fix(deps)(deps): bump the dependencies group with 12 updates

[dependabot]

Bumps the dependencies group with 12 updates:

Package	From	To
@graphql-tools/schema	10.1.1	10.1.3
@stellar/stellar-sdk	17.2.0	17.2.1
react	19.0.0	19.3.0
@types/react	19.0.14	19.3.0
react-native	0.79.6	0.87.1
react-native-safe-area-context	5.4.0	5.10.1
react-native-screens	4.11.1	4.28.0
react-native-svg	15.11.2	15.15.5
@types/node	26.6.3	26.6.4
pino	10.3.1	10.4.0
@vitest/coverage-v8	5.0.2	5.0.3
vitest	5.0.2	5.0.3

Updates @graphql-tools/schema from 10.1.1 to 10.1.3

Changelog

Sourced from @​graphql-tools/schema's changelog.

10.1.3

Patch Changes

• Updated dependencies [19f5b33]:
  • @​graphql-tools/utils@​12.0.3
  • @​graphql-tools/merge@​9.2.6

10.1.2

Patch Changes

• Updated dependencies [b1fbba2, 20d36a5]:
  • @​graphql-tools/utils@​12.0.2
  • @​graphql-tools/merge@​9.2.5

Commits

• 944121e Upcoming Release Changes (#8483)
• 3a43b4b Upcoming Release Changes (#8460)
• See full diff in compare view

Updates @stellar/stellar-sdk from 17.2.0 to 17.2.1

Release notes

Sourced from @​stellar/stellar-sdk's releases.

v17.2.1

v17.2.1

Fixed

• Asset.compare() orders two assets with the same code by their issuers' key bytes, as stellar-core does, instead of by the G… strkey text. The two orders can differ, so getLiquidityPoolId() and new LiquidityPoolAsset() rejected some valid asset pairs as out of order (#1766).
• scvSortedMap() and nativeToScVal() now sort map keys in the order the Soroban host requires: by ScVal type, then by value. They previously compared the keys' native string forms, so address, bytes, and mixed-type keys could come out in an order the host rejects. A plain object's keys are now sorted after conversion, so { 10: …, 9: … } with u32 keys becomes [9, 10]. Maps that mix key types change order: scvString keys now come before scvSymbol keys, whatever their names (#1766).

Full Changelog: stellar/js-stellar-sdk@v17.2.0...v17.2.1

Changelog

Sourced from @​stellar/stellar-sdk's changelog.

v17.2.1

Fixed

• Asset.compare() orders two assets with the same code by their issuers' key bytes, as stellar-core does, instead of by the G… strkey text. The two orders can differ, so getLiquidityPoolId() and new LiquidityPoolAsset() rejected some valid asset pairs as out of order (#1766).
• scvSortedMap() and nativeToScVal() now sort map keys in the order the Soroban host requires: by ScVal type, then by value. They previously compared the keys' native string forms, so address, bytes, and mixed-type keys could come out in an order the host rejects. A plain object's keys are now sorted after conversion, so { 10: …, 9: … } with u32 keys becomes [9, 10]. Maps that mix key types change order: scvString keys now come before scvSymbol keys, whatever their names (#1766).

Commits

• b489349 chore(release): prepare v17.2.1 (#1767)
• c103c9b fix: order asset issuers and ScVal map keys the way the network does (#1766)
• 53435c3 docs: add release/support policy and security policy (#1729)
• See full diff in compare view

Updates react from 19.0.0 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

• <ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@​sebmarkbage, @​jackpope, @​gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)
• Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@​jackpope, @​sebmarkbage, @​eps1lon, @​Dhakshin2007, @​chirokas, @​teamleaderleo, @​fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

• browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
  • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

• Enable Trusted Types API integration (@​rickhanlonii #35816)
• Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@​acdlite #37290)
• Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@​hoxyq, @​eps1lon: #37104, #37203, #37491)

All Changes

React

• Fast Refresh Fixes
  • Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@​sophiebits #36965)
  • Fix Fast Refresh so edits to a memo() comparison function take effect (@​sophiebits #36964)
  • Fix Fast Refresh crash when an edit changes the kind of a component's type (@​sophiebits #36963)
  • Unify hot reload type resolution for Fast Refresh (@​sophiebits #36962)
  • Fix Fast Refresh to remount correctly when an edit changes the component kind (@​sophiebits #36950)
  • Double invoke effects in StrictMode after Fast Refresh (@​eps1lon #35962)
• Performance Track Fixes
  • Prevent crash when accessing $$typeof in Performance Tracks (@​eps1lon #35679)
  • Handle non-string function names in Performance Tracks (@​eps1lon #35659)
  • Use minus (-) instead of en dash for removed props in Performance Tracks (@​eps1lon #35649)
  • Handle arrays with bigints in deep objects in Performance Tracks (@​eps1lon #35648)
  • Don't enumerate typed array props in Performance Tracks in DEV (@​UditDewan #36913)
  • Bail out of diffing wide objects and arrays in Performance Tracks (@​eps1lon #34742)
  • Clear potentially large performance measures in DEV (@​hoxyq #34803)
  • Fix missing else branch for renders with no props change in Performance Tracks (@​hoxyq #34837)
• Activity Fixes
  • Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@​sophiebits #36947)
  • Hide portal contents when an Activity is hidden (@​acdlite #35091)
  • Prevent metadata hoisting in hidden <Activity> trees (@​ronnakamoto #34983)
  • Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@​acdlite #35074)
  • Don't unhide a node if a direct parent Offscreen is still hidden (@​sebmarkbage #34821)
  • Don't show internal <Offscreen> component in error messages (@​rickhanlonii #35763)
• Warn in DEV when a component appears to have been unblocked by a conditional use() (@​hoxyq, @​eps1lon: #37104, #37203, #37491)
• Render transitions independently instead of entangling them into a single render (@​acdlite #37290)

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

• <ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@​sebmarkbage, @​jackpope, @​gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)
• Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@​jackpope, @​sebmarkbage, @​eps1lon, @​Dhakshin2007, @​chirokas, @​teamleaderleo, @​fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

• browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
  • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

• Enable Trusted Types API integration (@​rickhanlonii #35816)
• Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@​acdlite #37290)
• Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@​hoxyq, @​eps1lon: #37104, #37203, #37491)

All Changes

React

• Fast Refresh Fixes
  • Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@​sophiebits #36965)
  • Fix Fast Refresh so edits to a memo() comparison function take effect (@​sophiebits #36964)
  • Fix Fast Refresh crash when an edit changes the kind of a component's type (@​sophiebits #36963)
  • Unify hot reload type resolution for Fast Refresh (@​sophiebits #36962)
  • Fix Fast Refresh to remount correctly when an edit changes the component kind (@​sophiebits #36950)
  • Double invoke effects in StrictMode after Fast Refresh (@​eps1lon #35962)
• Performance Track Fixes
  • Prevent crash when accessing $$typeof in Performance Tracks (@​eps1lon #35679)
  • Handle non-string function names in Performance Tracks (@​eps1lon #35659)
  • Use minus (-) instead of en dash for removed props in Performance Tracks (@​eps1lon #35649)
  • Handle arrays with bigints in deep objects in Performance Tracks (@​eps1lon #35648)
  • Don't enumerate typed array props in Performance Tracks in DEV (@​UditDewan #36913)
  • Bail out of diffing wide objects and arrays in Performance Tracks (@​eps1lon #34742)
  • Clear potentially large performance measures in DEV (@​hoxyq #34803)
  • Fix missing else branch for renders with no props change in Performance Tracks (@​hoxyq #34837)
• Activity Fixes
  • Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@​sophiebits #36947)
  • Hide portal contents when an Activity is hidden (@​acdlite #35091)
  • Prevent metadata hoisting in hidden <Activity> trees (@​ronnakamoto #34983)
  • Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@​acdlite #35074)
  • Don't unhide a node if a direct parent Offscreen is still hidden (@​sebmarkbage #34821)
  • Don't show internal <Offscreen> component in error messages (@​rickhanlonii #35763)
• Warn in DEV when a component appears to have been unblocked by a conditional use() (@​hoxyq, @​eps1lon: #37104, #37203, #37491)
• Render transitions independently instead of entangling them into a single render (@​acdlite #37290)
• Fix hang when updating a dehydrated boundary inside a hidden tree (@​gaearon #37135)
• Don't reacquire Host Singletons during dev effect validation (@​gnoff #37113)
• Only remove properties from Host Singletons on release (@​gnoff #37112)

... (truncated)

Commits

• 2dc7da7 [test] Bump Jest to 30.4 (#37382)
• 4f93894 docs: remove stale parentType param from validateChildKeys JSDoc (#36928)
• dbc3750 Update required references to GitHub repo (#36752)
• 900ae09 [flow] Bump flow to v0.317.0 (#36701)
• fbb1370 [flow] Bump flow to v0.307.1 (#36199)
• 56922cf [react-native-renderer] Delete Paper (legacy) renderer (#36285)
• 74568e8 [Flight] Transport AggregateErrors.errors (#36156)
• e66ef64 [tests] remove withoutStack from assertConsole helpers (#35498)
• db71391 [Fiber] Instrument the lazy initializer thenable in all cases (#35521)
• 3e1abcc [tests] Require exact error messages in assertConsole helpers (#35497)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.

Updates @types/react from 19.0.14 to 19.3.0

Commits

• See full diff in compare view

Updates react-native from 0.79.6 to 0.87.1

Release notes

Sourced from react-native's releases.

0.87.1

Added

iOS specific

• SwiftPM: Added hard fail and clear error message when an autolinking plugin host is referenced as a dependency (90a539c92d by @​chrfalch)

Changed

• Hermes: Bump hermes-v1 to 250829098.0.17 (861e2d0bde by @​cipolleschi)

Fixed

• Animated: Animated.Value.addListener() types its callback payload as {value: number} rather than any (3eab03df4c by @​huntie)
• Animated: Animated.event() is typed as an event handler rather than any (3eb330a365 by @​huntie)

iOS specific

• Cocoapods: Keep the quotes on header search paths containing spaces in add_rn_third_party_dependencies (71c6bfbfdc by @​Kudo)
• SwiftPM: Reject colliding or invalid spm.modules names instead of silently dropping a module from the build (39cd1dfc4c by @​chrfalch)
• SwiftPM: Resolve Swift manifest naming collisions (962aeec5e5 by @​chrfalch)
• SwiftPM: Fixed not reading spm.name from react-native.config.js when scaffolding the Swift manifest (482acee824 by @​chrfalch)
• SwiftPM: Removed unused field spm.modules.publicHeaderFiles from react-native.config.js's spm section (5168f5f831 by Christian Falch)
• SwiftPM: SwiftPM pipeline now reads react-native.config.js with default exports correctly (ed76640ba6 by @​chrfalch)
• SwiftPM: Created constants for internal SwiftPM packages so that we can create guards to avoid collisions (d36aa4961d by @​chrfalch)
• SwiftPM: Set SWIFT_ACTIVE_COMPILATION_CONDITIONS = DEBUG when injecting SPM (4433cdbe62 by @​radoslawrolka)
• SwiftPM: Recover React-Core-prebuilt configuration swaps that were interrupted before the marker was updated (a772a7ca16 by @​adityasingh2400)
• SwiftPM: Fix Hermes runtime/compiler version mismatch causing "Wrong bytecode version" crashes in SwiftPM Release builds (ead93778a1 by @​nduaarte)

---

Hermes V1 dSYMS:

• Debug
• Release

ReactNativeDependencies dSYMs:

• Debug
• Release

ReactNative Core dSYMs:

• Debug
• Release

---

You can file issues or pick requests against this release here.

---

... (truncated)

Changelog

Sourced from react-native's changelog.

Changelog (pre 0.80)

v0.79.7

Fixed

Android specific

• Layout: Make missing parent view state in updateLayout a soft error (56ad8d9bfd by @​javache)
• Layout: Make missing parent view state in updateLayout a soft error (f2e47d8dab by @​cipolleschi)

Commits

• a59eff6 Release 0.87.1
• 1a6b526 [0.87] Regenerate ReactNativeApi snapshot with CI toolchain
• dda5dd3 [0.87] Regenerate ReactNativeApi snapshot
• 476887c Merge remote-tracking branch 'refs/remotes/origin/pr/58052' into 0.87-stable
• e6e404e Hold an app's spm.modules names to the same rules as a library's (#58060)
• c951129 Resolve SwiftPM manifest naming collisions (#58044)
• 33624ce Honor a library's spm.name when scaffolding its Package.swift (#58033)
• 617a82f Fail with clear error message when a dep depends on an autolinking plugin hos...
• 5e24a69 Drop the inert publicHeadersPath from spm.modules (#58059)
• 40af900 Read both export styles from a library's react-native.config.js (#58034)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-native since your current version.

Updates react-native-safe-area-context from 5.4.0 to 5.10.1

Release notes

Sourced from react-native-safe-area-context's releases.

Release 5.10.1

Fixes

• Declare the SwiftPM package name in package.json (#778).

Maintenance

• Publish npm releases through GitHub Actions with trusted publishing and provenance (#779).
• Correct repository URL casing for npm provenance.

Full changelog: appandflow/react-native-safe-area-context@v5.10.0...v5.10.1

Release 5.10.0

5.10.0 (2026-09-16)

Features

• expose ref to the underlying View (#775) (81e1437)

Release 5.9.1

5.9.1 (2026-08-18)

Bug Fixes

• register src/paper/java as a Java source set on old architecture (#755) (780f599), closes #733 #754

Release 5.9.0

5.9.0 (2026-08-12)

Bug Fixes

• avoid NotFoundError when the measurement element is already detached (#746) (76dfb06)
• make nested SafeAreaProvider report its own frame and insets on web (#737) (2fa707d)
• update insets and frame on window resize on web (#736) (1fe7ec5)

Features

• Adopt AGP v9 (#733) (42c50a6)

Release 5.8.1

5.8.1 (2026-08-03)

Bug Fixes

• Move jest/mock into package build (fix TS under RN 0.87) (#745) (b9e2857)
• skip Fabric SafeAreaView state updates while detached from window (#735) (ae0e83f)

... (truncated)

Commits

• b99ee58 chore: release 5.10.1 (#780)
• 71b53b6 chore: automate npm publishing with trusted provenance (#779)
• afaa1e4 Declare the SwiftPM name in package.json (#778)
• b9542bd chore: release 5.10.0
• 81e1437 feat: expose ref to the underlying View (#775)
• bafc52b Feat/swiftpm manifest (#768)
• 63fab20 chore: release 5.9.1
• 780f599 fix: register src/paper/java as a Java source set on old architecture (#755)
• f65d4d9 chore: release 5.9.0
• 76dfb06 fix: avoid NotFoundError when the measurement element is already detached (#746)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-native-safe-area-context since your current version.

Updates react-native-screens from 4.11.1 to 4.28.0

Release notes

Sourced from react-native-screens's releases.

4.28.0

What's changed?

This is a small release that brings several fixes to the library.

🐞 Bugfixes

• fix(Android, Tabs): handle forceLayout to ensure tab bar is properly laid out after configuration change (#4582)
• fix(Android, Stack v4+): append SwipeRefreshLayout transition filler (#4519)
• fix(Android, Tabs): use ViewIdGenerator to identify MenuItems instead of sequential ids (#4558)
• fix(Android, Stack v4): prevent adding preloaded and dismissed fragments when popping from opaque to translucent screen (#4571)
• fix(Android, Tabs): expose tab item testID as viewIdResourceName (#4497)
• fix(Example): Upgrade kotlin to 2.3.* (#4536)
• fix(Android): use-after-free of RNSScreenRemovalListener registered as mounting override delegate (#4413)

Misc

...

Description has been truncated