Bump @stellar/stellar-sdk to 15.0.1

[piyalbasu]

Summary

• Bumps @stellar/stellar-sdk from 14.4.3 → 15.0.1 (both stellar-sdk and stellar-sdk-next aliases stay in lockstep — no protocol transition currently active).
• Bumps @stellar/js-xdr from ^3.1.2 → ^4.0.0 to match the version @stellar/stellar-base@15 pulls in. Without this, the root XdrReader used in src/helper/soroban-rpc/network.ts diverges from the js-xdr 4 reader that xdr.ScSpecEntry.read() expects, and reader.remainingBytes is not a function fires from parseWasmXdr. Both parseWasmXdr and isTokenSpec tests failed prior to this bump and pass after.

Test plan

• yarn install completes cleanly
• tsc --noEmit passes
• yarn test:ci — 107 passed / 3 skipped / 0 failed
• Deploy to staging and smoke-test the Soroban RPC endpoints that hit parseWasmXdr / token-spec detection

🤖 Generated with Claude Code

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​stellar/​js-xdr@​3.1.2 ⏵ 4.0.0	+1			+2
	stellar-sdk@​14.4.3 ⏵ 15.0.1
	stellar-sdk-next@​14.4.3 ⏵ 15.0.1

View full report

[Copilot]

Pull request overview

Updates the backend’s Stellar/Soroban client dependencies to align with the @stellar/stellar-base@15 dependency chain and prevent js-xdr reader mismatches during contract spec parsing.

Changes:

• Bump @stellar/stellar-sdk (via stellar-sdk and stellar-sdk-next aliases) from 14.4.3 → 15.0.1.
• Bump @stellar/js-xdr from ^3.1.2 → ^4.0.0.
• Refresh lockfile transitive dependencies pulled in by the new SDK version (e.g., axios, commander, follow-redirects).

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File	Description
package.json	Updates direct dependency versions for @stellar/js-xdr and the stellar-sdk / stellar-sdk-next aliases.
yarn.lock	Locks new versions of Stellar SDK and transitive dependency updates required by the bump.

Comments suppressed due to low confidence (1)

package.json:43

• @stellar/stellar-sdk@15.0.1 brings in axios@1.14.0 (see yarn.lock), while this repo still depends on axios@^1.7.9, so the install now contains two axios versions. If you want to keep the dependency tree smaller and more uniform, consider bumping the direct axios dependency to ^1.14.0 (or otherwise aligning versions) so Yarn can dedupe.

    "@stellar/js-xdr": "^4.0.0",
    "@urql/core": "^5.0.8",
    "ajv": "^8.17.0",
    "axios": "^1.7.9",
    "dotenv-expand": "^12.0.1",

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.