Skip to content

build(deps): bump the application-dependencies group across 1 directory with 17 updates - #122

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/application-dependencies-2a14b5565a
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/application-dependencies-2a14b5565a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 15, 2026

Copy link
Copy Markdown

Bumps the application-dependencies group with 17 updates in the / directory:

Package From To
penpal 7.0.6 8.0.1
react-router 7.18.4 8.4.0
@playwright/test 1.63.0 1.64.0
@types/node 24.12.4 26.6.5
@vitejs/plugin-react 6.1.1 6.1.2
eslint 10.10.0 10.12.0
eslint-plugin-react-refresh 0.5.6 0.5.7
globals 17.12.0 17.13.0
hardhat 3.12.0 3.19.0
jsdom 30.0.1 30.1.2
prettier 3.9.6 3.9.10
solc 0.8.30 0.8.37
typescript 6.0.3 7.0.2
typescript-eslint 8.70.0 8.71.1
viem 2.52.2 2.57.4
vite 8.3.0 8.3.4
vitest 5.0.0 5.0.4

Updates penpal from 7.0.6 to 8.0.1

Release notes

Sourced from penpal's releases.

v8.0.1

  • Corrects logging so received remote method replies are labeled as replies instead of calls.

v8.0.0

Version 8 is here! This version primarily focuses on eliminating memory leaks and reducing file size (roughly 10% smaller) by removing backward-compatibility baggage.

Migration

A Penpal participant (e.g., window, iframe, worker) running version 8 will not be able to communicate with a participant running Penpal version 6 or older. However, a Penpal participant running version 8 can communicate successfully with a participant running Penpal version 7. Plan accordingly when upgrading.

Breaking changes

Destroying a pending connection now rejects its promise

What

Calling connection.destroy() before the handshake completes now rejects connection.promise with a PenpalError whose code is CONNECTION_DESTROYED. The same rejection occurs when the remote participant destroys a pending connection. Previously, the promise could remain pending indefinitely.

Code that intentionally destroys pending connections should handle that rejection. See Destroying the Connection.

Why

If an application using the previous version of Penpal were to destroy the Penpal connection by calling connection.destroy() while the connection was still being established, Penpal would leave the connection promise (connection.promise) unresolved (neither fulfilled nor rejected). This was a conscious design choice (and a deviation from the original design) because handling a rejected promise in this scenario can be annoying to deal with as reported in Aaronius/penpal#51. However, this was a poor design choice, since leaving the promise unresolved can cause memory leaks. This is described by @​cimak in Aaronius/penpal#51. It is better to reject the promise than to leave the promise unresolved.

Exposed methods must be defined directly on the methods object

What

Penpal version 8 only allows remote callers to invoke methods defined directly on the object passed to connect, including its nested objects. It no longer searches the object's prototype chain.

Most applications already use this pattern and require no changes:

connect({
  messenger,
  methods: {
    add(a, b) {
      return a + b;
    },
    account: {
      getName() {
        return 'Alice';
      },
    },
  },
});

The main case affected is passing a class instance directly. Class methods normally live on the class prototype, so this no longer exposes add:

... (truncated)

Commits
  • 789a51d Prepare v8.0.1
  • c3e9783 Fix reply debug message
  • d71816f Enable debugging in examples
  • 4d39dfc Publish examples with GitHub Pages
  • 8546aa9 Clarify example method results
  • 664c15a Make examples easier to follow
  • c2a2fb9 Prepare v8.0.0
  • 73e8689 Harden v8 release preparation
  • caefec7 Merge remote-tracking branch 'origin/main' into 8.x
  • 8e5df8f Bring examples into the main repository
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for penpal since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates react-router from 7.18.4 to 8.4.0

Release notes

Sourced from react-router's releases.

v8.4.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v840

v8.3.1

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v831

v8.3.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v830

v8.2.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v820

v8.1.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v810

v8.0.1

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v801

v8.0.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v800

Changelog

Sourced from react-router's changelog.

v8.4.0

Minor Changes

  • Deprecate the createStaticRouter({ branches }) option (#15297)
    • createStaticRouter now caches route branches internally, ignores branches, and logs a deprecation warning when the option is provided
    • The deprecated EntryContext.branches property remains available for compatibility but is always an empty array

Patch Changes

  • Prevent stale route discovery during manifest version-mismatch recovery (#15489)
    • Keep concurrent manifest responses pending while a document reload is in progress
    • Report a discovery error when a previous reload failed to resolve a version mismatch instead of loading a stale route or reloading repeatedly
    • Fail pending requests if a document reload does not complete within five seconds or the document is restored from the back-forward cache, allowing subsequent requests to recover
  • Preserve lazy route module import errors during SPA navigations instead of replacing them with a missing dataStrategy result error (#15464)
  • Switch to more granular internal router contexts to avoid unnecessary route component re-renders when unrelated data router state changes (#15376)
    • ⚠️ This contains some breaking changes to exported UNSAFE_ contexts, so please review carefully if you are using those unsafe exports
  • Correctly escape streamed RSC redirect locations in meta tag attributes (#15491)
  • Avoid unintended document.startViewTransition calls during initial hydration and router.revalidate() calls (#15484)
  • Fix SingleFetchNoResultError thrown when a fetcher revalidates against a splat route during lazy route discovery (#15395)
    • Track discovery per fetcher load so revalidation waits for the current load's discovery, even when the fetcher key is reused, while still restarting interrupted loaders after discovery completes
  • Preserve the underlying decode failure as the cause of the Unable to decode turbo-stream response error (#15450)

Unstable Changes

⚠️ Unstable features are not recommended for production use

  • Add a Data Mode future.unstable_routePatternMatching flag for more efficient route matching powered by @remix-run/route-pattern (#15298)
    • Add an unstable_validateParams route field to reject invalid parameter values and continue matching
  • Document access control requirements for RSC Server Functions (#15490)
    • Treat every Server Function as a public endpoint that must perform all of its own access control checks
    • Recommend route actions when access control should be provided by route middleware

v8.3.1

Patch Changes

  • Fix Expected fetcher: <key> error thrown on navigation when a fetcher is aborted during its post-action revalidation (#15365)
  • Fix lazy route discovery caching a path as discovered when the triggering navigation was aborted after the manifest response settled but before the route tree was patched, which permanently (for the session) shadowed the real route behind a catch-all or produced 404s on every subsequent visit (#15399)
  • Improve route matching performance for long paths (#15417)
  • Improve validation of action request origins (#15419)
  • Fix <ScrollRestoration> leaving history.scrollRestoration set to "auto" after a bfcache restore, which let the browser restore scroll on subsequent history traversals before the destination route had rendered (#15397)
  • Properly respect the relative option in useSubmit/fetcher.submit when resolivng the action path (#15400)
  • Add additional URL validation on client side navigations/redirects (#15445)

v8.3.0

Patch Changes

  • Encode path params in href/generatePath per RFC 3986 path-segment rules instead of encodeURIComponent (#15310)

... (truncated)

Commits

Updates @playwright/test from 1.63.0 to 1.64.0

Release notes

Sourced from @​playwright/test's releases.

v1.64.0

🧰 WebMCP

New page.webmcp and frame.webmcp give access to the tools that a page registers through the experimental WebMCP browser API, so you can test them like any other part of your app:

const browser = await chromium.launch({ args: ['--enable-features=WebMCP'] });
const page = await browser.newPage();
await page.goto('https://example.com');
for (const tool of await page.webmcp.tools())
console.log(tool.name, tool.description);
const result = await page.webmcp.callTool('add', { a: 2, b: 40 });
console.log(result.content[0].text); // "42"

Playwright MCP also supports WebMCP by default, with page-defined tools offered to the agent as webmcp_<tool>. Pass --no-webmcp to opt out.

playwright-cli exposes them as well:

playwright-cli webmcp-list
playwright-cli webmcp-call search_catalog --params '{"query":"cats"}'

🎬 Better videos

Videos can now be recorded at a custom frame rate, and the decorations for actions are styled with plain CSS:

// playwright.config.ts
import { defineConfig } from '@playwright/test';
export default defineConfig({
use: {
video: {
mode: 'on',
size: { width: 1920, height: 1080 },
fps: 60,
show: {
actions: {
style: {
point: 'width: 20px; height: 20px; border-radius: 50%; background: red',
highlight: 'outline: 2px solid #333; background: rgba(0, 128, 255, .15)',
title: 'font-size: 16px',
},
},
},
},
</tr></table>

... (truncated)

Commits
  • 606ecd8 cherry-pick(#43192): fix(locators): parse locators the way the client API bui...
  • e4f872c cherry-pick(#43188): feat(api): expose asLocatorDescription via LocalUtils fo...
  • f6a439e cherry-pick(#43189): docs(webmcp): expose WebMCP to all languages
  • e2335c3 cherry-pick(#43174): fix(mcp): do not close the browser twice when the client...
  • d2a436e cherry-pick(#43163): Revert "fix(blob): do not remove existing reports from o...
  • a0c4b5e cherry-pick(#43175): feat(api): return language-specific locator code from re...
  • 3f7d535 cherry-pick(#43131): docs: fix broken C# samples in API docs and handles guide
  • 1cde64f cherry-pick(#43170): fix(locators): parse mixed role options
  • 8851e72 cherry-pick(#43171): fix(locators): parse JavaScript escapes and regex classes
  • dcc5065 cherry-pick(#43172): fix(locator): parse within and getByRef locators
  • Additional commits viewable in compare view

Updates @types/node from 24.12.4 to 26.6.5

Commits

Updates @vitejs/plugin-react from 6.1.1 to 6.1.2

Release notes

Sourced from @​vitejs/plugin-react's releases.

plugin-react@6.1.2

Fix HMR for compound components (#1484)

Adding or removing a component from a compound component was not handled, creating stale updates. Doing this now triggers hmr invalidate on the file and propagates the invalidation to importers.

Fix compiler.logDiagnostics option not working (#1483)

With oxc-transform-react >= 0.148, the logDiagnostics was not working. This version fixes it and requires oxc-transform-react >= 0.152 as a peer dependency if you are using the compiler option. compiler.logDiagnostics option is now deprecated and should be swapped for the builtin compiler.reportDiagnostics.

Disable refresh for non-jsx with compiler enabled (fix #1478) (#1485)

When the compiler was enabled, TS files could trigger fast refresh which would cause runtime errors. The logic now follows what the builtin oxc plugin in Vite does.

Changelog

Sourced from @​vitejs/plugin-react's changelog.

6.1.2 (2026-10-05)

Fix HMR for compound components (#1484)

Adding or removing a component from a compound component was not handled, creating stale updates. Doing this now triggers hmr invalidate on the file and propagates the invalidation to importers.

Fix compiler.logDiagnostics option not working (#1483)

With oxc-transform-react >= 0.148, the logDiagnostics was not working. This version fixes it and requires oxc-transform-react >= 0.152 as a peer dependency if you are using the compiler option. compiler.logDiagnostics option is now deprecated and should be swapped for the builtin compiler.reportDiagnostics.

Disable refresh for non-jsx with compiler enabled (fix #1478) (#1485)

When the compiler was enabled, TS files could trigger fast refresh which would cause runtime errors. The logic now follows what the builtin oxc plugin in Vite does.

Commits

Updates eslint from 10.10.0 to 10.12.0

Release notes

Sourced from eslint's releases.

v10.12.0

Features

  • 4618052 feat: handle astral letters in new-cap (#21357) (sary)
  • 4ec5168 feat: allow SourceCode#getText() to accept tokens and comments (#21340) (electrohyun)

Bug Fixes

  • bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373) (Daniel Pinto)
  • bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332) (xbinaryx)
  • efc4d6b fix: astral letters in consistent-return, no-eval, no-invalid-this (#21360) (lumir)
  • 93de066 fix: prefer-exponentiation-operator autofix for async function base (#21322) (Vladimir Babin)
  • 02e34ff fix: add missing space after else in curly autofix (#21355) (Pixel)
  • b14b8bc fix: correct id-length message for long private names (#21348) (Pixel)
  • 69aac01 fix: support TSFunctionType in getFunctionHeadLoc (#21335) (xbinaryx)
  • 686630e fix: no-loss-of-precision false positive with 0.e5 (#21337) (sethamus)

Documentation

  • 67eb586 docs: Update README (GitHub Actions Bot)
  • 5370d7e docs: clarify one-var separateRequires matches any require() call (#21192) (sethamus)
  • 8816c1d docs: Update README (GitHub Actions Bot)
  • 3d2e7ce docs: fix typo in no-unused-expressions documentation (#21346) (bytedoe)

Chores

  • 152067f chore: update ecosystem plugins (#21362) (ESLint Bot)
  • b56d58e chore: update github/codeql-action action to v4.38.2 (#21376) (renovate[bot])
  • bfaea12 perf: cache normalized config globals per languageOptions (#21364) (James Ross)
  • 322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369) (Francesco Trotta)
  • d166567 chore: update dependency prettier to v3.9.9 (#21371) (renovate[bot])
  • 29585ce chore: update dependency eslint-plugin-expect-type to ^0.7.0 (#21359) (renovate[bot])
  • 39d79ba chore: update github/codeql-action action to v4.38.1 (#21354) (renovate[bot])
  • 182a6e9 chore: update dependency prettier to v3.9.8 (#21352) (renovate[bot])
  • f995127 chore: remove CLAUDE.md in favor of AGENTS.md (#21339) (Jarren)
  • b95fb6c chore: update dependency prettier to v3.9.7 (#21347) (renovate[bot])
  • 3782dd4 chore: update ecosystem plugins (#21342) (ESLint Bot)

v10.11.0

Features

  • d136fa4 feat: object-shorthand handle quoted properties for ignoreConstructors (#21271) (Pavel)
  • 397b3b8 feat: report unsafe labeled continue in no-unsafe-finally rule (#21316) (electrohyun)
  • d3dd47f feat: only exempt new-cap built-ins that reference the global (#21290) (sethamus)

Bug Fixes

  • 22b09f5 fix: ignore __proto__ properties in prefer-object-spread (#21311) (xbinaryx)
  • b684bb1 fix: make TimePass.parse optional in types and docs (#21313) (ntnyq)
  • 26d11bc fix: don't report __proto__ properties in object-shorthand (#21310) (xbinaryx)

Documentation

  • 9ecfdc5 docs: note that --cache can serve stale results for cross-file rules (#21312) (bytedoe)
  • 6c789ff docs: Update README (GitHub Actions Bot)
  • 5997825 docs: clarify preserve-caught-error known limitation (#21294) (Akinyemi Toluwalase)

... (truncated)

Commits
  • a438ec3 10.12.0
  • 32a73f1 Build: changelog update for 10.12.0
  • bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373)
  • bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332)
  • 152067f chore: update ecosystem plugins (#21362)
  • b56d58e chore: update github/codeql-action action to v4.38.2 (#21376)
  • 67eb586 docs: Update README
  • bfaea12 perf: cache normalized config globals per languageOptions (#21364)
  • 322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369)
  • d166567 chore: update dependency prettier to v3.9.9 (#21371)
  • Additional commits viewable in compare view

Updates eslint-plugin-react-refresh from 0.5.6 to 0.5.7

Release notes

Sourced from eslint-plugin-react-refresh's releases.

v0.5.7

Add allowCompoundComponents option (#117)

Default: false (true in vite config)

Don't warn when components are exported as an object gathering them. Every member of the object must be a component, and a member holding an anonymous function requires a component name as key.

This should be enabled if the fast refresh implementation correctly handles this case. Vite supports it since @vitejs/plugin-react 4.7.0, @vitejs/plugin-react-swc 3.11.0.

{
  "react-refresh/only-export-components": [
    "error",
    { "allowCompoundComponents": true }
  ]
}

Enabling this option allows code such as the following:

const Root = () => <></>;
const Label = () => <></>;
export const Tag = { Root, Label };
Changelog

Sourced from eslint-plugin-react-refresh's changelog.

0.5.7

Add allowCompoundComponents option (#117)

Default: false (true in vite config)

Don't warn when components are exported as an object gathering them. Every member of the object must be a component, and a member holding an anonymous function requires a component name as key.

This should be enabled if the fast refresh implementation correctly handles this case. Vite supports it since @vitejs/plugin-react 4.7.0, @vitejs/plugin-react-swc 3.11.0.

{
  "react-refresh/only-export-components": [
    "error",
    { "allowCompoundComponents": true }
  ]
}

Enabling this option allows code such as the following:

const Root = () => <></>;
const Label = () => <></>;
export const Tag = { Root, Label };
Commits

Updates globals from 17.12.0 to 17.13.0

Release notes

Sourced from globals's releases.

v17.13.0

  • Update globals (2026-10-01) (#354) b007369

sindresorhus/globals@v17.12.0...v17.13.0

Commits

Updates hardhat from 3.12.0 to 3.19.0

Release notes

Sourced from hardhat's releases.

Hardhat v3.19.0

This release expands our support for the upcoming Amsterdam hardfork, including: EIP-7976, EIP-7981, EIP-7997, EIP-8024 and EIP-8037. In particular, EIP-8037's separation of execution gas and state gas metering significantly changes the gas costs of state creation, so test early. See our Amsterdam Support guide for more details.

