Skip to content

Bump @stacks/connect from 8.2.4 to 8.2.6 in /web#19

Open
dependabot[bot] wants to merge 18 commits intomainfrom
dependabot/npm_and_yarn/web/stacks/connect-8.2.6
Open

Bump @stacks/connect from 8.2.4 to 8.2.6 in /web#19
dependabot[bot] wants to merge 18 commits intomainfrom
dependabot/npm_and_yarn/web/stacks/connect-8.2.6

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 17, 2026

Bumps @stacks/connect from 8.2.4 to 8.2.6.

Release notes

Sourced from @​stacks/connect's releases.

v8.2.6

Patch Changes

  • 0ac25a8: Fix WalletConnect modal dismissal leaving the request promise hanging indefinitely. When the user closes the WalletConnect pairing modal without completing the connection, the promise now correctly rejects with an error instead of hanging forever.
Commits
  • d5e46f9 chore: version packages (#499)
  • f95cc79 chore: version packages (#498)
  • 0ac25a8 fix: reject promise when WalletConnect modal is dismissed without pairing (#497)
  • 2d0c881 chore: version packages, fixed (#496)
  • a91f912 chore: version packages (#495)
  • 8f729d1 fix: lazy-load @​reown/appkit to reduce initial bundle size (#494)
  • 8074b1c feat: expose WalletConnect.initializeProvider for independent initialization ...
  • 6239566 fix: issue where passing no params would fail the walletconnect connection (#...
  • f9c3c7d ci: update workflows (#484)
  • See full diff in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

mattglory and others added 18 commits January 8, 2026 03:29
Updated README.md to reflect new version and testnet status.
- Implement Clarigen v4.0.1 for type-safe contract testing
- Add 60 comprehensive tests covering core, admin, and security features
- Configure Vitest with coverage reporting
- Create TESTING.md and TESTING_SUMMARY.md documentation
- Update README with testing section, prerequisites, and installation
- Add custom Clarity matchers for type-safe assertions

All tests passing. Ready for audit phase.
Scaffold Next.js 14 app in web/ with @stacks/connect v8 wallet integration,
@stacks/transactions v7 read-only contract calls against the live testnet
deployment, and a dark-themed dashboard showing protocol stats with 30s
auto-refresh. Polish README with integration guide, Stacks JS code snippets,
and streamlined project documentation.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Add nul and tmpclaude-* patterns to root .gitignore to prevent
temporary files from appearing in git status. Track web/.gitignore
for Vercel build artifacts.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- Fetch fee rate dynamically from flashstack-core instead of hardcoding
- Add total-operations and total-volume tracking data vars
- Add remove-vault admin function for vault management
- Add is-vault-authorized and get-owner read-only functions
- Add apy-boost calculation to calculate-leverage-benefit
- Rename mock functions for clarity (mock-deposit-to-vault, etc.)
- Improve variable naming throughout (user-capital, flash-fees, etc.)
- Add comprehensive inline documentation and TODO markers

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Bug fix: sbtc-token mint/burn now checks contract-caller (not tx-sender)
for flash-minter authorization. This fixes cross-contract flash mint
calls where tx-sender is the user, not the calling contract.

Tests added (86 total, up from 60):
- Successful end-to-end flash mint execution
- Flash mint result data validation
- Stats accumulation after successful mints
- Zero sBTC supply after mint-burn cycle
- Multiple sequential loans with incremental IDs
- Admin transfer revokes old admin privileges
- Boundary value collateral tests (exact boundary, one-below)
- Single loan limit boundary tests
- sbtc-token mint/burn/transfer authorization
- SNP receiver v3 leverage benefit calculator
- SNP receiver v3 stats and owner queries

Also: Register snp-flashstack-receiver-v3 in Clarinet.toml,
fix CRLF line endings in contract files.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
New page at /flash-loan with:
- Loan amount input with real-time fee calculation preview
- Receiver contract dropdown (8 deployed receivers)
- Collateral check warning when exceeding max flash amount
- Transaction submission via @stacks/connect request API
- Success/error status with Explorer link
- Protocol stats display (fee rate, max flash, total mints)

Also:
- Sidebar now uses usePathname for active route highlighting
- Header title updates dynamically per page
- Receiver contracts list added to config

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
CI: Replace stub pipeline with real test execution and frontend build
- Contract tests run via npm test (86 tests)
- Frontend build verification via npm run build

README:
- Update test count: 60 -> 86
- Update contract count: 12 -> 15
- Add flash loan execution UI to frontend features
- Add live deployment link (flashstack.vercel.app)
- Add SNP receiver v3 to receiver examples table
- Expand test coverage description

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Remove `as const` from RECEIVER_CONTRACTS array to prevent
literal type narrowing that caused type mismatch in FlashLoanForm.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Both CI jobs failed because package-lock.json was in .gitignore.
npm ci requires lock files to exist. Now tracking both root and
web/ lock files.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- Track settings/Devnet.toml (standard Clarinet test accounts, required
  for simnet initialization in CI)
- Add .gitattributes to enforce LF line endings for .clar files
  (Clarinet rejects CRLF)
- Fix flashstack-test.ts simnet reference (must be inside test block,
  not at module level)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Prevents Next.js 14→15/16, React 18→19, and esbuild major/minor
upgrade PRs that require migration work. Allows patch and security
updates through automatically.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Bumps [next](https://github.com/vercel/next.js) from 14.2.28 to 14.2.35.
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v14.2.28...v14.2.35)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 14.2.35
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Use wildcard ignore to prevent any major version PRs across all
dependencies. Only patch and minor updates will be proposed.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
…-14.2.35

Bump next from 14.2.28 to 14.2.35 in /web
Bumps [@stacks/connect](https://github.com/stx-labs/connect) from 8.2.4 to 8.2.6.
- [Release notes](https://github.com/stx-labs/connect/releases)
- [Changelog](https://github.com/stx-labs/connect/blob/main/CHANGELOG.md)
- [Commits](stx-labs/connect@v8.2.4...v8.2.6)

---
updated-dependencies:
- dependency-name: "@stacks/connect"
  dependency-version: 8.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant