
</tr></table> 

... (truncated)

Changelog

Sourced from @hey-api/openapi-ts's changelog.

0.97.3

Patch Changes

plugin(@hey-api/client-axios): fix: correct return type in SSE (#3919) (a19b3a4) by @kitlangton

plugin(@tanstack/preact-query): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@hey-api/client-ofetch): fix: correct return type in SSE (#3919) (a19b3a4) by @kitlangton

plugin(@tanstack/svelte-query): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@tanstack/angular-query-experimental): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@tanstack/react-query): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@hey-api/client-fetch): fix: correct return type in SSE (#3919) (a19b3a4) by @kitlangton

plugin(@tanstack/react-query): add useGetQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@hey-api/client-ky): fix: correct return type in SSE (#3919) (a19b3a4) by @kitlangton

plugin(@tanstack/solid-query): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@hey-api/client-next): fix: correct return type in SSE (#3919) (a19b3a4) by @kitlangton

plugin(@tanstack/preact-query): add useGetQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@hey-api/client-angular): fix: correct return type in SSE (#3919) (58962a0) by @kitlangton

plugin(@hey-api/transformers): add support for Temporal API via temporal-polyfill in dates (#3916) (bfa457a) by @OptoCloud

plugin(@tanstack/vue-query): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(zod): fix: avoid invalid .extend() on z.record() when a discriminated union member is an empty object (#3915) (8fa9f3a) by @pullfrog

Updated Dependencies:

@hey-api/shared@0.4.5

@hey-api/codegen-core@0.8.2

0.97.2

Patch Changes

plugin(zod): use enums from TypeScript if available (#3884) (abc8ceb) by @mrlubos

plugin(@hey-api/client-next): fix: preserve query auth when when there are no other query parameters (#3853) (a6ee7eb) by @copilot-swe-agent

plugin(@hey-api/sdk): support valibot as response transformer (#3847) (6770f78) by @SukkaW

... (truncated)

Commits

d833f73 ci: release
4987bc3 docs: add changesets
30498ce Merge branch 'main' of https://github.com/hey-api/openapi-ts into feat/tansta...
9be7e7f chore: one more try
4c5916d chore: one more try
83b4464 chore: one more try
597e151 Merge branch 'main' into pullfrog/3914-zod-discriminated-union-empty-object
462c2e9 Merge branch 'main' into feat/transformers-temporal
3367e64 Merge branch 'main' into fix/sse-iterator-treturn-miswiring
e6d4416 refactor: valibot plugin
Additional commits viewable in compare view

Description has been truncated

PR-Codex overview

This PR focuses on updating the version of various dependencies across multiple package.json files in the project, particularly upgrading the next framework and the @hey-api/openapi-ts package.

Detailed summary

Updated next version from 15.3.8 to 15.5.21 in:
- apps/wallet-ui/package.json
- apps/dashboard/package.json
- apps/nebula/package.json
- packages/ui/package.json
- apps/portal/package.json
- apps/playground-web/package.json
Updated @hey-api/openapi-ts version from 0.76.0 to 0.97.3 in:
- packages/api/package.json
- packages/engine/package.json
- packages/nebula/package.json
- packages/insight/package.json
Updated sharp version from ^0.34.2 to ^0.35.0 in packages/thirdweb/package.json.

