[Snyk] Security upgrade @thirdweb-dev/react from 3.0.2 to 3.6.8

[IRSHIT033]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ES5EXT-6095076	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @thirdweb-dev/react

The new version differs by 250 commits.

• f525e2c Version Packages (#455)
• af85389 [CLI] Fix deprecated links (#461)
• ccb4ce8 [Wallets] - magic wallet connector (#457)
• 4cdd0bd [SDK] Fixes for latest wallet package integration (#458)
• ea95c5f [SDK] add two new utilities toEther and toWei (#421)
• 699a2b1 [SOL] Fix claiming drops with custom currencies (#456)
• a8267f9 [SOL] Drop fixes for batch upload (#453)
• c673e39 upgrade dependencies across the codebase (#454)
• 08d04fe [React] add props for button title to change the text (#422)
• cbf5508 Version Packages (#449)
• 3731459 [SDK] Less strict prebuilt checks to support OSRF variants (#451)
• 64f24f1 CLI auto-updates on every run (#441)
• cac6c30 [SDK] Fix setting allowance or approvals gaslessly (#450)
• e7740a5 Detect if forge isn't installed and display error (#447)
• 7a37e56 [SDK, React] - useContract fail fast (#448)
• e173636 Version Packages (#446)
• 8c6cdaa [SDK] Fix creating listings with a magic.link wallet (#443)
• ad9b3fe Version Packages (#445)
• 94f49b1 Move framework check back to template (#444)
• 517e2a7 Version Packages (#442)
• 7269268 initialize pay package (#433)
• efc56fa [SDK] - improved batch provider (#440)
• 564b17e Version Packages (#419)
• b4507db Bump decode-uri-component from 0.2.0 to 0.2.2 (#439)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

[spheron-protocol]

This commit (1f39b60) is being automatically deployed with Spheron.
To see more details of your deployment, checkout links mentioned below:

🔍 Inspect Deployment Logs: https://app.spheron.network/#/app/org/6325bf959c773c0016ecf5e0/project/6326eba49c773c0016ed3a05/deployments/65e0e1233bdeb70012c21d05
😎 Deployment Preview: Not available

(Deployment Failed)