socket-security[bot] comments

Results 8082 comments of


                                            socket-security[bot]

build(deps): bump next from 12.1.6 to 14.2.10 in /example/nextjs

**New and removed dependencies detected.** Learn more about [Socket for GitHub ↗︎](https://socket.dev?utm_medium=gh) | Package | New capabilities | Transitives | Size | Publisher | |:--- |:--- |:--- |:--- |:--- |...

build(deps): bump next from 12.1.6 to 14.2.10 in /example/nextjs

**🚨 Potential security issues detected.** Learn more about [Socket for GitHub ↗︎](https://socket.dev?utm_medium=gh) To accept the risk, merge this PR and you will not be notified again. Alert Package NoteSourceCI Critical...

chore(deps): update dependency @vitejs/plugin-react to v5

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License @vitejs/plugin-react@3.1.0 ⏵ 5.1.2 +2 +4 [View full report](https://socket.dev/dashboard/org/pengx17/diff-scan/0bf8ea84-b2f6-40f4-9b4e-fd276262cb00?tab=dependencies)

Updating Core smart contracts to Solidity 0.8

Soloseng/deprecate-truffle-migration

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License @nrwl/nx-darwin-arm64@15.9.2 @nrwl/nx-darwin-x64@15.9.2 @nrwl/nx-linux-arm-gnueabihf@15.9.2 @nrwl/nx-linux-arm64-gnu@15.9.2 @nrwl/nx-linux-arm64-musl@15.9.2 @nrwl/nx-linux-x64-gnu@15.9.2 @nrwl/nx-linux-x64-musl@15.9.2 @nrwl/nx-win32-arm64-msvc@15.9.2 @nrwl/nx-win32-x64-msvc@15.9.2...

Soloseng/deprecate-truffle-migration

> [!CAUTION] > **Review the following alerts detected in dependencies.** > > According to your organization's Security Policy, you must resolve all **"Block"** alerts before proceeding. Learn more about [Socket...

[DO NOT MERGE] Release/core-contracts/13

**All alerts resolved.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored. [View full report](https://socket.dev/dashboard/org/celo-org/diff/b1ac05e1-d16f-4965-8aaa-b3c8dd4bc071/c3341a83-b034-43a2-b6f3-39d55a9486c9?tab=alerts&action=error%2Cwarn)

chore(deps): update devdependency eslint to v9.12.0

chore(deps): update dependency typescript-eslint to v8.34.0

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License typescript-eslint@8.45.0 ⏵ 8.46.0 +1 +27 +4 [View full report](https://socket.dev/dashboard/org/persian-tools/diff-scan/e8dc574d-9d81-47b6-9375-0dab0f0b6597?tab=dependencies)