0.8.7 shipped a stale dist: dist/ is gitignored and there was no
prepublish build step, so npm published whatever build happened to be in
the working directory (a Feb 11 build). The published 0.8.7 tarball is
byte-identical to 0.8.6 apart from the version string, so the cache
transaction sweeper from 393c571 never reached consumers.

Add prepublishOnly so the package is always rebuilt from source before
publishing, and bump to 0.8.8 (npm forbids republishing 0.8.7).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Bumps androidx.navigation:navigation-compose from 2.9.8 to 2.10.0.

---
updated-dependencies:
- dependency-name: androidx.navigation:navigation-compose
  dependency-version: 2.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

fake-indexeddb's Database.transactions array is append-only: finished
transactions are never removed, so long-lived Node processes retain
~5-7KB per cache operation until restart and rescan the growing array on
every operation. This is the root cause of the daily memory sawtooth on
allo staging (diagnosed 2026-09-02; unfixed upstream as of 6.2.5).

Add a 10s sweeper interval, active only when the IndexedDB shim is in
use, that drops finished transactions from the array. Safe because every
upstream reader filters on transaction state. Verified: 500 saves leave
502 retained transactions before, 0 after the sweep, with all rows still
queryable.

Interim mitigation until the cache gets a proper Node backend (bounded
Map/LRU instead of the IndexedDB shim).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

This commit syncs the stable release version back to main branch
to ensure the next beta cycle starts from the correct version base.

Release: 2.4.0
Tag: v2.4.0

## [2.4.0](https://github.com/algorandfoundation/algokit-lora/compare/v2.3.3...v2.4.0) (2026-09-02)

### 🚀 Features

* support arc-89 ([#582](https://github.com/algorandfoundation/algokit-lora/issues/582)) ([4c1f16f](https://github.com/algorandfoundation/algokit-lora/commit/4c1f16fb1f9c8ad002b4a68e6795363218c64c01))

This promotion merges tested changes from main branch to release for production release.

## [2.4.0-beta.3](https://github.com/algorandfoundation/algokit-lora/compare/v2.4.0-beta.2...v2.4.0-beta.3) (2026-09-02)

Bumps androidx.navigation:navigation-compose from 2.9.8 to 2.10.0.

---
updated-dependencies:
- dependency-name: androidx.navigation:navigation-compose
  dependency-version: 2.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore: restore algokit-utils v9 / subscriber v3 line, migrate to Cloudflare and Tailwind v4

* fix: map the axfer abi transaction type to AssetTransfer instead of AssetFreeze

* fix: restore populateAppCallResources so the Populate Resources button works on algokit-utils v9

* fix: bump brace-expansion, js-yaml and shell-quote to resolve npm audit advisories

* chore: npm audit

* chore: fix react-router-dom patch

* chore: fixes from claude code review

1. .nsprc — restored expiry-based suppressions

  Converted all entries back to the object form with
active/expiry/notes, expiring 2027-03-01, and re-added the elliptic
advisory (1112030) that had been dropped. The audit
  still passes with no "unused exception" warning, so carrying elliptic
is free and means the file stays complete if the gate is ever tightened
from moderate to low.

  2. block-result.ts:38 — restored proposer?.toString()

  One line, closing the gap between the string type and the Address
instance algosdk actually decodes.

  3. state-delta-mappers.ts:157,173 — corrected "global" → "local" in
asLocalStateDeltaItem

---------

Co-authored-by: Joe Polny <joepolny@gmail.com>