Skip to content

chore(deps): bump the npm group with 6 updates - #51

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/main/npm-231088686c
Closed

chore(deps): bump the npm group with 6 updates#51
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/main/npm-231088686c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 26, 2025 •
edited
Loading

Copy link
Copy Markdown

Bumps the npm group with 6 updates:

Package From To
@noble/curves 1.6.0 2.0.1
dotenv 16.6.1 17.2.3
ethereum-cryptography 2.2.1 3.2.0
ethers 6.13.4 6.15.0
@openzeppelin/contracts 5.2.0 5.4.0
@openzeppelin/contracts-upgradeable 5.2.0 5.4.0

Updates @noble/curves from 1.6.0 to 2.0.1

Release notes

Sourced from @​noble/curves's releases.

2.0.1

  • Disable extension-less imports. If you've used /ed25519, switch to /ed25519.js now. See 2.0.0 for more details.
  • package.json: specify exported submodules to ensure typescript autocompletion
  • package.json: bump hashes to 2.0.1 with scrypt & pkg.json changes
  • ed25519: export map_to_curve_elligator2_curve25519 paulmillr/noble-curves#211
  • bls: try-catch pairingBatch in bls12_381.verify() by @​MegaManSec in paulmillr/noble-curves#212
  • fft: expose extra info in rootsOfUnity

New Contributors

GitHub Immutable Releases

This GH release does not include standalone noble-curves.js: use 2.0.0 for now, until we upgrade to newly added Immutable Releases

Full Changelog: paulmillr/noble-curves@2.0.0...2.0.1

2.0.0

High-level

v2 massively simplifies internals, improves security, reduces bundle size and lays path for the future. To simplify upgrading, upgrade first to curves 1.9.x. It would show deprecations in vscode-like text editor.

  • The package is now ESM-only. ESM can finally be loaded from common.js on node v20.19+
    • Node v20.19 is now the minimum required version
    • Package imports now work correctly in bundler-less environments, such as browsers
    • Reduces npm package size (traffic consumed): 354KB => 300KB
    • Reduces unpacked npm size (on-disk space): 2.1MB => 1.2MB
  • Make bundle sizes smaller, compared to v1.x: -4KB for schnorr, -5.3KB for ristretto255, -9.4KB for x448
  • .js extension must be used for all modules
    • Old: @noble/curves/ed25519
    • New: @noble/curves/ed25519.js
    • This simplifies working in browsers natively without transpilers

New features

  • webcrypto: create friendly noble-like wrapper over built-in WebCrypto
  • oprf: implement RFC 9497 OPRFs (oblivious pseudorandom functions)
    • We support p256, p384, p521, ristretto255 and decaf448
  • weierstrass, edwards: add isValidSecretKey, isValidPublicKey
  • misc: add Brainpool curves: brainpoolP256r1, brainpoolP384r1, brainpoolP512r1

Changes

  • Most methods now expect Uint8Array, string hex inputs are prohibited
    • The change simplifies reasoning, improves security and reduces malleability
    • Point.fromHex now expects string-only hex inputs, use Point.fromBytes for Uint8Array
  • Breaking changes of ECDSA (secp256k1, p256, p384...):
    • sign, verify: Switch to prehashed messages. Instead of messageHash, the methods now expect unhashed message. To bring back old behavior, use option {prehash: false}

... (truncated)

Commits
  • 99d9774 Release 2.0.1.
  • e4d7b5a Bump hashes to 2.0.1: scrypt & pkg.json changes
  • d588039 Export map_to_curve_elligator2_curve25519. Closes gh-211.
  • 48a97b7 Merge pull request #212 from MegaManSec/throw
  • 270e5d6 pkg.json: add back export maps for text editor autocompletion
  • 0cdef32 try-catch pairingBatch in bls12_381.verify()
  • fc60edf fft: expose extra info in rootsOfUnity
  • 83bf33b Release 2.0.0 to JSR.
  • 24d3110 Release 2.0.0.
  • 9e35456 Bump jsbt
  • Additional commits viewable in compare view

Updates dotenv from 16.6.1 to 17.2.3

Changelog

Sourced from dotenv's changelog.

17.2.3 (2025-09-29)

Changed

  • Fixed typescript error definition (#912)

17.2.2 (2025-09-02)

Added

  • 🙏 A big thank you to new sponsor Tuple.app - the premier screen sharing app for developers on macOS and Windows. Go check them out. It's wonderful and generous of them to give back to open source by sponsoring dotenv. Give them some love back.

17.2.1 (2025-07-24)

Changed

  • Fix clickable tip links by removing parentheses (#897)

17.2.0 (2025-07-09)

Added

  • Optionally specify DOTENV_CONFIG_QUIET=true in your environment or .env file to quiet the runtime log (#889)
  • Just like dotenv any DOTENV_CONFIG_ environment variables take precedence over any code set options like ({quiet: false})
# .env
DOTENV_CONFIG_QUIET=true
HELLO="World"
// index.js
require('dotenv').config()
console.log(`Hello ${process.env.HELLO}`)
$ node index.js
Hello World
or
$ DOTENV_CONFIG_QUIET=true node index.js

17.1.0 (2025-07-07)

Added

  • Add additional security and configuration tips to the runtime log (#884)
  • Dim the tips text from the main injection information text

... (truncated)

Commits

Updates ethereum-cryptography from 2.2.1 to 3.2.0

Release notes

Sourced from ethereum-cryptography's releases.

3.2.0

  • utils: use built-in Uint8Array toHex / fromHex when available. Gives 13x speed-up on 256b arrays, 20x speed-up on 32kb arrays
  • utils.randomBytes: ensure same return type Uint8Array in old nodejs
  • ciphers: update from v1.2.1 to v1.3.0. diff
  • hashes: update from v1.7.1 to v1.8.0. diff
    • Submodule renames, refactoring
  • curves: update from v1.8.1 to v1.9.0. diff
    • weierstrass: prohibit y=0 when initializing
    • modular: improve sqrt logic
  • bip32: update from v1.6.2 to v1.7.0. diff
  • bip39: update from v1.5.4 to v1.6.0. diff
  • base: update from v1.2.4 to v1.2.5 diff

Reviewed in ethereum/js-ethereum-cryptography#141

New Contributors

Full Changelog: ethereum/js-ethereum-cryptography@3.1.0...3.2.0

3.1.0

  • ciphers: update from v1.0.0 to v1.2.1. diff
    • Improve input validation logic
  • hashes: update from v1.5.0 to v1.7.1. diff
    • Add support for 4GB+ arrays on supported platforms
  • curves: update from v1.6.0 to v1.8.1. diff
    • Add MSM and new scalar multiplication methods, switch multiplyUnsafe to it
    • weierstrass: add support for strict format option in verify
  • bip32: update from v1.5.0 to v1.6.2. diff
  • bip39: update from v1.4.0 to v1.5.4. diff
  • base: update from v1.1.9 to v1.2.4 diff
    • Improve speed 4x

Overall, dependencies received a lot of smaller changes, such as:

  • Switching to isolatedDeclarations typescript option, which massively simplifies documentation auto-gen
  • Switching to verbatimModuleSyntax typescript option, to support future JS type erasure
  • Add tons of documentation everywhere to improve autocompletion, LLM code generation
  • Improving hex parsing

New Contributors

Full Changelog: ethereum/js-ethereum-cryptography@3.0.0...3.1.0

3.0.0

  • aes: change from native async to noble-ciphers sync
  • new bls module: bls12-381 operations
  • new bn module: bn254 operations
  • new math module: modPow and modInv operations

... (truncated)

Commits

Updates ethers from 6.13.4 to 6.15.0

Release notes

Sourced from ethers's releases.

ethers/v6.15.0 (2025-07-01 11:24)

  • Allow non-canonical S values in Signatures moving errors to access-time (#5013; 9944ec9).

ethers/v6.14.4 (2025-06-12 23:16)

  • Fixed serialization of EIP-7702 transactions with leading 0-bytes (#4916; 389dc03).

ethers/v6.14.3 (2025-05-26 18:55)

  • Fixed non-normalized yParity on EIP-7702 JSON-RPC responses (#4985; a8803ca).

ethers/v6.14.2 (2025-05-26 18:31)

  • Fixed call stack overflow in makeError stringify for recursive structures (#4977, #4978; 52a0522).
  • Explicitly throw error on gunzip failure to prevent uncaught exception (#4873, #4874; fe98f98).
  • Skip additional receipt fetch for single confirmation requests (#4972; 243cb02).
  • Update EtherscanProvider to use their v2 API (#4975; 5e09aa1).

ethers/v6.14.1 (2025-05-15 14:17)

  • Fix JSON-RPC authorizationList signature entries encoded as DATA instead of QUANTITY values (#4916; 135db72).

ethers/v6.14.0 (2025-05-06 22:02)

  • Remove BlockscoutProvider temporarily until custom error issues are fixed (805a8b3).
  • EIP-7702 support (#4916; db490e1, e7c1bdf).
  • Added support for to override fetch init options in the Browser (#3895; 844ae68).
  • Added EIP-6963 discovery to BrowserProvider (f5469dd).
  • Accept modern KZG library API while exposing legacy API (#4841; e5036e7).
  • Added BlockscoutProvider (#4790, b59b5a4).
  • Added CommunityResourcable to exports (#4776; bca8d1b).

ethers/v6.13.7 (2025-04-25 21:50)

  • Fix FallbackProvider coalescing call exceptions when backends return slightly different error message (268a0ac).
  • Fixed Infura BSC network URLs (#4951; d01b4cb).

ethers/v6.13.5 (2025-01-04 15:26)

  • Use local dev net for testing Typed API to prevent tests getting throttled (7654ee3).
  • Fixed bad logic for searching prefetched transactions by hash (#4868; ef3c9bc).
  • Add newline delimiter to IPC providers for broader support (#4847; 474a8de).
Changelog

Sourced from ethers's changelog.

ethers/v6.15.0 (2025-07-01 11:24)

  • Allow non-canonical S values in Signatures moving errors to access-time (#5013; 9944ec9).

ethers/v6.14.4 (2025-06-12 23:16)

  • Fixed serialization of EIP-7702 transactions with leading 0-bytes (#4916; 389dc03).

ethers/v6.14.3 (2025-05-26 18:55)

  • Fixed non-normalized yParity on EIP-7702 JSON-RPC responses (#4985; a8803ca).

ethers/v6.14.2 (2025-05-26 18:03)

  • Fixed call stack overflow in makeError stringify for recursive structures (#4977, #4978; 52a0522).
  • Explicitly throw error on gunzip failure to prevent uncaught exception (#4873, #4874; fe98f98).
  • Skip additional receipt fetch for single confirmation requests (#4972; 243cb02).
  • Update EtherscanProvider to use their v2 API (#4975; 5e09aa1).

ethers/v6.14.1 (2025-05-15 14:17)

  • Fix JSON-RPC authorizationList signature entries encoded as DATA instead of QUANTITY values (#4916; 135db72).

ethers/v6.14.0 (2025-05-06 22:02)

  • Remove BlockscoutProvider temporarily until custom error issues are fixed (805a8b3).
  • EIP-7702 support (#4916; db490e1, e7c1bdf).
  • Added support for to override fetch init options in the Browser (#3895; 844ae68).
  • Added EIP-6963 discovery to BrowserProvider (f5469dd).
  • Accept modern KZG library API while exposing legacy API (#4841; e5036e7).
  • Added CommunityResourcable to exports (#4776; bca8d1b).

ethers/v6.13.7 (2025-04-25 21:50)

  • Fix FallbackProvider coalescing call exceptions when backends return slightly different error message (268a0ac).
  • Fixed Infura BSC network URLs (#4951; d01b4cb).

ethers/v6.13.6 (2025-03-21 18:21)

  • Implicitly use EIP-7702 if authorizationList is given and non-empty (#4961; e7c1bdf).
  • Initial EIP-7702 support (#4916; db490e1).
  • Added support for to override fetch init options in the Browser (#3895; 844ae68).

... (truncated)

Commits
  • 9fd9d41 admin: updated dist files
  • 1405d74 docs: added EIP-2 to specs.txt
  • 9944ec9 Allow non-canonical S values in Signatures moving errors to access-time (#5013).
  • 4eada38 admin: updated dist files
  • 389dc03 Fixed serialization of EIP-7702 transactions with leading 0-bytes (#4916).
  • d31f5a7 admin: updated dist files
  • a8803ca Fixed non-normalized yParity on EIP-7702 JSON-RPC responses (#4985).
  • ac6022b admin: updated dist files
  • 52a0522 Fixed call stack overflow in makeError stringify for recursive structures (#4...
  • fe98f98 Explicitly throw error on gunzip failure to prevent uncaught exception (#4873...
  • Additional commits viewable in compare view

Updates @openzeppelin/contracts from 5.2.0 to 5.4.0

Release notes

Sourced from @​openzeppelin/contracts's releases.

v5.4.0

Breaking changes

  • Update minimum pragma to 0.8.24 in SignatureChecker, Governor and Governor's extensions. (#5716).

Pragma changes

  • Reduced pragma requirement of interface files

Changes by category

Account

  • Account: Added a simple ERC-4337 account implementation with minimal logic to process user operations. (#5657)
  • AccountERC7579: Extension of Account that implements support for ERC-7579 modules of type executor, validator, and fallback handler. (#5657)
  • AccountERC7579Hooked: Extension of AccountERC7579 that implements support for ERC-7579 hook modules. (#5657)
  • EIP7702Utils: Add a library for checking if an address has an EIP-7702 delegation in place. (#5587)
  • IERC7821, ERC7821: Interface and logic for minimal batch execution. No support for additional opData is included. (#5657)

Governance

  • GovernorNoncesKeyed: Extension of Governor that adds support for keyed nonces when voting by sig. (#5574)

Tokens

  • ERC20Bridgeable: Implementation of ERC-7802 that makes an ERC-20 compatible with crosschain bridges. (#5739)

Cryptography

Signers
  • AbstractSigner, SignerECDSA, SignerP256, and SignerRSA: Add an abstract contract and various implementations for contracts that deal with signature verification. (#5657)
  • SignerERC7702: Implementation of AbstractSigner for Externally Owned Accounts (EOAs). Useful with ERC-7702. (#5657)
  • SignerERC7913: Abstract signer that verifies signatures using the ERC-7913 workflow. (#5659)
  • MultiSignerERC7913: Implementation of AbstractSigner that supports multiple ERC-7913 signers with a threshold-based signature verification system. (#5659)
  • MultiSignerERC7913Weighted: Extension of MultiSignerERC7913 that supports assigning different weights to each signer, enabling more flexible governance schemes. (#5741)
Verifiers
  • ERC7913P256Verifier and ERC7913RSAVerifier: Ready to use ERC-7913 verifiers that implement key verification for P256 (secp256r1) and RSA keys. (#5659)
Other
  • SignatureChecker: Add support for ERC-7913 signatures alongside existing ECDSA and ERC-1271 signature verification. (#5659)
  • ERC7739: An abstract contract to validate signatures following the rehashing scheme from ERC7739Utils. (#5664)
  • ERC7739Utils: Add a library that implements a defensive rehashing mechanism to prevent replayability of smart contract signatures based on the ERC-7739. (#5664)

Structures

  • EnumerableMap: Add support for BytesToBytesMap type. (#5658)

... (truncated)

Changelog

Sourced from @​openzeppelin/contracts's changelog.

5.4.0 (2025-07-17)

Breaking changes

  • Update minimum pragma to 0.8.24 in SignatureChecker, Governor and Governor's extensions. (#5716).

Pragma changes

  • Reduced pragma requirement of interface files

Changes by category

Account

  • Account: Added a simple ERC-4337 account implementation with minimal logic to process user operations. (#5657)
  • AccountERC7579: Extension of Account that implements support for ERC-7579 modules of type executor, validator, and fallback handler. (#5657)
  • AccountERC7579Hooked: Extension of AccountERC7579 that implements support for ERC-7579 hook modules. (#5657)
  • EIP7702Utils: Add a library for checking if an address has an EIP-7702 delegation in place. (#5587)
  • IERC7821, ERC7821: Interface and logic for minimal batch execution. No support for additional opData is included. (#5657)

Governance

  • GovernorNoncesKeyed: Extension of Governor that adds support for keyed nonces when voting by sig. (#5574)

Tokens

  • ERC20Bridgeable: Implementation of ERC-7802 that makes an ERC-20 compatible with crosschain bridges. (#5735)

Cryptography

Signers
  • AbstractSigner, SignerECDSA, SignerP256, and SignerRSA: Add an abstract contract and various implementations for contracts that deal with signature verification. (#5657)
  • SignerERC7702: Implementation of AbstractSigner for Externally Owned Accounts (EOAs). Useful with ERC-7702. (#5657)
  • SignerERC7913: Abstract signer that verifies signatures using the ERC-7913 workflow. (#5659)
  • MultiSignerERC7913: Implementation of AbstractSigner that supports multiple ERC-7913 signers with a threshold-based signature verification system. (#5659)
  • MultiSignerERC7913Weighted: Extension of MultiSignerERC7913 that supports assigning different weights to each signer, enabling more flexible governance schemes. (#5718)
Verifiers
  • ERC7913P256Verifier and ERC7913RSAVerifier: Ready to use ERC-7913 verifiers that implement key verification for P256 (secp256r1) and RSA keys. (#5659)
Other
  • SignatureChecker: Add support for ERC-7913 signatures alongside existing ECDSA and ERC-1271 signature verification. (#5659)
  • ERC7739: An abstract contract to validate signatures following the rehashing scheme from ERC7739Utils. (#5664)
  • ERC7739Utils: Add a library that implements a defensive rehashing mechanism to prevent replayability of smart contract signatures based on the ERC-7739. (#5664)

Structures

... (truncated)

Commits
  • c64a1ed Release v5.4.0 (#5801)
  • 6f9f523 Exit release candidate
  • f19bf29 Fix bug in Bytes.lastIndexOf when array is empty and position is not 2²⁵⁶-1 (...
  • fffade5 Add warning about Clones pointing to implementation with no code (#5798)
  • 54a8027 Clarify documentation for IAccessManager.canCall (#5795)
  • f12605a Add Account framework docs and guides (#5660)
  • 83b829e Address 5.4 audit documentation improvements (#5779)
  • 2e152ba Cause _addSigners to revert if it triggers a totalWeight overflow (#5790)
  • a341850 Minimize pragma for MultiSignerERC7913Weighted.sol (#5778)
  • ca1494a Improve naming consystency in EnumerableSet (#5776)
  • Additional commits viewable in compare view

Updates @openzeppelin/contracts-upgradeable from 5.2.0 to 5.4.0

Release notes

Sourced from @​openzeppelin/contracts-upgradeable's releases.

v5.4.0

Breaking changes

  • Update minimum pragma to 0.8.24 in SignatureChecker, Governor and Governor's extensions. (#5716).

