socket-security[bot] comments

Results 7112 comments of


                                            socket-security[bot]

chore(devdeps): @lavamoat/allow-scripts@^2.3.1->^3.0.4

**New and removed dependencies detected.** Learn more about [Socket for GitHub ↗︎](https://socket.dev?utm_medium=gh) | Package | New capabilities | Transitives | Size | Publisher | |:--- |:--- |:--- |:--- |:--- |...

chore(devdeps): @lavamoat/allow-scripts@^2.3.1->^3.0.4

**🚨 Potential security issues detected.** Learn more about [Socket for GitHub ↗︎](https://socket.dev?utm_medium=gh) To accept the risk, merge this PR and you will not be notified again. Alert Package NoteSourceCI Shell...

chore(deps-dev): bump esbuild from 0.13.15 to 0.25.0

**New and updated dependencies detected.** Learn more about [Socket for GitHub ↗︎](https://socket.dev?utm_medium=gh) | Package | New capabilities | Transitives | Size | Publisher | |:--- |:--- |:--- |:--- |:--- |...

[Snyk] Security upgrade is-online from 9.0.1 to 11.0.0

build(deps-dev): bump typescript from 5.8.2 to 5.9.3

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License typescript@5.8.2 ⏵ 5.9.3 +1 +1 [View full report](https://socket.dev/dashboard/org/dipakparmar/diff-scan/fcc7dd28-a53e-4b4b-98f8-3a1c9896679f?tab=dependencies)

build(deps-dev): bump typescript from 5.8.2 to 5.9.3

> [!WARNING] > **Review the following alerts detected in dependencies.** > > According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about [Socket for...

Wizard update

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License qrcode-terminal@0.12.0 [View full report](https://socket.dev/dashboard/org/shocknet/diff-scan/832ecde2-e588-450c-aab5-6e87e8b5f401?tab=dependencies)

Bump the npm_and_yarn group across 1 directory with 7 updates

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License npm/image-size@1.2.0 ⏵ 1.2.1 +1 +16 +1 npm/http-proxy-middleware@2.0.7 ⏵ 2.0.9...

Olivia/static files

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License npm/lint-staged@15.2.10 ⏵ 16.2.7 +2 +1 +6 [View full report](https://socket.dev/dashboard/org/derkoe/diff-scan/0c2964d0-5e2d-4a82-8d14-265f0b8e7f3a?tab=dependencies)