Skip to content

chore(deps): update npm non-major - #43

Open
renovate[bot] wants to merge 1 commit into
developfrom
renovate/npm-non-major
Open

chore(deps): update npm non-major#43
renovate[bot] wants to merge 1 commit into
developfrom
renovate/npm-non-major

Conversation

@renovate

@renovate renovate Bot commented Feb 13, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@eslint/eslintrc 3.3.5 → 3.3.6 age confidence
@eslint/js (source) 9.39.4 → 9.39.5 age confidence
@eslint/migrate-config (source) 2.0.6 → 2.1.0 age confidence
@ethereumjs/common (source) 10.1.1 → 10.1.2 age confidence
@ethereumjs/tx (source) 10.1.1 → 10.1.2 age confidence
@ledgerhq/errors (source) 6.34.0 → 6.37.0 age confidence
@ledgerhq/hw-app-eth (source) 7.8.0 → 7.8.13 age confidence
@ledgerhq/hw-transport-node-hid (source) 6.33.1 → 6.33.5 age confidence
@ledgerhq/types-cryptoassets (source) 7.36.0 → 7.39.0 age confidence
@safe-global/api-kit 4.1.0 → 4.2.0 age confidence
@safe-global/protocol-kit 7.1.0 → 7.2.0 age confidence
@types/bun (source) 1.3.12 → 1.3.14 age confidence
@typescript-eslint/eslint-plugin (source) 8.59.0 → 8.67.0 age confidence
@typescript-eslint/parser (source) 8.59.0 → 8.67.0 age confidence
axios (source) 1.15.0 → 1.19.0 age confidence
eslint (source) 9.39.4 → 9.39.5 age confidence
eslint-plugin-prettier 5.5.5 → 5.5.6 age confidence
ethers (source) 6.16.0 → 6.17.0 age confidence
node-hid 3.3.0 → 3.4.0 age confidence
prettier (source) 3.8.3 → 3.9.6 age confidence
semantic-release 25.0.3 → 25.0.9 age confidence
sort-package-json 3.6.1 → 3.7.1 age confidence
undici (source) 8.1.0 → 8.10.0 age confidence

Release Notes

eslint/eslintrc (@​eslint/eslintrc)

v3.3.6

Compare Source

Bug Fixes
  • update js-yaml to 4.3.0 to address security vulnerability (#​235) (0c5de74)
eslint/eslint (@​eslint/js)

v9.39.5

Compare Source

Bug Fixes

Documentation

Chores

  • 458205f chore: update @eslint/eslintrc and @eslint/js for v9.39.5 (#​21077) (Francesco Trotta)
  • 202117b chore: package.json update for @​eslint/js release (Jenkins)
  • d9eb6ed test: disable warning for vm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER (#​21074) (Francesco Trotta)
  • 7b431a7 chore: override re2 dependency for @metascraper/helpers (#​21068) (Milos Djermanovic)
  • daf7791 chore: pin fflate@​0.8.2 (#​20895) (Milos Djermanovic)
  • daee8ba ci: use pnpm in eslint-flat-config-utils type integration test (#​20829) (Milos Djermanovic)
  • 116d4be ci: unpin Node.js 25.x in CI (#​20619) (Copilot)
eslint/rewrite (@​eslint/migrate-config)

v2.1.0

Compare Source

Features
Dependencies

v2.0.7

Compare Source

Bug Fixes
ethereumjs/ethereumjs-monorepo (@​ethereumjs/common)

v10.1.2: @​ethereumjs/tx v10.1.2

Compare Source

Release round overview

Welcome to 10.1.2 — a coordinated release across all active @ethereumjs/* libraries on the 10.1.x line. If you have been following the upcoming Amsterdam hardfork, this is our first experimental preview ready to try out: a largely complete nine-EIP Hardfork.Amsterdam bundle, currently aligned with tests-bal@v7.1.0 and BAL devnet-7.

Amsterdam is still in flux — please do not use this in production yet — and we expect further 10.1.x releases as the spec and official tests evolve. The sections below cover this package only; for the full fork picture (EIP list, examples, release ↔ spec tracking), see the @​ethereumjs/vm Amsterdam overview. On Osaka or earlier hardforks? Nothing changes unless you explicitly select Hardfork.Amsterdam.

@ethereumjs/tx

@ethereumjs/tx defines typed transactions, intrinsic gas calculation, and pre-execution validation — the layer that decides whether a transaction is well-formed and what minimum gas it must carry before the VM ever runs it. Within the 10.1.2 round, Amsterdam adds two floor-pricing EIPs that tighten those minimums and feed directly into EIP-8037 regular-gas accounting downstream.

If you construct or validate transactions for Amsterdam testnets or EST fixtures, these floors are usually why a seemingly small tx suddenly needs a higher gasLimit or a non-zero baseFeePerGas on the containing block.

At a glance
  • EIP-7976 — uniform calldata floor: 4 tokens per calldata byte (replacing the zero/non-zero split for floor purposes).
  • EIP-7981 — access-list byte floor for typed txs (types 1–4): (20 × addresses + 32 × keys) × 4 tokens per byte.
  • Both enforced in getValidationErrors() and intrinsic gas helpers when Hardfork.Amsterdam is active.
Amsterdam (experimental)

Behaviour may change in subsequent 10.1.x patch releases.
Spec snapshot: tests-bal@v7.1.0 · Testnet: BAL devnet-7
Fork overview: Amsterdam hardfork (experimental)

The calldata floor means txRegularGas in the VM becomes (conceptually) max(raw_regular_gas, calldata_floor) under EIP-8037. When writing tests, set baseFeePerGas: 1n on the block header and ensure gasPrice / maxFeePerGas on the tx is high enough to satisfy EIP-1559 checks alongside the new floors:

import { Common, Hardfork, Mainnet } from '@ethereumjs/common'
import { createLegacyTx } from '@ethereumjs/tx'

const common = new Common({ chain: Mainnet, hardfork: Hardfork.Amsterdam })

const tx = createLegacyTx(
  {
    gasLimit: 100_000n,
    gasPrice: 10n,
    data: new Uint8Array(100), // calldata floor scales with byte count
  },
  { common },
)

const errors = tx.getValidationErrors()
// [] when gasLimit covers max(intrinsic, floor)

See the Amsterdam transaction validation section for the full token arithmetic and interaction with EIP-8037.

Changes
  • EIP-7976 calldata floor cost, see PR #​4280
  • EIP-7981 access-list floor cost, see PR #​4282
LedgerHQ/ledger-live (@​ledgerhq/errors)

v6.37.0

Compare Source

v6.36.0

Compare Source

v6.35.0

Compare Source

v6.34.1

Compare Source

safe-global/safe-core-sdk (@​safe-global/api-kit)

v4.2.0

Compare Source

typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v8.67.0

Compare Source

This was a version bump only for eslint-plugin to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.66.0

Compare Source

🩹 Fixes
  • eslint-plugin: [class-literal-property-style] preserve type annotations and don't drop decorators (#​12617)
  • eslint-plugin: [no-unnecessary-type-parameters] check MappedType key remapping (#​12588)
  • eslint-plugin: [no-useless-default-assignment] don't report defaults used by other overloads (#​12607)
  • eslint-plugin: [prefer-nullish-coalescing] handle shadowed Boolean calls (#​12591)
  • eslint-plugin: [no-unnecessary-type-conversion] ignore shadowed built-ins (#​12590)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.65.0

Compare Source

🚀 Features
  • eslint-plugin: [no-shadow] specialized error on enum declaration and member shadowing (#​12578)
  • add warning when TS 7 is detected (#​12529)
  • eslint-plugin: [no-restricted-imports] deprecate extension rule (#​12527, #​19562, #​11889)
🩹 Fixes
  • eslint-plugin: [no-unnecessary-parameter-property-assignment] don't flag computed assignments with a variable key (#​12568)
  • eslint-plugin: [unbound-method] report unbound methods accessed via member expression on union types (#​12448)
  • eslint-plugin: [prefer-string-starts-ends-with] handle escaped $ ending regex literals (#​12515)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.64.0

Compare Source

🚀 Features
  • eslint-plugin: [no-loop-func] support using / await using declarations and deprecate the rule (#​12500)
  • typescript-estree: throw for invalid definite assignment in class properties (#​12543)
🩹 Fixes
  • eslint-plugin: [require-array-sort-compare] handle constrained arrays (#​12512)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.63.0

Compare Source

🚀 Features
  • eslint-plugin: [no-misused-promises] detect async usage of a sync dispose usage (#​12426)
🩹 Fixes
  • eslint-plugin: [no-base-to-string] don't flag a shadowed String() call (#​12492)
  • eslint-plugin: [no-unnecessary-type-assertion] handle optional-chained calls to overloaded functions (#​12491, #​12485)
  • eslint-plugin: [method-signature-style] suggest converting readonly function properties instead of emitting invalid syntax (#​12447, #​12446)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.62.1

Compare Source

🩹 Fixes
  • eslint-plugin: [no-unnecessary-type-assertion] parenthesize object literal at left edge of expression statement (#​12443, #​12418)
  • eslint-plugin: [no-unnecessary-boolean-literal-compare] preserve boolean result in fixer for nullable true comparisons (#​12365)
  • eslint-plugin: [prefer-optional-chain] use suggestion instead of autofix for trailing binary operator (#​12328)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.62.0

Compare Source

🚀 Features
  • remove redundant package.json "files" (#​12444)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.61.1

Compare Source

🩹 Fixes
  • eslint-plugin: [no-unnecessary-template-expression] respect ECMAScript line terminators (#​12388)
  • eslint-plugin: [no-unnecessary-boolean-literal-compare] fix precedence bug in autofix (#​12413)
  • eslint-plugin: [no-unnecessary-type-assertion] wrap object literal in parens when removing TSTypeAssertion in arrow body (#​12394, #​12393)
  • eslint-plugin: [no-unnecessary-type-assertion] avoid false positive for template literal expressions (#​12281)
  • eslint-plugin: [consistent-indexed-object-style] do not remove comments when fixing (#​12396, #​10577)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.61.0

Compare Source

🚀 Features
  • ast-spec: change type of UnaryExpression.prefix to always true (#​12372)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.60.1

Compare Source

🩹 Fixes
  • eslint-plugin: [no-shadow] correct rule to match ESLint v10 handling (#​12182)
  • eslint-plugin: respect ECMAScript line terminators in ts-comment rules (#​12352)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.60.0

Compare Source

This was a version bump only for eslint-plugin to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.59.4

Compare Source

🩹 Fixes
  • eslint-plugin: [no-floating-promises] stack overflow when using recursive types (#​12294)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.59.3

Compare Source

This was a version bump only for eslint-plugin to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.59.2

Compare Source

🩹 Fixes
  • eslint-plugin: [no-deprecated] object destructuring values should be treated as declarations (#​12292)
  • eslint-plugin: [no-unsafe-type-assertion] handle crash on recursive template literal types (#​12150)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.59.1

Compare Source

🩹 Fixes
  • eslint-plugin: [no-unnecessary-condition] treat void as nullish in no-unnecessary-condition (#​12241)
  • eslint-plugin: [no-unnecessary-type-arguments] handle instantiation expressions (#​12220)
  • eslint-plugin: [no-unnecessary-type-assertion] avoid false positive in logical assignment assertions (#​12278)
  • eslint-plugin: [no-unnecessary-type-assertion] preserve phantom type arguments in generic inference (#​12269)
  • eslint-plugin: [no-unnecessary-type-assertion] preserve index signatures in undefined unions (#​12257)
  • eslint-plugin: [no-unnecessary-type-assertion] fix crash "TypeError: checker.getTypeArguments is not a function" (#​12246)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v8.67.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.66.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.65.0

Compare Source

🚀 Features
  • add warning when TS 7 is detected (#​12529)
  • parser: add onUnsupportedTypeScriptVersion option to error on unsupported TypeScript versions (#​12465)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.64.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.63.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.62.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.62.0

Compare Source

🚀 Features
  • remove redundant package.json "files" (#​12444)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.61.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.61.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.60.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.60.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.59.4

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.59.3

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.59.2

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.59.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

axios/axios (axios)

v1.19.0

Compare Source

This release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.

v1.18.1

Compare Source

v1.18.1 — June 21, 2026

This release focuses on Node HTTP adapter fixes, safer AxiosError serialisation, runtime/type correctness fixes, documentation updates, and dependency maintenance.

🐛 Bug Fixes

  • AxiosError Serialisation: Made AxiosError#cause non-enumerable to prevent circular JSON serialisation failures when errors include nested causes. (#​10913)
  • Node HTTP Adapter: Guarded socket.setKeepAlive for proxy agent streams, accepted path-only URLs when socketPath is configured, deferred environment proxy handling to Node, and explicitly passed maxBodyLength through to follow-redirects. (#​10917, #​10930, #​10942, #​10993)
  • Runtime and Type Correctness: Fixed several runtime crashes, type definition mismatches, and incorrect error handling paths. (#​10959, #​11021)
  • AxiosURLSearchParams: Switched the encoder callback to an arrow function so encoder.call(this) receives the AxiosURLSearchParams instance correctly. (#​11019)