Pragma changes

  • Reduced pragma requirement of interface files

Changes by category

Account

  • Account: Added a simple ERC-4337 account implementation with minimal logic to process user operations. (#5657)
  • AccountERC7579: Extension of Account that implements support for ERC-7579 modules of type executor, validator, and fallback handler. (#5657)
  • AccountERC7579Hooked: Extension of AccountERC7579 that implements support for ERC-7579 hook modules. (#5657)
  • EIP7702Utils: Add a library for checking if an address has an EIP-7702 delegation in place. (#5587)
  • IERC7821, ERC7821: Interface and logic for minimal batch execution. No support for additional opData is included. (#5657)

Governance

  • GovernorNoncesKeyed: Extension of Governor that adds support for keyed nonces when voting by sig. (#5574)

Tokens

  • ERC20Bridgeable: Implementation of ERC-7802 that makes an ERC-20 compatible with crosschain bridges. (#5739)

Cryptography

Signers
  • AbstractSigner, SignerECDSA, SignerP256, and SignerRSA: Add an abstract contract and various implementations for contracts that deal with signature verification. (#5657)
  • SignerERC7702: Implementation of AbstractSigner for Externally Owned Accounts (EOAs). Useful with ERC-7702. (#5657)
  • SignerERC7913: Abstract signer that verifies signatures using the ERC-7913 workflow. (#5659)
  • MultiSignerERC7913: Implementation of AbstractSigner that supports multiple ERC-7913 signers with a threshold-based signature verification system. (#5659)
  • MultiSignerERC7913Weighted: Extension of MultiSignerERC7913 that supports assigning different weights to each signer, enabling more flexible governance schemes. (#5741)
Verifiers
  • ERC7913P256Verifier and ERC7913RSAVerifier: Ready to use ERC-7913 verifiers that implement key verification for P256 (secp256r1) and RSA keys. (#5659)
Other
  • SignatureChecker: Add support for ERC-7913 signatures alongside existing ECDSA and ERC-1271 signature verification. (#5659)
  • ERC7739: An abstract contract to validate signatures following the rehashing scheme from ERC7739Utils. (#5664)
  • ERC7739Utils: Add a library that implements a defensive rehashing mechanism to prevent replayability of smart contract signatures based on the ERC-7739. (#5664)

Structures

  • EnumerableMap: Add support for BytesToBytesMap type. (#5658)

... (truncated)

Changelog

Sourced from @​openzeppelin/contracts-upgradeable's changelog.

5.4.0 (2025-07-17)

Breaking changes

  • Update minimum pragma to 0.8.24 in SignatureChecker, Governor and Governor's extensions. (#5716).

Pragma changes

  • Reduced pragma requirement of interface files

Changes by category

Account

  • Account: Added a simple ERC-4337 account implementation with minimal logic to process user operations. (#5657)
  • AccountERC7579: Extension of Account that implements support for ERC-7579 modules of type executor, validator, and fallback handler. (#5657)
  • AccountERC7579Hooked: Extension of AccountERC7579 that implements support for ERC-7579 hook modules. (#5657)
  • EIP7702Utils: Add a library for checking if an address has an EIP-7702 delegation in place. (#5587)
  • IERC7821, ERC7821: Interface and logic for minimal batch execution. No support for additional opData is included. (#5657)

Governance

  • GovernorNoncesKeyed: Extension of Governor that adds support for keyed nonces when voting by sig. (#5574)

Tokens

  • ERC20Bridgeable: Implementation of ERC-7802 that makes an ERC-20 compatible with crosschain bridges. (#5735)

Cryptography

Signers
  • AbstractSigner, SignerECDSA, SignerP256, and SignerRSA: Add an abstract contract and various implementations for contracts that deal with signature verification. (#5657)
  • SignerERC7702: Implementation of AbstractSigner for Externally Owned Accounts (EOAs). Useful with ERC-7702. (#5657)
  • SignerERC7913: Abstract signer that verifies signatures using the ERC-7913 workflow. (#5659)
  • MultiSignerERC7913: Implementation of AbstractSigner that supports multiple ERC-7913 signers with a threshold-based signature verification system. (#5659)
  • MultiSignerERC7913Weighted: Extension of MultiSignerERC7913 that supports assigning different weights to each signer, enabling more flexible governance schemes. (#5718)
Verifiers
  • ERC7913P256Verifier and ERC7913RSAVerifier: Ready to use ERC-7913 verifiers that implement key verification for P256 (secp256r1) and RSA keys. (#5659)
Other
  • SignatureChecker: Add support for ERC-7913 signatures alongside existing ECDSA and ERC-1271 signature verification. (#5659)
  • ERC7739: An abstract contract to validate signatures following the rehashing scheme from ERC7739Utils. (#5664)
  • ERC7739Utils: Add a library that implements a defensive rehashing mechanism to prevent replayability of smart contract signatures based on the ERC-7739. (#5664)

Structures

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by arr00, a new releaser for @​openzeppelin/contracts-upgradeable since your current version.


You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot
chore(deps): bump the npm group with 6 updates
ed4b215 
Bumps the npm group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [@noble/curves](https://github.com/paulmillr/noble-curves) | `1.6.0` | `2.0.1` |
| [dotenv](https://github.com/motdotla/dotenv) | `16.6.1` | `17.2.3` |
| [ethereum-cryptography](https://github.com/ethereum/js-ethereum-cryptography) | `2.2.1` | `3.2.0` |
| [ethers](https://github.com/ethers-io/ethers.js) | `6.13.4` | `6.15.0` |
| [@openzeppelin/contracts](https://github.com/OpenZeppelin/openzeppelin-contracts) | `5.2.0` | `5.4.0` |
| [@openzeppelin/contracts-upgradeable](https://github.com/OpenZeppelin/openzeppelin-contracts-upgradeable) | `5.2.0` | `5.4.0` |


Updates `@noble/curves` from 1.6.0 to 2.0.1
- [Release notes](https://github.com/paulmillr/noble-curves/releases)
- [Commits](paulmillr/noble-curves@1.6.0...2.0.1)

Updates `dotenv` from 16.6.1 to 17.2.3
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v16.6.1...v17.2.3)

Updates `ethereum-cryptography` from 2.2.1 to 3.2.0
- [Release notes](https://github.com/ethereum/js-ethereum-cryptography/releases)
- [Commits](ethereum/js-ethereum-cryptography@2.2.1...3.2.0)

Updates `ethers` from 6.13.4 to 6.15.0
- [Release notes](https://github.com/ethers-io/ethers.js/releases)
- [Changelog](https://github.com/ethers-io/ethers.js/blob/main/CHANGELOG.md)
- [Commits](ethers-io/ethers.js@v6.13.4...v6.15.0)

Updates `@openzeppelin/contracts` from 5.2.0 to 5.4.0
- [Release notes](https://github.com/OpenZeppelin/openzeppelin-contracts/releases)
- [Changelog](https://github.com/OpenZeppelin/openzeppelin-contracts/blob/master/CHANGELOG.md)
- [Commits](OpenZeppelin/openzeppelin-contracts@v5.2.0...v5.4.0)

Updates `@openzeppelin/contracts-upgradeable` from 5.2.0 to 5.4.0
- [Release notes](https://github.com/OpenZeppelin/openzeppelin-contracts-upgradeable/releases)
- [Changelog](https://github.com/OpenZeppelin/openzeppelin-contracts-upgradeable/blob/master/CHANGELOG.md)
- [Commits](OpenZeppelin/openzeppelin-contracts-upgradeable@v5.2.0...v5.4.0)

---
updated-dependencies:
- dependency-name: "@noble/curves"
  dependency-version: 2.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: dotenv
  dependency-version: 17.2.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: ethereum-cryptography
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: ethers
  dependency-version: 6.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@openzeppelin/contracts"
  dependency-version: 5.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@openzeppelin/contracts-upgradeable"
  dependency-version: 5.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner November 26, 2025 14:54
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 26, 2025
@1kresh 1kresh closed this Jan 8, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jan 8, 2026

Copy link
Copy Markdown
Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/main/npm-231088686c branch January 8, 2026 12:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@1kresh 1kresh

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@1kresh