Changes

  • #8680 0e51fa2 Thanks @​anaPerezGhiglia! - Added experimental EIP-7976 support to the Amsterdam hardfork: the calldata floor cost rises to 64 gas per byte. See the guide for more details.

  • #8680 b52d2eb Thanks @​anaPerezGhiglia! - Added experimental EIP-7981 support to the Amsterdam hardfork: access list data costs an extra 64 gas per byte. See the guide for more details.

  • #8680 bb62bf6 Thanks @​anaPerezGhiglia! - Added experimental EIP-7997 support to the Amsterdam hardfork: the deterministic CREATE2 factory is now part of the genesis state. See the guide for more details.

  • #8680 0e51fa2 Thanks @​anaPerezGhiglia! - Added experimental EIP-8024 support to the Amsterdam hardfork: the DUPN, SWAPN and EXCHANGE opcodes reach stack items beyond DUP16 and SWAP16. See the guide for more details.

  • #8680 bb62bf6 Thanks @​anaPerezGhiglia! - Added experimental EIP-8037 support to the Amsterdam hardfork: execution gas and state gas are metered separately, and a block's gasUsed reports the larger. See the guide for more details.

  • #8680 bb62bf6 Thanks @​anaPerezGhiglia! - Upgraded EDR to v0.22.2.

  • #8679 63fb54a Thanks @​Wodann! - Excluded the templates' node_modules folders from the published package, which broke installation with Yarn classic.

  • #8667 5793554 Thanks @​schaable! - Improved the errors for invalid transactions sent from local accounts.

  • #8666 0295fef Thanks @​schaable! - Fixed locally managed accounts silently dropping the blobs of EIP-4844 transactions; sending one now throws an error.

  • #8680 17133ce Thanks @​kanej! - Removed the remaining built-in Holesky (chain ID 17000) hardfork history, as the network has been shut down.

  • #8680 17133ce Thanks @​kanej! - Added the Amsterdam hardfork activation on Sepolia, so forking Sepolia uses amsterdam for blocks after it activates.


💡 The Nomic Foundation is hiring! Check our open positions.


Hardhat v3.18.1

This is a small bugfix release with fixes for simulated network predeploys and Solidity test error formatting.

Changes

  • #8631 d014d43 Thanks @​Kropiunig! - Fixed edr-simulated networks with forking.enabled: false starting without the chain's predeploys (e.g. OP's GasPriceOracle and L1Block, or the L1 beacon roots and history storage contracts).

  • #8636 8b24451 Thanks @​schaable! - Fixed the formatting of errors reported while running Solidity tests.

  • Updated dependencies:

    • @​nomicfoundation/hardhat-utils@​4.4.0

💡 The Nomic Foundation is hiring! Check our open positions.


Hardhat v3.18.0

This release includes two enhancements along with performance improvements and bug fixes: test profiles can now be used in Solidity tests, see our test profiles guide, and hardhat-mocha has been updated to mocha@12.

... (truncated)

Changelog

Sourced from hardhat's changelog.

3.19.0

Minor Changes

  • #8680 0e51fa2 Thanks @​anaPerezGhiglia! - Added experimental EIP-7976 support to the Amsterdam hardfork: the calldata floor cost rises to 64 gas per byte.

  • #8680 b52d2eb Thanks @​anaPerezGhiglia! - Added experimental EIP-7981 support to the Amsterdam hardfork: access list data costs an extra 64 gas per byte.

  • #8680 bb62bf6 Thanks @​anaPerezGhiglia! - Added experimental EIP-7997 support to the Amsterdam hardfork: the deterministic CREATE2 factory is now part of the genesis state.

  • #8680 0e51fa2 Thanks @​anaPerezGhiglia! - Added experimental EIP-8024 support to the Amsterdam hardfork: the DUPN, SWAPN and EXCHANGE opcodes reach stack items beyond DUP16 and SWAP16.

  • #8680 bb62bf6 Thanks @​anaPerezGhiglia! - Added experimental EIP-8037 support to the Amsterdam hardfork: execution gas and state gas are metered separately, and a block's gasUsed reports the larger.

Patch Changes

  • #8680 bb62bf6 Thanks @​anaPerezGhiglia! - Upgraded EDR to v0.22.2.

  • #8679 63fb54a Thanks @​Wodann! - Excluded the templates' node_modules folders from the published package, which broke installation with Yarn classic.

  • #8667 5793554 Thanks @​schaable! - Improved the errors for invalid transactions sent from local accounts.

  • #8666 0295fef Thanks @​schaable! - Fixed locally managed accounts silently dropping the blobs of EIP-4844 transactions; sending one now throws an error.

  • #8680 17133ce Thanks @​kanej! - Removed the remaining built-in Holesky (chain ID 17000) hardfork history, as the network has been shut down.

  • #8680 17133ce Thanks @​kanej! - Added the Amsterdam hardfork activation on Sepolia, so forking Sepolia uses amsterdam for blocks after it activates.

3.18.1

Patch Changes

  • #8631 d014d43 Thanks @​Kropiunig! - Fixed edr-simulated networks with forking.enabled: false starting without the chain's predeploys (e.g. OP's GasPriceOracle and L1Block, or the L1 beacon roots and history storage contracts).

  • #8636 8b24451 Thanks @​schaable! - Fixed the formatting of errors reported while running Solidity tests.

  • Updated dependencies:

    • @​nomicfoundation/hardhat-utils@​4.4.0

3.18.0

Minor Changes

  • #8574 e28e4f5 Thanks @​anaPerezGhiglia! - Removed the pre-Byzantium hardforks (chainstart, homestead, dao, tangerineWhistle, spuriousDragon) from the accepted hardfork and hardforkHistory values, as EDR cannot execute them.

  • #8595 562cc0b Thanks @​ChristopherDedominici! - Made ethers derive secp256k1 public keys with EDR's native implementation instead of its pure-JS one, speeding up new Wallet(secretKey), Wallet.createRandom(), HD wallet derivation and computeAddress.

  • #8590 e2ebf54 Thanks @​schaable! - Added Solidity test profiles, allowing test settings to vary across environments such as local development and CI.

Patch Changes

... (truncated)

Commits
  • 083233c Version Packages
  • 322d650 Merge remote-tracking branch 'origin/main' into build/edr-0.22.1
  • c96c040 Apply suggestion from @​anaPerezGhiglia
  • d5f0bf8 fix(resolveDefaultTransactionGasLimit): apply EIP-8037 rules
  • 29ddedc test(hardhat): assert the cause of INVALID_TX_PARAMS_TO_SIGN_LOCALLY
  • 5793554 fix(hardhat): throw HardhatErrors for invalid EIP-7702 requests and signer fi...
  • ce8abca Merge pull request #8666 from NomicFoundation/local-accounts-reject-blob-txs
  • e5854f3 fix(hardhat): also reject type 0x3 transactions without blob fields
  • d4f90fc build: upgrade to EDR v0.22.2
  • 4474064 build: upgrade to EDR v0.22.1
  • Additional commits viewable in compare view

Updates jsdom from 30.0.1 to 30.1.2

Release notes

Sourced from jsdom's releases.

v30.1.2

  • Updated URLs to support Unicode v18.0.0 in internationalized domain names.
  • Reduced package size and memory use for CSS property definitions. (@​scttcper)
  • Fixed severe slowdowns when building large DOM trees, including SVG charts with D3, which regressed in v30.1.0. (@​cmdcolin)
  • Fixed exponentially slow reads of empty inherited CSS custom properties in deeply nested documents, and custom properties incorrectly inheriting past an initial reset. (@​scttcper)
  • Fixed getComputedStyle() returning stale results after editing stylesheet declarations, selectors, or media queries, including in imported stylesheets.
  • Fixed selector matching and computed styles after changes to form control checkedness, indeterminacy, selection, values, and validity, including during form resets and canceled clicks.
  • Fixed computed styles for :focusDescription has been truncated

…ry with 17 updates

Bumps the application-dependencies group with 17 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [penpal](https://github.com/Aaronius/penpal) | `7.0.6` | `8.0.1` |
| [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router) | `7.18.4` | `8.4.0` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.63.0` | `1.64.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.12.4` | `26.6.5` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.1.1` | `6.1.2` |
| [eslint](https://github.com/eslint/eslint) | `10.10.0` | `10.12.0` |
| [eslint-plugin-react-refresh](https://github.com/ArnaudBarre/eslint-plugin-react-refresh) | `0.5.6` | `0.5.7` |
| [globals](https://github.com/sindresorhus/globals) | `17.12.0` | `17.13.0` |
| [hardhat](https://github.com/NomicFoundation/hardhat/tree/HEAD/packages/hardhat) | `3.12.0` | `3.19.0` |
| [jsdom](https://github.com/jsdom/jsdom) | `30.0.1` | `30.1.2` |
| [prettier](https://github.com/prettier/prettier) | `3.9.6` | `3.9.10` |
| [solc](https://github.com/ethereum/solc-js) | `0.8.30` | `0.8.37` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.70.0` | `8.71.1` |
| [viem](https://github.com/wevm/viem) | `2.52.2` | `2.57.4` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.0` | `8.3.4` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.0` | `5.0.4` |



Updates `penpal` from 7.0.6 to 8.0.1
- [Release notes](https://github.com/Aaronius/penpal/releases)
- [Commits](Aaronius/penpal@v7.0.6...v8.0.1)

Updates `react-router` from 7.18.4 to 8.4.0
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router@8.4.0/packages/react-router)

Updates `@playwright/test` from 1.63.0 to 1.64.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.63.0...v1.64.0)

Updates `@types/node` from 24.12.4 to 26.6.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@vitejs/plugin-react` from 6.1.1 to 6.1.2
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.1.2/packages/plugin-react)

Updates `eslint` from 10.10.0 to 10.12.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.10.0...v10.12.0)

Updates `eslint-plugin-react-refresh` from 0.5.6 to 0.5.7
- [Release notes](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/releases)
- [Changelog](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/blob/main/CHANGELOG.md)
- [Commits](ArnaudBarre/eslint-plugin-react-refresh@v0.5.6...v0.5.7)

Updates `globals` from 17.12.0 to 17.13.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.12.0...v17.13.0)

Updates `hardhat` from 3.12.0 to 3.19.0
- [Release notes](https://github.com/NomicFoundation/hardhat/releases)
- [Changelog](https://github.com/NomicFoundation/hardhat/blob/main/packages/hardhat/CHANGELOG.md)
- [Commits](https://github.com/NomicFoundation/hardhat/commits/hardhat@3.19.0/packages/hardhat)

Updates `jsdom` from 30.0.1 to 30.1.2
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](jsdom/jsdom@v30.0.1...v30.1.2)

Updates `prettier` from 3.9.6 to 3.9.10
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.6...3.9.10)

Updates `solc` from 0.8.30 to 0.8.37
- [Commits](argotorg/solc-js@v0.8.30...v0.8.37)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v6.0.3...v7.0.2)

Updates `typescript-eslint` from 8.70.0 to 8.71.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.1/packages/typescript-eslint)

Updates `viem` from 2.52.2 to 2.57.4
- [Release notes](https://github.com/wevm/viem/releases)
- [Commits](https://github.com/wevm/viem/compare/viem@2.52.2...viem@2.57.4)

Updates `vite` from 8.3.0 to 8.3.4
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.3.4/packages/vite)

Updates `vitest` from 5.0.0 to 5.0.4
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.4/packages/vitest)

---
updated-dependencies:
- dependency-name: penpal
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: application-dependencies
- dependency-name: react-router
  dependency-version: 8.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: application-dependencies
- dependency-name: "@playwright/test"
  dependency-version: 1.64.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: application-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.6.5
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: application-dependencies
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.1.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: application-dependencies
- dependency-name: eslint
  dependency-version: 10.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: application-dependencies
- dependency-name: eslint-plugin-react-refresh
  dependency-version: 0.5.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: application-dependencies
- dependency-name: globals
  dependency-version: 17.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: application-dependencies
- dependency-name: hardhat
  dependency-version: 3.19.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: application-dependencies
- dependency-name: jsdom
  dependency-version: 30.1.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: application-dependencies
- dependency-name: prettier
  dependency-version: 3.9.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: application-dependencies
- dependency-name: solc
  dependency-version: 0.8.37
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: application-dependencies
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: application-dependencies
- dependency-name: typescript-eslint
  dependency-version: 8.71.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: application-dependencies
- dependency-name: viem
  dependency-version: 2.57.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: application-dependencies
- dependency-name: vite
  dependency-version: 8.3.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: application-dependencies
- dependency-name: vitest
  dependency-version: 5.0.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: application-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@vercel

vercel Bot commented Oct 15, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
signum Error Error Oct 15, 2026 3:17pm UTC

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 15, 2026

This branch had an error being deployed

1 failed deployment
Preview — 222c31cd Deployed Oct 15, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants