Skip to content

Bump diff and hardhat - #7

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-9628fb14e7
Open

Bump diff and hardhat#7
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-9628fb14e7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jan 30, 2026

Copy link
Copy Markdown

Bumps diff to 5.2.2 and updates ancestor dependency hardhat. These dependencies need to be updated together.

Updates diff from 3.5.0 to 5.2.2

Changelog

Sourced from diff's changelog.

v5.2.2 - January 2026

Only change from 5.2.0 is a backport of the fix to GHSA-73rr-hh4g-fpgx.

v5.2.1 (deprecated)

Accidental release - do not use.

v5.2.0

Commits

  • #411 Big performance improvement. Previously an O(n) array-copying operation inside the innermost loop of jsdiff's base diffing code increased the overall worst-case time complexity of computing a diff from O(n²) to O(n³). This is now fixed, bringing the worst-case time complexity down to what it theoretically should be for a Myers diff implementation.
  • #448 Performance improvement. Diagonals whose furthest-reaching D-path would go off the edge of the edit graph are now skipped, rather than being pointlessly considered as called for by the original Myers diff algorithm. This dramatically speeds up computing diffs where the new text just appends or truncates content at the end of the old text.
  • #351 Importing from the lib folder - e.g. require("diff/lib/diff/word.js") - will work again now. This had been broken for users on the latest version of Node since Node 17.5.0, which changed how Node interprets the exports property in jsdiff's package.json file.
  • #344 diffLines, createTwoFilesPatch, and other patch-creation methods now take an optional stripTrailingCr: true option which causes Windows-style \r\n line endings to be replaced with Unix-style \n line endings before calculating the diff, just like GNU diff's --strip-trailing-cr flag.
  • #451 Added diff.formatPatch.
  • #450 Added diff.reversePatch.
  • #478 Added timeout option.

v5.1.0

  • #365 Allow early termination to limit execution time with degenerate cases

Commits

v5.0.0

  • Breaking: UMD export renamed from JsDiff to Diff.
  • Breaking: Newlines separated into separate tokens for word diff.
  • Breaking: Unified diffs now match "quirks"

Commits

v4.0.4 - January 2026

Only change from 4.0.2 is a backport of the fix to GHSA-73rr-hh4g-fpgx.

v4.0.3 (deprecated)

Accidental release - do not use.

v4.0.2

No meaningful changes from v4.0.1 - just removed some cruft that shouldn't've been published.

v4.0.1 - January 6th, 2019

  • Fix main reference path - b826104

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by explodingcabbage, a new releaser for diff since your current version.


Updates hardhat from 2.6.1 to 2.28.4

Release notes

Sourced from hardhat's releases.

Hardhat v2.28.4

This release is a small bug fix to allow hardhat_reset to switch from local to forking mode.

Changes

  • 32f29d6: Fixed bug in hardhat_reset when switching from local to fork mode (#7834)

💡 The Nomic Foundation is hiring! Check our open positions.


Hardhat v2.28.3

This release increases the block gas limit to 60,000,000.

Patch Changes


💡 The Nomic Foundation is hiring! Check our open positions.


Hardhat v2.28.2

This release adds support for Solidity 0.8.32 and 0.8.33.

Patch Changes


💡 The Nomic Foundation is hiring! Check our open positions.


Hardhat v2.28.1

This release adds support for Solidity 0.8.31.

Changes

  • c5a9e7c: Bumped EDR version to 0.12.0-next.19.

    • faef065: Added support for EIP-7892 (Blob Parameter Only hardforks)

💡 The Nomic Foundation is hiring! Check our open positions.

... (truncated)

Changelog

Sourced from hardhat's changelog.

hardhat

3.1.5

Patch Changes

  • 346f92a: Improve how solidity tests are displayed, making it more consistent with the js reporters.
  • 2bc18b2: Bumped viem version across all packages 7861.
  • 865e346: Updated the incorrect JSDOC against the preprocessProjectFileBeforeBuilding Solidity Hook (#7870)
  • c9bdbd0: Added invokeSolc in SolidityHooks to allow plugins to respond to the input/output from solc (#7646)

3.1.4

Patch Changes

  • d7c13fa: Fixes a bug in how code coverage for Solidity tests is calculated (7767).
  • b6a9d5a: Hardhat tries to use the latest Solidity version supported by Slang in case the a newer, unsupported version is selected (7846).
  • 268acbf: Added HTML coverage report for solidity tests (7787).

3.1.3

Patch Changes

  • 12d7468: Add mocha results to test summary numbers (#7791)
  • 25155b5: Add support for the official builds of solc for ARM64 Linux (#7752)
  • 065df38: Bumped EDR version to 0.12.0-next.22.
  • 5abcee6: Use Osaka as the default EVM target for solc 0.8.31+ and increase the gas limit per EIP-7935. Thanks @​Amxx! (#7813)

3.1.2

Patch Changes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for hardhat since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [diff](https://github.com/kpdecker/jsdiff) to 5.2.2 and updates ancestor dependency [hardhat](https://github.com/NomicFoundation/hardhat/tree/HEAD/v-next/hardhat). These dependencies need to be updated together.


Updates `diff` from 3.5.0 to 5.2.2
- [Changelog](https://github.com/kpdecker/jsdiff/blob/master/release-notes.md)
- [Commits](kpdecker/jsdiff@v3.5.0...v5.2.2)

Updates `hardhat` from 2.6.1 to 2.28.4
- [Release notes](https://github.com/NomicFoundation/hardhat/releases)
- [Changelog](https://github.com/NomicFoundation/hardhat/blob/main/v-next/hardhat/CHANGELOG.md)
- [Commits](https://github.com/NomicFoundation/hardhat/commits/hardhat@2.28.4/v-next/hardhat)

---
updated-dependencies:
- dependency-name: diff
  dependency-version: 5.2.2
  dependency-type: indirect
- dependency-name: hardhat
  dependency-version: 2.28.4
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jan 30, 2026
@dependabot dependabot Bot mentioned this pull request Jan 30, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants