[aelmanaa]

Closes #5236.

Bumps toml in @anchor-lang/core from ^3.0.0 to ^5.0.1. Versions up to 5.0.0 carry the advisories listed in the issue. The lockfile diff is only the toml entry.

toml is used once, in workspace.ts, to read Anchor.toml. To check for behaviour changes, I parsed every Anchor.toml in this repo (62 files) with toml@3.0.0 and toml@5.0.1. All 62 produce identical output, with no parse errors in either. The 5.0 breaking change (integers outside the safe or 64-bit range now throw) doesn't apply to Anchor.toml contents. toml@5 requires Node ≥20, already covered by engines: >=20.18.

yarn build passes, and yarn test passes (16 suites, 116 tests).

[vercel]

@aelmanaa is attempting to deploy a commit to the OtterSec Team on Vercel.

A member of the Team first needs to authorize it.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​toml@​5.0.1

View full report