fix(deps): bump the production-dependencies group across 1 directory with 14 updates by dependabot[bot] · Pull Request #284 · iExecBlockchainComputing/iapp

dependabot · 2026-10-13T09:12:44Z

Bumps the production-dependencies group with 14 updates in the /cli directory:

Package	From	To
boxen	`8.0.1`	`9.0.0`
chalk	`5.6.2`	`6.0.1`
dockerode	`4.0.5`	`5.0.1`
ethers	`6.13.5`	`6.17.0`
figlet	`1.8.1`	`1.12.0`
iexec	`8.24.0`	`9.0.1`
jszip	`3.10.1`	`3.10.2`
magic-bytes.js	`1.10.0`	`1.13.1`
ora	`8.2.0`	`9.4.1`
uuid	`11.1.0`	`14.0.2`
yargs	`17.7.2`	`18.2.0`
yargs-parser	`21.1.1`	`22.0.0`
zod	`3.24.2`	`4.6.5`
zod-validation-error	`3.4.0`	`5.0.0`

Updates boxen from 8.0.1 to 9.0.0

Release notes

Sourced from boxen's releases.

v9.0.0

Breaking

Require Node.js 22 0aead27

Improvements

Add maxWidth option 5932ef4

Add footer option e719cec

Add titleColor option c0f18e7

Add borderBackgroundColor option (#100) 1373d4f

Lots of bug fixes

sindresorhus/boxen@v8.0.1...v9.0.0

Commits

a809729 9.0.0
2e901c1 Measure a label with the corners it is drawn between
6d377fb More tests
427ac21 Give the box the height it is given when the text does not fit
94db7a5 Write a border character the way a label is written
804e1e7 Keep a styling escape whole when a backspace is applied
9f8fabd Draw a padding and a margin as a whole number of columns
986a49b Do not take columns for a margin that is not drawn
2bc26cd Measure the border in columns
7ed8da2 Read the height of the terminal from LINES
Additional commits viewable in compare view

Updates chalk from 5.6.2 to 6.0.1

Release notes

Sourced from chalk's releases.

v6.0.1

Fix inconsistent coercion of two arguments 9c93a04

chalk/chalk@v6.0.0...v6.0.1

v6.0.0

Breaking

Require Node.js 22 8a94e0e

Improvements

Add underline styles and underline colors (#689) 4c304dd

Improve performance 5729845 fa5cff2

Fixes

Treat a numeric FORCE_COLOR as an exact level (#688) e912931

Downsample ansi256() and bgAnsi256() to 16 colors at level 1 (#687) ff549c5

chalk/chalk@v5.6.2...v6.0.0

Commits

47fc05a 6.0.1
9c93a04 Fix inconsistent coercion of two arguments
8960ada Meta tweaks
661317e 6.0.0
5729845 Improve performance
4c304dd Add extended underline styles and underline colors (#689)
e912931 Fix: Treat a numeric FORCE_COLOR as an exact level (#688)
8a94e0e Require Node.js 22
fa5cff2 Optimize 2-argument calls (#670)
ff549c5 Fix: Downsample ansi256() and bgAnsi256() to 16 colors at level 1 (#687)
Additional commits viewable in compare view

Updates dockerode from 4.0.5 to 5.0.1

Release notes

Sourced from dockerode's releases.

v5.0.1

What's Changed

build(deps): bump @protobufjs/utf8 from 1.1.0 to 1.1.1 by @dependabot[bot] in apocas/dockerode#832

build(deps): bump protobufjs from 7.5.5 to 7.6.1 by @dependabot[bot] in apocas/dockerode#834

build(deps): bump @grpc/grpc-js from 1.11.1 to 1.11.4 by @dependabot[bot] in apocas/dockerode#837

build(deps): bump protobufjs from 7.6.1 to 7.6.3 by @dependabot[bot] in apocas/dockerode#838

build(deps-dev): bump js-yaml from 4.1.1 to 4.2.0 by @dependabot[bot] in apocas/dockerode#839

Full Changelog: apocas/dockerode@v5.0.0...v5.0.1

v5.0.0

What's Changed

Bump picomatch from 2.3.1 to 2.3.2 by @dependabot[bot] in apocas/dockerode#826

Bump protobufjs from 7.3.2 to 7.5.5 by @dependabot[bot] in apocas/dockerode#828

Dropped uuid package, bumped minimum node version requirement.

