socket-security[bot] comments

Results 7767 comments of


                                            socket-security[bot]

json-rpc-middleware-stream: Allow using with either readable-stream v3/v4

**New and removed dependencies detected.** Learn more about [Socket for GitHub ↗︎](https://socket.dev?utm_medium=gh) | Package | New capabilities | Transitives | Size | Publisher | |:--- |:--- |:--- |:--- |:--- |...

chore(deps): update dependency @types/node to ^20.17.51

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License cross-env@7.0.3 ts-node@10.9.2 ts-loader@9.5.2 html-webpack-plugin@5.6.3 [View full report](https://socket.dev/dashboard/org/ryoppippi/diff/fb34df5d-9e93-467d-a47a-3dd3fd27b7fb/06546143-0d1a-4806-a9de-bf65d191fb41?tab=dependencies)

Update dependency minimatch to v10

**All alerts resolved.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored. [View full report](https://socket.dev/dashboard/org/OpenZeppelin/diff-scan/a373b9ef-7b9f-4d5f-a42b-6bc88d1e9eb7?tab=alerts&action=error%2Cwarn)

chore(deps): bump react-redux from 9.1.2 to 9.2.0

build(deps): bump joi from 17.13.3 to 18.0.1

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License joi@17.13.3 ⏵ 18.0.1 +1 [View full report](https://socket.dev/dashboard/org/Chia-Network/diff-scan/f53b13e5-396c-41c3-a2b9-dbe079fc09c8?tab=dependencies)

Bump vite from 7.1.12 to 7.2.4 in /materialious

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License vite@7.1.12 ⏵ 7.2.4 +1 +1 [View full report](https://socket.dev/dashboard/org/Materialious/diff-scan/9ae867b2-bfdc-4c5e-ac71-72be2289cf64?tab=dependencies)

feat: added snappy compression support

**New dependencies detected.** Learn more about [Socket for GitHub ↗︎](https://socket.dev?utm_medium=gh) | Package | New capabilities | Transitives | Size | Publisher | |:--- |:--- |:--- |:--- |:--- | | [npm/[email protected]](https://socket.dev/npm/package/snappyjs/overview/0.7.0)...

BT transport

**🚨 Potential security issues detected.** Learn more about [Socket for GitHub ↗︎](https://socket.dev?utm_medium=gh) To accept the risk, merge this PR and you will not be notified again. Alert Package NoteSourceCI Unstable...

Bump shaka-player from 4.16.2 to 4.16.9 in /materialious

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License shaka-player@4.16.2 ⏵ 4.16.9 +1 +1 [View full report](https://socket.dev/dashboard/org/Materialious/diff-scan/5e8ac763-0218-498f-93a0-b713a6c11476?tab=dependencies)

Update celery forwarder to use greenlets instead of processes

**Updated and removed dependencies detected.** Learn more about [Socket for GitHub ↗︎](https://socket.dev?utm_medium=gh) | Package | New capabilities | Transitives | Size | Publisher | |:--- |:--- |:--- |:--- |:--- |...