Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Oct 17, 2025

This PR contains the following updates:

Package Type Update Change OpenSSF
viem (source) devDependencies patch 2.38.2 -> 2.38.3 OpenSSF Scorecard

Release Notes

wevm/viem (viem)

v2.38.3

Compare Source

Patch Changes

Configuration

📅 Schedule: Branch creation - At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday ( * 0-4,22-23 * * 1-5 ), Only on Sunday and Saturday ( * * * * 0,6 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.


Summary by cubic

Update viem to 2.38.3 for the CLI to pull in the latest chain definitions and metadata. Patch update only; no code changes or breaking changes expected.

  • Dependencies
    • viem: 2.38.2 → 2.38.3 (sdk/cli/package.json, bun.lock)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate renovate bot added the dependencies Dependency updates label Oct 17, 2025
@renovate renovate bot enabled auto-merge (squash) October 17, 2025 03:25
@github-actions github-actions bot added the qa:running QA workflow is currently running label Oct 17, 2025
@socket-security
Copy link

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Added@​types/​pg@​8.15.51001007384100
Addedyaml@​2.8.010010010081100
Addedpg@​8.16.3991009985100
Addeddrizzle-orm@​0.44.6981008899100
Addeddrizzle-kit@​0.31.5991009699100
Updatedviem@​2.38.2 ⏵ 2.33.0100 +110010097100

View full report

@github-actions github-actions bot added the status:approved Pull request has been approved label Oct 17, 2025
@github-actions
Copy link

📦 Packages

Package NPM Docker
SDK Cli @settlemint/sdk-cli@2.6.2-pr5fcf1e4b
SDK The Graph @settlemint/sdk-thegraph@2.6.2-pr5fcf1e4b
SDK Portal @settlemint/sdk-portal@2.6.2-pr5fcf1e4b
SDK Hasura @settlemint/sdk-hasura@2.6.2-pr5fcf1e4b
SDK JS @settlemint/sdk-js@2.6.2-pr5fcf1e4b
SDK Utils @settlemint/sdk-utils@2.6.2-pr5fcf1e4b
SDK Next @settlemint/sdk-next@2.6.2-pr5fcf1e4b
SDK Minio @settlemint/sdk-minio@2.6.2-pr5fcf1e4b
SDK IPFS @settlemint/sdk-ipfs@2.6.2-pr5fcf1e4b
SDK Blockscout @settlemint/sdk-blockscout@2.6.2-pr5fcf1e4b
SDK MCP @settlemint/sdk-mcp@2.6.2-pr5fcf1e4b
SDK Viem @settlemint/sdk-viem@2.6.2-pr5fcf1e4b
SDK EAS @settlemint/sdk-eas@2.6.2-pr5fcf1e4b

@github-actions github-actions bot added qa:success QA workflow passed successfully status:ready-for-review Pull request is ready for review status:mergeable Pull request is approved, tests pass, and ready to merge and removed qa:running QA workflow is currently running status:ready-for-review Pull request is ready for review status:approved Pull request has been approved labels Oct 17, 2025
@renovate renovate bot merged commit b878eeb into main Oct 17, 2025
17 checks passed
@renovate renovate bot deleted the renovate/viem-2.x branch October 17, 2025 03:27
@github-actions github-actions bot added status:merged Pull request has been merged and removed status:mergeable Pull request is approved, tests pass, and ready to merge labels Oct 17, 2025
Copy link

@cubic-dev-ai cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

1 issue found across 2 files

Prompt for AI agents (all 1 issues)

Understand the root cause of the following 1 issues and fix them.


<file name="sdk/cli/package.json">

<violation number="1" location="sdk/cli/package.json:70">
The `viem` dependency in `test/package.json` is pinned to `2.33.0`, while other packages are using `^2` which resolves to `2.38.3`. This inconsistency means the test suite is running against an outdated version of a critical dependency, which can miss integration issues and regressions.</violation>
</file>

React with 👍 or 👎 to teach cubic. Mention @cubic-dev-ai to give feedback, ask questions, or re-run the review.

"semver": "7.7.3",
"slugify": "1.6.6",
"viem": "2.38.2",
"viem": "2.38.3",
Copy link

@cubic-dev-ai cubic-dev-ai bot Oct 17, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The viem dependency in test/package.json is pinned to 2.33.0, while other packages are using ^2 which resolves to 2.38.3. This inconsistency means the test suite is running against an outdated version of a critical dependency, which can miss integration issues and regressions.

Prompt for AI agents
Address the following comment on sdk/cli/package.json at line 70:

<comment>The `viem` dependency in `test/package.json` is pinned to `2.33.0`, while other packages are using `^2` which resolves to `2.38.3`. This inconsistency means the test suite is running against an outdated version of a critical dependency, which can miss integration issues and regressions.</comment>

<file context>
@@ -67,7 +67,7 @@
     &quot;semver&quot;: &quot;7.7.3&quot;,
     &quot;slugify&quot;: &quot;1.6.6&quot;,
-    &quot;viem&quot;: &quot;2.38.2&quot;,
+    &quot;viem&quot;: &quot;2.38.3&quot;,
     &quot;which&quot;: &quot;5.0.0&quot;,
     &quot;yaml&quot;: &quot;2.8.1&quot;,
</file context>
Fix with Cubic

@github-actions github-actions bot added status:mergeable Pull request is approved, tests pass, and ready to merge and removed status:merged Pull request has been merged labels Oct 17, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates qa:success QA workflow passed successfully status:mergeable Pull request is approved, tests pass, and ready to merge

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant