Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

- join the generated note with ? when the URI has no query
- make nothing payable when the asset cannot be validated
- require a GCM-tag-sized ciphertext and a plausible legacy blob on import
- deleteAccount no longer requires a name (address is the identifier)

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

- refuse gateway links without a valid payee address or with an unsupported network
- stop polling once paid and keep a seen payment when a later poll fails
- /signAll: ignore stale Falcon signer refreshes after a network switch

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

- validate PBKDF2 iteration cap and salt/iv sizes on wallet import
- gateway: no doubled web+algorand scheme, hide waiting message on invalid link
- /signAll: re-resolve Falcon signers when the network changes
- importWallet: failing logout no longer makes a stored import look failed
- restore original line endings, annotate unknown types

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

- /gateway: accept only algorand payment URIs, validate cancel/success URLs
  (https, loopback http), stop rewriting persisted node settings
- /signAll: block signing on genesis mismatch, warn on Falcon-1024 fee
  shortfall; fix { txx } typo in ScheduledPaymentDetail
- importWallet: validate backup envelope and size, log out open wallet
- deleteAccount: match by address only, never splice(-1)

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

- Conducted a comprehensive audit covering the commit range 0720e12..a5217ae.
- Identified four new defense-in-depth findings:
  - AW-2026-076: Unvalidated URL-supplied hrefs and auto-submitted forms on /gateway page (Medium).
  - AW-2026-077: Missing network genesis verification and fee estimation in SignAll.vue (Medium).
  - AW-2026-078: ImportWallet accepts arbitrary strings into IndexedDB without validation (Low).
  - AW-2026-079: Incorrect account deletion logic in wallet store (Low).
- Re-verified all open and mitigated findings from previous audits.
- No changes to dependencies or significant code alterations since last audit.

Bumps the all group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@algorandfoundation/tealscript](https://github.com/algorandfoundation/TEALScript) | `0.106.3` | `0.107.2` |
| [@tsconfig/node22](https://github.com/tsconfig/bases/tree/HEAD/bases) | `22.0.5` | `22.0.6` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.64.0` | `8.71.2` |
| [prettier](https://github.com/prettier/prettier) | `3.9.5` | `3.9.10` |
| [rolldown](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.2.11` | `1.2.14` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.1` | `4.23.15` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.64.0` | `8.71.2` |
| [uuid](https://github.com/uuidjs/uuid) | `14.0.1` | `14.0.3` |



Updates `@algorandfoundation/tealscript` from 0.106.3 to 0.107.2
- [Release notes](https://github.com/algorandfoundation/TEALScript/releases)
- [Commits](https://github.com/algorandfoundation/TEALScript/compare/0.106.3...0.107.2)

Updates `@tsconfig/node22` from 22.0.5 to 22.0.6
- [Commits](https://github.com/tsconfig/bases/commits/HEAD/bases)

Updates `@typescript-eslint/eslint-plugin` from 8.64.0 to 8.71.2
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.2/packages/eslint-plugin)

Updates `prettier` from 3.9.5 to 3.9.10
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/3.9.5...3.9.10)

Updates `rolldown` from 1.2.11 to 1.2.14
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.2.14/packages/rolldown)

Updates `tsx` from 4.23.1 to 4.23.15
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](https://github.com/privatenumber/tsx/compare/v4.23.1...v4.23.15)

Updates `typescript-eslint` from 8.64.0 to 8.71.2
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.2/packages/typescript-eslint)

Updates `uuid` from 14.0.1 to 14.0.3
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](https://github.com/uuidjs/uuid/compare/v14.0.1...v14.0.3)

---
updated-dependencies:
- dependency-name: "@algorandfoundation/tealscript"
  dependency-version: 0.107.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@tsconfig/node22"
  dependency-version: 22.0.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.71.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: prettier
  dependency-version: 3.9.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: rolldown
  dependency-version: 1.2.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: tsx
  dependency-version: 4.23.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: typescript-eslint
  dependency-version: 8.71.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: uuid
  dependency-version: 14.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>

chore(security): upgrade Node.js >=18.0 -> >=22.23.4 for October 2026 security release