Skip to content

chore(deps): bump the npm-dependencies group across 1 directory with 7 updates - #45

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-84af9be8e1
Closed

chore(deps): bump the npm-dependencies group across 1 directory with 7 updates#45
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-84af9be8e1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 26, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the npm-dependencies group with 7 updates in the / directory:

Package From To
@kuestcom/builder-signing-sdk 2.0.2 2.0.3
viem 2.56.3 2.56.9
@types/node 26.5.0 26.6.3
dotenv 17.4.2 18.0.4
@vitest/coverage-v8 4.1.10 5.0.2
vite-plus 0.2.7 0.3.3
vitest 4.1.10 5.0.2

Updates @kuestcom/builder-signing-sdk from 2.0.2 to 2.0.3

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​kuestcom/builder-signing-sdk since your current version.


Updates viem from 2.56.3 to 2.56.9

Release notes

Sourced from viem's releases.

viem@2.56.9

Patch Changes

  • #5123 2068265d2fefb41da2ca672f7b8ef0d221efdbde Thanks @​rabbitmainnet! - Added Rabbit Chain Testnet (chain ID 9280) to viem/chains.

  • #5124 4767ff7be7aed3845b617f8b16806d72469ea657 Thanks @​kyscott18! - Added the getStorageValues action for batch retrieval of contract storage slots.

  • #5108 5a201d9a5996a836023bdb676c8d7c0f43f9c8fa Thanks @​Lukecele! - Added Plasma mainnet addresses for USDC and EURC.

  • #5114 de663c98de19da2ffccdd1681fd616e6ed653b98 Thanks @​jxom! - Resynced Tempo contract ABIs and added the current committee address.

     // Abis.earnMerkleRewardDistributor contract calls
-functionName: 'fundWithAssets',
-args: [funder, assets, minEarnShares],
+functionName: 'fundAndPublishRoot',
+args: [settlementId, expectedRootVersion, funder, assets, minEarnShares, root, totalEntitlement, statementHash],
functionName: 'publishRoot',
-args: [root, totalEntitlement, statementHash],
+args: [expectedRootVersion, root, totalEntitlement, statementHash],
-const verifierAbi = Abis.zone
+const verifierAbi = Abis.core
-const selector = Selectors.zoneVerifier.verify
+const selector = Selectors.zoneVerifier.verify[

'verify(uint32,uint64,uint64,bytes32,uint64,(bytes32,bytes32),(bytes32,bytes32,uint64,uint64),bytes32,bytes,bytes)'
+]

  • #5112 c704647d93ed5eaabe3ca9e22fdd4f7e9132b641 Thanks @​spalladino! - Added optional maxUsedGas to simulateBlocks call results, preserving the per-call maxUsedGas reported by eth_simulateV1.

    maxUsedGas is the node's measurement of the gas used by a call before gas refunds are applied – it is not a guaranteed minimum sufficient gas limit for the call. It is undefined against nodes that do not report it, and is available on both successful and failed call results.

  • #5126 6feacb3a9066b47d3f083a0da0da2d8172577870 Thanks @​jxom! - viem/tempo: Added PropAMM actions.

    • viem@2.56.8

    Patch Changes

    viem@2.56.7

    Patch Changes

    ... (truncated)

    Commits

    Updates @types/node from 26.5.0 to 26.6.3

    Commits

    Updates dotenv from 17.4.2 to 18.0.4

    Changelog

    Sourced from dotenv's changelog.

    18.0.4 (2026-09-25)

    Changed

    • import dotenv/config should default quiet: true (#1063)

    18.0.3 (2026-09-22)

    Changed

    • Patch DOTENV_QUIET setting when inside .env file (#1059)

    18.0.2 (2026-09-21)

    Changed

    • Patch additional edge cases for the fast parser (#1056)

    18.0.1 (2026-09-18)

    Changed

    • Handle file urls in config logging (#1054)

    18.0.0 (2026-09-17)

    Added

    • NEW: Dotenv now has a CLI. (#1022)
    $ dotenv run -- node index.js
◇ injected env (2) from .env
Hello Dotenv
    • NEW: Dotenv now has a fast parser thanks to @​homanp of superagent.sh. Pass config({ fast: true }), flag --fast, or set DOTENV_FAST=true to opt-in to ~2x faster character-scanner parser. (#1010)
    $ dotenv run --fast -- node index.js
◇ injected env (2) from .env
Hello Dotenv

    faster than Node native parseEnv!

    Changed

    • Injecting message sent to stderr rather than stdout and tips removed (#1037)

    ... (truncated)

    Commits

    Updates @vitest/coverage-v8 from 4.1.10 to 5.0.2

    Release notes

    Sourced from @​vitest/coverage-v8's releases.

    v5.0.2

       🐞 Bug Fixes

        View changes on GitHub

    v5.0.1

       🚀 Features

       🐞 Bug Fixes

    ... (truncated)

    Commits

    Updates vite-plus from 0.2.7 to 0.3.3

    Release notes

    Sourced from vite-plus's releases.

    vite-plus v0.3.3: Homebrew setup and workspace dependency fixes

    This release fixes Homebrew setup, Windows installation, and workspace dependency commands. It also updates Rolldown, Oxlint, and Oxfmt.

    Fixes & Enhancements

    • Homebrew installations complete setup once, retain their bundled CLI, and direct upgrades to brew upgrade vite-plus (#2729), by @​fengmk2.
    • Windows installations decode remote legacy PowerShell scripts correctly (#2701), by @​james-elicx.
    • vp migrate removes the unsupported React Refresh allowCompoundComponents option and warns about possible lint errors (#2702), by @​fengmk2.
    • New monorepo packages use the root lint configuration without a conflicting nested configuration (#2667), by @​semimikoh.
    • Yarn Classic rejects filtered additions and removals instead of changing unintended dependencies (#2705), by @​jong-kyung.
    • Yarn Berry rejects unsupported filtered updates and respects filters during recursive removal (#2709, #2712), by @​jong-kyung.
    • Yarn and Bun warn when a command does not support --workspace-root. Yarn Classic accepts root additions through vp add and vp install <packages> (#2713), by @​jong-kyung.
    • vp dedupe warns about unsupported check options (#2717), by @​jong-kyung.
    • Rust command output respects NO_COLOR (#2716), by @​liangmiQwQ.
    • Windows commands find lowercase shims in directories with case-sensitive file names (#2727), by @​fengmk2.

    Dependency Updates

    • Update rolldown@1.2.8 to rolldown@1.2.9, oxlint@1.82.0 to oxlint@1.83.0, and oxfmt@0.67.0 to oxfmt@0.68.0. The new lint and format versions can flag code that passed before. Run vp fmt after upgrading if CI runs vp check (#2725), by @​voidzero-guard[bot].

    Docs

    Chore

    Bundled Versions

    Tool Version Source
    vite 8.3.0 434e8e9
    rolldown 1.2.9 5b4746e
    tsdown 0.23.0 npm
    vitest 4.1.11 npm
    oxlint 1.83.0 npm
    oxlint-tsgolint 7.0.2001 npm
    oxfmt 0.68.0 npm

    Upgrade

    vp upgrade
</tr></table>

    ... (truncated)

    Commits
    • 45f9b9a release: v0.3.3: Homebrew setup and workspace dependency fixes (#2734)
    • 2722c75 fix(cli): resolve lowercase Windows shims in case-sensitive directories (#2727)
    • a3035cf fix(create): remove nested monorepo lint config (#2667)
    • 6089186 feat(deps): upgrade upstream dependencies (#2725)
    • ae2fe51 fix(cli): honor NO_COLOR in Rust output (#2716)
    • c596871 fix(installer): decode remote legacy PowerShell scripts (#2701)
    • c7c1e62 fix(migrate): omit unsupported React Refresh option (#2702)
    • 9fd0d0a release: v0.3.2: independent package-manager versions and Oxlint plugin APIs ...
    • 5b30ff0 revert(migrate): stop merging Oxc configs in existing projects (#2696)
    • ace6ceb fix(migrate): report skipped ESLint rules (#2689)
    • Additional commits viewable in compare view

    Updates vitest from 4.1.10 to 5.0.2

    Release notes

    Sourced from vitest's releases.

    v5.0.2

       🐞 Bug Fixes

        View changes on GitHub

    v5.0.1

       🚀 Features

       🐞 Bug Fixes

    ... (truncated)

    Commits

    Most Recent Ignore Conditions Applied to This Pull Request
    Dependency Name Ignore Conditions
    @types/node [>= 25.a, < 26]

    @dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 26, 2026
    @dependabot
    dependabot Bot requested a review from a team September 26, 2026 05:14
    @socket-security

    socket-security Bot commented Sep 26, 2026 •
    edited
    Loading

    Copy link
    Copy Markdown

    Review the following changes in direct dependencies. Learn more about Socket for GitHub.

    Diff Package Supply Chain
    Security    		 Vulnerability Quality Maintenance License
    Updated@​kuestcom/​builder-signing-sdk@​2.0.2 ⏵ 2.0.373 +11008488 -2100
    Updated@​vitest/​coverage-v8@​4.1.10 ⏵ 5.0.29910079 +198 -1100
    Updatedvitest@​4.1.10 ⏵ 5.0.298 +1100 +279 +199 +1100
    Updated@​types/​node@​26.5.0 ⏵ 26.6.3100 +110081 +196 +1100
    Updateddotenv@​17.4.2 ⏵ 18.0.49910010095100
    Updatedviem@​2.56.3 ⏵ 2.56.99710010098100
    Updatedvite-plus@​0.2.7 ⏵ 0.3.398 +19100100 +1100 +2100

    View full report

    @dependabot
    chore(deps): bump the npm-dependencies group across 1 directory with …
    61b4f55 
    …7 updates

Bumps the npm-dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@kuestcom/builder-signing-sdk](https://github.com/kuest/builder-signing-sdk) | `2.0.2` | `2.0.3` |
| [viem](https://github.com/wevm/viem) | `2.56.3` | `2.56.9` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.5.0` | `26.6.3` |
| [dotenv](https://github.com/motdotla/dotenv) | `17.4.2` | `18.0.4` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.10` | `5.0.2` |
| [vite-plus](https://github.com/voidzero-dev/vite-plus/tree/HEAD/packages/cli) | `0.2.7` | `0.3.3` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.10` | `5.0.2` |



Updates `@kuestcom/builder-signing-sdk` from 2.0.2 to 2.0.3
- [Commits](https://github.com/kuest/builder-signing-sdk/commits)

Updates `viem` from 2.56.3 to 2.56.9
- [Release notes](https://github.com/wevm/viem/releases)
- [Commits](https://github.com/wevm/viem/compare/viem@2.56.3...viem@2.56.9)

Updates `@types/node` from 26.5.0 to 26.6.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `dotenv` from 17.4.2 to 18.0.4
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v17.4.2...v18.0.4)

Updates `@vitest/coverage-v8` from 4.1.10 to 5.0.2
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.2/packages/coverage-v8)

Updates `vite-plus` from 0.2.7 to 0.3.3
- [Release notes](https://github.com/voidzero-dev/vite-plus/releases)
- [Commits](https://github.com/voidzero-dev/vite-plus/commits/v0.3.3/packages/cli)

Updates `vitest` from 4.1.10 to 5.0.2
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.2/packages/vitest)

---
updated-dependencies:
- dependency-name: "@kuestcom/builder-signing-sdk"
  dependency-version: 2.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.6.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: dotenv
  dependency-version: 18.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: viem
  dependency-version: 2.56.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: vite-plus
  dependency-version: 0.3.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: vitest
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-dependencies-84af9be8e1 branch from cdfc657 to 61b4f55 Compare October 3, 2026 05:14
    @dependabot @github

    dependabot Bot commented on behalf of github Oct 10, 2026

    Copy link
    Copy Markdown
    Contributor Author

    Looks like these dependencies are updatable in another way, so this is no longer needed.

    @dependabot dependabot Bot closed this Oct 10, 2026
    @dependabot
    dependabot Bot deleted the dependabot/npm_and_yarn/npm-dependencies-84af9be8e1 branch October 10, 2026 05:16
    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

    Reviewers

    No reviews

    Assignees

    No one assigned

    Labels

    dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

    Projects

    None yet

    Milestone

    No milestone

    Development

    Successfully merging this pull request may close these issues.

    0 participants