🔧 Maintenance & Chores

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

Full Changelog

v1.18.0

Compare Source

This release hardens redirect and URL handling, improves the validateStatus configuration semantics, and includes updates to documentation, dependencies, and release metadata.

v1.17.0

Compare Source

This release adds Node HTTP zstd decompression, hardens config and release workflows, and fixes authentication, header, proxy, and type-handling regressions.

v1.16.1

Compare Source

This release ships a defence-in-depth fix for prototype pollution in formDataToJSON, hardens proxy and CI workflows, restores Webpack 4 compatibility for the fetch adapter, and includes several small bug fixes and maintenance improvements.

v1.16.0

Compare Source

This release adds support for the QUERY HTTP method and a new ECONNREFUSED error constant, lands a substantial wave of HTTP, fetch, and XHR adapter bug fixes around redirects, aborts, headers, and timeouts, and welcomes 23 new contributors.

v1.15.2

Compare Source

This release delivers prototype-pollution hardening for the Node HTTP adapter, adds an opt-in allowedSocketPaths allowlist to mitigate SSRF via Unix domain sockets, fixes a keep-alive socket memory leak, and ships supply-chain hardening across CI and security docs.

v1.15.1

Compare Source

This release ships a coordinated set of security hardening fixes across headers, body/redirect limits, multipart handling, and XSRF/prototype-pollution vectors, alongside a broad sweep of bug fixes, test migrations, and threat-model documentation updates.

prettier/eslint-plugin-prettier (eslint-plugin-prettier)

v5.5.6

[Compare So

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot force-pushed the renovate/npm-non-major branch 3 times, most recently from 354cf7b to 8429439 Compare February 21, 2026 07:59
@renovate
renovate Bot force-pushed the renovate/npm-non-major branch 3 times, most recently from 14ad918 to 64d5c26 Compare February 26, 2026 10:19
@renovate renovate Bot changed the title chore(deps): update npm non-major chore(deps): update npm non-major - autoclosed Feb 27, 2026
@renovate renovate Bot closed this Feb 27, 2026
@renovate
renovate Bot deleted the renovate/npm-non-major branch February 27, 2026 10:18
@renovate renovate Bot changed the title chore(deps): update npm non-major - autoclosed chore(deps): update npm non-major Mar 1, 2026
@renovate renovate Bot reopened this Mar 1, 2026
@renovate
renovate Bot force-pushed the renovate/npm-non-major branch 3 times, most recently from af98efc to 2226943 Compare March 2, 2026 05:27
@renovate
renovate Bot force-pushed the renovate/npm-non-major branch 2 times, most recently from 3d240a8 to bba26ee Compare March 14, 2026 11:58
@renovate
renovate Bot force-pushed the renovate/npm-non-major branch 9 times, most recently from 641b246 to 29a999f Compare March 31, 2026 06:55
@renovate
renovate Bot force-pushed the renovate/npm-non-major branch 3 times, most recently from d16341b to d57a125 Compare April 8, 2026 06:31
@renovate
renovate Bot force-pushed the renovate/npm-non-major branch 2 times, most recently from c68fa47 to bee7ffe Compare April 10, 2026 02:53
@renovate
renovate Bot force-pushed the renovate/npm-non-major branch from 8a84730 to 2c5d787 Compare April 24, 2026 16:35
@renovate
renovate Bot changed the base branch from main to develop April 24, 2026 16:35
@renovate
renovate Bot force-pushed the renovate/npm-non-major branch 5 times, most recently from 85fa107 to 5a336a1 Compare May 4, 2026 16:42
@renovate
renovate Bot force-pushed the renovate/npm-non-major branch 4 times, most recently from 87f5c1a to bcaea41 Compare May 11, 2026 23:11
@renovate
renovate Bot force-pushed the renovate/npm-non-major branch 6 times, most recently from c4a4ceb to 9e7d06b Compare May 18, 2026 22:58
@renovate
renovate Bot force-pushed the renovate/npm-non-major branch 4 times, most recently from d7fc75f to 04e6f88 Compare May 28, 2026 12:37
@renovate
renovate Bot force-pushed the renovate/npm-non-major branch 6 times, most recently from 2d74038 to 8325323 Compare June 4, 2026 03:30
@renovate
renovate Bot force-pushed the renovate/npm-non-major branch 2 times, most recently from fec77d2 to e2993ca Compare June 6, 2026 18:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants