Skip to content

chore(deps): bump the npm-minor-patch group across 2 directories with 6 updates - #55

Merged
DealAppSeo merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-patch-a04ae14ce4
Oct 15, 2026
Merged

DealAppSeo merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-patch-a04ae14ce4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-minor-patch group with 4 updates in the / directory: nx, @types/node, hardhat and viem.
Bumps the npm-minor-patch group with 5 updates in the /packages/contracts directory:

Package From To
dotenv 17.2.3 17.4.2
@types/node 22.18.8 22.20.5
hardhat 3.18.1 3.19.0
typescript 5.8.3 7.0.2
viem 2.57.3 2.57.4

Updates nx from 22.5.1 to 22.7.12

Release notes

Sourced from nx's releases.

22.7.12 (2026-09-10)

🩹 Fixes

❤️ Thank You

22.7.11 (2026-09-09)

🩹 Fixes

  • core: release per-run process listeners and task history results (#36974, #36866)

❤️ Thank You

22.7.10 (2026-09-09)

🩹 Fixes

  • core: validate the migrations path before extracting package migrations (#36887)

❤️ Thank You

22.7.9 (2026-09-01)

🩹 Fixes

  • core: restrict daemon and plugin worker socket access to the owning user (#36370, #36586, #36463)
  • core: compare daemon workspace roots case-insensitively on Windows (#36835, #36722)
  • core: close daemon log descriptors after spawn to avoid Node 26 crash (#36280)

... (truncated)

Commits
  • 7c5b4dc docs(core): correct the NX_MAX_MESSAGE_SIZE row and drop a stale clause
  • 3163430 chore(core): format daemon client with prettier
  • ab613f7 chore(core): satisfy cargo fmt on the backported hash planner
  • 1cffd59 fix(core): avoid mutating target options when resolving configurations (#36934)
  • 8d81ae2 fix(core): reduce task hashing memory usage on large workspaces (#36267)
  • bfd3e51 fix(core): share workspace fileset hash results instead of deep-cloning per t...
  • 02f82fa cleanup(core): persist file-set hash caches on the TaskHasher instance (#36118)
  • 2c34a3b fix(core): remove redundant allWorkspaceFiles from the project graph pipeli...
  • 73a415b fix(core): fall back to v8 for oversized daemon responses and length-prefix t...
  • a25009d fix(core): intern hash instructions in a pool and plan with id lists (#36249)
  • Additional commits viewable in compare view
Install script changes

This version modifies postinstall script that runs during installation. Review the package contents before updating.


Updates @types/node from 22.20.1 to 22.20.5

Commits

Updates hardhat from 3.18.1 to 3.19.0

Release notes

Sourced from hardhat's releases.

Hardhat v3.19.0

This release expands our support for the upcoming Amsterdam hardfork, including: EIP-7976, EIP-7981, EIP-7997, EIP-8024 and EIP-8037. In particular, EIP-8037's separation of execution gas and state gas metering significantly changes the gas costs of state creation, so test early. See our Amsterdam Support guide for more details.

Changes

  • #8680 0e51fa2 Thanks @​anaPerezGhiglia! - Added experimental EIP-7976 support to the Amsterdam hardfork: the calldata floor cost rises to 64 gas per byte. See the guide for more details.

  • #8680 b52d2eb Thanks @​anaPerezGhiglia! - Added experimental EIP-7981 support to the Amsterdam hardfork: access list data costs an extra 64 gas per byte. See the guide for more details.

  • #8680 bb62bf6 Thanks @​anaPerezGhiglia! - Added experimental EIP-7997 support to the Amsterdam hardfork: the deterministic CREATE2 factory is now part of the genesis state. See the guide for more details.

  • #8680 0e51fa2 Thanks @​anaPerezGhiglia! - Added experimental EIP-8024 support to the Amsterdam hardfork: the DUPN, SWAPN and EXCHANGE opcodes reach stack items beyond DUP16 and SWAP16. See the guide for more details.

  • #8680 bb62bf6 Thanks @​anaPerezGhiglia! - Added experimental EIP-8037 support to the Amsterdam hardfork: execution gas and state gas are metered separately, and a block's gasUsed reports the larger. See the guide for more details.

  • #8680 bb62bf6 Thanks @​anaPerezGhiglia! - Upgraded EDR to v0.22.2.

  • #8679 63fb54a Thanks @​Wodann! - Excluded the templates' node_modules folders from the published package, which broke installation with Yarn classic.

  • #8667 5793554 Thanks @​schaable! - Improved the errors for invalid transactions sent from local accounts.

  • #8666 0295fef Thanks @​schaable! - Fixed locally managed accounts silently dropping the blobs of EIP-4844 transactions; sending one now throws an error.

  • #8680 17133ce Thanks @​kanej! - Removed the remaining built-in Holesky (chain ID 17000) hardfork history, as the network has been shut down.

  • #8680 17133ce Thanks @​kanej! - Added the Amsterdam hardfork activation on Sepolia, so forking Sepolia uses amsterdam for blocks after it activates.


💡 The Nomic Foundation is hiring! Check our open positions.


Changelog

Sourced from hardhat's changelog.

3.19.0

Minor Changes

  • #8680 0e51fa2 Thanks @​anaPerezGhiglia! - Added experimental EIP-7976 support to the Amsterdam hardfork: the calldata floor cost rises to 64 gas per byte.

  • #8680 b52d2eb Thanks @​anaPerezGhiglia! - Added experimental EIP-7981 support to the Amsterdam hardfork: access list data costs an extra 64 gas per byte.

  • #8680 bb62bf6 Thanks @​anaPerezGhiglia! - Added experimental EIP-7997 support to the Amsterdam hardfork: the deterministic CREATE2 factory is now part of the genesis state.

  • #8680 0e51fa2 Thanks @​anaPerezGhiglia! - Added experimental EIP-8024 support to the Amsterdam hardfork: the DUPN, SWAPN and EXCHANGE opcodes reach stack items beyond DUP16 and SWAP16.

  • #8680 bb62bf6 Thanks @​anaPerezGhiglia! - Added experimental EIP-8037 support to the Amsterdam hardfork: execution gas and state gas are metered separately, and a block's gasUsed reports the larger.

Patch Changes

  • #8680 bb62bf6 Thanks @​anaPerezGhiglia! - Upgraded EDR to v0.22.2.

  • #8679 63fb54a Thanks @​Wodann! - Excluded the templates' node_modules folders from the published package, which broke installation with Yarn classic.

  • #8667 5793554 Thanks @​schaable! - Improved the errors for invalid transactions sent from local accounts.

  • #8666 0295fef Thanks @​schaable! - Fixed locally managed accounts silently dropping the blobs of EIP-4844 transactions; sending one now throws an error.

  • #8680 17133ce Thanks @​kanej! - Removed the remaining built-in Holesky (chain ID 17000) hardfork history, as the network has been shut down.

  • #8680 17133ce Thanks @​kanej! - Added the Amsterdam hardfork activation on Sepolia, so forking Sepolia uses amsterdam for blocks after it activates.

Commits
  • 083233c Version Packages
  • 322d650 Merge remote-tracking branch 'origin/main' into build/edr-0.22.1
  • c96c040 Apply suggestion from @​anaPerezGhiglia
  • d5f0bf8 fix(resolveDefaultTransactionGasLimit): apply EIP-8037 rules
  • 29ddedc test(hardhat): assert the cause of INVALID_TX_PARAMS_TO_SIGN_LOCALLY
  • 5793554 fix(hardhat): throw HardhatErrors for invalid EIP-7702 requests and signer fi...
  • ce8abca Merge pull request #8666 from NomicFoundation/local-accounts-reject-blob-txs
  • e5854f3 fix(hardhat): also reject type 0x3 transactions without blob fields
  • d4f90fc build: upgrade to EDR v0.22.2
  • 4474064 build: upgrade to EDR v0.22.1
  • Additional commits viewable in compare view

Updates viem from 2.57.3 to 2.57.4

Release notes

Sourced from viem's releases.

viem@2.57.4

Patch Changes

Commits

Updates dotenv from 17.2.3 to 17.4.2

Changelog

Sourced from dotenv's changelog.

17.4.2 (2026-04-12)

Changed

  • Improved skill files - tightened up details (#1009)

17.4.1 (2026-04-05)

Changed

  • Change text injecting to injected (#1005)

17.4.0 (2026-04-01)

Added

  • Add skills/ folder with focused agent skills: skills/dotenv/SKILL.md (core usage) and skills/dotenvx/SKILL.md (encryption, multiple environments, variable expansion) for AI coding agent discovery via the skills.sh ecosystem (npx skills add motdotla/dotenv)

Changed

  • Tighten up logs: ◇ injecting env (14) from .env (#1003)

17.3.1 (2026-02-12)

Changed

  • Fix as2 example command in README and update spanish README

17.3.0 (2026-02-12)

Added

  • Add a new README section on dotenv’s approach to the agentic future.

Changed

  • Rewrite README to get humans started more quickly with less noise while simultaneously making more accessible for llms and agents to go deeper into details.

17.2.4 (2026-02-05)

Changed

  • Make DotenvPopulateInput accept NodeJS.ProcessEnv type (#915)
  • Give back to dotenv by checking out my newest project vestauth. It is auth for agents. Thank you for using my software.
Commits

Updates @types/node from 22.18.8 to 22.20.5

Commits

Updates hardhat from 3.18.1 to 3.19.0

Release notes

Sourced from hardhat's releases.

Hardhat v3.19.0

This release expands our support for the upcoming Amsterdam hardfork, including: EIP-7976, EIP-7981, EIP-7997, EIP-8024 and EIP-8037. In particular, EIP-8037's separation of execution gas and state gas metering significantly changes the gas costs of state creation, so test early. See our Amsterdam Support guide for more details.

Changes

  • #8680 0e51fa2 Thanks @​anaPerezGhiglia! - Added experimental EIP-7976 support to the Amsterdam hardfork: the calldata floor cost rises to 64 gas per byte. See the guide for more details.

  • #8680 b52d2eb Thanks @​anaPerezGhiglia! - Added experimental EIP-7981 support to the Amsterdam hardfork: access list data costs an extra 64 gas per byte. See the guide for more details.

  • #8680 bb62bf6 Thanks @​anaPerezGhiglia! - Added experimental EIP-7997 support to the Amsterdam hardfork: the deterministic CREATE2 factory is now part of the genesis state. See the guide for more details.

  • #8680 0e51fa2 Thanks @​anaPerezGhiglia! - Added experimental EIP-8024 support to the Amsterdam hardfork: the DUPN, SWAPN and EXCHANGE opcodes reach stack items beyond DUP16 and SWAP16. See the guide for more details.

  • #8680 bb62bf6 Thanks @​anaPerezGhiglia! - Added experimental EIP-8037 support to the Amsterdam hardfork: execution gas and state gas are metered separately, and a block's gasUsed reports the larger. See the guide for more details.

  • #8680 bb62bf6 Thanks @​anaPerezGhiglia! - Upgraded EDR to v0.22.2.

  • #8679 63fb54a Thanks @​Wodann! - Excluded the templates' node_modules folders from the published package, which broke installation with Yarn classic.

  • #8667 5793554 Thanks @​schaable! - Improved the errors for invalid transactions sent from local accounts.

  • #8666 0295fef Thanks @​schaable! - Fixed locally managed accounts silently dropping the blobs of EIP-4844 transactions; sending one now throws an error.

  • #8680 17133ce Thanks @​kanej! - Removed the remaining built-in Holesky (chain ID 17000) hardfork history, as the network has been shut down.

