[decofe]

Update body-parser to 2.4.0, fast-uri to 3.1.9, zod to 4.6.7.

Addresses affected dependency versions reported in GHSA-27r3-jxmh-p828, GHSA-333x-w4r6-6crp, GHSA-wjr9-j795-jxcr, GHSA-xhq7-xmqj-769h, GHSA-w74x-v6f9-j3xg, GHSA-mrhx-c7xc-m3w5.

Remove the stale Bun lockfile; the package manifest and CI use pnpm.

Validation:

• pnpm install --frozen-lockfile --ignore-scripts: passed.
• pnpm check:types: passed.

Draft for review; application and deployment checks remain with the repository CI and owners.

Prompted by: @sds

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
tempo-docs	Ready	Preview	Oct 24, 2026 1:30am UTC

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​shikijs/​rehype@​4.3.0
	@​iconify-json/​simple-icons@​1.2.79 ⏵ 1.2.88				-1
	@​iconify-json/​token-branded@​1.2.46
	shiki@​4.3.0
	react-server-dom-webpack@​19.2.7 ⏵ 19.3.0		+16	+1
	posthog-node@​5.30.2 ⏵ 5.39.2	+1		+2	+1
	@​types/​react@​19.2.14 ⏵ 19.2.17
	wagmi@​3.6.14 ⏵ 3.7.7	+1		+1	-2
	@​iconify-json/​lucide@​1.2.103 ⏵ 1.2.115	+1		+1	+1
	@​wagmi/​core@​3.4.11 ⏵ 3.6.5	+1		+1	-1
	posthog-js@​1.371.4 ⏵ 1.396.4	+1		-3	+1
	@​types/​node@​25.6.0 ⏵ 26.1.0	+1		+1
	tsx@​4.21.0 ⏵ 4.22.4	+1		+1
	webauthx@​0.1.1 ⏵ 0.1.2	+2
	@​typescript/​native-preview@​7.0.0-dev.20260122.3 ⏵ 7.0.0-dev.20260624.1	+1		+12
	vite-plugin-mkcert@​1.17.12 ⏵ 2.1.0
	@​vercel/​analytics@​1.6.1 ⏵ 2.0.1			+1		+31
	react@​19.2.7 ⏵ 19.3.0	+1		+1
	@​vercel/​speed-insights@​1.3.1 ⏵ 2.0.0			+1
	@​tanstack/​react-query@​5.100.1 ⏵ 5.101.2				+1
	zyzz@​0.0.36
	typescript@​5.9.3 ⏵ 6.0.3	+1		+1
	oxlint@​1.72.0
	sql-formatter@​15.7.3 ⏵ 15.8.2			+1
	react-dom@​19.2.7 ⏵ 19.3.0			+1
	tapimo@​0.18.2
	zod@​4.3.6 ⏵ 4.6.7		+16
	hono@​4.12.15 ⏵ 4.13.7	+1	+49	+1
	waku@​1.0.0-beta.4 ⏵ 1.0.0-rc.3	+14		+1
	accounts@​0.10.7 ⏵ 0.19.1			+1	+2
	viem@​2.53.1 ⏵ 2.54.6			+1
	viem@​2.53.1 ⏵ 2.57.5			+1
See 4 more rows in the dashboard

View full report