socket-security[bot] comments

Results 6616 comments of


                                            socket-security[bot]

chore(deps): update dependency @vitejs/plugin-vue to v5.2.4

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License @vitejs/plugin-vue@5.2.1 ⏵ 5.2.4 +1 [View full report](https://socket.dev/dashboard/org/unplugin/diff-scan/896e4e2a-a3d5-4dc9-b46c-5c97173807e2?tab=dependencies)

chore(deps): update dependency @types/node to v24

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License @types/node@22.19.1 ⏵ 24.10.1 +1 +1 [View full report](https://socket.dev/dashboard/org/jellydn/diff-scan/35c77b31-4c36-4896-b0ca-3ab9d72bc107?tab=dependencies)

chore(deps): update typescript

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License eslint-config-next@15.0.2 ⏵ 15.1.7 typescript-eslint@8.31.0 @ai-sdk/react@0.0.70 ⏵ 1.2.12 @types/react-dom@18.3.6 ⏵...

chore(deps): update typescript

**All alerts resolved.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored. [View full report](https://socket.dev/dashboard/org/mastra-ai/diff/6be89187-2230-4de8-a5c2-eb2d9c65a296/e40dda9b-1321-4047-ae7a-92de384df00a?tab=alerts&action=error%2Cwarn)

Bump flask-cors from 4.0.1 to 5.0.0

**New and removed dependencies detected.** Learn more about [Socket for GitHub ↗︎](https://socket.dev?utm_medium=gh) | Package | New capabilities | Transitives | Size | Publisher | |:--- |:--- |:--- |:--- |:--- |...

Bump @types/react-dom from 18.2.22 to 18.2.23

Bump @storybook/addon-links from 8.0.4 to 8.0.5

Bump @metamask/utils from 9.1.0 to 9.2.1

Bump micromatch from 4.0.5 to 4.0.8 in the npm_and_yarn group

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License micromatch@4.0.5 ⏵ 4.0.8 +1 +5 [View full report](https://socket.dev/dashboard/org/MetaMask/diff/cc36ac71-b8af-4ddd-a046-c6cab72b3e4a/96059020-9cdb-4797-ac7e-60036b7c47e0?tab=dependencies)

build(deps-dev): bump typescript from 4.8.4 to 5.0.4

**New dependency changes detected.** Learn more about [Socket for GitHub ↗︎](https://socket.dev) *** 👍 No new dependency issues detected in pull request Bot Commands To ignore an alert, reply with a...