[dependabot]

Bumps the minor-and-patch group with 4 updates: viem, @types/node, eslint and postcss.

Updates viem from 2.57.11 to 2.57.14

Release notes

Sourced from viem's releases.

viem@2.57.14

Patch Changes

• #5356 51b4392225161440bf29643e2fbced31c35cfa7a Thanks @​jxom! - Added Relay.autoSwap, which buys a fill's missing token on the stablecoin DEX and reports the swap as capabilities.autoSwap.

• #5356 51b4392225161440bf29643e2fbced31c35cfa7a Thanks @​jxom! - Fixed relay previews omitting every balance diff when a moved token is a plain ERC-20, such as a vault share, by reading its standard metadata.

• #5356 51b4392225161440bf29643e2fbced31c35cfa7a Thanks @​jxom! - Changed Relay.simulate balance diffs and Relay.autoSwap swaps to require request opt-in through capabilities.balanceDiffs: true and capabilities.autoSwap; fee estimates stay default.

• #5356 51b4392225161440bf29643e2fbced31c35cfa7a Thanks @​jxom! - Changed Relay.simulate to report same-token incoming and outgoing transfers separately, and approval exposure net of allowance the calls consumed.

• #5356 51b4392225161440bf29643e2fbced31c35cfa7a Thanks @​jxom! - Fixed sponsored Tempo transactions failing with intrinsic gas too low on T14 by reserving gas for the fee payer's signature and fee token.

• #5356 51b4392225161440bf29643e2fbced31c35cfa7a Thanks @​jxom! - Fixed Tempo request formatting dropping capabilities from fill requests without Tempo-specific fields.

viem@2.57.13

Patch Changes

• #5310 7e015cb1d72e6b54e4468d7dd60aa59a51fe8d9b Thanks @​BaronOdon! - Added Molibra chain.

• #5314 c0d52cdcb262744a64e742e4cf891cbbde9ccdc9 Thanks @​jxom! - viem/tempo: Keyed Relay.accounts stored configs by chain ID so account_getConfig no longer serves a config stored for another chain (configs stored under the previous key are no longer read), added a resolveConfig option that resolves and stores configs the store does not hold, and reduced round trips by reading the commitment without a prior block number request and writing each config once.

• #5332 de39e106022f313a16c3b7367d8330753748c516 Thanks @​jxom! - viem/tempo: Added signMessage and signTypedData support to Account.fromConfig configurable accounts, which sign the EIP-191 or EIP-712 digest with the same configurable signature envelope as sign.

• #5325 2220ab8f52cf7fcf5420502d30272175b49065ca Thanks @​Slokh! - viem/tempo: Fixed formatting of Tempo transactions whose nonce exceeds Number.MAX_SAFE_INTEGER (such as TIP-1106 expiring-nonce discriminators), which made getTransaction, getBlock with includeTransactions and waitForTransactionReceipt replacement checks throw IntegerOutOfRangeError. Formatted Tempo transactions now carry nonce as an exact bigint, matching ox.

• #5337 609f2bf5a127774904cbc9d97f0e9be7b45c3a7d Thanks @​jxom! - viem/tempo: Fixed Relay.feePayer not reporting base-fee floor rejections when the Tempo node returns fee cap less than base fee.

• #5336 35e551ed4189d28749f0d12e67177a10e574f4f0 Thanks @​jxom! - viem/tempo: Fixed fillTransaction returning a number nonce on Tempo transactions when a nonce was passed and no fee payer signed the filled transaction.

• #5330 1f9c2f00e6b18b194aa510ee09f4ae684af2e976 Thanks @​jxom! - Fixed watchEvent and watchContractEvent in the eth_getLogs fallback stalling for good when the blocks since the last poll exceeded the RPC Provider's block range, log count, or response size limit, repeating logs when an RPC node reported a lower block number, emitting logs from before a fromBlock past the latest block, ignoring fromBlock: 1n, and missing logs from the first polling interval without fromBlock.

viem@2.57.12

Patch Changes

• #5281 744f749bcd56fa0bc93efd0fcdc05125e0252c21 Thanks @​jxom! - Fixed getAbiItem overload resolution for arrays with a 0 in the element size (e.g. uint160[]) or the wrong fixed length, tuple objects with reordered keys, and ambiguous address[] overloads.

• #5304 918955e81ef333af521e3e3e1b3fe03cb5231bdf Thanks @​jxom! - Fixed serializeAuthorizationList and serializeTransaction to encode an EIP-7702 authorization yParity above 1 as is instead of normalizing it to 1, which changed the transaction hash.

• #5279 10ef1295f73362ea4f3c36b6655fef1cb04b397e Thanks @​jxom! - Fixed signatureToCompactSignature and compactSignatureToSignature for values shorter than 32 bytes and a legacy v with a chain id, and added errors for invalid v and high s.

• #5298 a69e96c8e89cc0398a6b918c392e24e3b615bee0 Thanks @​jxom! - Fixed getTimeToFinalize and waitToFinalize to also wait for the proof's dispute game to resolve and pass its finality delay, instead of only the proof maturity delay.

• #5282 52140fef00389781737477de205f82f71553b3c3 Thanks @​jxom! - Fixed http transport batches and getHttpRpcClient array requests mishandling a server that rejected the whole batch with a single error or returned fewer responses than requests.

• #5286 8e058ca71bf09c85d2a4669af5e98aeb5bc87e71 Thanks @​jxom! - Fixed the http transport to retry JSON-RPC errors from non-2xx responses by their HTTP status and Retry-After header, and exposed status and headers on RpcRequestError.

• #5300 485a9d922ffe00a3d2bc4bbfc6ef0262a85e9f45 Thanks @​jxom! - Fixed toFunctionSelector and toSignatureHash keeping the error keyword in string signatures like error Foo(uint256), which produced the wrong selector.

• #5283 b2b7a3b82fd52ad74f80075d5a25cd99750f754a Thanks @​jxom! - Added an even option to isHex that rejects hex values with an odd number of hex characters.

... (truncated)

Commits

• 7b98958 chore: version package (#5357)
• 51b4392 feat(tempo): add Relay.autoSwap, opt-in balance diffs, and match diffs to sta...
• a6d4d0e chore: pilot weekly grouped action snapshot updates (#5354)
• 1d750c2 chore: use vendored github actions (#5344)
• 0f001be chore(ci): pin remaining action references (#5342)
• 9b5ddae fix(deps): upgrade Hono Node adapter to patched release (#5343)
• a8c47d5 chore(ci): roll out pnpm action-setup 6.1.0 (#5338)
• 6075b96 chore: version package (#5315)
• 609f2bf fix(tempo): detect fee cap less than base fee rejections in `Relay.feePayer...
• 35e551e fix(tempo): keep fillTransaction nonce as bigint when a nonce is requeste...
• Additional commits viewable in compare view

Updates @types/node from 26.6.5 to 26.6.6

Commits

• See full diff in compare view

Updates eslint from 10.13.0 to 10.14.0

Release notes

Sourced from eslint's releases.

v10.14.0

Features

• d23a7f9 feat: fix property descriptor handling in func-name-matching (#21400) (xbinaryx)

Bug Fixes

• 4a12580 fix: require minimatch 10.2.6 to avoid vulnerable brace-expansion (#21460) (lumir)
• 827a8f3 fix: no-restricted-globals crash on global objects as property values (#21449) (xbinaryx)
• 161558a fix: handle LS, PS and empty hashbang comments (#21419) (lumir)
• 6194939 fix: no-invalid-this crash on accessor fields without initializer (#21442) (xbinaryx)
• 9155e14 fix: Update @​humanfs/node dependency version (#21434) (Nicholas C. Zakas)
• cb2b9d4 fix: avoid invalid object-shorthand fixes for super methods (#21323) (dvd233)
• 5ee3915 fix: yoda invalid autofix at statement start (#21424) (Daniel Pinto)

Documentation

• 0f94f47 docs: remove zh-hans from docs language switcher (#21437) (lumir)
• dab466e docs: Update README (GitHub Actions Bot)
• 97431f8 docs: replace --rulesdir with a virtual plugin in custom rules docs (#21452) (Pixel)
• 7697550 docs: Update README (GitHub Actions Bot)
• 0c699d5 docs: Remove Tidelift commercial support (#21416) (Milos Djermanovic)
• 0880666 docs: update loadESLint() documentation for v10 (#21374) (Minseon Kim)
• e06fe87 docs: Revise AI acknowledgment options in PR template (#21414) (Nicholas C. Zakas)

Chores

• 0e2ab70 ci: disable eslint-plugin-unicorn ecosystem test (#21462) (Francesco Trotta)
• 6e3f988 chore: update github/codeql-action action to v4.39.1 (#21450) (renovate[bot])
• a031c40 chore: update ecosystem plugins (#21445) (ESLint Bot)
• 67d2ca2 chore: add troubleshooting page URL to circular fixes warning message (#21429) (Milos Djermanovic)
• 276021d chore: update github/codeql-action action to v4.39.0 (#21432) (renovate[bot])
• 449724e chore: update ecosystem plugins (#21420) (ESLint Bot)
• 8ffeb8c chore: update dependency prettier to v3.9.10 (#21417) (renovate[bot])

Commits

• 12cbff4 10.14.0
• 6b696e7 Build: changelog update for 10.14.0
• 0e2ab70 ci: disable eslint-plugin-unicorn ecosystem test (#21462)
• 4a12580 fix: require minimatch 10.2.6 to avoid vulnerable brace-expansion (#21460)
• 0f94f47 docs: remove zh-hans from docs language switcher (#21437)
• dab466e docs: Update README
• 827a8f3 fix: no-restricted-globals crash on global objects as property values (#21449)
• 97431f8 docs: replace --rulesdir with a virtual plugin in custom rules docs (#21452)
• 6e3f988 chore: update github/codeql-action action to v4.39.1 (#21450)
• 161558a fix: handle LS, PS and empty hashbang comments (#21419)
• Additional commits viewable in compare view

Updates postcss from 8.5.31 to 8.5.32

Release notes

Sourced from postcss's releases.

8.5.32

• Fixed Input#origin() without opts.from (by @​wleeaf).
• Fixed final-word lookup without source offsets (by @​Don-Yin).
• Fixed explicit start in Warning#toString() (by @​Don-Yin).
• Fixed Promise semantics in LazyResult#finally() (by @​Don-Yin).

Changelog

Sourced from postcss's changelog.

8.5.32

• Fixed Input#origin() without opts.from (by @​wleeaf).
• Fixed final-word lookup without source offsets (by @​Don-Yin).
• Fixed explicit start in Warning#toString() (by @​Don-Yin).
• Fixed Promise semantics in LazyResult#finally() (by @​Don-Yin).

Commits

• 2455ac8 Release 8.5.32 version
• e367106 Update dependencies
• f70f586 Fix Input#origin() without from or with relative sourceRoot (#2179)
• eb28619 Fix final-word lookup without source offsets (#2178)
• 095654b Preserve explicit start in Warning#toString() (#2177)
• 9b3d8b8 Preserve Promise semantics in result finally() (#2176)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
ondo-nexus	Ready	Preview	Nov 4, 2026 10:57am UTC