Skip to content

chore(deps): bump the npm-dependencies group across 1 directory with 9 updates - #46

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-7a422c5c84
Open

chore(deps): bump the npm-dependencies group across 1 directory with 9 updates#46
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-7a422c5c84

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 10, 2026 •
edited by cubic-dev-ai Bot
Loading

Copy link
Copy Markdown
Contributor

Bumps the npm-dependencies group with 9 updates in the / directory:

Package From To
@kuestcom/builder-signing-sdk 2.0.2 2.0.4
viem 2.56.3 2.57.2
@types/node 26.5.0 26.6.4
dotenv 17.4.2 18.0.5
ws 8.21.3 8.22.0
@types/ws 8.18.1 8.18.2
@vitest/coverage-v8 4.1.10 5.0.3
vite-plus 0.2.7 1.0.0
vitest 4.1.10 5.0.3

Updates @kuestcom/builder-signing-sdk from 2.0.2 to 2.0.4

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​kuestcom/builder-signing-sdk since your current version.


Updates viem from 2.56.3 to 2.57.2

Release notes

Sourced from viem's releases.

viem@2.57.2

Patch Changes

viem@2.57.1

Patch Changes

viem@2.57.0

Minor Changes

  • #5138 6599af365a27476c9f9b7b6f2950941709807393 Thanks @​jxom! - Added createClientResolver to lazily resolve and cache typed clients across configured chains using a transport map or callback.

  • #5140 8a5ef5b06400530e7a45b6b52ed01e49c42f34dd Thanks @​jxom! - viem/tempo: Added a Relay RPC handler with a composable plugin mechanism.

    import { createClient, Relay, Store } from "viem/tempo";
const relay = Relay.create({
client: createClient(),
plugins: [
Relay.multisig({ store: Store.memory() }),
Relay.simulate(),
Relay.feePayer(),
Relay.feeToken(),
],
});
export default { fetch: relay.fetch };

Patch Changes

... (truncated)

Commits

Updates @types/node from 26.5.0 to 26.6.4

Commits

Updates dotenv from 17.4.2 to 18.0.5

Changelog

Sourced from dotenv's changelog.

18.0.5 (2026-09-30)

Changed

  • Fix missing typescript module declaration (#1068)
  • Improve performance for large .env files (#1066)

18.0.4 (2026-09-25)

Changed

  • import dotenv/config should default quiet: true (#1063)

18.0.3 (2026-09-22)

Changed

  • Patch DOTENV_QUIET setting when inside .env file (#1059)

18.0.2 (2026-09-21)

Changed

  • Patch additional edge cases for the fast parser (#1056)

18.0.1 (2026-09-18)

Changed

  • Handle file urls in config logging (#1054)

18.0.0 (2026-09-17)

Added

  • NEW: Dotenv now has a CLI. (#1022)
$ dotenv run -- node index.js
◇ injected env (2) from .env
Hello Dotenv
  • NEW: Dotenv now has a fast parser thanks to @​homanp of superagent.sh. Pass config({ fast: true }), flag --fast, or set DOTENV_FAST=true to opt-in to ~2x faster character-scanner parser. (#1010)
$ dotenv run --fast -- node index.js
◇ injected env (2) from .env
Hello Dotenv
</tr></table>

... (truncated)

Commits

Updates ws from 8.21.3 to 8.22.0

Release notes

Sourced from ws's releases.

8.22.0

Features

  • Introduced the protocols option (8b918b01).

Bug fixes

  • Calling websocket.close() with invalid arguments no longer transitions the state to WebSocket.CLOSING (#2337).
Commits
  • 297202c [dist] 8.22.0
  • 8b918b0 [feature] Introduce the protocols option
  • 73e03eb [ci] Update actions/setup-node action to v7
  • d9b8954 [fix] Change the ready state after validating the arguments (#2337)
  • See full diff in compare view

Updates @types/ws from 8.18.1 to 8.18.2

Commits

Updates @vitest/coverage-v8 from 4.1.10 to 5.0.3

Release notes

Sourced from @​vitest/coverage-v8's releases.

v5.0.3

   🐞 Bug Fixes

    View changes on GitHub

v5.0.2

   🐞 Bug Fixes

... (truncated)

Commits

Updates vite-plus from 0.2.7 to 1.0.0

Release notes

Sourced from vite-plus's releases.

vite-plus v1.0.0: Vite+ 1.0 is stable

Vite+ 1.0 is stable (announcement). This release promotes v1.0.0-rc.1 to stable with no code changes.

Notable changes since v0.3.3

v1.0.0 includes everything from the two release candidates below. See each release's notes for the full list of changes.

  • v1.0.0-rc.0: vp test moves to vitest@5.0.1, and the CLI now requires Node.js ^22.18.0 || ^24.11.0 || >=26.0.0. vp staged has new Node.js and Git minimums. Standalone installs and vp upgrade verify release provenance.
  • v1.0.0-rc.1: task cache settings in run.tasks move under cache. vp lint and vp fmt run from a package directory now use the same config as your editor.

Projects on v1.0.0-rc.1 need no changes. Projects on v1.0.0-rc.0 whose tasks set env, untrackedEnv, input, or output should run vp migrate to move those settings under cache. For a Vite+ 0.3 project, follow Upgrade from Vite+ 0.3 to 1.0 and run vp migrate before you update the project's dependencies.

Bundled Versions

Tool Version Source
vite 8.3.1 39ddf7c
rolldown 1.2.11 8df4219
tsdown 0.23.0 npm
vitest 5.0.1 npm
oxlint 1.85.0 npm
oxlint-tsgolint 7.0.2003 npm
oxfmt 0.70.0 npm

Upgrade

vp upgrade

Full Changelog: voidzero-dev/vite-plus@v1.0.0-rc.1...v1.0.0

Published Packages

  • @voidzero-dev/vite-plus-core@1.0.0
  • vite-plus@1.0.0

Installation

macOS/Linux:

curl -fsSL https://vite.plus | bash

Windows:

irm https://vite.plus/ps1 | iex

... (truncated)

Commits
  • fc287d7 release: v1.0.0: Vite+ 1.0 is stable (#2839)
  • a9d81a4 release: v1.0.0-rc.1: task cache settings move under cache (#2818)
  • 9f6e158 fix(cli): use native config discovery for lint and fmt (#2807)
  • 4897b10 fix(cli): expose Vitest 5 options in test help (#2809)
  • 688fe4a feat(migrate): move task cache settings under cache (#2814)
  • 70185af chore: bump vite-task to 7d69d65 (#2813)
  • d29792f feat(deps): upgrade upstream dependencies (#2805)
  • 6abe93a fix(config): type async tool options contextually (#2803)
  • 173e734 release: v1.0.0-rc.0: Vitest 5 migration and npm provenance checks (#2780)
  • 1e16526 fix(create): inline generator dependencies without catalog support (#2720)
  • Additional commits viewable in compare view

Updates vitest from 4.1.10 to 5.0.3

Release notes

Sourced from vitest's releases.

v5.0.3

   🐞 Bug Fixes

    View changes on GitHub

v5.0.2

   🐞 Bug Fixes

... (truncated)

Commits

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
@types/node [>= 25.a, < 26]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by cubic

Updates the npm dependency group with 9 patch, minor, and major releases, including the production @kuestcom/builder-signing-sdk and viem packages used for signing and blockchain interactions. All changes are confined to package.json, the catalog and overrides in pnpm-workspace.yaml, and the lockfile.

Migration and breaking changes

  • vitest, @vitest/coverage-v8, and vite-plus jump to new major versions; coverage now uses @vitest/istanbuljs packages and Vitest 5 migrates to oxc.
  • vite-plus 1.0.0 requires Node ^22.18.0 || ^24.11.0 || >=26.0.0 and moves task cache settings under cache — run vp migrate if tasks set env, untrackedEnv, input, or output.
  • dotenv 18.0.0 adds a CLI and an opt-in fast parser that is roughly 2x faster for large .env files; import dotenv/config now defaults to quiet mode.
  • ws 8.22.0 adds a protocols option and fixes close() argument validation.
  • viem 2.57.x adds new chains, OUSD token support, and a createClientResolver API.

Written for commit 7df3cc1. Summary will update on new commits.

@dependabot
chore(deps): bump the npm-dependencies group across 1 directory with …
7df3cc1 
…9 updates

Bumps the npm-dependencies group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@kuestcom/builder-signing-sdk](https://github.com/kuest/builder-signing-sdk) | `2.0.2` | `2.0.4` |
| [viem](https://github.com/wevm/viem) | `2.56.3` | `2.57.2` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.5.0` | `26.6.4` |
| [dotenv](https://github.com/motdotla/dotenv) | `17.4.2` | `18.0.5` |
| [ws](https://github.com/websockets/ws) | `8.21.3` | `8.22.0` |
| [@types/ws](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/ws) | `8.18.1` | `8.18.2` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.10` | `5.0.3` |
| [vite-plus](https://github.com/voidzero-dev/vite-plus/tree/HEAD/packages/cli) | `0.2.7` | `1.0.0` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.10` | `5.0.3` |



Updates `@kuestcom/builder-signing-sdk` from 2.0.2 to 2.0.4
- [Commits](https://github.com/kuest/builder-signing-sdk/commits)

Updates `viem` from 2.56.3 to 2.57.2
- [Release notes](https://github.com/wevm/viem/releases)
- [Commits](https://github.com/wevm/viem/compare/viem@2.56.3...viem@2.57.2)

Updates `@types/node` from 26.5.0 to 26.6.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `dotenv` from 17.4.2 to 18.0.5
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v17.4.2...v18.0.5)

Updates `ws` from 8.21.3 to 8.22.0
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.21.3...8.22.0)

Updates `@types/ws` from 8.18.1 to 8.18.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/ws)

Updates `@vitest/coverage-v8` from 4.1.10 to 5.0.3
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.3/packages/coverage-v8)

Updates `vite-plus` from 0.2.7 to 1.0.0
- [Release notes](https://github.com/voidzero-dev/vite-plus/releases)
- [Commits](https://github.com/voidzero-dev/vite-plus/commits/v1.0.0/packages/cli)

Updates `vitest` from 4.1.10 to 5.0.3
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.3/packages/vitest)

---
updated-dependencies:
- dependency-name: "@kuestcom/builder-signing-sdk"
  dependency-version: 2.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: viem
  dependency-version: 2.57.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.6.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: dotenv
  dependency-version: 18.0.5
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: ws
  dependency-version: 8.22.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@types/ws"
  dependency-version: 8.18.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 5.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: vite-plus
  dependency-version: 1.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: vitest
  dependency-version: 5.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team October 10, 2026 05:16
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 10, 2026
@socket-security

socket-security Bot commented Oct 10, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updated@​kuestcom/​builder-signing-sdk@​2.0.2 ⏵ 2.0.473 +11008490100
Updated@​types/​ws@​8.18.1 ⏵ 8.18.2100 +110073 +185100
Updated@​vitest/​coverage-v8@​4.1.10 ⏵ 5.0.39910079 +199 +1100
Updatedvitest@​4.1.10 ⏵ 5.0.398100 +279 +198100
Updated@​types/​node@​26.5.0 ⏵ 26.6.4100 +110081 +195 -1100
Updatedws@​8.21.3 ⏵ 8.22.09910010090100
Updateddotenv@​17.4.2 ⏵ 18.0.59910010096100
Updatedviem@​2.56.3 ⏵ 2.57.29710010098100
Updatedvite-plus@​0.2.7 ⏵ 1.0.098 +19100100 +1100 +2100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants