socket-security[bot]

Results 6903 comments of socket-security[bot]

build(deps): bump react-pdf from 9.2.1 to 10.2.0

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License @​preact/​compat@​17.1.2 ⏵ 18.3.1 +1 [View full report](https://socket.dev/dashboard/org/FleetAdmiralJakob/diff-scan/5c23e03d-b44c-4979-bdac-fb71dae0e786?tab=dependencies)

Bump tar-fs from 2.0.0 to 2.1.3

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License tar-fs@​2.1.1 ⏵ 2.1.3 +1 +16 [View full report](https://socket.dev/dashboard/org/transitive-bullshit/diff/4b9dfb7f-3e90-4f76-af8f-10ebc8b14182/ee0111d7-a176-4776-a513-c836e34e8ed2?tab=dependencies)

ci: add automated release pipeline for npm

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License npm/​next@​14.0.1 ⏵ 16.0.3 +14 +75 -3 +1 npm/​@​changesets/​cli@​2.29.7 [View...

feat(blob-local): add local Blob API for development

**New dependencies detected.** Learn more about [Socket for GitHub ↗︎](https://socket.dev?utm_medium=gh) | Package | New capabilities | Transitives | Size | Publisher | |:--- |:--- |:--- |:--- |:--- | | [golang/github.com/dgraph-io/[email protected]](https://socket.dev/go/package/github.com/dgraph-io/badger?version=v1.6.2)...

feat(blob-local): add local Blob API for development

**🚨 Potential security issues detected.** Learn more about [Socket for GitHub ↗︎](https://socket.dev?utm_medium=gh) To accept the risk, merge this PR and you will not be notified again. Alert Package NoteCI CVE...

chore(deps): bump glob and rimraf

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License rimraf@​5.0.10 ⏵ 6.1.0 +1 [View full report](https://socket.dev/dashboard/org/sooluh/diff-scan/58822eed-8d5a-4537-bb9a-1102894b5885?tab=dependencies)

Bump golang.org/x/text from 0.23.0 to 0.24.0

**New, updated, and removed dependencies detected.** Learn more about [Socket for GitHub ↗︎](https://socket.dev?utm_medium=gh) | Package | New capabilities | Transitives | Size | Publisher | |:--- |:--- |:--- |:--- |:---...

Bump golang.org/x/oauth2 from 0.28.0 to 0.29.0

**New, updated, and removed dependencies detected.** Learn more about [Socket for GitHub ↗︎](https://socket.dev?utm_medium=gh) | Package | New capabilities | Transitives | Size | Publisher | |:--- |:--- |:--- |:--- |:---...

Bump golang.org/x/image from 0.25.0 to 0.26.0

**Updated dependencies detected.** Learn more about [Socket for GitHub ↗︎](https://socket.dev?utm_medium=gh) | Package | New capabilities | Transitives | Size | Publisher | |:--- |:--- |:--- |:--- |:--- | | [golang/golang.org/x/[email protected]](https://socket.dev/go/package/golang.org/x/image?version=v0.25.0)...

chore(deps): update dependency esbuild to ^0.25.0 [security]

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License esbuild@​0.19.4 ⏵ 0.25.10 +4 [View full report](https://socket.dev/dashboard/org/stipsan/diff-scan/72cc7201-56e3-421d-9ccc-ce22c9b3a780?tab=dependencies)