chore(deps): safe Dependabot updates (skip breaking majors)

[HardlyDifficult]

Cherry-picked safe subset from open Dependabot PR(s). Skipped breaking majors (typescript 7, eslint 10, etc.) and updates that fail lint/build.

Automated by cloud agent dependabot merge run.

---

Note

Low Risk
Patch-level devDependency bump with no runtime or published package impact.

Overview
Bumps the tsx dev dependency from 4.23.5 to 4.23.7 as part of the safe Dependabot subset (patch-only; no breaking majors).

This only affects how repo scripts run TypeScript via tsx (e.g. codegen, localnet tooling, release prep); the published SDK bundle is unchanged.

^{Reviewed by Cursor Bugbot for commit c5708c3. Bugbot is set up for automated code reviews on this repo. Configure here.}

Summary by CodeRabbit

• Chores
  • Updated the development tooling to a newer tsx version.

[claude]

Claude encountered an error —— View job

---

I'll analyze this and get back to you.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​tsx@​4.23.5 ⏵ 4.23.7			+1	+1

View full report

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: 22528c3d-3e48-4d32-b07e-b1ca9d9f3fff

📥 Commits

Reviewing files that changed from the base of the PR and between c105a3a and c5708c3.

📒 Files selected for processing (1)

• package.json

---

📝 Walkthrough

Walkthrough

The pull request updates the tsx development dependency from 4.23.5 to 4.23.7.

Changes

Development dependency update

Layer / File(s)	Summary
Update tsx version package.json	The tsx development dependency changes from 4.23.5 to 4.23.7.

Estimated code review effort: 1 (Trivial) | ~2 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately describes the dependency update and the decision to skip breaking major updates.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch cursor/dependabot-merge-f648-1213

Warning

There were issues while running some tools. Please review the errors and either fix the tool's configuration or disable the tool if it's a critical failure.

🔧 ESLint

If the error stems from missing dependencies, add them to the package.json file. For unrecoverable errors (e.g., due to private dependencies), disable the tool in the CodeRabbit configuration.

ESLint install failed: dependency version conflict. Check your lock file or package.json.

Note

This review was completed with usage-based billing: files reviewed beyond your plan's included limits are billed at $0.25/file. Track spend and usage in your billing settings.

---

_{Comment @coderabbitai help to get the list of available commands.}