deps: Bump the workspace-dependencies group across 1 directory with 32 updates

[dependabot]

Bumps the workspace-dependencies group with 32 updates in the / directory:

Package	From	To
webpack-bundle-analyzer	5.3.0	5.3.1
@cypress/webpack-preprocessor	7.1.0	7.1.1
@semantic-release/github	12.0.8	12.0.9
@types/node	25.9.1	26.1.2
conventional-changelog-conventionalcommits	9.3.1	10.2.1
eslint	10.4.0	10.8.0
globals	17.6.0	17.8.0
prettier	3.8.3	3.9.6
semantic-release	25.0.3	25.0.8
ts-jest	29.4.11	29.4.12
ts-loader	9.5.7	9.6.2
typedoc	0.28.19	0.28.20
typedoc-plugin-markdown	4.11.0	4.12.0
typescript	6.0.3	7.0.2
webpack	5.107.1	5.109.2
webpack-cli	7.0.2	7.2.2
@typescript-eslint/eslint-plugin	8.59.4	8.65.0
@typescript-eslint/parser	8.59.4	8.65.0
hardhat	2.22.0	3.12.0
jest-fetch-mock	3.0.3	4.2.0
ws	8.21.0	8.21.1
@ethereumjs/rlp	10.1.1	10.1.2
zod	3.22.3	4.4.3
eslint-plugin-jest	29.15.2	29.16.0
eslint-plugin-import-x	4.16.2	4.17.1
@docusaurus/core	3.10.1	3.10.2
@docusaurus/plugin-content-docs	3.10.1	3.10.2
@docusaurus/preset-classic	3.10.1	3.10.2
@docusaurus/theme-live-codeblock	3.10.1	3.10.2
react	19.2.6	19.2.8
react-dom	19.2.6	19.2.8
@docusaurus/module-type-aliases	3.10.1	3.10.2

Updates webpack-bundle-analyzer from 5.3.0 to 5.3.1

Release notes

Sourced from webpack-bundle-analyzer's releases.

v5.3.1

Patch Changes

• Explicitly define stats.toJson() options for bundle analysis to support Rspack 2.0 with minimal code changes needed. (by @​SyMind in #718)

• Fix the treemap not reflecting chunk checkbox selections. (by @​christiango in #722)

Changelog

Sourced from webpack-bundle-analyzer's changelog.

5.3.1

Patch Changes

• Explicitly define stats.toJson() options for bundle analysis to support Rspack 2.0 with minimal code changes needed. (by @​SyMind in #718)

• Fix the treemap not reflecting chunk checkbox selections. (by @​christiango in #722)

Commits

• 97d2ef8 chore(release): new release (#719)
• 48798a8 fix: update treemap when chunk selection changes (#722)
• 5ec0e7c fix: request analyzer stats fields (#718)
• a2ae1ef docs: show absolute output path usage (#716)
• See full diff in compare view

Updates @cypress/webpack-preprocessor from 7.1.0 to 7.1.1

Commits

• 73906c9 chore: release @​cypress/webpack-preprocessor-v7.1.1
• 3155185 chore: release @​cypress/webpack-dev-server-v5.6.2
• 9a63f6a dependency: bump tsx to 4.22.4 to resolve CVE-2025-68121 in bundled esbuild (...
• 1b8c5dd chore: merge duplicate Bugfixes header in 15.17.0 changelog (#33949)
• 8e8418c fix(server): propagate browser renderer crash to sibling CRI clients (#33943)
• c7d757d fix: Warn and ignore invalid CYPRESS_env and CYPRESS_expose values (#33945)
• 298c124 refactor(network-interception): scaffold package and wire createProxyRuntime ...
• 94478c5 chore: Update Chrome (stable) to 148.0.7778.215 (#33938)
• d227778 chore: updating v8 snapshot cache (#33942)
• 059aebb test(data-context): fix flaky GitDataSource lock race (#33944)
• Additional commits viewable in compare view

Updates @semantic-release/github from 12.0.8 to 12.0.9

Release notes

Sourced from @​semantic-release/github's releases.

v12.0.9

12.0.9 (2026-07-01)

Bug Fixes

• asset-upload: stop setting content-length header manually (241f966), closes #1224
• local-undici: always use the locally installed undici instead of the node built-in version (40973e3), closes #1224
• publish: handle content-length header properly for asset uploads (#1260) (28e3741), closes #1224 #1224

Commits

• 28e3741 fix(publish): handle content-length header properly for asset uploads (#1260)
• 241f966 fix(asset-upload): stop setting content-length header manually
• 40973e3 fix(local-undici): always use the locally installed undici instead of the nod...
• 8879ae4 chore(deps): update dependency prettier to v3.9.1 (#1259)
• bf720e2 chore(deps): update dependency prettier to v3.9.0 (#1258)
• b34e0ec chore(deps): update dependency prettier to v3.8.5 (#1257)
• b445fa0 chore(deps): update dependency ls-engines to v0.10.1 (#1256)
• 4ca0ef4 chore(deps): lock file maintenance (#1255)
• bb9fdb3 chore(deps): update dependency undici to v7.28.0 [security] (#1254)
• 059c6ce ci(action): update actions/checkout action to v7 (#1252)
• Additional commits viewable in compare view

Updates @types/node from 25.9.1 to 26.1.2

Commits

• See full diff in compare view

Updates conventional-changelog-conventionalcommits from 9.3.1 to 10.2.1

Release notes

Sourced from conventional-changelog-conventionalcommits's releases.

conventional-changelog-conventionalcommits: v10.2.1

Bug Fixes

• point package homepages and docs to documentation website (04796e2)

conventional-changelog-conventionalcommits: v10.2.0

Features

• support changelog preamble partial (#1491) (e93dbe4)

conventional-changelog-conventionalcommits: v10.1.0

Features

• support changelog preamble (#1489) (7d9794f)

conventional-changelog-conventionalcommits: v10.0.0

⚠ BREAKING CHANGES

• the commit type effect property replaces the hidden commit type property and the bumpStrict preset option for controlling changelog visibility and version bumps.

Fixes #1476.

• Handlebars template strings and partial files were replaced with render functions.
• packages now require Node.js 22 or newer.

Features

• replace handlebars templates with render functions (#1477) (55e6716)
• require node 22 (de5e136)
• support commit type effects (#1484) (78761ae)

Bug Fixes

• encode compare URL tags (#1483) (96bf235)
• render non-closing references separately (#1482) (adb2c69)
• sort notes without compare-func (#1487) (dc78285)

Changelog

Sourced from conventional-changelog-conventionalcommits's changelog.

10.2.1 (2026-07-04)

Bug Fixes

• point package homepages and docs to documentation website (04796e2)

10.2.0 (2026-06-27)

Features

• support changelog preamble partial (#1491) (e93dbe4)

10.1.0 (2026-06-27)

Features

• support changelog preamble (#1489) (7d9794f)

10.0.0 (2026-06-26)

⚠ BREAKING CHANGES

• the commit type effect property replaces the hidden commit type property and the bumpStrict preset option for controlling changelog visibility and version bumps.

Fixes #1476.

• Handlebars template strings and partial files were replaced with render functions.
• packages now require Node.js 22 or newer.

Features

• replace handlebars templates with render functions (#1477) (55e6716)
• require node 22 (de5e136)
• support commit type effects (#1484) (78761ae)

Bug Fixes

• encode compare URL tags (#1483) (96bf235)
• render non-closing references separately (#1482) (adb2c69)
• sort notes without compare-func (#1487) (dc78285)

Commits

• b82a462 chore(release): monorepo release (#1500)
• 04796e2 fix: point package homepages and docs to documentation website
• 69b0d36 chore(release): monorepo release (#1492)
• e93dbe4 feat(conventional-changelog-angular,conventional-changelog-conventionalcommit...
• f72f5e2 chore(release): monorepo release (#1490)
• 7d9794f feat(conventional-changelog-angular,conventional-changelog-conventionalcommit...
• ed9862d chore(release): monorepo release (#1474)
• dc78285 fix(conventional-changelog-angular,conventional-changelog-conventionalcommits...
• f9195d5 fix(conventional-commits-parser,template): keep footers out of breaking notes...
• 78761ae feat(conventional-changelog-conventionalcommits)!: support commit type effect...
• Additional commits viewable in compare view

Updates eslint from 10.4.0 to 10.8.0

Release notes

Sourced from eslint's releases.

v10.8.0

Features

• 2fee9bb feat: export ConfigObject from eslint/config (#21082) (sethamus)

Bug Fixes

• 6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129) (Francesco Trotta)
• 9091071 fix: prevent no-unreachable-loop crash when all loop types are ignored (#21116) (Pixel)
• e23fafe fix: prefer-object-spread add semicolon when adding parenthesis (#21081) (synthex-byte)
• 20b5ad0 fix: quadratic-time regex in prefer-template (#21096) (Milos Djermanovic)
• 8b6f6c0 fix: apply ignore configs to computed methods in class-methods-use-this (#21094) (Pixel)
• b2c608c fix: NewExpression with parenthesized callee in preserve-caught-error (#21083) (Francesco Trotta)

Documentation

• 6ddf858 docs: fix broken Specify Parser Options anchor link (#21106) (Minsu)
• 784dfbe docs: Clarify no-eq-null description (#21120) (Park Harin)
• 7ec733a docs: Fix typos and grammar in glossary (#21095) (Marry (Subin Yang))
• 92bb13f docs: replace quake link (#21108) (Jung Hyeon Jun)
• 68eb4a5 docs: fix broken Specify Globals anchor links in rule pages (#21103) (Minsu)
• d28f697 docs: replace Code Climate CLI links with Qlty CLI links (#21099) (Jung Hyeon Jun)
• eccc68d docs: correct --suppressions-location option description (#21093) (Ga eun Lee)
• c5963f7 docs: Update README (GitHub Actions Bot)

Chores

• 4fbf46d test: pin webpack version to 5.108.4 (#21137) (Francesco Trotta)
• 2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101) (Bo Hyun Kim)
• eccbe7b test: add error locations to no-class-assign (#21123) (devoil)
• e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118) (dependabot[bot])
• e9d66d0 ci: bump actions/setup-node from 6 to 7 (#21119) (dependabot[bot])
• ee225b6 test: Add error location details to no-eq-null rule (#21117) (Park Harin)
• 044a627 chore: update minimatch to ^10.2.5 (#21107) (김채영)
• fb09aa8 chore: update ecosystem plugins (#21115) (ESLint Bot)
• 5abd878 test: add error locations to no-proto (#21114) (Gihyeon Jeong / 정기현)
• 9715887 test: Add error location details to no-div-regex (#21110) (Park Harin)
• a746ec6 test: add error locations to no-new-wrappers (#21109) (Gihyeon Jeong / 정기현)
• 8dde645 test: add error locations to no-ex-assign (#21102) (devoil)
• 13ab0ec test: add error locations to no-label-var (#21098) (Gihyeon Jeong / 정기현)
• a99906f test: Add error location details to no-delete-var rule (#21105) (Park Harin)
• c47e8dc chore: add missing backticks to languages/js/index.js (#21104) (beeen)
• 0174428 chore: add missing backticks to translate-cli-options.js (#21097) (dongkyu lee)
• 3d36589 chore: add missing backticks to serialization.js (#21091) (이규환)
• dcc9312 test: add error locations to eqeqeq (#21090) (Ga eun Lee)
• 2710b18 ci: Add explicit permissions to rebuild-docs-sites workflow (#21089) (Marry (Subin Yang))
• 5d2f866 chore: update dependency prettier to v3.9.5 (#21086) (renovate[bot])
• d584e31 chore: fix failing ecosystem test for eslint-plugin-unicorn (#21084) (Francesco Trotta)
• bf3eda0 chore: update ecosystem plugins (#21079) (ESLint Bot)

v10.7.0

Features

• cf2a9bf feat: add errorClassNames option to preserve-caught-error rule (#21032) (sethamus)
• f8b873a feat: max-nested-callbacks option for constructor callbacks (#21063) (fnx)

... (truncated)

Commits

• 749dfed 10.8.0
• 4bd0d75 Build: changelog update for 10.8.0
• 4fbf46d test: pin webpack version to 5.108.4 (#21137)
• 6ddf858 docs: fix broken Specify Parser Options anchor link (#21106)
• 784dfbe docs: Clarify no-eq-null description (#21120)
• 6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129)
• 2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101)
• eccbe7b test: add error locations to no-class-assign (#21123)
• 2fee9bb feat: export ConfigObject from eslint/config (#21082)
• e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118)
• Additional commits viewable in compare view

Updates globals from 17.6.0 to 17.8.0

Release notes

Sourced from globals's releases.

v17.8.0

• Update globals (2026-07-01) (#347) 7394811

---

sindresorhus/globals@v17.7.0...v17.8.0

v17.7.0

• Update globals (2026-06-22) (#345) 33b75f9

---

sindresorhus/globals@v17.6.0...v17.7.0

Commits

• 36c7659 17.8.0
• 7394811 Update globals (2026-07-01) (#347)
• a19670c 17.7.0
• 9611620 Update actions (#346)
• 33b75f9 Update globals (2026-06-22) (#345)
• 887dd52 Fix build script (#344)
• See full diff in compare view

Updates prettier from 3.8.3 to 3.9.6

Release notes

Sourced from prettier's releases.

3.9.6

What's Changed

• Preserve quotes for methods named new (prettier/prettier#19621 by @​kovsu)
• Support import defer in typescript parser (prettier/prettier#19624, prettier/prettier#19675 by @​fisker)
• Added a new official plugin @prettier/plugin-yuku 🚀 (prettier/prettier#19628, prettier/prettier#19629 by @​fisker)

🔗 Changelog

3.9.5

🔗 Changelog

3.9.4

• Angular: Format @content(name) -> @content (name) to align with other block syntax (#19499 by @​fisker)

🔗 Changelog

3.9.3

• Markdown: Fix unexpected removal of characters in liquid syntax (prettier/prettier#19489 by @​seiyab)
• TypeScript: Allow decorators to be used with declare on class fields (prettier/prettier#19492 by @​evoactivity)

🔗 Changelog

3.9.1

• CLI: Fix ignored file has been cached incorrectly (#19483 by @​kovsu)

🔗 Changelog

3.9.0

diff

🔗 Prettier 3.9: Major parser upgrades and Formatting improvements

3.8.5

• Fix Flow variance annotation print (#19022 by @​marcoww6)

🔗 Changelog

3.8.4

• Markdown: Fix blank lines between list items and nested sub-lists being removed in Markdown/MDX (prettier/prettier#17746 by @​byplayer)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.6

diff

TypeScript: Preserve quotes for methods named new (#19621 by @​kovsu)

// Input
interface Container {
  "new"(id: string): number;
}
// Prettier 3.9.5
interface Container {
new(id: string): number;
}
// Prettier 3.9.6
interface Container {
"new"(id: string): number;
}

TypeScript: Support import defer (#19624, #19675 by @​fisker)

// Input
import defer * as foo from "foo";
// Prettier 3.9.5
import * as foo from "foo";
// Prettier 3.9.6
import defer * as foo from "foo";

JavaScript: Added a new official plugin @prettier/plugin-yuku (#19628, #19629 by @​fisker)

@prettier/plugin-yuku is powered by Yuku (A high-performance JavaScript/TypeScript compiler toolchain written in Zig).

This plugin includes two new parsers: yuku (JavaScript syntax) and yuku-ts (TypeScript syntax).

To use this plugin:

1. Install the plugin:

   yarn add --dev prettier @prettier/plugin-yuku

... (truncated)

Commits

• 8f0c950 Release 3.9.6
• e910764 Update changelog
• ec3f1c7 Update typescript-eslint to v8.65.0 (#19675)
• 73d2efc Update Yuku parser to v0.7.0 (#19664)
• dd5e24e Preserve quotes for TSMethodSignature nodes named new (#19621)
• c03ab4e Update dependency eslint-plugin-unicorn to v72 (#19633)
• b74dd53 Update Yuku parser to v0.6.5 (#19654)
• f1b594e Update dependency eslint-plugin-simple-import-sort to v14 (#19655)
• 0d9dfb6 Update Yuku parser to v0.6.4 (#19650)
• 3bbb815 Remove typescript-only directory (#19636)
• Additional commits viewable in compare view

Updates semantic-release from 25.0.3 to 25.0.8

Release notes

Sourced from semantic-release's releases.

v25.0.8

25.0.8 (2026-07-18)

Bug Fixes

• handle potential null values in commit message and gitTags trimming (0a60004)
• hide-sensitive: mask key/auth/webhook env vars (973d763)
• mask sensitive environment variables and improve commit handling (#4252) (1bfdc52)
• prevent template evaluation syntax in branch expansion and tag formatting (f121540)

v25.0.7

25.0.7 (2026-07-13)

Bug Fixes

• argument Injection via repositoryUrl in package.json (#4245) (c46dbda)

v25.0.6

25.0.6 (2026-07-10)

Bug Fixes

• ensure encoded secrets get masked (8e28dd3)

v25.0.5

25.0.5 (2026-06-09)

Bug Fixes

• revert: next (#4200) (db8ffaa)

v25.0.4

25.0.4 (2026-06-09)

Bug Fixes

• code-quality: add missing comma in context object for consistency (493d6cd)

Commits

• 1bfdc52 fix: mask sensitive environment variables and improve commit handling (#4252)
• 0a60004 fix: handle potential null values in commit message and gitTags trimming
• f121540 fix: prevent template evaluation syntax in branch expansion and tag formatting
• 973d763 fix(hide-sensitive): mask key/auth/webhook env vars
• 474e5a3 ci(action): update github/codeql-action action to v4.37.1 (#4254)
• fc9382c docs: fix issue template links (#4251)
• e34c52d ci(action): update actions/setup-node action to v7 (#4250)
• 8020ec6 ci(action): update actions/setup-node action to v6.5.0 (#4249)
• 956baf4 chore(deps): update npm to v12.0.1 (#4247)
• c46dbda fix: argument Injection via repositoryUrl in package.json (#4245)
• Additional commits viewable in compare view

Updates ts-jest from 29.4.11 to 29.4.12

Release notes

Sourced from ts-jest's releases.

v29.4.12

Please refer to CHANGELOG.md for details.

Changelog

Sourced from ts-jest's changelog.

29.4.12 (2026-07-22)

Features

• compiler: support TypeScript 7 projects through compatibility aliases (#5386)

Commits

• 3f05625 chore(release): 29.4.12
• df28b27 docs: clarify TypeScript version prerequisites
• c8a614a docs: mention TypeScript 7 setup in README
• 06c79d4 fix: address TypeScript 7 review feedback
• f107460 docs: explain TypeScript 7 compatibility setup
• 3388227 test(e2e): add TypeScript compatibility matrix
• 891dc73 fix(compiler): support TypeScript 7 compatibility aliases
• eb135eb build(deps-dev): bump shell-quote from 1.8.4 to 1.10.0 in /examples
• d5d80a3 ci: pin google osv scan action at v2.3.5
• 6bf293f build(deps): bump shell-quote from 1.8.4 to 1.10.0 in /website
• Additional commits viewable in compare view

Updates ts-loader from 9.5.7 to 9.6.2

Release notes

Sourced from ts-loader's releases.

v9.6.2

• chore: trim runtime dependencies — remove enhanced-resolve/semver, swap micromatch → picomatch - thanks @​johnnyreilly

Officially ts-loader has supported 3.6.3+ versions of TypeScript. This change means that certain scenarios with older versions of TS will now certainly fail. If anyone is actually using these versions it would be surprising.

v9.6.1

• fix: rspack support - thanks @​johnnyreilly and @​bhollis

v9.6.0

• feat: add webpack 4 support back - thanks @​johnnyreilly and @​tweet

Changelog

Sourced from ts-loader's changelog.

9.6.2

• chore: trim runtime dependencies — remove enhanced-resolve/semver, swap micromatch → picomatch - thanks @​johnnyreilly

Officially ts-loader has supported 3.6.3+ versions of TypeScript. This change means that certain scenarios with older versions of TS will now certainly fail. If anyone is actually using these versions it would be surprising.

9.6.1

• fix: rspack support - thanks @​johnnyreilly and @​bhollis

9.6.0

• feat: add webpack 4 support back - thanks @​johnnyreilly and @​tweet

Commits

• b347bb7 chore: trim runtime dependencies — remove enhanced-resolve/semver, swap micro...
• 32d82e6 fix: rspack support (#1699)
• 6bd992e chore: Update GitHub Actions workflow for release
• eee9e02 chore: version 9.6.0
• d088b15 feat: add webpack 4 support to ts-loader v9 (#1697)
• e714be1 ci: run tests on Node 26 (#1693)
• 972a428 feat: remove TS version from comparison tests (#1692)
• 586e3b8 feat: upgrade comparison / execution test packs to TS 6 (#1685)
• See full diff in compare view

Updates typedoc from 0.28.19 to 0.28.20

Release notes

Sourced from typedoc's releases.

v0.28.20

Features

• Group/category section headings (<h2>) in the default theme now include an id attribute so they can be linked to via fragment identifiers (e.g. modules.html#classes), #3029.
• Added a @reexport modifier tag to have TypeDoc convert variable/type references as a re-export instead of a new symbol, #3096.
• API: Introduced generateOutputsBegin and generateOutputsEnd events on Application for plugin use.

Bug Fixes

• When --emit none is used, TypeDoc will now report warnings about missing relative paths previously reported when rendering, #3078.
• Improved performance via asynchronously performing git and file write operations, more performant JSX rendering, and source code bundling, #3103.
• A @hidden tag on a constructor parameter-property will now only hide the property, not both the property and the parameter, #3111.
• Custom @group and @category titles with the same sort weight are now ordered consistently with the alphabetical reflection sort, #3120.

Thanks!

• @​greymoth-jp
• @​jonathanhefner
• @​kcastellino
• @​Metbcy
• @​StoneCypher
• @​wotan-allfather

Changelog

Sourced from typedoc's changelog.

v0.28.20 (2026-07-05)

Features

• Group/category section headings (<h2>) in the default theme now include an id attribute so they can be linked to via fragment identifiers (e.g. modules.html#classes), #3029...

  Description has been truncated

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	jest-fetch-mock@​4.2.0
	@​ethereumjs/​rlp@​10.1.2
	@​typescript-eslint/​parser@​8.65.0
	@​typescript-eslint/​eslint-plugin@​8.65.0
	@​types/​node@​26.1.2
	hardhat@​3.12.0
	typedoc-plugin-markdown@​4.12.0
	react@​19.2.8
	globals@​17.8.0
	eslint-plugin-import-x@​4.17.1
	zod@​4.4.3
	typescript@​7.0.2
	@​cypress/​webpack-preprocessor@​7.1.1
	conventional-changelog-conventionalcommits@​10.2.1
	typedoc@​0.28.20
	react-dom@​19.2.8
	ts-loader@​9.6.2
	ts-jest@​29.4.12
	webpack-bundle-analyzer@​5.3.1
	ws@​8.21.1
	@​semantic-release/​github@​12.0.9
	eslint@​10.8.0
	webpack-cli@​7.2.2
	prettier@​3.9.6
	semantic-release@​25.0.8
	eslint-plugin-jest@​29.16.0

View full report

[socket-security]

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert  (click "▶" to expand/collapse)
Warn		Obfuscated code: npm npm is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: pnpm-lock.yaml → npm/semantic-release@25.0.8 → npm/npm@11.19.0 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/npm@11.19.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm npm is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: pnpm-lock.yaml → npm/semantic-release@25.0.8 → npm/npm@11.19.0 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/npm@11.19.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm yargs is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: pnpm-lock.yaml → npm/jest@30.4.2 → npm/yargs@17.7.3 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/yargs@17.7.3. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report