Skip to content

chore(deps): bump the npm-production group across 1 directory with 15 updates - #737

Merged
brendanjryan merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-production-10c68d8852
Aug 1, 2026
Merged

chore(deps): bump the npm-production group across 1 directory with 15 updates#737
brendanjryan merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-production-10c68d8852

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-production group with 15 updates in the / directory:

Package From To
@stripe/stripe-js 9.9.0 9.12.0
incur 0.4.10 0.4.19
ox 0.14.33 1.0.5
@hono/node-server 2.0.10 2.0.11
@typescript/native-preview 7.0.0-dev.20260323.1 7.0.0-dev.20260707.2
hono 4.12.27 4.12.32
tsx 4.22.4 4.23.1
typescript 5.9.3 7.0.2
vite 8.1.3 8.1.5
ws 8.21.0 8.21.1
@tanstack/react-query 5.101.2 5.101.4
react 19.2.7 19.2.8
react-dom 19.2.7 19.2.8
wagmi 3.6.21 3.7.4
accounts 0.14.11 0.15.5

Updates @stripe/stripe-js from 9.9.0 to 9.12.0

Release notes

Sourced from @​stripe/stripe-js's releases.

v9.12.0

New features

  • Bump js-yaml from 3.14.2 to 3.15.0 (#950)
  • Bump ws from 5.2.3 to 5.2.7 (#951)
  • Add optional line item types to Checkout SDK (#949)

v9.10.0

Changed

  • Terms element types (#948)
  • Update Checkout Form change event types (#946)
  • Add fields.name types to AE (#947)
  • Add validateElements type to StripeCheckoutLoadActionsSuccess (#945)
Commits

Updates incur from 0.4.10 to 0.4.19

Release notes

Sourced from incur's releases.

incur@0.4.19

Patch Changes

  • 6c6bc6c: Added configurable MCP server names and titles.

    Cli.create("tapimo", { mcp: { name: "tempo", title: "Tempo MCP" } });

incur@0.4.18

Patch Changes

  • 1cc5c95: Prevented completed MCP JSON responses from retaining transport stream state.
  • 9f11871: Isolated stateless MCP requests, preventing cross-client response collisions and retained aborted requests.

incur@0.4.17

Patch Changes

  • 5b9647a: Delivered CTA suggestions in MCP tool result and error text, keeping _meta.cta for structured consumers.

  • eacc238: Added variadic positional arguments: a final z.array(...) args key collects all remaining positionals.

    Cli.create("my-cli").command("lint", {
  args: z.object({ paths: z.array(z.string()).describe("Files to lint") }),
  run: (c) => ({ count: c.args.paths.length }),
});

incur@0.4.16

Patch Changes

  • 8da2cfc: Fixed parsed global options missing from command handler contexts.

incur@0.4.15

Patch Changes

  • e6f51cd: Changed MCP servers to expose progressive tool discovery by default.

incur@0.4.14

Patch Changes

  • 539d0ac: Added compact and security OpenAPI config options for trimming generated command schemas and skipping credential option injection.
  • 4c0fc4b: Included OpenAPI operation descriptions in MCP tool descriptions by concatenating summary and description; CLI help keeps the short summary.

incur@0.4.13

Patch Changes

  • 20a6f42: Added MCP tool filtering via mcp: false on commands and root-level mcp.tools include/exclude patterns.
  • 3fecb7c: Added remote MCP servers as command sources via cli.command(name, { mcp }).
  • 11b7406: Added context.request for HTTP and MCP invocations and openapiConfig.forwardHeaders for propagating caller headers to upstream APIs.

... (truncated)

Changelog

Sourced from incur's changelog.

0.4.19

Patch Changes

  • 6c6bc6c: Added configurable MCP server names and titles.

    Cli.create("tapimo", { mcp: { name: "tempo", title: "Tempo MCP" } });

0.4.18

Patch Changes

  • 1cc5c95: Prevented completed MCP JSON responses from retaining transport stream state.
  • 9f11871: Isolated stateless MCP requests, preventing cross-client response collisions and retained aborted requests.

0.4.17

Patch Changes

  • 5b9647a: Delivered CTA suggestions in MCP tool result and error text, keeping _meta.cta for structured consumers.

  • eacc238: Added variadic positional arguments: a final z.array(...) args key collects all remaining positionals.

    Cli.create("my-cli").command("lint", {
  args: z.object({ paths: z.array(z.string()).describe("Files to lint") }),
  run: (c) => ({ count: c.args.paths.length }),
});

0.4.16

Patch Changes

  • 8da2cfc: Fixed parsed global options missing from command handler contexts.

0.4.15

Patch Changes

  • e6f51cd: Changed MCP servers to expose progressive tool discovery by default.

0.4.14

Patch Changes

  • 539d0ac: Added compact and security OpenAPI config options for trimming generated command schemas and skipping credential option injection.
  • 4c0fc4b: Included OpenAPI operation descriptions in MCP tool descriptions by concatenating summary and description; CLI help keeps the short summary.

... (truncated)

Commits

Updates ox from 0.14.33 to 1.0.5

Release notes

Sourced from ox's releases.

ox@1.0.5

Patch Changes

  • #314 b179677 Thanks @​jxom! - Corrected Zone chain ID conversion for Presto and Moderato source chains.

    import { ZoneId } from "ox/tempo";
ZoneId.toChainId(1, 42_431);

ox@1.0.4

Patch Changes

  • #312 d7721a1 Thanks @​jxom! - Added EarnShares utilities for Tempo vault share conversions, fee share calculation, and slippage bounds.

ox@1.0.3

Patch Changes

ox@1.0.2

Patch Changes

ox@1.0.1

Patch Changes

  • #301 1815469 Thanks @​jxom! - Preserved leading NUL bytes when decoding ABI string values.

  • #300 1074bb3 Thanks @​jxom! - Restored number-valued SIWE chain IDs for message creation and parsing.

ox@1.0.0

Major Changes

  • #231 40d9408 Thanks @​jxom! - Breaking: Changed ABI decode helpers to checksum decoded addresses by default.

    - AbiParameters.decode(parameters, data)
+ AbiParameters.decode(parameters, data, { checksumAddress: false })

  • #231 40d9408 Thanks @​jxom! - Removed the Tempo TokenId module and narrowed Tempo token inputs (feeToken, Channel.token, PoolId.from tokens) to Address.Address; also removed the now-redundant Channel.Resolved type.

      TxEnvelopeTempo.from({
    // ...
-   feeToken: 1n,
+   feeToken: '0x20c0000000000000000000000000000000000001',

... (truncated)

Changelog

Sourced from ox's changelog.

1.0.5

Patch Changes

  • #314 b179677 Thanks @​jxom! - Corrected Zone chain ID conversion for Presto and Moderato source chains.

    import { ZoneId } from "ox/tempo";
ZoneId.toChainId(1, 42_431);

1.0.4

Patch Changes

  • #312 d7721a1 Thanks @​jxom! - Added EarnShares utilities for Tempo vault share conversions, fee share calculation, and slippage bounds.

1.0.3

Patch Changes

1.0.2

Patch Changes

1.0.1

Patch Changes

  • #301 1815469 Thanks @​jxom! - Preserved leading NUL bytes when decoding ABI string values.

  • #300 1074bb3 Thanks @​jxom! - Restored number-valued SIWE chain IDs for message creation and parsing.

1.0.0

Major Changes

  • #231 40d9408 Thanks @​jxom! - Breaking: Changed ABI decode helpers to checksum decoded addresses by default.

    - AbiParameters.decode(parameters, data)
+ AbiParameters.decode(parameters, data, { checksumAddress: false })

  • #231 40d9408 Thanks @​jxom! - Removed the Tempo TokenId module and narrowed Tempo token inputs (feeToken, Channel.token, PoolId.from tokens) to Address.Address; also removed the now-redundant Channel.Resolved type.

... (truncated)

Commits
Attestation changes

This version has no provenance attestation, while the previous version (0.14.33) was attested. Review the package versions before updating.


Updates @hono/node-server from 2.0.10 to 2.0.11

Release notes

Sourced from @​hono/node-server's releases.

v2.0.11

What's Changed

Full Changelog: honojs/node-server@v2.0.10...v2.0.11

Commits

Updates @typescript/native-preview from 7.0.0-dev.20260323.1 to 7.0.0-dev.20260707.2

Commits
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for @​typescript/native-preview since your current version.


Updates hono from 4.12.27 to 4.12.32

Release notes

Sourced from hono's releases.

v4.12.32

What's Changed

  • ci: enable reports for type & bundle size check in honojs/hono#5148
  • fix(aws-lambda): add jwt and lambda authorizer types for API Gateway v2 in honojs/hono#5142
  • fix(sse): emit empty id field to reset Last-Event-ID in honojs/hono#5138
  • test(cloudflare-workers): add coverage for onClose, onError, send, and close in Cloudflare Workers websocket adapter in honojs/hono#5145
  • fix: use Object.create(null) when parsing query, headers, and params in honojs/hono#5161
  • fix(secure-headers): keep CSP callbacks scoped to their header in honojs/hono#5147

Full Changelog: honojs/hono@v4.12.31...v4.12.32

v4.12.31

What's Changed

Full Changelog: honojs/hono@v4.12.30...v4.12.31

v4.12.30

What's Changed

Full Changelog: honojs/hono@v4.12.29...v4.12.30

v4.12.29

What's Changed

New Contributors

... (truncated)

Commits
  • 26d8e42 4.12.32
  • 402eb3a fix(secure-headers): keep CSP callbacks scoped to their header (#5147)
  • c85aead fix: use Object.create(null) when parsing query, headers, and params (#5161)
  • a88c89d test(cloudflare-workers): add coverage for onClose, onError, send, and close ...
  • 44f8843 fix(sse): emit empty id field to reset Last-Event-ID (#5138)
  • e36f57d fix(aws-lambda): add jwt and lambda authorizer types for API Gateway v2 (#5142)
  • bf8608c ci: enable reports for type & bundle size check (#5148)
  • cadff88 4.12.31
  • 64c613a test(validator): fix misspelled identifier in transform type test (#5136)
  • aeba9ec fix(sse): emit retry feild when retry is 0 (#5135)
  • Additional commits viewable in compare view

Updates tsx from 4.22.4 to 4.23.1

Release notes

Sourced from tsx's releases.

v4.23.1

4.23.1 (2026-07-13)

Bug Fixes

  • support tsImport after global preload (8d4ffc2)
  • watch: avoid clearing piped output (95d0672)
  • watch: treat script and dependency paths literally (79fddde)

Performance Improvements

  • index transform cache lazily (e818ad6)
  • load esbuild lazily in CLI (d067938)
  • map Node TypeScript formats directly (cdcc623)
  • use sync module hooks on Node v22.22.3+ (f8992f1)

This release is also available on:

v4.23.0

4.23.0 (2026-07-03)

Bug Fixes

Features

This release is also available on:

v4.22.5

4.22.5 (2026-07-02)

Bug Fixes

  • isolate hook state per async module.register() registration (a305f36)

This release is also available on:

Commits
  • 79fddde fix(watch): treat script and dependency paths literally
  • e818ad6 perf: index transform cache lazily
  • cdcc623 perf: map Node TypeScript formats directly
  • d067938 perf: load esbuild lazily in CLI
  • 95d0672 fix(watch): avoid clearing piped output
  • 6fd4607 docs: add per-page metadata
  • f4176d8 docs: generate sitemap
  • 8d4ffc2 fix: support tsImport after global preload
  • f0e89b2 docs: document Node's public type-stripping API vs internal loader path
  • f8992f1 perf: use sync module hooks on Node v22.22.3+
  • Additional commits viewable in compare view

Updates typescript from 5.9.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0 Beta

For release notes, check out the release announcement.

Downloads are available on:

Commits
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.


Updates vite from 8.1.3 to 8.1.5

Release notes

Sourced from vite's releases.

v8.1.5

Please refer to CHANGELOG.md for details.

v8.1.4

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.1.5 (2026-07-16)

Bug Fixes

  • bundled-dev: avoid duplicated buildEnd (#22931) (8100320)
  • client: overlay error message format align rolldown (#22869) (5a72b87)
  • deps: update all non-major dependencies (#22921) (fef682d)
  • deps: update rolldown-related dependencies (#22922) (3c345e4)
  • module-runner: don't crash stack-trace source mapping when globalThis.Buffer is absent (#22945) (f8b38e3)
  • optimizer: respect importer module format for dynamic import interop with CJS deps (#22951) (6c08c39)
  • ssr: scope switch-case declarations to the switch, not the function (#22893) (b59a73f)

Documentation

  • build: fix incorrect @default for build.cssMinify (#22948) (c88c236)
  • build: fix incorrect @default for build.lib.formats (#22911) (369ed60)

Tests

  • avoid scanner scanning all files under __tests__ (#22912) (c961cae)

8.1.4 (2026-07-09)

Features

Bug Fixes

  • build: add workaround for building on stackblitz (#22840) (575c32c)
  • build: keep import.meta.url in preload function as-is (#22839) (f1f90ed)
  • deps: update all non-major dependencies (#22865) (d4295a9)
  • deps: update rolldown-related dependencies (#22866) (7cf07e4)
  • html: avoid backtracking in import-only check (#22848) (b5868c0)
  • optimizer: avoid optimizer run for transform request before init (#22852) (72a5e21)
  • ssr: align named export function call stacktrace column with Node (#22829) (173a1b6)
  • strip pure CSS chunk imports when chunkImportMap is enabled (#22841) (648bd04)

Documentation

Miscellaneous Chores

  • deps: update dependency postcss-modules to v9 (#22867) (a9539d6)

Code Refactoring

Tests

... (truncated)

Commits
  • 5e7fe12 release: v8.1.5
  • 6c08c39 fix(optimizer): respect importer module format for dynamic import interop wit...
  • 5a72b87 fix(client): overlay error message format align rolldown (#22869)
  • f8b38e3 fix(module-runner): don't crash stack-trace source mapping when globalThis.Bu...
  • 8100320 fix(bundled-dev): avoid duplicated buildEnd (#22931)
  • c88c236 docs(build): fix incorrect @default for build.cssMinify (#22948)
  • b59a73f fix(ssr): scope switch-case declarations to the switch, not the function (#22...
  • fef682d fix(deps): update all non-major dependencies (#22921)
  • 3c345e4 fix(deps): update rolldown-related dependencies (#22922)
  • 369ed60 docs(build): fix incorrect @default for build.lib.formats (#22911)
  • Additional commits viewable in compare view

Updates ws from 8.21.0 to 8.21.1

Release notes

Sourced from ws's releases.

8.21.1

Bug fixes

  • Empty fragments are now counted toward the limit (a2f4e7c0).
  • The default values of the maxBufferedChunks and maxFragments options have been reduced (f197ac65).
Commits
  • ae1de54 [dist] 8.21.1
  • 8e9511b [ci] Trust Coveralls Homebrew tap
  • f197ac6 [fix] Lower default values of maxBufferedChunks and maxFragments
  • 8df8265 [ci] Update actions/checkout action to v7
  • a2f4e7c [fix] Count empty fragments toward the limit (#2329)
  • e79f912 [pkg] Approve install scripts for bufferutil and utf-8-validate
  • 4ea355d [doc] Document 32-bit signed integer coercion for option values
  • 2120f4c [example] Remove uuid dependency
  • 4c534a6 [security] Add latest vulnerability to SECURITY.md
  • See full diff in compare view

Updates @tanstack/react-query from 5.101.2 to 5.101.4

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-devtools@​5.101.4

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.101.4
    • @​tanstack/react-query@​5.101.4

@​tanstack/react-query-next-experimental@​5.101.4

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.101.4

@​tanstack/react-query-persist-client@​5.101.4

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.101.4
    • @​tanstack/react-query@​5.101.4

@​tanstack/react-query@​5.101.4

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.101.4

@​tanstack/react-query-devtools@​5.101.3

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.101.3
    • @​tanstack/react-query@​5.101.3

@​tanstack/react-query-next-experimental@​5.101.3

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.101.3

@​tanstack/react-query-persist-client@​5.101.3

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.101.3
    • @​tanstack/react-query@​5.101.3

@​tanstack/react-query@​5.101.3

Patch Changes

... (truncated)

Changelog

Sourced from @​tanstack/react-query's changelog.

5.101.4

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.101.4

5.101.3

Patch Changes

  • Updated dependencies [7e3c822]:
    • @​tanstack/query-core@​5.101.3
Commits
  • 86bb8a6 ci: Version Packages (#11094)
  • 181ea82 ci: Version Packages (#11089)
  • 6d55b07 test({react,preact}-query): use the '.then()' convention consistently (#11085)
  • 44f38df test({react,preact,solid}-query/useInfiniteQuery): inline the shared 'fetchIt...
  • d1558c1 test({react,preact}-query/usePrefetchQuery): inline the 'generateQueryFn' fac...
  • 99690d1 test({react,preact}-query/usePrefetchInfiniteQuery): inline single-use helper...
  • 10770f0 test({react,preact}-query/usePrefetchInfiniteQuery): inline the shared 'Suspe...
  • dbd5a86 test({react,preact}-query/usePrefetchQuery): inline the shared 'Suspended' co...
  • b955f60 test({react,preact}-query/useSuspenseQuery): assert the 'loading' fallback is...
  • b9c657e test({react,preact}-query/usePrefetchQuery): assert the 'Loading...' fallback...
  • Additional commits viewable in compare view

Updates react from 19.2.7 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

Commits

Updates react-dom from 19.2.7 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

Commits

Updates wagmi from 3.6.21 to 3.7.4

Release notes

Sourced from wagmi's releases.

wagmi@3.7.4

Patch Changes

  • Breaking (wagmi/tempo): Removed Hooks.zone.useDepositStatus to align with the current Tempo Zone API. Use Hooks.zone.useWaitForTempoBlock to wait for a block import, or use Hooks.zone.useZoneInfo and inspect tempoBlockNumber for a one-shot read. (#5204)

  • Updated dependencies [0a8eb51, bfa70e3]:

    • @​wagmi/core@​3.6.4
    • @​wagmi/connectors@​8.0.25

wagmi@3.7.3

Patch Changes

  • Updated dependencies [57ac9b0]:
    • @​wagmi/core@​3.6.3
    • @​wagmi/connectors@​8.0.24

wagmi@3.7.2

Patch Changes

  • Fixed Tempo Zone hook compatibility with Viem 2.55.2. (#5198)

  • Updated dependencies [54497eb]:

    • @​wagmi/core@​3.6.2
    • @​wagmi/connectors@​8.0.23

wagmi@3.7.1

Patch Changes

  • Updated dependencies [

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 1, 2026
@socket-security

socket-security Bot commented Aug 1, 2026 •
edited
Loading

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Addedincur@​0.4.197610010097100
Updatedaccounts@​0.14.11 ⏵ 0.15.5791009999 +2100
Addedwagmi@​3.7.4801007998100
Added@​types/​node@​26.1.21001008196100
Addedvite@​8.1.5981008298100
Addedreact@​19.2.81001008497100
Added@​tanstack/​react-query@​5.101.4991008797100
Addedreact-dom@​19.2.81001009298100
Addedws@​8.21.19910010093100
Added@​hono/​node-server@​2.0.119810010096100
Addedhono@​4.12.32991009796100
Updated@​stripe/​stripe-js@​9.9.0 ⏵ 9.12.09910010099100

View full report

@pkg-pr-new

pkg-pr-new Bot commented Aug 1, 2026 •
edited
Loading

Copy link
Copy Markdown

Open in StackBlitz

npm i https://pkg.pr.new/mppx@737

commit: a4c02af

@dependabot @brendanjryan
chore(deps): bump the npm-production group across 1 directory with 15…
a4c02af 
… updates

Bumps the npm-production group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@stripe/stripe-js](https://github.com/stripe/stripe-js) | `9.9.0` | `9.12.0` |
| [incur](https://github.com/wevm/incur) | `0.4.10` | `0.4.19` |
| [ox](https://github.com/wevm/ox) | `0.14.33` | `1.0.5` |
| [@hono/node-server](https://github.com/honojs/node-server) | `2.0.10` | `2.0.11` |
| [@typescript/native-preview](https://github.com/microsoft/typescript-go) | `7.0.0-dev.20260323.1` | `7.0.0-dev.20260707.2` |
| [hono](https://github.com/honojs/hono) | `4.12.27` | `4.12.32` |
| [tsx](https://github.com/privatenumber/tsx) | `4.22.4` | `4.23.1` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `7.0.2` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.1.3` | `8.1.5` |
| [ws](https://github.com/websockets/ws) | `8.21.0` | `8.21.1` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.101.2` | `5.101.4` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.2.8` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` |
| [wagmi](https://github.com/wevm/wagmi/tree/HEAD/packages/react) | `3.6.21` | `3.7.4` |
| [accounts](https://github.com/tempoxyz/accounts) | `0.14.11` | `0.15.5` |

Updates `@stripe/stripe-js` from 9.9.0 to 9.12.0
- [Release notes](https://github.com/stripe/stripe-js/releases)
- [Commits](stripe/stripe-js@v9.9.0...v9.12.0)

Updates `incur` from 0.4.10 to 0.4.19
- [Release notes](https://github.com/wevm/incur/releases)
- [Changelog](https://github.com/wevm/incur/blob/main/CHANGELOG.md)
- [Commits](https://github.com/wevm/incur/compare/incur@0.4.10...incur@0.4.19)

Updates `ox` from 0.14.33 to 1.0.5
- [Release notes](https://github.com/wevm/ox/releases)
- [Changelog](https://github.com/wevm/ox/blob/main/CHANGELOG.md)
- [Commits](https://github.com/wevm/ox/compare/ox@0.14.33...ox@1.0.5)

Updates `@hono/node-server` from 2.0.10 to 2.0.11
- [Release notes](https://github.com/honojs/node-server/releases)
- [Commits](honojs/node-server@v2.0.10...v2.0.11)

Updates `@typescript/native-preview` from 7.0.0-dev.20260323.1 to 7.0.0-dev.20260707.2
- [Release notes](https://github.com/microsoft/typescript-go/releases)
- [Changelog](https://github.com/microsoft/typescript-go/blob/main/CHANGES.md)
- [Commits](https://github.com/microsoft/typescript-go/commits)

Updates `hono` from 4.12.27 to 4.12.32
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.12.27...v4.12.32)

Updates `tsx` from 4.22.4 to 4.23.1
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.22.4...v4.23.1)

Updates `typescript` from 5.9.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/commits)

Updates `vite` from 8.1.3 to 8.1.5
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.1.5/packages/vite)

Updates `ws` from 8.21.0 to 8.21.1
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.21.0...8.21.1)

Updates `@tanstack/react-query` from 5.101.2 to 5.101.4
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.101.4/packages/react-query)

Updates `react` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react)

Updates `react-dom` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom)

Updates `wagmi` from 3.6.21 to 3.7.4
- [Release notes](https://github.com/wevm/wagmi/releases)
- [Changelog](https://github.com/wevm/wagmi/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/wevm/wagmi/commits/wagmi@3.7.4/packages/react)

Updates `accounts` from 0.14.11 to 0.15.5
- [Release notes](https://github.com/tempoxyz/accounts/releases)
- [Changelog](https://github.com/tempoxyz/accounts/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tempoxyz/accounts/compare/accounts@0.14.11...accounts@0.15.5)

---
updated-dependencies:
- dependency-name: "@stripe/stripe-js"
  dependency-version: 9.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: incur
  dependency-version: 0.4.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: ox
  dependency-version: 1.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-production
- dependency-name: "@hono/node-server"
  dependency-version: 2.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: "@typescript/native-preview"
  dependency-version: 7.0.0-dev.20260707.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: hono
  dependency-version: 4.12.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: tsx
  dependency-version: 4.23.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-production
- dependency-name: vite
  dependency-version: 8.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: ws
  dependency-version: 8.21.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.101.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: react
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: react-dom
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: wagmi
  dependency-version: 3.7.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: accounts
  dependency-version: 0.15.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
...

Signed-off-by: dependabot[bot] <support@github.com>
@brendanjryan
brendanjryan force-pushed the dependabot/npm_and_yarn/npm-production-10c68d8852 branch from bc6e100 to a4c02af Compare August 1, 2026 17:27
@brendanjryan
brendanjryan merged commit f3a9369 into main Aug 1, 2026
15 checks passed
@brendanjryan
brendanjryan deleted the dependabot/npm_and_yarn/npm-production-10c68d8852 branch August 1, 2026 17:39
@bensandler-stripe bensandler-stripe mentioned this pull request Aug 3, 2026
Closed
2 tasks
bensandler-stripe added a commit to bensandler-stripe/mppx that referenced this pull request Aug 3, 2026
@bensandler-stripe @claude
fix(deps): align package.json with workspace overrides, ignore pinned…
d81934a 
… deps

Dependabot PR wevm#737 bumped ox, typescript, and file-type in package.json
but the pnpm-workspace.yaml overrides continued pinning the old versions.
This caused a silent mismatch where the declared deps differed from what
was actually installed:

- ox: declared 1.0.5, installed 0.14.33 (pinned for viem@2.55.10 compat)
- typescript: declared ~7.0.2, installed ~5.9.3
- file-type: declared 22.0.1, installed 21.3.2

Revert package.json to match the workspace overrides and add dependabot
ignore rules for all packages pinned via pnpm-workspace.yaml overrides,
since dependabot cannot read those overrides and the bumps have no effect.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Committed-By-Agent: claude
bensandler-stripe added a commit to bensandler-stripe/mppx that referenced this pull request Aug 3, 2026
@bensandler-stripe @claude
fix(deps): align package.json with workspace overrides, add CI drift …
e6c6c9c 
…check

Dependabot PR wevm#737 bumped ox, typescript, and file-type in package.json
but the pnpm-workspace.yaml overrides continued pinning the old versions.
This caused a silent mismatch where the declared deps differed from what
was actually installed:

- ox: declared 1.0.5, installed 0.14.33 (pinned for viem@2.55.10 compat)
- typescript: declared ~7.0.2, installed ~5.9.3
- file-type: declared 22.0.1, installed 21.3.2

Fix: revert package.json to match the workspace overrides and add a CI
check (scripts/check-override-drift.js) that fails when package.json
versions conflict with workspace overrides. This prevents future drift
without maintaining a brittle manual ignore list -- the check reads
pnpm-workspace.yaml at CI time and catches any dependabot PR that bumps
an overridden package.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Committed-By-Agent: claude
bensandler-stripe added a commit to bensandler-stripe/mppx that referenced this pull request Aug 3, 2026
@bensandler-stripe @claude
fix(deps): align package.json with workspace overrides, add CI drift …
a8ac72e 
…check

Dependabot PR wevm#737 bumped ox, typescript, and file-type in package.json
but the pnpm-workspace.yaml overrides continued pinning the old versions.
This caused a silent mismatch where the declared deps differed from what
was actually installed:

- ox: declared 1.0.5, installed 0.14.33 (pinned for viem@2.55.10 compat)
- typescript: declared ~7.0.2, installed ~5.9.3
- file-type: declared 22.0.1, installed 21.3.2

Fix: revert package.json to match the workspace overrides and add a CI
check (scripts/check-override-drift.ts) that fails when package.json
versions conflict with workspace overrides. This prevents future drift
without maintaining a brittle manual ignore list -- the check reads
pnpm-workspace.yaml at CI time and catches any dependabot PR that bumps
an overridden package.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Committed-By-Agent: claude
@bensandler-stripe bensandler-stripe mentioned this pull request Aug 3, 2026
Closed
bensandler-stripe added a commit to bensandler-stripe/mppx that referenced this pull request Aug 3, 2026
@bensandler-stripe @claude
fix(deps): align package.json with workspace overrides, add CI drift …
9b20d99 
…check

Dependabot PR wevm#737 bumped ox, typescript, and file-type in package.json
but the pnpm-workspace.yaml overrides continued pinning the old versions.
This caused a silent mismatch where the declared deps differed from what
was actually installed:

- ox: declared 1.0.5, installed 0.14.33 (pinned for viem@2.55.10 compat)
- typescript: declared ~7.0.2, installed ~5.9.3
- file-type: declared 22.0.1, installed 21.3.2

Fix: revert package.json to match the workspace overrides and add a CI
check (scripts/check-override-drift.ts) that fails when package.json
versions conflict with workspace overrides. This prevents future drift
without maintaining a brittle manual ignore list -- the check reads
pnpm-workspace.yaml at CI time and catches any dependabot PR that bumps
an overridden package.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Committed-By-Agent: claude
bensandler-stripe added a commit to bensandler-stripe/mppx that referenced this pull request Aug 3, 2026
@bensandler-stripe @claude
fix(deps): align package.json with workspace overrides, add CI drift …
613de5c 
…check

Dependabot PR wevm#737 bumped ox, typescript, and file-type in package.json
but the pnpm-workspace.yaml overrides continued pinning the old versions.
This caused a silent mismatch where the declared deps differed from what
was actually installed:

- ox: declared 1.0.5, installed 0.14.33 (pinned for viem@2.55.10 compat)
- typescript: declared ~7.0.2, installed ~5.9.3
- file-type: declared 22.0.1, installed 21.3.2

Fix: revert package.json to match the workspace overrides and add a CI
check (scripts/check-override-drift.ts) that fails when package.json
versions conflict with workspace overrides. This prevents future drift
without maintaining a brittle manual ignore list -- the check reads
pnpm-workspace.yaml at CI time and catches any dependabot PR that bumps
an overridden package.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Committed-By-Agent: claude
bensandler-stripe added a commit to bensandler-stripe/mppx that referenced this pull request Aug 3, 2026
@bensandler-stripe @claude
fix(deps): align package.json with workspace overrides, add CI drift …
06b8793 
…check

Dependabot PR wevm#737 bumped ox, typescript, and file-type in package.json
but the pnpm-workspace.yaml overrides continued pinning the old versions.
This caused a silent mismatch where the declared deps differed from what
was actually installed:

- ox: declared 1.0.5, installed 0.14.33 (pinned for viem@2.55.10 compat)
- typescript: declared ~7.0.2, installed ~5.9.3
- file-type: declared 22.0.1, installed 21.3.2

Fix: revert package.json to match the workspace overrides and add a CI
check (scripts/check-override-drift.ts) that fails when package.json
versions conflict with workspace overrides. This prevents future drift
without maintaining a brittle manual ignore list -- the check reads
pnpm-workspace.yaml at CI time and catches any dependabot PR that bumps
an overridden package.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Committed-By-Agent: claude
bensandler-stripe added a commit to bensandler-stripe/mppx that referenced this pull request Aug 3, 2026
@bensandler-stripe @claude
fix(deps): align package.json with workspace overrides, add CI drift …
2ac81ff 
…check

Dependabot PR wevm#737 bumped ox, typescript, and file-type in package.json
but the pnpm-workspace.yaml overrides continued pinning the old versions.
This caused a silent mismatch where the declared deps differed from what
was actually installed:

- ox: declared 1.0.5, installed 0.14.33 (pinned for viem@2.55.10 compat)
- typescript: declared ~7.0.2, installed ~5.9.3
- file-type: declared 22.0.1, installed 21.3.2

Fix: revert package.json to match the workspace overrides and add a CI
check (scripts/check-override-drift.ts) that fails when package.json
versions conflict with workspace overrides. This prevents future drift
without maintaining a brittle manual ignore list -- the check reads
pnpm-workspace.yaml at CI time and catches any dependabot PR that bumps
an overridden package.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Committed-By-Agent: claude
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@brendanjryan