socket-security[bot] comments

Results 7879 comments of


                                            socket-security[bot]

Problem: sdk 53 is not integrated

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License golang/golang.org/x/crypto@v0.37.0 golang/github.com/mmsqe/ethermint@v0.6.5-0.20250502043624-645d260bdeb2 golang/google.golang.org/grpc@v1.71.1 golang/google.golang.org/protobuf@v1.36.6 golang/github.com/mmsqe/cosmos-sdk@v0.46.0-beta2.0.20250502025930-9ee27ce5d100 golang/cosmossdk.io/api@v0.7.6 ⏵ v0.9.0 +1...

Problem: sdk 53 is not integrated

> [!WARNING] > **Review the following alerts detected in dependencies.** > > According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about [Socket for...

chore(deps): update dependency @sveltejs/adapter-auto to v4

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License @sveltejs/adapter-auto@3.3.1 ⏵ 4.0.0 +2 [View full report](https://socket.dev/dashboard/org/portabletext/diff-scan/4f725e95-8066-431a-ba73-e30db9089d6c?tab=dependencies)

chore(workflows): update actions/upload-artifact action to v5

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License eslint-import-resolver-typescript@3.6.3 [View full report](https://socket.dev/dashboard/org/weareinreach/diff-scan/5a9f6561-ad35-4e33-9335-b39ae9bd461f?tab=dependencies)

build(deps): bump jsdom from 26.0.0 to 26.1.0 in /packages/backend

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License slacc-android-arm-eabi@0.0.10 slacc-android-arm64@0.0.10 slacc-darwin-arm64@0.0.10 slacc-darwin-universal@0.0.10 slacc-darwin-x64@0.0.10 slacc-freebsd-x64@0.0.10 slacc-linux-arm-gnueabihf@0.0.10 slacc-linux-arm64-gnu@0.0.10 slacc-linux-arm64-musl@0.0.10...

delete celotool, helm charts and metadata-crawler

**All alerts resolved.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored. [View full report](https://socket.dev/dashboard/org/celo-org/diff-scan/0fea5f50-63d0-422e-a834-ddcf706f3c31?tab=alerts&action=error%2Cwarn)

fix(deps): update dependency @ethersproject/hash to v5.8.0

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License @ethersproject/transactions@5.7.0 ⏵ 5.8.0 @ethersproject/hash@5.7.0 ⏵ 5.8.0 [View full report](https://socket.dev/dashboard/org/WalletConnect/diff/1e5295e0-8e4e-40ba-8fca-f23ceb762025/584b07d5-f87a-4186-9b54-7bdf53d21848?tab=dependencies)

build(deps-dev): bump eslint-plugin-import from 2.27.5 to 2.29.1

**New and removed dependencies detected.** Learn more about [Socket for GitHub ↗︎](https://socket.dev?utm_medium=gh) | Package | New capabilities | Transitives | Size | Publisher | |:--- |:--- |:--- |:--- |:--- |...

fix(deps): update dependency glob to v10.4.5

chore(deps): update dependency @sveltejs/adapter-auto to v5

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License @sveltejs/adapter-auto@3.3.1 ⏵ 5.0.0 -5 [View full report](https://socket.dev/dashboard/org/portabletext/diff-scan/051c7419-74d2-4a6e-a87f-568ca9a5af60?tab=dependencies)