✨ Ask PR-Codex anything about this PR by commenting with /codex {your question}

… updates Bumps the npm_and_yarn group with 1 update in the /apps/dashboard directory: [next](https://github.com/vercel/next.js). Bumps the npm_and_yarn group with 1 update in the /apps/nebula directory: [next](https://github.com/vercel/next.js). Bumps the npm_and_yarn group with 1 update in the /apps/playground-web directory: [next](https://github.com/vercel/next.js). Bumps the npm_and_yarn group with 1 update in the /apps/portal directory: [next](https://github.com/vercel/next.js). Bumps the npm_and_yarn group with 1 update in the /apps/wallet-ui directory: [next](https://github.com/vercel/next.js). Bumps the npm_and_yarn group with 1 update in the /packages/api directory: [@hey-api/openapi-ts](https://github.com/hey-api/hey-api/tree/HEAD/packages/openapi-ts). Bumps the npm_and_yarn group with 1 update in the /packages/engine directory: [@hey-api/openapi-ts](https://github.com/hey-api/hey-api/tree/HEAD/packages/openapi-ts). Bumps the npm_and_yarn group with 1 update in the /packages/insight directory: [@hey-api/openapi-ts](https://github.com/hey-api/hey-api/tree/HEAD/packages/openapi-ts). Bumps the npm_and_yarn group with 1 update in the /packages/nebula directory: [@hey-api/openapi-ts](https://github.com/hey-api/hey-api/tree/HEAD/packages/openapi-ts). Bumps the npm_and_yarn group with 1 update in the /packages/thirdweb directory: [sharp](https://github.com/lovell/sharp). Bumps the npm_and_yarn group with 1 update in the /packages/ui directory: [next](https://github.com/vercel/next.js). Updates `next` from 15.3.8 to 15.5.21 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v15.3.8...v15.5.21) Updates `next` from 15.3.8 to 15.5.21 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v15.3.8...v15.5.21) Updates `next` from 15.3.8 to 15.5.21 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v15.3.8...v15.5.21) Updates `next` from 15.3.8 to 15.5.21 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v15.3.8...v15.5.21) Updates `next` from 15.3.8 to 15.5.21 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v15.3.8...v15.5.21) Updates `@hey-api/openapi-ts` from 0.76.0 to 0.97.3 - [Release notes](https://github.com/hey-api/hey-api/releases) - [Changelog](https://github.com/hey-api/hey-api/blob/main/packages/openapi-ts/CHANGELOG.md) - [Commits](https://github.com/hey-api/hey-api/commits/@hey-api/openapi-ts@0.97.3/packages/openapi-ts) Updates `@hey-api/openapi-ts` from 0.76.0 to 0.97.3 - [Release notes](https://github.com/hey-api/hey-api/releases) - [Changelog](https://github.com/hey-api/hey-api/blob/main/packages/openapi-ts/CHANGELOG.md) - [Commits](https://github.com/hey-api/hey-api/commits/@hey-api/openapi-ts@0.97.3/packages/openapi-ts) Updates `@hey-api/openapi-ts` from 0.76.0 to 0.97.3 - [Release notes](https://github.com/hey-api/hey-api/releases) - [Changelog](https://github.com/hey-api/hey-api/blob/main/packages/openapi-ts/CHANGELOG.md) - [Commits](https://github.com/hey-api/hey-api/commits/@hey-api/openapi-ts@0.97.3/packages/openapi-ts) Updates `@hey-api/openapi-ts` from 0.76.0 to 0.97.3 - [Release notes](https://github.com/hey-api/hey-api/releases) - [Changelog](https://github.com/hey-api/hey-api/blob/main/packages/openapi-ts/CHANGELOG.md) - [Commits](https://github.com/hey-api/hey-api/commits/@hey-api/openapi-ts@0.97.3/packages/openapi-ts) Updates `sharp` from 0.34.2 to 0.35.0 - [Release notes](https://github.com/lovell/sharp/releases) - [Commits](lovell/sharp@v0.34.2...v0.35.0) Updates `next` from 15.3.8 to 15.5.21 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v15.3.8...v15.5.21) --- updated-dependencies: - dependency-name: next dependency-version: 15.5.21 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: next dependency-version: 15.5.21 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: next dependency-version: 15.5.21 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: next dependency-version: 15.5.21 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: next dependency-version: 15.5.21 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@hey-api/openapi-ts" dependency-version: 0.97.3 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@hey-api/openapi-ts" dependency-version: 0.97.3 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@hey-api/openapi-ts" dependency-version: 0.97.3 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@hey-api/openapi-ts" dependency-version: 0.97.3 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: sharp dependency-version: 0.35.0 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: next dependency-version: 15.5.21 dependency-type: direct:production dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

changeset-bot · 2026-07-31T00:40:30Z

⚠️ No Changeset found

Latest commit: da430a7

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

vercel · 2026-07-31T00:40:31Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Updated (UTC)
docs-v2	Error	Jul 31, 2026 12:40am
nebula	Error	Jul 31, 2026 12:40am
thirdweb_playground	Error	Jul 31, 2026 12:40am
thirdweb-www	Error	Jul 31, 2026 12:40am
wallet-ui	Error	Jul 31, 2026 12:40am

github-actions · 2026-08-07T02:14:29Z

This PR has been inactive for 7 days. It is now marked as stale and will be closed in 2 days if no further activity occurs.