Full Changelog: apocas/dockerode@v4.0.10...v5.0.0

v4.0.10

What's Changed

Bump js-yaml from 4.1.0 to 4.1.1 by @dependabot[bot] in apocas/dockerode#820

fix(readme): update docker api links by @parishahla in apocas/dockerode#823

buildkit proto followProgress support by @davidgamero in apocas/dockerode#824

Bump minimatch from 5.1.6 to 5.1.9 by @dependabot[bot] in apocas/dockerode#825

New Contributors

@parishahla made their first contribution in apocas/dockerode#823

@davidgamero made their first contribution in apocas/dockerode#824

Full Changelog: apocas/dockerode@v4.0.9...v4.0.10

v4.0.9

What's Changed

Bump tar-fs from 2.1.3 to 2.1.4 by @dependabot[bot] in apocas/dockerode#814

Full Changelog: apocas/dockerode@v4.0.8...v4.0.9

v4.0.8

What's Changed

chore: bump tar-fs dependency version to 2.1.3 by @mevrin-ueat in apocas/dockerode#813

New Contributors

@mevrin-ueat made their first contribution in apocas/dockerode#813

Full Changelog: apocas/dockerode@v4.0.7...v4.0.8

v4.0.7

What's Changed

... (truncated)

Commits

3624bc0 version bump
c3ab2f9 Merge pull request #839 from apocas/dependabot/npm_and_yarn/js-yaml-4.2.0
4903ecd build(deps-dev): bump js-yaml from 4.1.1 to 4.2.0
ccb9b65 Merge pull request #838 from apocas/dependabot/npm_and_yarn/protobufjs-7.6.3
82a67cc Merge pull request #837 from apocas/dependabot/npm_and_yarn/grpc/grpc-js-1.11.4
8d86634 build(deps): bump protobufjs from 7.6.1 to 7.6.3
d9f0ca5 build(deps): bump @grpc/grpc-js from 1.11.1 to 1.11.4
139e89a Merge pull request #834 from apocas/dependabot/npm_and_yarn/protobufjs-7.6.1
a92c171 Merge pull request #832 from apocas/dependabot/npm_and_yarn/protobufjs/utf8-1...
bdd0c88 build(deps): bump protobufjs from 7.5.5 to 7.6.1
Additional commits viewable in compare view

Updates ethers from 6.13.5 to 6.17.0

Release notes

Sourced from ethers's releases.

ethers/v6.17.0 (2026-06-18 00:49)

Add requestRate throttle to calls (b48bfe3).

Added provider requestRate throttle support (b74b6d3).

Disable AlchemyProvider which does not provide the necessary API capacity for tests (1523ca8).

Map ResolverNotFound error to null for reverse lookup (d07cfb6).

Use bigint for coinType instead of number values (4f6ec03).

Updated AlchemyProvider endpoints for BNB (9bec2f9).

Added basic ENSv2 tests and fixed issues with EVM cointypes (0e9a73d).

Adding ENSv2 integrations from adraffy (a2d0af4).

Update Blockscout deffault API key and links (5647ae3).

Added transactionsRoot to Block (#5077, #5078; 5bd2ce9).

Preserve 301/302 method and support 307/308 (#3106, #5115; 999af5f).

Fix maxFeePerGas property for EtherscanProvider transactions (#5080; ca45d23).

Added rich inspection for Network and Plugins (f2ffb86).

Tweaking API for Universal Resolver to be completely backward compatible (9a5c4b5).

Updated ENS Universal Resolver to latest API (0b3b12b).

Added CCIP to ENS Universal Resolver reverse resolution (982eef2).

Added reverse lookup for ENS UniversalResolver (9a9a11d).

Initial forward resolution using ENS UniversalResolver (51df7b9).

ethers/v6.16.0 (2025-12-02 19:47)

Added utility method to split EIP-7594 BLOb proofs into its cells (88dfe96).

Update Alchemy URL endpoint for mainnet (#5052; 719b01d).

Fail on unsupported Etherscan networks immediately to better support the default provider (94b333b).

Added Filecoin network and Ankr endpoints (#5038; 986e827).

Moved to better API for EIP-7594 PeerDAS (#5062; 452b422).

Added initial EIP-7594 PeerDAS support (#5054, #5062; 6d64889).

Support RegExp engines with string length limitations (#4967; f0dfbe1).

Added Transaction and Signature support for non-canonical S values (#4223, #5013; 855d727).

