chore(deps): lock file maintenance

[renovate]

This PR contains the following updates:

Update	Change
lockFileMaintenance	All locks refreshed

🔧 This Pull Request updates lock files to use the latest dependency versions.

---

Configuration

📅 Schedule: Branch creation - "before 4am on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
nft-app	❌ Failed (Inspect)			Apr 3, 2024 11:17pm

[codesandbox]

Review or Edit in CodeSandbox

Open the branch in Web Editor • VS Code • Insiders

Open Preview

[changeset-bot]

⚠️ No Changeset found

Latest commit: 368ed63

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@babel/helper-module-imports@7.24.3	None	0	63.8 kB	nicolo-ribaudo
npm/@emotion/serialize@1.1.4	environment	+5	1.34 MB	emotion-release-bot
npm/@ethersproject/address@5.7.0	None	0	33.1 kB	ricmoo
npm/@ethersproject/base64@5.7.0	None	0	11.3 kB	ricmoo
npm/@ethersproject/basex@5.7.0	None	0	30.1 kB	ricmoo
npm/@ethersproject/bignumber@5.7.0	None	0	143 kB	ricmoo
npm/@ethersproject/bytes@5.7.0	None	0	80.9 kB	ricmoo
npm/@ethersproject/constants@5.7.0	None	0	18.7 kB	ricmoo
npm/@ethersproject/hash@5.7.0	None	0	257 kB	ricmoo
npm/@ethersproject/keccak256@5.7.0	None	0	6.09 kB	ricmoo
npm/@ethersproject/logger@5.7.0	None	0	69.5 kB	ricmoo
npm/@ethersproject/networks@5.7.1	None	0	47.5 kB	ricmoo
npm/@ethersproject/properties@5.7.0	None	0	31 kB	ricmoo
npm/@ethersproject/providers@5.7.2	network	+1	1.21 MB	ricmoo
npm/@ethersproject/random@5.7.0	None	0	17.3 kB	ricmoo
npm/@ethersproject/rlp@5.7.0	None	0	29.6 kB	ricmoo
npm/@ethersproject/sha2@5.7.0	None	0	21.7 kB	ricmoo
npm/@ethersproject/signing-key@5.7.0	None	0	244 kB	ricmoo
npm/@ethersproject/strings@5.7.0	None	0	119 kB	ricmoo
npm/@ethersproject/transactions@5.7.0	None	0	89.6 kB	ricmoo
npm/@ethersproject/web@5.7.1	network	0	128 kB	ricmoo
npm/@hookform/devtools@4.3.1	environment Transitive: filesystem	+23	4.28 MB	bluebill1049
npm/@noble/curves@1.2.0	None	0	1.35 MB	paulmillr
npm/@noble/hashes@1.3.2	None	0	747 kB	paulmillr
npm/@nomiclabs/hardhat-ethers@2.2.3	None	0	80.9 kB	fvictorio
npm/@nomiclabs/hardhat-etherscan@3.1.8	environment Transitive: network, unsafe	+4	1.7 MB	fvictorio
npm/@nomiclabs/hardhat-waffle@2.0.6	None	0	49.3 kB	fvictorio
npm/@openzeppelin/contracts-upgradeable@4.9.6	None	0	2.11 MB	amxx
npm/@openzeppelin/contracts@4.9.6	None	0	2.02 MB	frangio
npm/@openzeppelin/hardhat-upgrades@1.28.0	filesystem Transitive: environment, network	+23	6.97 MB	ericglau
npm/@tailwindcss/typography@0.5.10	None	+5	362 kB	thecrypticace
npm/@trivago/prettier-plugin-sort-imports@4.3.0	Transitive: environment	+10	1.98 MB	behraang
npm/@typechain/ethers-v5@11.1.2	filesystem	+1	156 kB	ethereum-ts-bot
npm/@typechain/hardhat@9.1.0	filesystem Transitive: network	+8	16.9 MB	ethereum-ts-bot
npm/@types/chai@4.3.14	None	0	81.3 kB	types
npm/@types/mocha@10.0.6	None	0	95.6 kB	types
npm/@types/react-dom@18.2.22	None	0	34 kB	types
npm/@types/react@18.2.67	None	+3	1.69 MB	types
npm/@typescript-eslint/eslint-plugin@7.3.1	Transitive: filesystem	+17	6.3 MB	jameshenry
npm/@typescript-eslint/parser@7.3.1	Transitive: filesystem	+11	2.34 MB	jameshenry
npm/@vitejs/plugin-react-refresh@1.3.6	filesystem Transitive: environment	+5	194 kB	patak
npm/@walletconnect/encoding@1.0.2	None	0	294 kB	bkrem
npm/@walletconnect/jsonrpc-types@1.0.3	None	+1	188 kB	gancho_walletconnect
npm/@walletconnect/jsonrpc-utils@1.0.8	None	+1	345 kB	gancho_walletconnect
npm/@walletconnect/safe-json@1.0.2	None	0	215 kB	gancho_walletconnect
npm/@walletconnect/types@1.8.0	None	0	11.1 kB	bkrem
npm/@walletconnect/window-getters@1.0.0	None	0	100 kB	pedrouid
npm/@web3-react/core@6.1.9	environment	+4	337 kB	noahwz
npm/@web3-react/injected-connector@6.0.7	environment	+3	271 kB	noahwz
npm/@web3-react/network-connector@6.2.9	environment, network	+3	181 kB	noahwz
npm/@web3-react/walletconnect-connector@6.2.13	environment Transitive: filesystem, network	+37	6.91 MB	noahwz
npm/aes-js@4.0.0-beta.5	None	0	738 kB	ricmoo
npm/ajv@6.12.6	eval	+3	1.44 MB	esp
npm/array-includes@3.1.8	None	+1	35.5 kB	ljharb
npm/array.prototype.findlast@1.2.5	None	+1	38.3 kB	ljharb
npm/array.prototype.flat@1.3.2	None	0	18.7 kB	ljharb
npm/autoprefixer@10.4.19	environment	+2	293 kB	ai
npm/axios@1.6.8	network Transitive: environment, filesystem	+2	1.92 MB	jasonsaayman
npm/bn.js@5.2.1	None	0	99 kB	fanatid
npm/brorand@1.1.0	None	0	3.52 kB	indutny
npm/browserslist@4.23.0	environment, filesystem Transitive: shell	+3	122 kB	ai
npm/buffer@4.9.2	None	0	264 kB	feross
npm/caniuse-lite@1.0.30001605	None	0	2.01 MB	caniuse-lite
npm/chai@5.1.0	None	+5	621 kB	chaijs
npm/convert-source-map@1.9.0	filesystem	0	11.4 kB	thlorenz
npm/daisyui@4.7.3	None	+4	4.01 MB	saadeghi
npm/define-properties@1.2.1	None	+1	39.4 kB	ljharb
npm/dequal@2.0.3	None	0	14.2 kB	lukeed
npm/elliptic@6.5.4	None	0	118 kB	indutny
npm/es-abstract@1.23.3	None	+29	2.96 MB	ljharb
npm/es-iterator-helpers@1.0.18	None	+5	255 kB	ljharb
npm/es-shim-unscopables@1.0.2	None	0	11 kB	ljharb
npm/escape-string-regexp@4.0.0	None	0	3.79 kB	sindresorhus
npm/eslint-config-productsway@1.3.2	Transitive: environment, filesystem, unsafe	+52	12.8 MB	jellydn
npm/eslint-visitor-keys@3.4.3	None	0	32.3 kB	eslintbot
npm/eslint@8.57.0	environment, filesystem Transitive: unsafe	+28	6.39 MB	eslintbot
npm/espree@9.6.1	None	0	73.6 kB	eslintbot
npm/ethereum-waffle@4.0.10	None	0	197 kB	ethworks
npm/ethereumjs-util@7.1.5	None	0	310 kB	holgerd77
npm/ethers@5.7.2	None	0	10.7 MB	ricmoo
npm/eventemitter3@4.0.7	None	0	38 kB	lpinca
npm/follow-redirects@1.15.6	network	0	29.4 kB	rubenverborgh
npm/fs-extra@7.0.1	filesystem	+2	146 kB	ryanzim
npm/function.prototype.name@1.1.6	None	0	25.5 kB	ljharb
npm/hardhat-gas-reporter@2.0.2	environment, filesystem	+1	437 kB	cgewecke
npm/hardhat@2.22.2	environment, filesystem, network, shell Transitive: unsafe	+4	4.43 MB	alcuadrado
npm/hash.js@1.1.7	None	0	41.7 kB	indutny
npm/hmac-drbg@1.0.1	None	0	25 kB	indutny
npm/husky@9.0.11	environment, filesystem, shell	0	3.61 kB	typicode
npm/import-fresh@3.3.0	None	0	4.87 kB	sindresorhus
npm/is-buffer@1.1.6	None	0	5.58 kB	feross
npm/is-date-object@1.0.5	None	0	20.8 kB	ljharb
npm/is-regex@1.1.4	None	0	30.1 kB	ljharb
npm/is-shared-array-buffer@1.0.3	None	0	18.7 kB	ljharb
npm/is-string@1.0.7	None	0	19.1 kB	ljharb
npm/is-symbol@1.0.4	None	0	22 kB	ljharb
npm/is-typedarray@1.0.0	None	0	4.41 kB	hughsk
npm/js-sha3@0.8.0	None	0	52.9 kB	emn178
npm/js-yaml@4.1.0	None	0	405 kB	vitaly
npm/jsx-ast-utils@3.3.5	None	0	236 kB	ljharb
npm/lint-staged@15.2.2	Transitive: environment	+2	612 kB	okonet
npm/loglevel@1.9.1	None	0	639 kB	pimterry
npm/minimalistic-assert@1.0.1	None	0	1.55 kB	cwmma
npm/minimalistic-crypto-utils@1.0.1	None	0	4.76 kB	indutny
npm/nice-try@1.0.5	None	0	3.75 kB	electerious
npm/object.assign@4.1.5	None	+1	99.2 kB	ljharb
npm/object.values@1.2.0	None	+1	40.7 kB	ljharb
npm/os-tmpdir@1.0.2	None	0	3.06 kB	sindresorhus
npm/p-queue@8.0.1	None	+1	109 kB	sindresorhus
npm/postcss-js@4.0.1	None	0	8.45 kB	ai
npm/postcss-value-parser@4.2.0	None	0	27.2 kB	evilebottnawi
npm/postcss@8.4.38	environment, filesystem	0	198 kB	ai
npm/prettier-plugin-solidity@1.3.1	None	0	2.02 MB	janther
npm/prettier@3.2.5	environment, filesystem, unsafe	0	8.39 MB	prettier-bot
npm/randombytes@2.1.0	None	0	6.36 kB	cwmma
npm/react-dropzone@14.2.3	None	0	434 kB	rolandjitsu
npm/react-hook-form@7.51.1	network	0	898 kB	bluebill1049
npm/react-hot-toast@2.4.1	None	0	173 kB	timolins
npm/regexp.prototype.flags@1.5.2	None	0	40.4 kB	ljharb
npm/repeat-string@1.6.1	None	0	9.09 kB	jonschlinkert
npm/rustywind@0.21.1	environment, filesystem, network, shell	+1	71.6 kB	praveenperera
npm/safe-array-concat@1.1.2	None	+1	19.8 kB	ljharb
npm/semver@6.3.1	None	0	68.3 kB	lukekarrys
npm/set-blocking@2.0.0	None	0	4.22 kB	bcoe
npm/solgraph@1.0.2	None	0	67.1 kB	raine
npm/solhint@4.5.2	filesystem Transitive: environment	+6	1.02 MB	diego.bale.arg
npm/solidity-coverage@0.8.11	filesystem	+5	750 kB	cgewecke
npm/sort-package-json@2.8.0	Transitive: filesystem	+6	73 kB	keithamus
npm/source-map@0.5.7	None	0	766 kB	tromey
npm/string.prototype.trim@1.2.9	None	+1	42.7 kB	ljharb
npm/table@6.8.2	None	0	335 kB	gajus-table
npm/tailwindcss@3.4.1	environment, filesystem	+3	5.8 MB	adamwathan
npm/tmp@0.0.33	filesystem	0	26 kB	raszi
npm/ts-node@10.9.2	environment, filesystem, unsafe	+5	1.19 MB	blakeembrey
npm/tslib@2.4.0	None	0	50 kB	typescript-bot
npm/typechain@8.3.2	filesystem Transitive: environment, unsafe	+3	11.4 MB	ethereum-ts-bot
npm/typedarray-to-buffer@3.1.5	None	0	8.84 kB	feross
npm/use-nft@0.12.0	network	0	986 kB	bpierre
npm/vite@5.2.6	environment, eval, filesystem, network, shell, unsafe	0	3.56 MB	vitebot
npm/web3-react@5.0.5	None	0	197 kB	noahwz
npm/web3.storage@4.5.5	network	0	1.21 MB	it-dag-house
npm/ws@7.4.6	network	0	113 kB	lpinca
npm/xtend@4.0.2	None	0	6.46 kB	raynos
npm/yallist@3.1.1	None	0	14.8 kB	isaacs

🚮 Removed packages: npm/@0x/assert@2.1.6, npm/@0x/types@2.4.3, npm/@0x/typescript-typings@4.3.0, npm/@0x/utils@4.5.2, npm/@babel/compat-data@7.24.1, npm/@babel/core@7.24.1, npm/@babel/helper-create-regexp-features-plugin@7.22.15, npm/@babel/helper-module-imports@7.24.1, npm/@babel/parser@7.24.1, npm/@babel/runtime@7.24.1, npm/@emotion/serialize@1.1.3, npm/@ethereumjs/block@3.6.3, npm/@ethereumjs/common@2.6.0, npm/@ethereumjs/tx@3.4.0, npm/@fastify/autoload@5.8.0, npm/@fastify/cors@9.0.1, npm/@fastify/deepmerge@1.3.0, npm/@fastify/error@3.4.1, npm/@fastify/multipart@8.2.0, npm/@fastify/sensible@5.5.0, npm/@ipld/car@3.2.4, npm/@ipld/dag-cbor@6.0.15, npm/@istanbuljs/schema@0.1.3, npm/@sinclair/typebox@0.32.18, npm/@types/busboy@1.5.3, npm/@types/tap@15.0.11, npm/@web-std/blob@3.0.5, npm/@web-std/file@3.0.3, npm/@web-std/form-data@3.1.0, npm/agent-base@7.1.0, npm/ajv@8.12.0, npm/chokidar@3.6.0, npm/close-with-grace@1.3.0, npm/cross-env@7.0.3, npm/esbuild@0.19.12, npm/fast-json-stringify@5.13.0, npm/fast-uri@2.3.0, npm/fastify-cli@6.1.1, npm/fastify-plugin@4.5.1, npm/fastify-tsconfig@2.0.0, npm/fastify@4.26.2, npm/foreground-child@3.1.1, npm/interface-blockstore@2.0.3, npm/ipfs-core-types@0.8.4, npm/ipfs-unixfs@6.0.9, npm/istanbul-lib-coverage@3.2.2, npm/istanbul-lib-report@3.0.1, npm/jackspeak@2.3.6, npm/joycon@3.1.1, npm/minizlib@2.1.2, npm/mkdirp@3.0.1, npm/onetime@5.1.2, npm/p-limit@2.3.0, npm/path-scurry@1.10.1, npm/pino-abstract-transport@1.1.0, npm/readable-stream@3.6.2, npm/resolve-import@1.4.5, npm/rimraf@5.0.5, npm/secure-json-parse@2.7.0, npm/sonic-boom@3.8.0, npm/stream-to-it@0.2.4, npm/string-width@5.1.2, npm/string_decoder@1.3.0, npm/sync-content@1.0.2, npm/tap@18.7.1, npm/tar@6.2.0, npm/tshy@1.12.0, npm/tsup@8.0.2, npm/tsx@4.7.1, npm/validate-npm-package-license@3.0.4

View full report↗︎

[socket-security]

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert	Package	Note	Source
Install scripts	npm/solgraph@1.0.2	Install script: postinstall Source: npm run build	package.json
Install scripts	npm/rustywind@0.21.1	Install script: install Source: node ./lib/postinstall.js || npm run prepack	package.json

View full report↗︎

Next steps

What is an install script?

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/foo@1.0.0 or ignore all packages with @SocketSecurity ignore-all

• @SocketSecurity ignore npm/solgraph@1.0.2
• @SocketSecurity ignore npm/rustywind@0.21.1