Chore(deps): bump the dependencies group in /with-web3-onboard with 2 updates

[dependabot]

Bumps the dependencies group in /with-web3-onboard with 2 updates: postcss and viem.

Updates postcss from 8.5.23 to 8.5.25

Release notes

Sourced from postcss's releases.

8.5.25

• Fixed 8.5.17 visitor regression.
• Fixed list.split() for non-string values (by @​amir-rezaei).

8.5.24

• Preserve the BOM after the processing (by @​hdimer).

Changelog

Sourced from postcss's changelog.

8.5.25

• Fixed 8.5.17 visitor regression.
• Fixed list.split() for non-string values (by @​amir-rezaei).

8.5.24

• Preserve the BOM after the processing (by @​hdimer).

Commits

• 08c989c Release 8.5.25 version
• 24f6814 Fix 8.5.17 visitor regression
• f2fa53f Add supply chain security requirement to PostCSS plugin guide
• 10edf0b fix: return empty array for empty string in list.split (#2121)
• 0ebe8ad Release 8.5.24 version
• 73218c6 Update dependencies
• 9a114f6 Preserve the BOM when stringifying (#2119)
• 9069261 Fix types check
• See full diff in compare view

Updates viem from 2.55.8 to 2.55.10

Release notes

Sourced from viem's releases.

viem@2.55.10

Patch Changes

• #4873 ccdf9a02c14d569bfde9cd1840bea59548f798cf Thanks @​decofe! - Added Addresses.validatorV2 for the Tempo Validator Config V2 precompile.

• #4856 109ef0f8af627131dfb055e99bf43ec06625199a Thanks @​ibruno! - Updated Polygon Amoy's deprecated default RPC URL.

• #4900 3b78e9b78f8052da0ed20be6264c35e39e7f62f9 Thanks @​cristianizzo! - Fixed formatUserOperationRequest encoding an EIP-7702 authorization yParity of 0 as a 32-byte zero value instead of 0x00.

• #4846 0e6c671284aa9530142ccb3b17f697807b423890 Thanks @​m4ttw4n! - Updated EDU Chain and EDU Chain Testnet RPC URLs, block explorer URLs, and added multicall3 contract to EDU Chain mainnet

• #4861 31f47493a18f9699d0c2d3d78ad09204a870c8fd Thanks @​wriches! - Updated 0G Testnet native currency to 0G and 0G explorer names, per ethereum-lists/chains.

• #4862 e5a4ac4e96859f3aaad1eab8dde67ef584917b22 Thanks @​Kropiunig! - Fixed estimateFeesPerGas (and fillTransaction) rounding the base fee multiplier up via Math.ceil, which overshot the intended value for multipliers such as 1.09 (applied as 1.1) due to floating-point error. The multiplier is now recovered with Math.round.

• #4903 a20fc674487d32640c1ea5b1422e2fddc53f7723 Thanks @​nishant-uxs! - Fixed missing {"type":"module"} marker in the emitted _types/ folder so declaration files resolve correctly under TypeScript nodenext.

Commits

• bc95f56 chore: version package (#4906)
• 109ef0f fix: Replace deprecated Polygon Amoy RPC endpoint (#4856)
• a20fc67 fix: emit type module marker in _types package.json (#4903)
• e5a4ac4 fix: round base fee multiplier instead of ceiling it in fee estimation (#4862)
• 0e6c671 Update EDU Chain mainnet and testnet (#4846)
• 3b78e9b Fix EIP-7702 authorization yParity of 0 serialization (#4900)
• ccdf9a0 feat(tempo): export validator V2 address (#4873)
• 22a68a4 fix: update vulnerable transitive dependencies (#4905)
• 31f4749 fix: update 0G chain metadata (#4861)
• 715cead chore(deps): bump actions/setup-node from 4 to 7 (#4842)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

[socket-security]

Dependency limit exceeded — report not shown.

This pull request scan exceeded the 10,000-dependency limit applied to this scan, so the results are incomplete and may be inaccurate. To avoid reporting false positives, Socket has not posted a report.

Upgrade your plan to raise the dependency limit and get complete reports, or view the partial scan in the dashboard.

Socket is always free for open source. If this is a non-commercial open source project, contact us to request a free Team account.

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

[yosriady]

Superseded by #208, which consolidates, security-reviews, and locally validates the dependency updates. Incompatible major versions are intentionally held on supported combinations and documented in the replacement PR.