socket-security[bot]

Results 7200 comments of socket-security[bot]

feat: virtual list

**New and removed dependencies detected.** Learn more about [Socket for GitHub ↗︎](https://socket.dev?utm_medium=gh) | Package | New capabilities | Transitives | Size | Publisher | |:--- |:--- |:--- |:--- |:--- |...

chore(deps-dev): bump cheerio from 1.0.0-rc.12 to 1.1.0

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License cheerio@​1.0.0-rc.12 ⏵ 1.1.0 +1 [View full report](https://socket.dev/dashboard/org/react-component/diff/514acb85-91f8-443a-a5d2-0920d4ea9518/69be1000-57a9-4c12-a6fa-962f6f60277a?tab=dependencies)

Update zustand 4.5.2 → 5.0.0 (major)

**New and removed dependencies detected.** Learn more about [Socket for GitHub ↗︎](https://socket.dev?utm_medium=gh) | Package | New capabilities | Transitives | Size | Publisher | |:--- |:--- |:--- |:--- |:--- |...

🚨 [security] Update axios 0.27.2 → 1.7.2 (major)

**New and removed dependencies detected.** Learn more about [Socket for GitHub ↗︎](https://socket.dev?utm_medium=gh) | Package | New capabilities | Transitives | Size | Publisher | |:--- |:--- |:--- |:--- |:--- |...

🚨 [security] Update axios 0.27.2 → 1.7.2 (major)

**🚨 Potential security issues detected.** Learn more about [Socket for GitHub ↗︎](https://socket.dev?utm_medium=gh) To accept the risk, merge this PR and you will not be notified again. Alert Package NoteSource Install...

chore(deps-dev): bump eslint-plugin-jest from 28.14.0 to 29.0.1

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License eslint-plugin-jest@​28.14.0 ⏵ 29.0.1 +1 +1 [View full report](https://socket.dev/dashboard/org/react-component/diff/1a8fe18f-a560-48e7-b7b1-bd1fa0ded271/38790c76-0e98-458d-aaa6-1ece20213325?tab=dependencies)

Bump the npm_and_yarn group across 1 directory with 10 updates

**New and removed dependencies detected.** Learn more about [Socket for GitHub ↗︎](https://socket.dev?utm_medium=gh) | Package | New capabilities | Transitives | Size | Publisher | |:--- |:--- |:--- |:--- |:--- |...

chore(deps): bump braces from 3.0.2 to 3.0.3

**New and removed dependencies detected.** Learn more about [Socket for GitHub ↗︎](https://socket.dev?utm_medium=gh) | Package | New capabilities | Transitives | Size | Publisher | |:--- |:--- |:--- |:--- |:--- |...

chore(deps): update dependency vite to v5.2.8

**New and removed dependencies detected.** Learn more about [Socket for GitHub ↗︎](https://socket.dev?utm_medium=gh) | Package | New capabilities | Transitives | Size | Publisher | |:--- |:--- |:--- |:--- |:--- |...

[Snyk] Security upgrade @ladjs/web from 10.0.3 to 21.0.21

Report too large to display inline [**View full report↗︎**](https://socket.dev/dashboard/org/ladjs/diff/7851abb7-74f1-43e6-9c5a-78d2156a49ee/a3a7cf2f-04ae-4344-8fad-995a245fc818)