  • #8680 17133ce Thanks @​kanej! - Added the Amsterdam hardfork activation on Sepolia, so forking Sepolia uses amsterdam for blocks after it activates.


💡 The Nomic Foundation is hiring! Check our open positions.


Changelog

Sourced from hardhat's changelog.

3.19.0

Minor Changes

  • #8680 0e51fa2 Thanks @​anaPerezGhiglia! - Added experimental EIP-7976 support to the Amsterdam hardfork: the calldata floor cost rises to 64 gas per byte.

  • #8680 b52d2eb Thanks @​anaPerezGhiglia! - Added experimental EIP-7981 support to the Amsterdam hardfork: access list data costs an extra 64 gas per byte.

  • #8680 bb62bf6 Thanks @​anaPerezGhiglia! - Added experimental EIP-7997 support to the Amsterdam hardfork: the deterministic CREATE2 factory is now part of the genesis state.

  • #8680 0e51fa2 Thanks @​anaPerezGhiglia! - Added experimental EIP-8024 support to the Amsterdam hardfork: the DUPN, SWAPN and EXCHANGE opcodes reach stack items beyond DUP16 and SWAP16.

  • #8680 bb62bf6 Thanks @​anaPerezGhiglia! - Added experimental EIP-8037 support to the Amsterdam hardfork: execution gas and state gas are metered separately, and a block's gasUsed reports the larger.

Patch Changes

  • #8680 bb62bf6 Thanks @​anaPerezGhiglia! - Upgraded EDR to v0.22.2.

  • #8679 63fb54a Thanks @​Wodann! - Excluded the templates' node_modules folders from the published package, which broke installation with Yarn classic.

  • #8667 5793554 Thanks @​schaable! - Improved the errors for invalid transactions sent from local accounts.

  • #8666 0295fef Thanks @​schaable! - Fixed locally managed accounts silently dropping the blobs of EIP-4844 transactions; sending one now throws an error.

  • #8680 17133ce Thanks @​kanej! - Removed the remaining built-in Holesky (chain ID 17000) hardfork history, as the network has been shut down.

  • #8680 17133ce Thanks @​kanej! - Added the Amsterdam hardfork activation on Sepolia, so forking Sepolia uses amsterdam for blocks after it activates.

Commits
  • 083233c Version Packages
  • 322d650 Merge remote-tracking branch 'origin/main' into build/edr-0.22.1
  • c96c040 Apply suggestion from @​anaPerezGhiglia
  • d5f0bf8 fix(resolveDefaultTransactionGasLimit): apply EIP-8037 rules
  • 29ddedc test(hardhat): assert the cause of INVALID_TX_PARAMS_TO_SIGN_LOCALLY
  • 5793554 fix(hardhat): throw HardhatErrors for invalid EIP-7702 requests and signer fi...
  • ce8abca Merge pull request #8666 from NomicFoundation/local-accounts-reject-blob-txs
  • e5854f3 fix(hardhat): also reject type 0x3 transactions without blob fields
  • d4f90fc build: upgrade to EDR v0.22.2
  • 4474064 build: upgrade to EDR v0.22.1
  • Additional commits viewable in compare view

Updates typescript from 5.8.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0.1 RC

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0 Beta

For release notes, check out the release announcement.

Downloads are available on:

TypeScript 5.9.3

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

... (truncated)

Commits
  • 1e4744d Merge branch 'main' into ts7-release
  • a5a219cmicrosoft/typescript-go#4558
  • ecfe30d Update status localization
  • 5de25b5 Hide executable name in TypeScript status
  • d7ce74a Show bundled TypeScript version for packaged servers
  • 29be66a Correct TS 7 release version to 7.0.2
  • ed2bd1b Merge branch 'main' into ts7-release
  • 8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
  • 9427131 Set up stable / nightly extension split, other prep (microsoft/typescript-go#...
  • d4eaca5microsoft/typescript-go#4549
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.


Updates viem from 2.57.3 to 2.57.4

Release notes

Sourced from viem's releases.

viem@2.57.4

Patch Changes

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… 6 updates

Bumps the npm-minor-patch group with 4 updates in the / directory: [nx](https://github.com/nrwl/nx/tree/HEAD/packages/nx), [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node), [hardhat](https://github.com/NomicFoundation/hardhat/tree/HEAD/packages/hardhat) and [viem](https://github.com/wevm/viem).
Bumps the npm-minor-patch group with 5 updates in the /packages/contracts directory:

| Package | From | To |
| --- | --- | --- |
| [dotenv](https://github.com/motdotla/dotenv) | `17.2.3` | `17.4.2` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.18.8` | `22.20.5` |
| [hardhat](https://github.com/NomicFoundation/hardhat/tree/HEAD/packages/hardhat) | `3.18.1` | `3.19.0` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.8.3` | `7.0.2` |
| [viem](https://github.com/wevm/viem) | `2.57.3` | `2.57.4` |



Updates `nx` from 22.5.1 to 22.7.12
- [Release notes](https://github.com/nrwl/nx/releases)
- [Commits](https://github.com/nrwl/nx/commits/22.7.12/packages/nx)

Updates `@types/node` from 22.20.1 to 22.20.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `hardhat` from 3.18.1 to 3.19.0
- [Release notes](https://github.com/NomicFoundation/hardhat/releases)
- [Changelog](https://github.com/NomicFoundation/hardhat/blob/main/packages/hardhat/CHANGELOG.md)
- [Commits](https://github.com/NomicFoundation/hardhat/commits/hardhat@3.19.0/packages/hardhat)

Updates `viem` from 2.57.3 to 2.57.4
- [Release notes](https://github.com/wevm/viem/releases)
- [Commits](https://github.com/wevm/viem/compare/viem@2.57.3...viem@2.57.4)

Updates `dotenv` from 17.2.3 to 17.4.2
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v17.2.3...v17.4.2)

Updates `@types/node` from 22.18.8 to 22.20.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `hardhat` from 3.18.1 to 3.19.0
- [Release notes](https://github.com/NomicFoundation/hardhat/releases)
- [Changelog](https://github.com/NomicFoundation/hardhat/blob/main/packages/hardhat/CHANGELOG.md)
- [Commits](https://github.com/NomicFoundation/hardhat/commits/hardhat@3.19.0/packages/hardhat)

Updates `typescript` from 5.8.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.8.3...v7.0.2)

Updates `viem` from 2.57.3 to 2.57.4
- [Release notes](https://github.com/wevm/viem/releases)
- [Commits](https://github.com/wevm/viem/compare/viem@2.57.3...viem@2.57.4)

---
updated-dependencies:
- dependency-name: nx
  dependency-version: 22.7.12
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@types/node"
  dependency-version: 22.20.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: hardhat
  dependency-version: 3.19.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: viem
  dependency-version: 2.57.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: dotenv
  dependency-version: 17.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@types/node"
  dependency-version: 22.20.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: hardhat
  dependency-version: 3.19.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-minor-patch
- dependency-name: viem
  dependency-version: 2.57.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 14, 2026
@strix-security

strix-security Bot commented Oct 14, 2026 •

Copy link
Copy Markdown

Strix Security Review

No security issues found.

Review summary

This is a Dependabot-managed dependency bump PR touching only package.json version ranges (nx, @types/node, hardhat, typescript, viem, dotenv) and their two package-lock.json files. No application source code, routes, handlers, or security controls were modified. The changes are version-only dependency updates with no code changes, which fall outside the scope of security review. No security vulnerabilities were identified in the diff.

Updated for e8de2c1.


Reviewed by Strix
Re-run review · Configure security review settings

@DealAppSeo
DealAppSeo merged commit 88e1fc8 into main Oct 15, 2026
9 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/npm-minor-patch-a04ae14ce4 branch October 15, 2026 00:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant