Chore(deps): bump the dependencies group in /with-openfort/frontend with 7 updates

[dependabot]

Bumps the dependencies group in /with-openfort/frontend with 7 updates:

Package	From	To
@metamask/sdk	0.33.1	0.34.0
viem	2.55.8	2.55.10
@types/react	19.2.17	19.2.18
@types/react-dom	19.2.3	19.2.4
eslint-plugin-react-refresh	0.4.26	0.5.3
postcss	8.5.23	8.5.25
typescript-eslint	8.65.0	8.66.0

Updates @metamask/sdk from 0.33.1 to 0.34.0

Changelog

Sourced from @​metamask/sdk's changelog.

[0.34.0]

Added

• Introduces a new hideReturnToAppNotification option (default false) and passes it through to deeplink/QR URLs (#1350)

Commits

• 338a07a Release 116.0.0 (#1383)
• 9ea3ee0 Revert "Release 116.0.0 (#1380)" (#1382)
• 45f4136 Release 116.0.0 (#1380)
• 3d4e103 Revert "Release/116.0.0 (#1364)" (#1379)
• 97749a2 Release/116.0.0 (#1364)
• 1cff69d feat: Add option to hide return modal (#1350)
• See full diff in compare view

Updates viem from 2.55.8 to 2.55.10

Release notes

Sourced from viem's releases.

viem@2.55.10

Patch Changes

• #4873 ccdf9a02c14d569bfde9cd1840bea59548f798cf Thanks @​decofe! - Added Addresses.validatorV2 for the Tempo Validator Config V2 precompile.

• #4856 109ef0f8af627131dfb055e99bf43ec06625199a Thanks @​ibruno! - Updated Polygon Amoy's deprecated default RPC URL.

• #4900 3b78e9b78f8052da0ed20be6264c35e39e7f62f9 Thanks @​cristianizzo! - Fixed formatUserOperationRequest encoding an EIP-7702 authorization yParity of 0 as a 32-byte zero value instead of 0x00.

• #4846 0e6c671284aa9530142ccb3b17f697807b423890 Thanks @​m4ttw4n! - Updated EDU Chain and EDU Chain Testnet RPC URLs, block explorer URLs, and added multicall3 contract to EDU Chain mainnet

• #4861 31f47493a18f9699d0c2d3d78ad09204a870c8fd Thanks @​wriches! - Updated 0G Testnet native currency to 0G and 0G explorer names, per ethereum-lists/chains.

• #4862 e5a4ac4e96859f3aaad1eab8dde67ef584917b22 Thanks @​Kropiunig! - Fixed estimateFeesPerGas (and fillTransaction) rounding the base fee multiplier up via Math.ceil, which overshot the intended value for multipliers such as 1.09 (applied as 1.1) due to floating-point error. The multiplier is now recovered with Math.round.

• #4903 a20fc674487d32640c1ea5b1422e2fddc53f7723 Thanks @​nishant-uxs! - Fixed missing {"type":"module"} marker in the emitted _types/ folder so declaration files resolve correctly under TypeScript nodenext.

Commits

• bc95f56 chore: version package (#4906)
• 109ef0f fix: Replace deprecated Polygon Amoy RPC endpoint (#4856)
• a20fc67 fix: emit type module marker in _types package.json (#4903)
• e5a4ac4 fix: round base fee multiplier instead of ceiling it in fee estimation (#4862)
• 0e6c671 Update EDU Chain mainnet and testnet (#4846)
• 3b78e9b Fix EIP-7702 authorization yParity of 0 serialization (#4900)
• ccdf9a0 feat(tempo): export validator V2 address (#4873)
• 22a68a4 fix: update vulnerable transitive dependencies (#4905)
• 31f4749 fix: update 0G chain metadata (#4861)
• 715cead chore(deps): bump actions/setup-node from 4 to 7 (#4842)
• Additional commits viewable in compare view

Updates @types/react from 19.2.17 to 19.2.18

Commits

• See full diff in compare view

Updates @types/react-dom from 19.2.3 to 19.2.4

Commits

• See full diff in compare view

Updates eslint-plugin-react-refresh from 0.4.26 to 0.5.3

Release notes

Sourced from eslint-plugin-react-refresh's releases.

v0.5.3

• Fix check for non component class exported via export { } #110 (fixes #109)

v0.5.2

• Support nested function calls for extraHOCs (actually fixes #104)

v0.5.1

• Mark ESLint v10 as supported
• Support false positives with TypeScript function overloading (fixes #105)
• Support nested function calls for extraHOCs (fixes #104)

v0.5.0

Breaking changes

• The package now ships as ESM and requires ESLint 9 + node 20. Because legacy config doesn't support ESM, this requires to use flat config
• A new reactRefresh export is available and prefered over the default export. It's an object with two properties:
  • plugin: The plugin object with the rules
  • configs: An object containing configuration presets, each exposed as a function. These functions accept your custom options, merge them with sensible defaults for that config, and return the final config object.
• customHOCs option was renamed to extraHOCs
• Validation of HOCs calls is now more strict, you may need to add some HOCs to the extraHOCs option (like connect or styled)

Config example:

import { defineConfig } from "eslint/config";
import { reactRefresh } from "eslint-plugin-react-refresh";
export default defineConfig(
/* Main config */
reactRefresh.configs.vite({ extraHOCs: ["someLibHOC"] }),
);

Config example without config:

import { defineConfig } from "eslint/config";
import { reactRefresh } from "eslint-plugin-react-refresh";
export default defineConfig({
files: ["/*.ts", "/*.tsx"],
plugins: {
// other plugins
"react-refresh": reactRefresh.plugin,
},
rules: {
// other rules
"react-refresh/only-export-components": [
"warn",
{ extraHOCs: ["someLibHOC"] },
</tr></table>

... (truncated)

Changelog

Sourced from eslint-plugin-react-refresh's changelog.

