chore: Bump ses from 1.13.1 to 1.14.0 (#3557)

Bumps [ses](https://github.com/endojs/endo/tree/HEAD/packages/ses) from
1.13.1 to 1.14.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/endojs/endo/releases">ses's
releases</a>.</em></p>
<blockquote>
<h2>2025-07-11</h2>
<h1><code>@endo/immutable-arraybuffer</code> 1.1.2</h1>
<ul>
<li>Removes <code>@endo/immutable-arraybufer/shim-hermes.js</code> and
absorbs the necessary features into
<code>@endo/immutable-arraybuffer/shim.js</code>. We are not qualifying
this as a breaking change since the feature did not exist long enough to
become relied upon.</li>
</ul>
<h1><code>@endo/marshal</code> 1.8.0</h1>
<ul>
<li>Introduces an environment variable config option
<code>ENDO_RANK_STRINGS</code> to change the rank ordering of strings
from the current (incorrect) ordering by UTF-16 code unit used by
JavaScript's <code>&lt;</code> and <code>.sort()</code> operations to
(correct and OCapN-conformant) ordering by Unicode code point. It
currently defaults to &quot;utf16-code-unit-order&quot;, matching the
previously-unconditional behavior.</li>
</ul>
<h1><code>@endo/pass-style</code> 1.6.3</h1>
<ul>
<li>The exported function name <code>isObject</code> is ambiguous. It is
unclear whether it includes functions or not. (It does.) To avoid this
confusion, we're deprecating <code>isObject</code> and suggesting to use
the new export <code>isPrimitive</code> instead, that has the opposite
answer. IOW, for all <code>x</code>, <code>isObject(x) ===
!isPrimitive(x)</code></li>
</ul>
<h1><code>@endo/patterns</code> 1.7.0</h1>
<ul>
<li><code>@endo/marshal</code> introduces an environment variable config
option <code>ENDO_RANK_STRINGS</code> to change the rank ordering of
strings from the current (incorrect) ordering by UTF-16 code unit used
by JavaScript's <code>&lt;</code> and <code>.sort()</code> operations to
(correct and OCapN-conformant) ordering by Unicode code point. It
currently defaults to &quot;utf16-code-unit-order&quot;, matching the
previously-unconditional behavior.
<ul>
<li><code>@endo/patterns</code> provides a <code>compareKeys</code>
partial order that delegates some ordering, including strings, to the
rank ordering provided by <code>@endo/marshal</code>. So when the
<code>ENDO_RANK_STRINGS</code> default is not overridden, then
<code>compareKeys</code> also follows the (incorrect) UTF-16 code unit
order. But when it is overridden, then <code>compareKeys</code> also
follows the (correct) Unicode code-point order.</li>
</ul>
</li>
<li>In errors explaining why a specimen does not match a pattern,
sometimes the error message contains a quoted form of a nested pattern.
This quoting was done with <code>q</code>, producing an uninformative
rendering of these nested patterns. Now this quoting is done with
<code>qp</code>, which renders these nested patterns into readable <a
href="https://github.com/endojs/Jessie/blob/main/packages/parse/src/quasi-justin.js">Justin</a>
source code.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/endojs/endo/blob/master/packages/ses/CHANGELOG.md">ses's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/endojs/endo/compare/[email protected]@1.14.0">1.14.0</a>
(2025-07-12)</h2>
<h3>Features</h3>
<ul>
<li><strong>cache-map:</strong> Promote makeLRUCacheMap into a new
package (<a
href="https://github.com/endojs/endo/commit/a39db9e03dd9bdcc20e25bb857351ca5bfe314ef">a39db9e</a>)</li>
<li><strong>cache-map:</strong> Return a kit for exposing metrics (<a
href="https://github.com/endojs/endo/commit/f513ebd36c01ce45eb2684d5f9db4db57a4ac526">f513ebd</a>)</li>
<li><strong>ses:</strong> add noAggregateLoadErrors flag (<a
href="https://redirect.github.com/endojs/endo/issues/2832">#2832</a>)
(<a
href="https://github.com/endojs/endo/commit/b222f9f5c68ef373c31a68b091452b7789a6621b">b222f9f</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>immutable-arraybuffer:</strong> unify shim to work on more
platforms (<a
href="https://redirect.github.com/endojs/endo/issues/2855">#2855</a>)
(<a
href="https://github.com/endojs/endo/commit/25039f561d5e0c1bac48260adcf7e1a26d661659">25039f5</a>),
closes <a
href="https://redirect.github.com/endojs/endo/issues/2785">#2785</a> <a
href="https://redirect.github.com/endojs/endo/issues/2399">#2399</a> <a
href="https://redirect.github.com/endojs/endo/issues/2785">#2785</a> <a
href="https://redirect.github.com/endojs/endo/issues/2785">#2785</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/endojs/endo/commit/9815aea9541f241389d2135c6097a7442bdffa17"><code>9815aea</code></a>
chore(release): publish</li>
<li><a
href="https://github.com/endojs/endo/commit/f513ebd36c01ce45eb2684d5f9db4db57a4ac526"><code>f513ebd</code></a>
feat(cache-map): Return a kit for exposing metrics</li>
<li><a
href="https://github.com/endojs/endo/commit/d899bcd6ba20d827d7ed20f48bdf455999075755"><code>d899bcd</code></a>
refactor(cache-map): Relax &quot;LRU&quot; specificity</li>
<li><a
href="https://github.com/endojs/endo/commit/a39db9e03dd9bdcc20e25bb857351ca5bfe314ef"><code>a39db9e</code></a>
feat(cache-map): Promote makeLRUCacheMap into a new package</li>
<li><a
href="https://github.com/endojs/endo/commit/ade5bc1a2d88bc499a53f902d86dd4f4f34145f5"><code>ade5bc1</code></a>
refactor: <code>hasOwn</code> rather than <code>hasOwnPropertyOf</code>
or <code>objectHasOwnProperty</code> (...</li>
<li><a
href="https://github.com/endojs/endo/commit/b222f9f5c68ef373c31a68b091452b7789a6621b"><code>b222f9f</code></a>
feat(ses): add noAggregateLoadErrors flag (<a
href="https://github.com/endojs/endo/tree/HEAD/packages/ses/issues/2832">#2832</a>)</li>
<li><a
href="https://github.com/endojs/endo/commit/75f488730ca903be4a9d9bf4ac11239b9efc6174"><code>75f4887</code></a>
refactor(ses): Adopt ses eslint configuration</li>
<li><a
href="https://github.com/endojs/endo/commit/5efcf7dd03c9caff1592c146a1a506320bddf9db"><code>5efcf7d</code></a>
refactor(pass-style): faster <code>isObject</code> (<a
href="https://github.com/endojs/endo/tree/HEAD/packages/ses/issues/2860">#2860</a>)</li>
<li><a
href="https://github.com/endojs/endo/commit/25039f561d5e0c1bac48260adcf7e1a26d661659"><code>25039f5</code></a>
fix(immutable-arraybuffer): unify shim to work on more platforms (<a
href="https://github.com/endojs/endo/tree/HEAD/packages/ses/issues/2855">#2855</a>)</li>
<li>See full diff in <a
href="https://github.com/endojs/endo/commits/[email protected]/packages/ses">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ses&package-manager=npm_and_yarn&previous-version=1.13.1&new-version=1.14.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: MetaMask Bot <[email protected]>

Author: dependabot[bot]

packages/snaps-execution-environments/package.json

@@ -105,7 +105,7 @@
     "prettier": "^3.3.3",
     "rimraf": "^4.1.2",
     "serve-handler": "^6.1.5",
-    "ses": "^1.13.1",
+    "ses": "^1.14.0",
     "stream-browserify": "^3.0.0",
     "terser": "^5.17.7",
     "ts-loader": "^9.5.2",

packages/snaps-utils/package.json

@@ -100,7 +100,7 @@
     "marked": "^12.0.1",
     "rfdc": "^1.3.0",
     "semver": "^7.5.4",
-    "ses": "^1.13.1",
+    "ses": "^1.14.0",
     "validate-npm-package-name": "^5.0.0"
   },
   "devDependencies": {

yarn.lock

@@ -1675,17 +1675,24 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@endo/env-options@npm:^1.1.10, @endo/env-options@npm:^1.1.8":
-  version: 1.1.10
-  resolution: "@endo/env-options@npm:1.1.10"
-  checksum: 10/a9facb3ac3b05ff7ccb699c6f2d3896b87e75d5c13a1ad82feb5309bd7a78d51f1155bf35eb02f48a6fdc2436ae6b52a87e6a7d6e6ac843f70233afaf280be40
+"@endo/cache-map@npm:^1.1.0":
+  version: 1.1.0
+  resolution: "@endo/cache-map@npm:1.1.0"
+  checksum: 10/1cf2ebae70e9983edd30e830933df52ab9a0140fdecd420325fd20f1633b9afeb377b5cac548c7b7d04beb4cd1a14e672055ad25145119b2b151db78ffaa0b2f
   languageName: node
   linkType: hard
 
-"@endo/immutable-arraybuffer@npm:^1.1.1":
-  version: 1.1.1
-  resolution: "@endo/immutable-arraybuffer@npm:1.1.1"
-  checksum: 10/87a8a51b11a844f7ee7d67ba9370ce20ac38218e6af1eeaf7550c4699897c89f16751ca18c83930b87c7c994a7f6136354ca29afb08780f9286356b21a13e39f
+"@endo/env-options@npm:^1.1.11, @endo/env-options@npm:^1.1.8":
+  version: 1.1.11
+  resolution: "@endo/env-options@npm:1.1.11"
+  checksum: 10/a85326b2f422ebb3f5895ed263d230bf9c4915ed2f798210bebb3941daf94d97495f4767f4113bab8f3781b0534ecbe1d29067d7806478fd6237ab69e97fe5c1
+  languageName: node
+  linkType: hard
+
+"@endo/immutable-arraybuffer@npm:^1.1.2":
+  version: 1.1.2
+  resolution: "@endo/immutable-arraybuffer@npm:1.1.2"
+  checksum: 10/99159e4a04aad1dbe633b54b90f4591ff527c301ff2dc6585b65949e9c98b8942d726a23815470e6e4641c447bc94368cc96282f8fb50fb78f326b670c48cd16
   languageName: node
   linkType: hard
 
@@ -4314,7 +4321,7 @@ __metadata:
     readable-stream: "npm:^3.6.2"
     rimraf: "npm:^4.1.2"
     serve-handler: "npm:^6.1.5"
-    ses: "npm:^1.13.1"
+    ses: "npm:^1.14.0"
     stream-browserify: "npm:^3.0.0"
     terser: "npm:^5.17.7"
     ts-loader: "npm:^9.5.2"
@@ -4585,7 +4592,7 @@ __metadata:
     rfdc: "npm:^1.3.0"
     rimraf: "npm:^4.1.2"
     semver: "npm:^7.5.4"
-    ses: "npm:^1.13.1"
+    ses: "npm:^1.14.0"
     tsx: "npm:^4.20.3"
     typescript: "npm:~5.3.3"
     validate-npm-package-name: "npm:^5.0.0"
@@ -16749,13 +16756,14 @@ __metadata:
   languageName: node
   linkType: hard
 
-"ses@npm:^1.13.1":
-  version: 1.13.1
-  resolution: "ses@npm:1.13.1"
+"ses@npm:^1.14.0":
+  version: 1.14.0
+  resolution: "ses@npm:1.14.0"
   dependencies:
-    "@endo/env-options": "npm:^1.1.10"
-    "@endo/immutable-arraybuffer": "npm:^1.1.1"
-  checksum: 10/7077a5349bebccddb7cdd07f6cca1d8c8af6b36106d34efdf362030c2a4a820f2c4acf3e7ffcc003403312d0833bbc3d4b21c490cd2f198b697cbe375761c159
+    "@endo/cache-map": "npm:^1.1.0"
+    "@endo/env-options": "npm:^1.1.11"
+    "@endo/immutable-arraybuffer": "npm:^1.1.2"
+  checksum: 10/bee10b958938fb3d153ea8f1b4514f8ddb390dc7533fe9cfc382dcc046bebd5fca02d80836bfb8f98e94609ffbe3580a0bb65428eb7e39d523315eacdc052300
   languageName: node
   linkType: hard