Skip to content
This repository was archived by the owner on Apr 14, 2026. It is now read-only.

deps(npm)(deps): bump the npm-minor-patch group with 4 updates#36

Merged
alainncls merged 1 commit intomainfrom
dependabot/npm_and_yarn/npm-minor-patch-343b1c8f8f
Mar 2, 2026
Merged

deps(npm)(deps): bump the npm-minor-patch group with 4 updates#36
alainncls merged 1 commit intomainfrom
dependabot/npm_and_yarn/npm-minor-patch-343b1c8f8f

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 2, 2026

Bumps the npm-minor-patch group with 4 updates: viem, wagmi, @typescript-eslint/eslint-plugin and @typescript-eslint/parser.

Updates viem from 2.46.1 to 2.46.2

Release notes

Sourced from viem's releases.

viem@2.46.2

Patch Changes

Commits

Updates wagmi from 3.4.3 to 3.5.0

Release notes

Sourced from wagmi's releases.

wagmi@3.5.0

Minor Changes

  • Added useSignTransaction (#4995)

Patch Changes

  • Updated dependencies [8b96e2f]:
    • @​wagmi/core@​3.4.0
    • @​wagmi/connectors@​7.2.1

wagmi@3.4.4

Patch Changes

Changelog

Sourced from wagmi's changelog.

3.5.0

Minor Changes

  • Added useSignTransaction (#4995)

Patch Changes

  • Updated dependencies [8b96e2f]:
    • @​wagmi/core@​3.4.0
    • @​wagmi/connectors@​7.2.1

3.4.4

Patch Changes

Commits

Updates @typescript-eslint/eslint-plugin from 8.55.0 to 8.56.0

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.56.0

8.56.0 (2026-02-16)

🚀 Features

🩹 Fixes

  • use parser options from context.languageOptions (#12043)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.56.0 (2026-02-16)

🚀 Features

🩹 Fixes

  • use parser options from context.languageOptions (#12043)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates @typescript-eslint/parser from 8.55.0 to 8.56.1

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.56.1

8.56.1 (2026-02-23)

What's Changed

You can read about our versioning strategy and releases on our website.

v8.56.0

8.56.0 (2026-02-16)

🚀 Features

🩹 Fixes

  • use parser options from context.languageOptions (#12043)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.56.1 (2026-02-23)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.56.0 (2026-02-16)

🚀 Features

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Note

Medium Risk
Primarily dependency bumps, but updates wagmi/viem (wallet + chain interactions) and introduces new transitive packages with stricter Node engine requirements, which could affect runtime behavior or CI installs.

Overview
Upgrades web3 dependencies: viem 2.46.12.46.2 (including ox 0.12.10.12.4) and wagmi 3.4.33.5.0 (pulling newer @wagmi/core/@wagmi/connectors).

Updates TypeScript lint tooling (@typescript-eslint/eslint-plugin to 8.56.0 and lockfile-resolved @typescript-eslint/parser to 8.56.1), with a corresponding package-lock.json refresh that changes several transitive dependencies (e.g., minimatch/eslint-visitor-keys).

Written by Cursor Bugbot for commit eaa1c58. This will update automatically on new commits. Configure here.

Bumps the npm-minor-patch group with 4 updates: [viem](https://github.com/wevm/viem), [wagmi](https://github.com/wevm/wagmi/tree/HEAD/packages/react), [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) and [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser).


Updates `viem` from 2.46.1 to 2.46.2
- [Release notes](https://github.com/wevm/viem/releases)
- [Commits](https://github.com/wevm/viem/compare/viem@2.46.1...viem@2.46.2)

Updates `wagmi` from 3.4.3 to 3.5.0
- [Release notes](https://github.com/wevm/wagmi/releases)
- [Changelog](https://github.com/wevm/wagmi/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/wevm/wagmi/commits/wagmi@3.5.0/packages/react)

Updates `@typescript-eslint/eslint-plugin` from 8.55.0 to 8.56.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.56.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.55.0 to 8.56.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.56.1/packages/parser)

---
updated-dependencies:
- dependency-name: viem
  dependency-version: 2.46.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: wagmi
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.56.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.56.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from alainncls as a code owner March 2, 2026 04:20
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Mar 2, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Mar 2, 2026

Labels

The following labels could not be found: npm. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@netlify
Copy link
Copy Markdown

netlify bot commented Mar 2, 2026

Deploy Preview for verax-tutorial ready!

Name Link
🔨 Latest commit eaa1c58
🔍 Latest deploy log https://app.netlify.com/projects/verax-tutorial/deploys/69a5101e5e9de7000830e04d
😎 Deploy Preview https://deploy-preview-36--verax-tutorial.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@socket-security
Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatednpm/​@​typescript-eslint/​parser@​8.55.0 ⏵ 8.56.11001007198100
Updatednpm/​wagmi@​3.4.3 ⏵ 3.5.080 +110079 +196 -1100
Updatednpm/​@​typescript-eslint/​eslint-plugin@​8.55.0 ⏵ 8.56.0991008098100
Updatednpm/​viem@​2.46.1 ⏵ 2.46.29910010097100

View full report

Copy link
Copy Markdown

@cursor cursor bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.

Comment thread package.json
"@types/react": "^19.2.14",
"@types/react-dom": "^19.2.3",
"@typescript-eslint/eslint-plugin": "^8.55.0",
"@typescript-eslint/eslint-plugin": "^8.56.0",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Parser version not bumped to match eslint-plugin peer dependency

Medium Severity

@typescript-eslint/eslint-plugin was bumped to ^8.56.0 but @typescript-eslint/parser was left at ^8.55.0 in package.json. The updated eslint-plugin declares a peer dependency of @typescript-eslint/parser: ^8.56.0. While the lockfile resolves the parser to 8.56.1, the package.json specifier allows 8.55.x which wouldn't satisfy the peer dependency. A fresh install without the lockfile could produce a version mismatch and peer dependency warnings or errors.

Additional Locations (1)

Fix in Cursor Fix in Web

@alainncls alainncls merged commit 16df852 into main Mar 2, 2026
15 checks passed
@alainncls alainncls deleted the dependabot/npm_and_yarn/npm-minor-patch-343b1c8f8f branch March 2, 2026 06:30
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant