Bump valibot and @mysten/sui

[dependabot]

Bumps valibot and @mysten/sui. These dependencies needed to be updated together.
Updates valibot from 0.36.0 to 1.4.2

Release notes

Sourced from valibot's releases.

v1.4.2

Many thanks to @​Faze-up and @​chatman-media for contributing to this release.

• Fix word count actions to cache the Intl.Segmenter for non-primitive locales, preventing it from being recreated on every words, minWords, maxWords and notWords validation (pull request #1521)
• Fix flatten method to handle issue path keys that collide with Object.prototype members like toString instead of throwing a TypeError (pull request #1522)
• Fix intersect schema to merge object keys that collide with Object.prototype members like toString instead of failing to merge them (pull request #1522)

v1.4.1

• Fix intersect schema to infer correct input and output types for non-tuple array options instead of never (pull request #1478)

v1.4.0

Many thanks to @​ksaurav24, @​heiwen, @​compulim, @​ysknsid25, @​alaycock-stripe, @​IlyaSemenov, @​wszgrcy, @​LMGO, @​yslpn, @​EltonLobo07 and @​Eronmmer for contributing to this release.

Read the release notes on our website for a quick overview of the most exciting new features in this release.

• Add isoDateTimeSecond validation action to validate ISO date times with seconds (pull request #1418)
• Add toCamelCase, toKebabCase, toPascalCase and toSnakeCase transformation actions to convert strings between common naming conventions (pull request #1457)
• Change internal ReadonlyOutputKeys and OutputWithReadonly types of object schemas and WithReadonly type of record schemas to improve TypeScript type performance (pull request #1442)
• Change hot paths to reduce object allocations and improve runtime performance (pull request #1437)
• Change build target to ES2020 so distributed output stays compatible with environments that lack support for newer syntax (pull request #1455)
• Change internal _LruCache to use a TypeScript private method instead of a #private class field to avoid runtime helpers in the transpiled output (pull request #1455)
• Change internal _isValidObjectKey to use Object.prototype.hasOwnProperty.call instead of Object.hasOwn so the distributed output stays compatible with runtimes that lack the ES2022 Object.hasOwn builtin (pull request #1421)
• Change flatten method to accept readonly issue arrays (pull request #1269)
• Fix potential RangeError caused by spreading large issue arrays (pull request #1437)
• Fix creditCard validation action to reject Mastercard numbers with invalid lengths (pull request #1462)
• Fix intersect schema to no longer mutate input values, allowing frozen objects and arrays to be merged (pull request #1463)

v1.4.0 (to-json-schema)

Many thanks to @​stefanprobst, @​sruenwg and @​cruzdanilo for contributing to this release.

• Add support for examples action
• Add support for integer when used with minValue and maxValue actions (pull request #1367)
• Change Valibot peer dependency to v1.2.0
• Fix conversion of exactOptional object properties (pull request #1220)
• Fix conversion of variant to use oneOf instead of anyOf (pull request #1193)

v1.3.1

• Change MAC48_REGEX, MAC64_REGEX and MAC_REGEX to drop the i flag for better JSON Schema compatibility (pull request #1430)
• Change hash action to use case-expanded character classes instead of the i flag (pull request #1430)

v1.3.0

Many thanks to @​EskiMojo14, @​yslpn, @​alexilyaev, @​idleberg, @​BerkliumBirb and @​frenzzy for contributing to this release.

Read the release notes on our website for a quick overview of the most exciting new features in this release.

• Add guard transformation action to narrow types using type predicates (pull request #1204)
• Add parseBoolean transformation action to parse boolean values from strings and other types (pull request #1251)
• Add isrc validation action to validate ISRC codes (pull request #1373)
• Add cache method for caching schema output by input (pull request #1170)
• Add domain validation action to validate domain names (pull request #1284)

... (truncated)

Commits

• 0dc26ea Bump library version to 1.4.2
• 1bd01c3 fix: handle keys that collide with Object.prototype in flatten and merge (#1522)
• 752c636 docs: clarify string length semantics (#1505)
• a3beff9 fix: cache word-count segmenter for non-primitive locales (#1521)
• 1f9b183 Update FUNDING.yml in fabvor of Open Collective
• 2c63b2a Update logos of partners in README
• 09616b2 Add CodeRabbit as partner and remove Stainless
• 92bcf55 Add Cloudflare to privacy policy page
• 9bb6617 Add Cloudflare as a deploy target to our website (#1508)
• c05bf95 Bump to-json-schema version to 1.7.1
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for valibot since your current version.

Updates @mysten/sui from 1.19.0 to 1.45.2

Commits

• See full diff in compare view

---

Note

Medium Risk
Large semver jumps on the Sui SDK and valibot affect wallet/signing and validation paths pulled in via dependencies; no app source changes in the diff, but integration tests around Sui flows are the main regression surface.

Overview
Updates package-lock.json only: valibot 0.36.0 → 1.4.2 and @mysten/sui 1.19.0 → 1.45.2, with the related Mysten stack (@mysten/bcs, @mysten/utils) and gql.tada / graphql toolchain bumps that ship with the new Sui SDK.

The Sui upgrade drops jose, @simplewebauthn/typescript-types, @suchipi/femver, and bech32 from that dependency tree and adds @protobuf-ts/* grpcweb transport packages. @mysten/sui now depends on valibot ^1.2.0, which is why both packages were bumped together.

^{Reviewed by Cursor Bugbot for commit 8f83179. Bugbot is set up for automated code reviews on this repo. Configure here.}