socket-security[bot] comments

Results 7922 comments of


                                            socket-security[bot]

build(deps-dev): bump supertest from 6.3.2 to 7.0.0

**New and removed dependencies detected.** Learn more about [Socket for GitHub ↗︎](https://socket.dev?utm_medium=gh) | Package | New capabilities | Transitives | Size | Publisher | |:--- |:--- |:--- |:--- |:--- |...

fix(deps): update turbo monorepo to v1.13.4

**Updated dependencies detected.** Learn more about [Socket for GitHub ↗︎](https://socket.dev?utm_medium=gh) | Package | New capabilities | Transitives | Size | Publisher | |:--- |:--- |:--- |:--- |:--- | | [npm/[email protected]](https://socket.dev/npm/package/eslint-config-turbo/overview/1.13.4)...

fix(deps): update github.com/gnolang/gno digest to 53fd192

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License github.com/gnolang/gno@v0.0.0-20230728005028-4ce3b2927f2c ⏵ v0.0.0-20251204150227-7b06e4888ce7 +1 -9 [View full report](https://socket.dev/dashboard/org/moul/diff-scan/8c75f3ca-2f87-4342-9f4f-996c4832282a?tab=dependencies)

LavaMoat Webpack test branch

**🚨 Potential security issues detected.** Learn more about [Socket for GitHub ↗︎](https://socket.dev?utm_medium=gh) To accept the risk, merge this PR and you will not be notified again. Alert Package NoteSourceCI Shell...

build(deps-dev): bump eslint-plugin-markdown from 2.0.0 to 2.2.1

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License eslint-plugin-markdown@2.0.0 ⏵ 2.2.1 +1 [View full report](https://socket.dev/dashboard/org/expressjs/diff/f79af542-20e4-477a-aae5-c0624e966ac8/cbf2d594-ae00-4bb4-9471-91ee63c75f66?tab=dependencies)

build(deps): bump next from 12.1.6 to 13.5.0 in /example/nextjs

**Removed dependencies detected.** Learn more about [Socket for GitHub ↗︎](https://socket.dev?utm_medium=gh) **🚮 Removed packages:** [[email protected]](https://socket.dev/npm/package/next/overview/12.1.6)

Add `simplifyFileSize` option

**New dependencies detected.** Learn more about [Socket for GitHub ↗︎](https://socket.dev?utm_medium=gh) | Package | New capabilities | Transitives | Size | Publisher | |:--- |:--- |:--- |:--- |:--- | | [npm/[email protected]](https://socket.dev/npm/package/bytes/overview/3.1.2)...

Update dependency openai to v4.104.0

> [!CAUTION] > **Review the following alerts detected in dependencies.** > > According to your organization's Security Policy, you must resolve all **"Block"** alerts before proceeding. Learn more about [Socket...

Update dependency openai to v4.104.0

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License node-releases@2.0.19 indent-string@4.0.0 ⏵ 5.0.0 +2 @changesets/should-skip-package@0.1.2 @changesets/changelog-git@0.2.1 @pkgr/core@0.2.2 @changesets/get-version-range-type@0.4.0...