dependabot · 2026-08-10T02:12:13Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot added Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 31, 2026

dependabot Bot requested review from a team as code owners July 31, 2026 00:40

dependabot Bot added Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 31, 2026

vercel Bot had a problem deploying to Preview – wallet-ui July 31, 2026 00:40 Failure

vercel Bot had a problem deploying to Preview – docs-v2 July 31, 2026 00:40 Failure

vercel Bot had a problem deploying to Preview – nebula July 31, 2026 00:40 Failure

vercel Bot had a problem deploying to Preview – thirdweb_playground July 31, 2026 00:40 Failure

vercel Bot had a problem deploying to Preview – thirdweb-www July 31, 2026 00:40 Failure

github-actions Bot added the Stale label Aug 7, 2026

github-actions Bot closed this Aug 10, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/apps/dashboard/npm_and_yarn-ba564b5d3c branch August 10, 2026 02:12

Navigation Menu

Uh oh!

build(deps): Bump the npm_and_yarn group across 11 directories with 3 updates - #8865

build(deps): Bump the npm_and_yarn group across 11 directories with 3 updates#8865
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/apps/dashboard/npm_and_yarn-ba564b5d3c

dependabot Bot commented on behalf of github Jul 31, 2026 •

edited by pr-codex Bot

Loading

Uh oh!

changeset-bot Bot commented Jul 31, 2026

Uh oh!

vercel Bot commented Jul 31, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Aug 7, 2026

Uh oh!

dependabot Bot commented on behalf of github Aug 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 31, 2026 • edited by pr-codex Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v15.5.21

v15.5.20

15.5.19

Core Changes

Other

Credits

v15.5.21

v15.5.20

15.5.19

Core Changes

Other

Credits

v15.5.21

v15.5.20

15.5.19

Core Changes

Other

Credits

v15.5.21

v15.5.20

15.5.19

Core Changes

Other

Credits

v15.5.21

v15.5.20

15.5.19

Core Changes

Other

Credits

@​hey-api/openapi-ts@​0.95.0

Minor Changes

Validator request schemas

Removed plugin.getSymbol() function

Validator request schemas

0.97.3

Patch Changes

Updated Dependencies:

0.97.2

Patch Changes

@​hey-api/openapi-ts@​0.95.0

Minor Changes

Validator request schemas

Removed plugin.getSymbol() function

Validator request schemas

0.97.3

Patch Changes

Updated Dependencies:

0.97.2

Patch Changes

@​hey-api/openapi-ts@​0.95.0

Minor Changes

Validator request schemas

Removed plugin.getSymbol() function

Validator request schemas

0.97.3

Patch Changes

Updated Dependencies:

0.97.2

Patch Changes

PR-Codex overview

Detailed summary

Uh oh!

changeset-bot Bot commented Jul 31, 2026

⚠️ No Changeset found

Uh oh!

vercel Bot commented Jul 31, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Aug 7, 2026

Uh oh!

dependabot Bot commented on behalf of github Aug 10, 2026

Uh oh!

Reviewers

Assignees

Labels

dependabot Bot commented on behalf of github Jul 31, 2026 •

edited by pr-codex Bot

Loading

`@hey-api/openapi-ts@0`.95.0

Removed `plugin.getSymbol()` function

`@hey-api/openapi-ts@0`.95.0

Removed `plugin.getSymbol()` function

`@hey-api/openapi-ts@0`.95.0

Removed `plugin.getSymbol()` function

vercel Bot commented Jul 31, 2026 •

edited

Loading