Allow zero-width big-endian data for toBeHex and allow widths fo toBeArray (#5025; 540f30c).

ethers/v6.15.0 (2025-07-01 11:24)

Allow non-canonical S values in Signatures moving errors to access-time (#5013; 9944ec9).

ethers/v6.14.4 (2025-06-12 23:16)

Fixed serialization of EIP-7702 transactions with leading 0-bytes (#4916; 389dc03).

ethers/v6.14.3 (2025-05-26 18:55)

Fixed non-normalized yParity on EIP-7702 JSON-RPC responses (#4985; a8803ca).

ethers/v6.14.2 (2025-05-26 18:31)

Fixed call stack overflow in makeError stringify for recursive structures (#4977, #4978; 52a0522).

Explicitly throw error on gunzip failure to prevent uncaught exception (#4873, #4874; fe98f98).

Skip additional receipt fetch for single confirmation requests (#4972; 243cb02).

Update EtherscanProvider to use their v2 API (#4975; 5e09aa1).

ethers/v6.14.1 (2025-05-15 14:17)

Fix JSON-RPC authorizationList signature entries encoded as DATA instead of QUANTITY values (#4916; 135db72).

ethers/v6.14.0 (2025-05-06 22:02)

... (truncated)

Changelog

Sourced from ethers's changelog.

ethers/v6.17.0 (2026-06-17 23:50)

Add requestRate throttle to calls (b48bfe3).

Added provider requestRate throttle support (b74b6d3).

Disable AlchemyProvider which does not provide the necessary API capacity for tests (1523ca8).

Map ResolverNotFound error to null for reverse lookup (d07cfb6).

Use bigint for coinType instead of number values (4f6ec03).

Updated AlchemyProvider endpoints for BNB (9bec2f9).

Added basic ENSv2 tests and fixed issues with EVM cointypes (0e9a73d).

Adding ENSv2 integrations from adraffy (a2d0af4).

Update Blockscout deffault API key and links (5647ae3).

Added transactionsRoot to Block (#5077, #5078; 5bd2ce9).

Preserve 301/302 method and support 307/308 (#3106, #5115; 999af5f).

Fix maxFeePerGas property for EtherscanProvider transactions (#5080; ca45d23).

Added rich inspection for Network and Plugins (f2ffb86).

Tweaking API for Universal Resolver to be completely backward compatible (9a5c4b5).

Updated ENS Universal Resolver to latest API (0b3b12b).

Added CCIP to ENS Universal Resolver reverse resolution (982eef2).

Added reverse lookup for ENS UniversalResolver (9a9a11d).

Initial forward resolution using ENS UniversalResolver (51df7b9).

ethers/v6.16.0 (2025-12-02 19:47)

Added utility method to split EIP-7594 BLOb proofs into its cells (88dfe96).

Update Alchemy URL endpoint for mainnet (#5052; 719b01d).

Fail on unsupported Etherscan networks immediately to better support the default provider (94b333b).

Added Filecoin network and Ankr endpoints (#5038; 986e827).

Moved to better API for EIP-7594 PeerDAS (#5062; 452b422).

Added initial EIP-7594 PeerDAS support (#5054, #5062; 6d64889).

Support RegExp engines with string length limitations (#4967; f0dfbe1).

Added Transaction and Signature support for non-canonical S values (#4223, #5013; 855d727).

Allow zero-width big-endian data for toBeHex and allow widths fo toBeArray (#5025; 540f30c).

ethers/v6.15.0 (2025-07-01 11:24)

Allow non-canonical S values in Signatures moving errors to access-time (#5013; 9944ec9).

ethers/v6.14.4 (2025-06-12 23:16)

Fixed serialization of EIP-7702 transactions with leading 0-bytes (#4916; 389dc03).

ethers/v6.14.3 (2025-05-26 18:55)

Fixed non-normalized yParity on EIP-7702 JSON-RPC responses (#4985; a8803ca).

... (truncated)

Commits

3ea4c22 admin: updated dist files
2d35b6a docs: fix property access order for Flatworm
b48bfe3 Add requestRate throttle to calls.
39f5ce1 tests: add INFURA_APIKEY for docs and workflows
96bd29c tests: added provider throttling to test suites
b74b6d3 Added provider requestRate throttle support.
1523ca8 Disable AlchemyProvider which does not provide the necessary API capacity for...
d07cfb6 Map ResolverNotFound error to null for reverse lookup.
c32c542 docs: fix typo in config for INFURA API key
7c6b840 admin: include INFURA_APIKEY in docs generation to resolve throttling
Additional commits viewable in compare view

Updates figlet from 1.8.1 to 1.12.0

Release notes

Sourced from figlet's releases.

1.12.0

Added 4 new fonts (Linguaholic fonts, patorjk/figlet.js#180)

Added characters to Graffiti (patorjk/figlet.js#181)

Added support for emojis and the fallback character (patorjk/figlet.js#174)

1.11.4

Bug fix for ESM builds that overwrite __dirname, fixes patorjk/figlet.js#172

1.11.3

Bug fix for invalid input that can lead to infinite loop.

v1.11.0

Added Future Thin and Future Smooth fonts.

v1.10.0

Added the fonts: Classy, Coder Mini, and Font Font.

Renamed "ANSI-Compact" to "ANSI Compact" (with backward compatibility).

Fixed the "U" characters in the "Isometric 4" font.

v1.9.4

Added the ANSI-Compact font

Some adjustments for older versions of Node (patorjk/figlet.js#146)

v1.9.3

Type fix for figlet module base call (when calling figlet as shorthand for figlet.text)

v1.9.2

Fixed types for TypeScript when run with Node.js.

v1.9.1

Wrapped the structuredClone call in an if statement for older versions of node.

v1.9.0

Refactored library to use TypeScript and to use modern tooling (instead of grunt, this project now uses vite).

Ensured support for both ES modules and CommonJS modules.

Added support for Toilet fonts:

ASCII 12

ASCII 9

Big ASCII 12

Big ASCII 9

Big Mono 12

Big Mono 9

Circle

Emboss

Emboss 2

Future

Letter

Mono 12

Mono 9

Pagga

... (truncated)

Commits

d29f4c1 1.12.0
5d8969a updated README
06a0deb npm audit update
eb73f84 Merge pull request #181 from patorjk/spanish_updates
e02d2bc Added characters for spanish
638e564 Merge pull request #179 from patorjk/dependabot/npm_and_yarn/vitest-4.1.11
43dfd18 Merge pull request #177 from patorjk/dependabot/npm_and_yarn/fast-uri-3.1.7
f17a29a Merge pull request #176 from patorjk/dependabot/npm_and_yarn/postcss-8.5.26
6649d7a Merge pull request #180 from linguaholic/add-linguaholic-fonts
21e8655 chore: relicense Linguaholic fonts under MIT
Additional commits viewable in compare view

Updates iexec from 8.24.0 to 9.0.1

Release notes

Sourced from iexec's releases.

v9.0.1

9.0.1 (2026-05-19)

Changed

set TDX as default tag for all order creation (#562) (da4a8b7)

v9.0.0

9.0.0 (2026-04-29)

⚠ BREAKING CHANGES

remove SGX SCONE

EnhancedWallet is removed, any ethers AbstractSigner can be used instead

bellecour and ethereum mainnet are removed; native mode is removed; gas price customization is removed; embedded ethers FallbackProvider and related provider options are removed

remove deprecated CLI commands sendRLC and sendETH

remove result proxy related methods and configuration; update checkStorageTokenExists and pushStorageToken, provider is now required

remove originalError from errors (use cause instead)

remove legacy API compatibility for fetchAppOrderbook and fetchDatasetOrderbook

remove ENS related methods and configuration

remove methods for setting workerpool API url

remove bridge related methods and configuration

remove multi SMS and gramine support (#517)

remove voucher support (#511)

Added

remove multi SMS and gramine support (#517) (83dce56)

remove voucher support (#511) (7182335)

Changed

remove bellecour and ethereum mainnet chains (04c07cf)

remove bridge related methods and configuration (60f3549)

remove deprecated CLI commands sendRLC and sendETH (689aa2e)

remove EnhancedWallet (7a500a9)

remove ENS related methods and configuration (a026490)

remove legacy API compatibility for fetchAppOrderbook and fetchDatasetOrderbook (584f436)

remove methods for setting workerpool API url (15562e4)

remove originalError from errors (use cause instead) (7d79228)

remove result proxy related methods and configuration; update checkStorageTokenExists and pushStorageToken, provider is now required (9d66ba1)

remove SGX SCONE (7734efe)

Changelog

Sourced from iexec's changelog.

9.0.1 (2026-05-19)

Changed

set TDX as default tag for all order creation (#562) (da4a8b7)

9.0.0 (2026-04-29)

⚠ BREAKING CHANGES

remove SGX SCONE

EnhancedWallet is removed, any ethers AbstractSigner can be used instead

bellecour and ethereum mainnet are removed; native mode is removed; gas price customization is removed; embedded ethers FallbackProvider and related provider options are removed

remove deprecated CLI commands sendRLC and sendETH

remove result proxy related methods and configuration; update checkStorageTokenExists and pushStorageToken, provider is now required

remove originalError from errors (use cause instead)

remove legacy API compatibility for fetchAppOrderbook and fetchDatasetOrderbook

remove ENS related methods and configuration

remove methods for setting workerpool API url

remove bridge related methods and configuration

remove multi SMS and gramine support (#517)

remove voucher support (#511)

Added

remove multi SMS and gramine support (#517) (83dce56)

remove voucher support (#511) (7182335)

Changed

remove bellecour and ethereum mainnet chains (04c07cf)

remove bridge related methods and configuration (60f3549)

remove deprecated CLI commands sendRLC and sendETH (689aa2e)

remove EnhancedWallet (7a500a9)

remove ENS related methods and configuration (a026490)

remove legacy API compatibility for fetchAppOrderbook and fetchDatasetOrderbook (584f436)

remove methods for setting workerpool API url (15562e4)

remove originalError from errors (use cause instead) (7d79228)

remove result proxy related methods and configuration; update checkStorageTokenExists and pushStorageToken, provider is now required (9d66ba1)

remove SGX SCONE (7734efe)

Commits

251e439 chore(master): release 9.0.1 (#564)
da4a8b7 fix: set TDX as default tag for all order creation (#562)
2318778 chore(master): release 9.0.0 (#561)
7734efe fix!: remove SGX SCONE
7a500a9 fix!: remove EnhancedWallet
04c07cf fix!: remove bellecour and ethereum mainnet chains
689aa2e fix!: remove deprecated CLI commands sendRLC and sendETH
9d66ba1 fix!: remove result proxy related methods and configuration; update `checkSto...
7d79228 fix!: remove originalError from errors (use cause instead)
584f436 fix!: remove legacy API compatibility for fetchAppOrderbook and `fetchDatas...
Additional commits viewable in compare view

Updates jszip from 3.10.1 to 3.10.2

Changelog

Sourced from jszip's changelog.

v3.10.2 2026-09-09

Fix cross-realm binary type detection in getTypeOf. Fixes #759 (see #578)

Add missing types for JSZip.defaults. Fixes #690 (see #927)

Fix Blob support in Node.js 18 and up. Fixes #941 (see #955)

Commits

020fa33 Release preparation for 3.10.2 (#974)
d38fda5 Fix cross-realm binary type detection in getTypeOf (#578)
e682f9a Fix grunt build rebundling existing dist via browser field (#971)
5adef36 Add missing types for JSZip.defaults (#927)
41a1342 Fix blob support in Node.js 18 and up (#955)
643714a Move all continuous integration to GitHub Actions (#942)
418c11f Upgrade Playwright to the latest version (#940)
2ceb998 Create FUNDING.yml
See full diff in compare view

Maintainer changes

This version was pushed to npm by jkoops, a new releaser for jszip since your current version.

Updates magic-bytes.js from 1.10.0 to 1.13.1

Release notes

Sourced from magic-bytes.js's releases.

v1.13.0

1.13.0 (2026-01-20)

Features

Support AAC files (#68) (6a4ad90)

v1.12.1

1.12.1 (2025-04-26)

Bug Fixes

add register to docs (804c1c8)

v1.12.0

1.12.0 (2025-04-25)

Features

expose register method (#56) (ebf3e35)

v1.11.0

1.11.0 (2025-04-17)

Features

Release avif (0152791)

Commits

3ff4492 chore(release): 1.13.1 [skip ci]
984c845 fix: add multi match
dd217ac fix: detect PDFs prefixed with UTF-8 BOM (#73)
b654ff5 fix: stop matching signatures longer than the input buffer (#72)
8c3cc79 fix: stop detecting ELF binaries as RAR archives (#71)
eee176b chore(release): 1.13.0 [skip ci]
c8bcbb4 added sqlite3 database format (#66)
6a4ad90 feat: Support AAC files (#68)
da4b9ae Add MIME type for FLAC (#67)
359f5ef chore(release): 1.12.1 [skip ci]
Additional commits viewable in compare view

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Updates ora from 8.2.0 to 9.4.1

Release notes

Sourced from ora's releases.

v9.4.1

Fix type definitions (#257) 431ebc4

Fix failText type to accept unknown instead of Error, matching the actual promise rejection value bc3a283

sindresorhus/ora@v9.4.0...v9.4.1

v9.4.0

Add successSymbol and failSymbol options to oraPromise 3d2e0a9

sindresorhus/ora@v9.3.0...v9.4.0

v9.3.0

Reduce flicker in rendering 2ab4f76

sindresorhus/ora@v9.2.0...v9.3.0

v9.2.0

Update stdin-discarder dependency (#251) 020eaba

sindresorhus/ora@v9.1.0...v9.2.0

v9.1.0

Support external writes to stream (console.log) while spinning d2b543a

Replace strip-ansi dependency with native stripVTControlCharacters (#249) 68d50e5

sindresorhus/ora@v9.0.0...v9.1.0

v9.0.0

Breaking

Require Node.js 20 7aca06d

Fixes

Fix clearing in some cases aa51538

Fix frame() not displaying dynamic prefixText/suffixText from functions 0f19f57

Fix multiline text exceeding console height leaving garbage when scrolling 45d30ad

... (truncated)

Commits

79cd8c1 9.4.1
bc3a283 Minor tweaks
431ebc4 Fix type definitions (#257)
46a6703 9.4.0
3d2e0a9 Add successSymbol and failSymbol options to oraPromise
f70f613 Test tweaks
7cf29a7 Validate some options better
4496362 9.3.0
2ab4f76 Reduce flicker in rendering
8d17b13 Add FAQ item
Additional commits viewable in compare view

Updates uuid from 11.1.0 to 14.0.2

Release notes

Sourced from uuid's releases.

v14.0.2

14.0.2 (2026-08-18)

Bug Fixes

v1: carry nsecs overflow into the timestamp's high bits (#972) (6adcc1d)

v1: set the multicast bit on v1Bytes's own randomly-generated node (#973) (b1da338)

v7: align default seq formula in v7Bytes with updateV7State (#965) (a67db57)

v14.0.1

14.0.1 (2026-06-20)

Bug Fixes

add types condition to node export for moduleResolution bundler (#961) (27ffae5)

v14.0.0

14.0.0 (2026-04-19)

⚠ BREAKING CHANGES

expect crypto to be global everywhere (requires node@20+) (#935)

drop node@18 support (#934)

Features

drop node@18 support (#934) (dc4ddb8)

Bug Fixes

expect crypto to be global everywhere (requires node@20+) (#935) (f2c235f)

Use GITHUB_TOKEN for release-please and enable npm provenance (#925) (ffa3138)

v13.0.2

13.0.2 (2026-05-04)

Bug Fixes

rerelease to fix provenance. (49ccb35)

v13.0.1

13.0.1 (2026-04-27)

Bug Fixes

... (truncated)

Changelog

Sourced from uuid's changelog.

14.0.2 (2026-08-18)

Bug Fixes

v1: carry nsecs overflow into the timestamp's high bits (#972) (6adcc1d)

v1: set the multicast bit on v1Bytes's own randomly-generated node (#973) (b1da338)

v7: align default seq formula in v7Bytes with updateV7State (#965) (a67db57)

14.0.1 (2026-06-20)

Bug Fixes

add types condition to node export for moduleResolution bundler (#961) (27ffae5)

14.0.0 (2026-04-19)

Security

Fixes GHSA-w5hq-g745-h8pq: v3(), v5(), and v6() did not validate that writes would remain within the bounds of a caller-supplied buffer, allowing out-of-bounds writes when an invalid offset was provided. A RangeError is now thrown if offset < 0 or of... Description has been truncated

socket-security · 2026-10-13T09:13:08Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Vulnerability	Quality	Maintenance
npm/ethers@6.13.5 ⏵ 6.17.0	^-3
npm/jszip@3.10.2
npm/boxen@8.0.1 ⏵ 9.0.0			⁺¹	^-4
npm/iexec@8.24.0 ⏵ 9.0.1	⁺¹			⁺³
npm/magic-bytes.js@1.10.0 ⏵ 1.13.1	⁺¹		⁺¹	⁺¹
npm/ora@8.2.0 ⏵ 9.4.1	⁺¹		⁺¹
npm/dockerode@4.0.5 ⏵ 5.0.1	⁺¹		⁺¹	^-6
npm/yargs-parser@22.0.0
npm/chalk@6.0.1
npm/zod-validation-error@3.4.0 ⏵ 5.0.0	⁺¹		⁺¹	⁺³
npm/uuid@11.1.0 ⏵ 14.0.2	⁺¹	⁺²		^-4
npm/yargs@17.7.2 ⏵ 18.2.0	⁺¹		⁺¹
npm/zod@3.24.2 ⏵ 4.6.5				⁺²

View full report

PierreJeanjacquot · 2026-10-13T15:05:19Z

@dependabot rebase

…with 14 updates Bumps the production-dependencies group with 14 updates in the /cli directory: | Package | From | To | | --- | --- | --- | | [boxen](https://github.com/sindresorhus/boxen) | `8.0.1` | `9.0.0` | | [chalk](https://github.com/chalk/chalk) | `5.6.2` | `6.0.1` | | [dockerode](https://github.com/apocas/dockerode) | `4.0.5` | `5.0.1` | | [ethers](https://github.com/ethers-io/ethers.js) | `6.13.5` | `6.17.0` | | [figlet](https://github.com/patorjk/figlet.js) | `1.8.1` | `1.12.0` | | [iexec](https://github.com/iExecBlockchainComputing/iexec-sdk) | `8.24.0` | `9.0.1` | | [jszip](https://github.com/Stuk/jszip) | `3.10.1` | `3.10.2` | | [magic-bytes.js](https://github.com/LarsKoelpin/magic-bytes) | `1.10.0` | `1.13.1` | | [ora](https://github.com/sindresorhus/ora) | `8.2.0` | `9.4.1` | | [uuid](https://github.com/uuidjs/uuid) | `11.1.0` | `14.0.2` | | [yargs](https://github.com/yargs/yargs) | `17.7.2` | `18.2.0` | | [yargs-parser](https://github.com/yargs/yargs-parser) | `21.1.1` | `22.0.0` | | [zod](https://github.com/colinhacks/zod) | `3.24.2` | `4.6.5` | | [zod-validation-error](https://github.com/causaly/zod-validation-error) | `3.4.0` | `5.0.0` | Updates `boxen` from 8.0.1 to 9.0.0 - [Release notes](https://github.com/sindresorhus/boxen/releases) - [Commits](sindresorhus/boxen@v8.0.1...v9.0.0) Updates `chalk` from 5.6.2 to 6.0.1 - [Release notes](https://github.com/chalk/chalk/releases) - [Commits](chalk/chalk@v5.6.2...v6.0.1) Updates `dockerode` from 4.0.5 to 5.0.1 - [Release notes](https://github.com/apocas/dockerode/releases) - [Commits](apocas/dockerode@v4.0.5...v5.0.1) Updates `ethers` from 6.13.5 to 6.17.0 - [Release notes](https://github.com/ethers-io/ethers.js/releases) - [Changelog](https://github.com/ethers-io/ethers.js/blob/main/CHANGELOG.md) - [Commits](ethers-io/ethers.js@v6.13.5...v6.17.0) Updates `figlet` from 1.8.1 to 1.12.0 - [Release notes](https://github.com/patorjk/figlet.js/releases) - [Commits](patorjk/figlet.js@v1.8.1...v1.12.0) Updates `iexec` from 8.24.0 to 9.0.1 - [Release notes](https://github.com/iExecBlockchainComputing/iexec-sdk/releases) - [Changelog](https://github.com/iExecBlockchainComputing/iexec-sdk/blob/master/CHANGELOG.md) - [Commits](iExecBlockchainComputing/iexec-sdk@v8.24.0...v9.0.1) Updates `jszip` from 3.10.1 to 3.10.2 - [Changelog](https://github.com/Stuk/jszip/blob/main/CHANGES.md) - [Commits](Stuk/jszip@v3.10.1...v3.10.2) Updates `magic-bytes.js` from 1.10.0 to 1.13.1 - [Release notes](https://github.com/LarsKoelpin/magic-bytes/releases) - [Commits](LarsKoelpin/magic-bytes@v1.10.0...v1.13.1) Updates `ora` from 8.2.0 to 9.4.1 - [Release notes](https://github.com/sindresorhus/ora/releases) - [Commits](sindresorhus/ora@v8.2.0...v9.4.1) Updates `uuid` from 11.1.0 to 14.0.2 - [Release notes](https://github.com/uuidjs/uuid/releases) - [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md) - [Commits](uuidjs/uuid@v11.1.0...v14.0.2) Updates `yargs` from 17.7.2 to 18.2.0 - [Release notes](https://github.com/yargs/yargs/releases) - [Changelog](https://github.com/yargs/yargs/blob/main/CHANGELOG.md) - [Commits](yargs/yargs@v17.7.2...v18.2.0) Updates `yargs-parser` from 21.1.1 to 22.0.0 - [Release notes](https://github.com/yargs/yargs-parser/releases) - [Changelog](https://github.com/yargs/yargs-parser/blob/main/CHANGELOG.md) - [Commits](yargs/yargs-parser@yargs-parser-v21.1.1...yargs-parser-v22.0.0) Updates `zod` from 3.24.2 to 4.6.5 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v3.24.2...v4.6.5) Updates `zod-validation-error` from 3.4.0 to 5.0.0 - [Release notes](https://github.com/causaly/zod-validation-error/releases) - [Changelog](https://github.com/causaly/zod-validation-error/blob/main/CHANGELOG.md) - [Commits](causaly/zod-validation-error@v3.4.0...v5.0.0) --- updated-dependencies: - dependency-name: boxen dependency-version: 9.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: chalk dependency-version: 6.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: dockerode dependency-version: 5.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: ethers dependency-version: 6.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: figlet dependency-version: 1.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: iexec dependency-version: 9.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: jszip dependency-version: 3.10.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: magic-bytes.js dependency-version: 1.13.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: ora dependency-version: 9.4.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: uuid dependency-version: 14.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: yargs dependency-version: 18.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: yargs-parser dependency-version: 22.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: zod dependency-version: 4.6.5 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: zod-validation-error dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 13, 2026

dependabot Bot changed the title ~~fix(deps): bump the production-dependencies group in /cli with 14 updates~~ fix(deps): bump the production-dependencies group across 1 directory with 14 updates Oct 13, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/cli/production-dependencies-ee799e4ec5 branch from 6bc2caa to 7c2c231 Compare October 13, 2026 15:08

fix: iexec@9 changes

19c7869

PierreJeanjacquot force-pushed the dependabot/npm_and_yarn/cli/production-dependencies-ee799e4ec5 branch from 7e3fe4e to 19c7869 Compare October 13, 2026 15:22

PierreJeanjacquot added 2 commits October 13, 2026 17:39

fixup! fix: iexec@9 changes

7b629e4

fix: add node 22 requirement

4bce026

PierreJeanjacquot approved these changes Oct 13, 2026

View reviewed changes

PierreJeanjacquot merged commit ea74858 into main Oct 13, 2026
5 checks passed

PierreJeanjacquot deleted the dependabot/npm_and_yarn/cli/production-dependencies-ee799e4ec5 branch October 13, 2026 15:53

iexec-release-please-app Bot mentioned this pull request Oct 13, 2026

chore(main): release iapp 2.0.1 #285

Open

Navigation Menu

Repository navigation

fix(deps): bump the production-dependencies group across 1 directory with 14 updates - #284

fix(deps): bump the production-dependencies group across 1 directory with 14 updates#284
PierreJeanjacquot merged 4 commits into
mainfrom
dependabot/npm_and_yarn/cli/production-dependencies-ee799e4ec5

dependabot Bot commented on behalf of github Oct 13, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Oct 13, 2026 •

edited

Loading

Uh oh!

PierreJeanjacquot commented Oct 13, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v9.0.0

Breaking

Improvements

v6.0.1

v6.0.0

Breaking

Improvements

Fixes

v5.0.1

What's Changed

v5.0.0

What's Changed

v4.0.10

What's Changed

New Contributors

v4.0.9

What's Changed

v4.0.8

What's Changed

New Contributors

v4.0.7

What's Changed

ethers/v6.17.0 (2026-06-18 00:49)

ethers/v6.16.0 (2025-12-02 19:47)

ethers/v6.15.0 (2025-07-01 11:24)

ethers/v6.14.4 (2025-06-12 23:16)

ethers/v6.14.3 (2025-05-26 18:55)

ethers/v6.14.2 (2025-05-26 18:31)

ethers/v6.14.1 (2025-05-15 14:17)

ethers/v6.14.0 (2025-05-06 22:02)

ethers/v6.17.0 (2026-06-17 23:50)

ethers/v6.16.0 (2025-12-02 19:47)

ethers/v6.15.0 (2025-07-01 11:24)

ethers/v6.14.4 (2025-06-12 23:16)

ethers/v6.14.3 (2025-05-26 18:55)

1.12.0

1.11.4

1.11.3

v1.11.0

v1.10.0

v1.9.4

v1.9.3

v1.9.2

v1.9.1

v1.9.0

v9.0.1

9.0.1 (2026-05-19)

Changed

v9.0.0

9.0.0 (2026-04-29)

⚠ BREAKING CHANGES

Added

Changed

9.0.1 (2026-05-19)

Changed

9.0.0 (2026-04-29)

⚠ BREAKING CHANGES

Added

Changed

v3.10.2 2026-09-09

v1.13.0

1.13.0 (2026-01-20)

Features

v1.12.1

1.12.1 (2025-04-26)

Bug Fixes

v1.12.0

1.12.0 (2025-04-25)

Features

v1.11.0

1.11.0 (2025-04-17)

Features

v9.4.1

v9.4.0

v9.3.0

v9.2.0

v9.1.0

dependabot Bot commented on behalf of github Oct 13, 2026 •

edited

Loading

socket-security Bot commented Oct 13, 2026 •

edited

Loading