0.5.3

• Fix check for non component class exported via export { } #110 (fixes #109)

0.5.2

• Support nested function calls for extraHOCs (actually fixes #104)

0.5.1

• Mark ESLint v10 as supported
• Support false positives with TypeScript function overloading (fixes #105)
• Support nested function calls for extraHOCs (fixes #104)

0.5.0

Breaking changes

• The package now ships as ESM and requires ESLint 9 + node 20. Because legacy config doesn't support ESM, this requires to use flat config
• A new reactRefresh export is available and prefered over the default export. It's an object with two properties:
  • plugin: The plugin object with the rules
  • configs: An object containing configuration presets, each exposed as a function. These functions accept your custom options, merge them with sensible defaults for that config, and return the final config object.
• customHOCs option was renamed to extraHOCs
• Validation of HOCs calls is now more strict, you may need to add some HOCs to the extraHOCs option

Config example:

import { defineConfig } from "eslint/config";
import { reactRefresh } from "eslint-plugin-react-refresh";
export default defineConfig(
/* Main config */
reactRefresh.configs.vite({ extraHOCs: ["someLibHOC"] }),
);

Config example without config:

import { defineConfig } from "eslint/config";
import { reactRefresh } from "eslint-plugin-react-refresh";
export default defineConfig({
files: ["/*.ts", "/*.tsx"],
plugins: {
// other plugins
"react-refresh": reactRefresh.plugin,
},
rules: {
</tr></table>

... (truncated)

Commits

• 00818e9 v0.5.3 [publish]
• 202fc4a Fix PascalCase class exported via export { Name } incorrectly treated as Re...
• c0317bf Fix support for nested function calls for extraHOCs [publish]
• 42a1805 Explicit v10 support (fixes #106) [publish]
• 199793e Support nested function calls for extraHOCs (fixes #104)
• 26b3c15 Support false positives with TypeScript function overloading (fixes #105)
• daa2efb Revamp logic to catch more cases [publish] (#97)
• See full diff in compare view

Updates postcss from 8.5.23 to 8.5.25

Release notes

Sourced from postcss's releases.

8.5.25

• Fixed 8.5.17 visitor regression.
• Fixed list.split() for non-string values (by @​amir-rezaei).

8.5.24

• Preserve the BOM after the processing (by @​hdimer).

Changelog

Sourced from postcss's changelog.

8.5.25

• Fixed 8.5.17 visitor regression.
• Fixed list.split() for non-string values (by @​amir-rezaei).

8.5.24

• Preserve the BOM after the processing (by @​hdimer).

Commits

• 08c989c Release 8.5.25 version
• 24f6814 Fix 8.5.17 visitor regression
• f2fa53f Add supply chain security requirement to PostCSS plugin guide
• 10edf0b fix: return empty array for empty string in list.split (#2121)
• 0ebe8ad Release 8.5.24 version
• 73218c6 Update dependencies
• 9a114f6 Preserve the BOM when stringifying (#2119)
• 9069261 Fix types check
• See full diff in compare view

Updates typescript-eslint from 8.65.0 to 8.66.0

Release notes

Sourced from typescript-eslint's releases.

v8.66.0

8.66.0 (2026-08-03)

🚀 Features

• typescript-estree: handle import.defer() as ImportExpression (#12609)

🩹 Fixes

• eslint-plugin: [no-unnecessary-type-conversion] ignore shadowed built-ins (#12590)
• eslint-plugin: [prefer-nullish-coalescing] handle shadowed Boolean calls (#12591)
• eslint-plugin: [no-useless-default-assignment] don't report defaults used by other overloads (#12607)
• eslint-plugin: [no-unnecessary-type-parameters] check MappedType key remapping (#12588)
• eslint-plugin: [class-literal-property-style] preserve type annotations and don't drop decorators (#12617)
• website: list onUnsupportedTypeScriptVersion in parser options (#12585)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Kirk Waiblinger @​kirkwaiblinger
• Steffen Schroeder
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.66.0 (2026-08-03)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• e51b11b chore(release): publish 8.66.0
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

[socket-security]

Dependency limit exceeded — report not shown.

This pull request scan exceeded the 10,000-dependency limit applied to this scan, so the results are incomplete and may be inaccurate. To avoid reporting false positives, Socket has not posted a report.

Upgrade your plan to raise the dependency limit and get complete reports, or view the partial scan in the dashboard.

Socket is always free for open source. If this is a non-commercial open source project, contact us to request a free Team account.

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

[yosriady]

Superseded by #208, which consolidates, security-reviews, and locally validates the dependency updates. Incompatible major versions are intentionally held on supported combinations and documented in the replacement PR.