chore(deps): bump the npm-production group across 1 directory with 18 updates by dependabot[bot] · Pull Request #885 · wevm/mppx

dependabot · 2026-09-09T16:23:47Z

Bumps the npm-production group with 18 updates in the / directory:

Package	From	To
@stripe/stripe-js	`9.13.0`	`9.15.0`
eventsource-parser	`3.1.1`	`4.1.0`
zod	`4.4.3`	`4.5.4`
@hono/node-server	`2.1.0`	`2.1.1`
@x402/core	`2.22.0`	`2.24.0`
@x402/evm	`2.22.0`	`2.24.0`
@x402/express	`2.22.0`	`2.24.0`
tsx	`4.23.12`	`4.23.13`
viem	`2.55.13`	`2.56.3`
vite	`8.2.1`	`8.2.2`
@remix-run/node-fetch-server	`0.14.0`	`0.14.1`
bun	`1.3.14`	`1.4.0`
@tanstack/react-query	`5.101.4`	`5.102.8`
wagmi	`3.7.6`	`3.7.7`
stripe	`17.7.0`	`22.6.1`
accounts	`0.16.0`	`0.18.3`
file-type	`22.0.1`	`22.0.2`
ox	`0.14.33`	`1.7.4`

Updates @stripe/stripe-js from 9.13.0 to 9.15.0

Release notes

Sourced from @stripe/stripe-js's releases.

v9.15.0

New features

Add types for stripe.createConfirmationToken params.metadata (#963)

Add buttonBoxShadow appearance variable type (#964)

v9.14.0

CPM in ECE - Update API types (#959)

Add types for new walletOptions top-level parameter for PE create/update (#952)

Add deprecation tag to onShippingDetailsChange for Embedded Checkout (#960)

Bump js-yaml from 3.15.0 to 3.15.1 (#958)

New features

Fixes

Changed

Commits

9c83132 v9.15.0
ad774c5 Add types for stripe.createConfirmationToken params.metadata (#963)
07adacf Add buttonBoxShadow appearance variable type (#964)
8daa6fa v9.14.0
16f79ed CPM in ECE - Update API types (#959)
5ab3ba1 Add types for new walletOptions top-level parameter for PE create/update (#952)
bdd9b4b Add deprecation tag to onShippingDetailsChange for Embedded Checkout (#960)
34ee197 Bump js-yaml from 3.15.0 to 3.15.1 (#958)
See full diff in compare view

Updates eventsource-parser from 3.1.1 to 4.1.0

Release notes

Sourced from eventsource-parser's releases.

v4.1.0

Minor Changes

#39 0482048 Thanks @rexxars! - Added an onId callback that reports ID fields when an event block ends, including blocks without data.

v4.0.0

Major Changes

#33 39cf365 Thanks @rexxars! - Require Node.js 22.12 or higher, drop the CommonJS build, and discard invalid lines instead of buffering them

Breaking changes

Node.js 18 and 20 are no longer supported. engines now requires >=22.12, and the browserslist target moved from node >= 18 to node >= 22.12. Older versions may keep working, but they are no longer tested or guaranteed.

The CommonJS build has been removed. The main field and the require export conditions are gone, so the package resolves to ./dist/index.js and ./dist/stream.js only. Node 22.12 and above supports require(esm) transparently, so require('eventsource-parser') continues to work there.

The root stream.js file has been removed. It re-exported ./dist/stream.cjs for React Native and other bundlers without package exports support. Import eventsource-parser/stream instead, and make sure your bundler resolves the exports field.

Invalid lines are now discarded as soon as the parser can tell they cannot become a valid SSE field, rather than being buffered until the line terminator arrives. onError is not called for these, and no line, field, or value is retained. Only lines that are complete when found to be invalid still produce a ParseError with type: 'unknown-field'. This also means reset({consume: true}) no longer reports pending data that was already discarded.

Partial comment lines (starting with :) are only buffered when an onComment callback is configured. Without one, they are discarded like any other line the parser has no use for.

Other changes

A leading byte order mark is now stripped whether it arrives as a decoded U+FEFF (for example from a TextDecoder created with ignoreBOM) or as the raw three byte 0xEF 0xBB 0xBF sequence. Previously only the raw form was handled.

The README documented an invalid-field error type that the parser never emitted. The ErrorType union is unchanged; the documentation now correctly refers to unknown-field.

Changelog

Sourced from eventsource-parser's changelog.

4.1.0

Minor Changes

#39 0482048 Thanks @rexxars! - Added an onId callback that reports ID fields when an event block ends, including blocks without data.

4.0.0

Major Changes

#33 39cf365 Thanks @rexxars! - Require Node.js 22.12 or higher, drop the CommonJS build, and discard invalid lines instead of buffering them

Breaking changes

Node.js 18 and 20 are no longer supported. engines now requires >=22.12, and the browserslist target moved from node >= 18 to node >= 22.12. Older versions may keep working, but they are no longer tested or guaranteed.

The CommonJS build has been removed. The main field and the require export conditions are gone, so the package resolves to ./dist/index.js and ./dist/stream.js only. Node 22.12 and above supports require(esm) transparently, so require('eventsource-parser') continues to work there.

The root stream.js file has been removed. It re-exported ./dist/stream.cjs for React Native and other bundlers without package exports support. Import eventsource-parser/stream instead, and make sure your bundler resolves the exports field.

Invalid lines are now discarded as soon as the parser can tell they cannot become a valid SSE field, rather than being buffered until the line terminator arrives. onError is not called for these, and no line, field, or value is retained. Only lines that are complete when found to be invalid still produce a ParseError with type: 'unknown-field'. This also means reset({consume: true}) no longer reports pending data that was already discarded.

Partial comment lines (starting with :) are only buffered when an onComment callback is configured. Without one, they are discarded like any other line the parser has no use for.

Other changes

A leading byte order mark is now stripped whether it arrives as a decoded U+FEFF (for example from a TextDecoder created with ignoreBOM) or as the raw three byte 0xEF 0xBB 0xBF sequence. Previously only the raw form was handled.

The README documented an invalid-field error type that the parser never emitted. The ErrorType union is unchanged; the documentation now correctly refers to unknown-field.

Commits

6519a0f chore: version packages (#40)
f54bf65 docs: clarify eventsource being cross-runtime, not node.js exclusive
0482048 feat: add an onId callback (#39)
202c19e chore: version packages (#36)
fde4ca2 ci: use a conventional commit subject for the version pull request (#38)
f32fda2 ci: generate changesets from conventional commit PR titles (#37)
c8cd582 chore: add changeset for #33
39cf365 feat!: require node 22.12 or higher, drop commonjs, reduce memory usage (#33)
0e767c4 docs: prepare CHANGELOG.md for changesets
f56f2d2 ci: replace semantic-release with changesets (#35)
See full diff in compare view

Updates zod from 4.4.3 to 4.5.4

Release notes

Sourced from zod's releases.

v4.5.4

Commits:

84e416fbf4740527bbc8f319634f4e1b065bb42c fix(v4): stop the cycle walk from firing a default factory (#6500)

e8e206fa33ac5fe7ce20a2beb12d57b1cb3df653 4.5.4

v4.5.3

Commits:

e6b6ab347675cd2bd54b1bdbed16f98c59be82a9 docs(blog): widen the z.compile example to a 20-property schema

87d6464418582bb96fc665a01f852ca6da324ad0 fix(docs): drop the OG description when the title wraps past two lines

99fce394a026823e602b9c30d8d5d9f5f1932ce7 bench(v4): z.compile() against zod-compiler (#6499)

e3a695b6bf3f0d591ea682816e3cdaea04b0f967 docs(v4): record the email regex and container output-shape findings under Open

7e24a24288183ce02554f1ded7775d0650a7b7e6 docs(blog): drop the reading time and put a GitHub link in the navbar

eab51ff3592b2d11d863f4ee4d5452f31a3de1b6 fix(v4): emit record numeric keys as strings in toJSONSchema (#6497)

v4.5.2

Commits:

a354314ac04fdd5484aa62dd5c3a4b553211a0e4 fix(docs): keep blog posts out of the docs collection (#6484)

d378c42aff6869f0929058a7923cd775880f5c4c ci: drop canary publishing from the release workflow (#6487)

212b941791e7faae078e17645eb612824fd8f79a fix(v4): let a prototype method getter answer a bare call so vi.spyOn works (#6488)

e7576f542a7bc7ef3cc5eeec237714fd0e6b6e98 docs(blog): let the page show through the navbar in dark mode (#6489)

fedb06fafe33a66ce0b5c236ad2557e0a5a170fe fix(docs): match the blog TOC hover bar to the 2px active indicator

6c932fcb2eea6eb671710ea058ca9fdc382ada89 chore: bump devcontainer image to Node 24 (#6470)

6635d9dd367a664109de83c021995821f48efa29 docs(blog): soften the "method memoization" attribution

019ae299cc75daa132bf1acf59086a520abf6b85 fix(docs): drop ISR on the docs route so the home page hydrates

652bb438aa4c626c1cd7948c6849c4691239fca7 chore(docs): drop the scroll log from the route-change scroller

571c8e8a3d73b4305f4abfdd6977773cc12f2bf5 fix(docs): render blog tabs with the stock fumadocs tab card

9a193aa24b4efa3b315b91d4c56c8bc385b8513f 4.5.2

v4.5.1

Commits:

2e862dbf89da2835e5206a8fd3d3be61afe3cf7f ci: gate the GitHub release and JSR publish on the version being live on npm

8e03380510db36fa6fda979fc78a375fdea8021c 4.5.1

v4.5.0

Zod 4.5 is now available.
npm install zod@latest
At a glance:

https://github.com/colinhacks/zod/blob/HEAD[https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADohttps://github.com/colinhacks/zod/blob/HEADmhttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD]https://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADohttps://github.com/colinhacks/zod/blob/HEADmhttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD — the flagship feature of Zod 4.5

https://github.com/colinhacks/zod/blob/HEAD[https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADChttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD]https://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD — 12–19 digits plus Luhn checksum

https://github.com/colinhacks/zod/blob/HEAD[https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADohttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADshttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD]https://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADohttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADshttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD — the multi-property counterpart to z.property()

https://github.com/colinhacks/zod/blob/HEAD[https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADPhttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD]https://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD/https://github.com/colinhacks/zod/blob/HEAD[https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADxhttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADPhttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD]https://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADxhttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD

... (truncated)

Commits

e8e206f 4.5.4
84e416f fix(v4): stop the cycle walk from firing a default factory (#6500)
1a16102 4.5.3
eab51ff fix(v4): emit record numeric keys as strings in toJSONSchema (#6497)
7e24a24 docs(blog): drop the reading time and put a GitHub link in the navbar
e3a695b docs(v4): record the email regex and container output-shape findings under Open
99fce39 bench(v4): z.compile() against zod-compiler (#6499)
87d6464 fix(docs): drop the OG description when the title wraps past two lines
e6b6ab3 docs(blog): widen the z.compile example to a 20-property schema
9a193aa 4.5.2
Additional commits viewable in compare view

Updates @hono/node-server from 2.1.0 to 2.1.1

Release notes

Sourced from @hono/node-server's releases.

v2.1.1

What's Changed

perf: lazily materialize request headers by @BlankParticle in honojs/node-server#389

Full Changelog: honojs/node-server@v2.1.0...v2.1.1

Commits

73c03ad 2.1.1
5515aa0 perf: lazily materialize request headers (#389)
See full diff in compare view

Updates @x402/core from 2.22.0 to 2.24.0

Commits

b703a0e Update docs/sdk-features.md (#3286)
8ac521c chore(go): release (#3289)
d22ae96 chore: version python package (#3288)
f257584 chore: version typescript packages (#3287)
44f6b17 feat(ts/go): auth-capture client v1.1 (#3283)
8468e3a Fix SVM upto facilitator RPC configuration examples (#3277)
acaa904 fix(ts/go): refactor svm upto rpc config (#3274)
b32b564 fix: upto proxy canonical address (#3276)
ab1b418 feat(evm): add Upto-only deployment entrypoint (#3199)
b1a88ef Update docs/schemes/exact.mdx (#3272)
Additional commits viewable in compare view

Updates @x402/evm from 2.22.0 to 2.24.0

Commits

b703a0e Update docs/sdk-features.md (#3286)
8ac521c chore(go): release (#3289)
d22ae96 chore: version python package (#3288)
f257584 chore: version typescript packages (#3287)
44f6b17 feat(ts/go): auth-capture client v1.1 (#3283)
8468e3a Fix SVM upto facilitator RPC configuration examples (#3277)
acaa904 fix(ts/go): refactor svm upto rpc config (#3274)
b32b564 fix: upto proxy canonical address (#3276)
ab1b418 feat(evm): add Upto-only deployment entrypoint (#3199)
b1a88ef Update docs/schemes/exact.mdx (#3272)
Additional commits viewable in compare view

Updates @x402/express from 2.22.0 to 2.24.0

Commits

b703a0e Update docs/sdk-features.md (#3286)
8ac521c chore(go): release (#3289)
d22ae96 chore: version python package (#3288)
f257584 chore: version typescript packages (#3287)
44f6b17 feat(ts/go): auth-capture client v1.1 (#3283)
8468e3a Fix SVM upto facilitator RPC configuration examples (#3277)
acaa904 fix(ts/go): refactor svm upto rpc config (#3274)
b32b564 fix: upto proxy canonical address (#3276)
ab1b418 feat(evm): add Upto-only deployment entrypoint (#3199)
b1a88ef Update docs/schemes/exact.mdx (#3272)
Additional commits viewable in compare view

Updates tsx from 4.23.12 to 4.23.13

Release notes

Sourced from tsx's releases.

v4.23.13

4.23.13 (2026-08-30)

Bug Fixes

cache: bound shared transform cache memory (#835) (28e1f12)

This release is also available on:

npm package (@latest dist-tag)

Commits

28e1f12 fix(cache): bound shared transform cache memory (#835)
See full diff in compare view

Updates viem from 2.55.13 to 2.56.3

Release notes

Sourced from viem's releases.

viem@2.56.3

Patch Changes

#5059 e3de334a73bd06ee16ba6a1e30e1bb2cf94ea708 Thanks @jxom! - Made Tempo Zone return types portable across declaration-emitting projects.

#5061 1ba6aa3860bcbe2c1c51257b1a2c386d182507e7 Thanks @jxom! - viem/tempo: Added chain inference to Multisig.handleRequest downstream request options.

viem@2.56.2

Patch Changes

#5042 5df98198c47cb898ba35a1afcd2abd5d0cbcc371 Thanks @Wagalidoom! - Fixed isHash returning true for odd-length hex strings. size rounds odd-length hex up to the next whole byte, so a 63-character hex string reported a size of 32 and passed the check. isHash now validates the length directly.

#4913 ef4be8eb45abc773587abb1df7fd8791acf30413 Thanks @Kropiunig! - Fixed signed hexToBigInt and hexToNumber calls with odd-length hex values.

#5029 dd7d792dd84f57d1784af56058fe88d3149a44fb Thanks @jxom! - viem/tempo: Added Multisig accounts.

viem@2.56.1

Patch Changes

#5052 e336a1d93a39063fb1883ba0a84b5d37f313a35a Thanks @jxom! - viem/tempo: Fixed declaration emit for inferred Tempo chains.

viem@2.56.0

Minor Changes
#5040 c73282bfa7309a5017f684b8001ec5c13fda4194 Thanks @jxom! - Breaking (viem/tempo): Renamed Abis.abis to Abis.all and expanded the aggregate with Earn and Zone ABIs.
-const abis = Abis.abis
+const abis = Abis.all
#5040 c73282bfa7309a5017f684b8001ec5c13fda4194 Thanks @jxom! - Breaking (viem/tempo): Moved Zone exports from viem/tempo/zones into viem/tempo.
-import { Abis, Addresses, http, zoneModerato } from 'viem/tempo/zones'
+import { Abis, Addresses, http, Zone } from 'viem/tempo'
#5040 c73282bfa7309a5017f684b8001ec5c13fda4194 Thanks @jxom! - Breaking (viem/tempo): Replaced curried Zone network factories with built-in Zone definitions and Zone.from for custom chains.
-const zone = zoneModerato(6)
+const zone = Zone.a
#5040 c73282bfa7309a5017f684b8001ec5c13fda4194 Thanks @jxom! - Breaking (viem/tempo): Replaced chain-specific Zone portal registries with deterministic Addresses.zonePortal(id) resolution for Zone IDs and chain IDs.
-import { getPortalAddress } from 'viem/tempo/zones'
+import { Addresses, Zone } from 'viem/tempo'

... (truncated)

Commits

3db6cdf chore: version package (#5060)
1ba6aa3 feat(tempo): infer multisig request chains (#5061)
e3de334 fix(tempo): expose zone return type (#5059)
9a6f9aa fix: update browserslist security override
abfa9d1 chore: update esm size limit
31ad9fd test: stabilize tempo error snapshots
1bf8f74 chore: version package (#5054)
32ba41f test(tempo): update decorator type benchmark
390b48f chore: up changeset
e96cc4d test(tempo): fix multisig CI fixtures
Additional commits viewable in compare view

Updates vite from 8.2.1 to 8.2.2

Release notes

Sourced from vite's releases.

plugin-legacy@8.2.2

Please refer to CHANGELOG.md for details.

v8.2.2

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.2.2 (2026-08-20)

Features

deps: widen @vitejs/devtools peer range to v0.5.0 (#23302) (495d9ff)

Bug Fixes

bundled-dev: handle lazy request error (#23291) (3ba026d)

bundled-dev: hot update through circular imports instead of reloading (#23259) (3dbddef)

config: resolve sourcemap paths against sourcemap location (#23239) (05a003e)

css: don't pass empty targets to lightningcss (#23295) (2804636)

define: fix match escaped dots to support $-prefixed define keys (#23249) (dcf88bd)

deps: update all non-major dependencies (#23217) (ba958bd)

deps: update rolldown-related dependencies (#23218) (83ecb2c)

module-runner: exclude completed modules from in-flight cycle detection (fix #22999) (#23009) (d9b10a9)

optimizer: close custom extension analysis bundles (#23207) (8fb7675)

reduce Windows 8.3-short-name detection false-positives (#23066) (02cffa9)

respect resolve.preserveSymlinks when resolving root (fix #23197) (#23198) (8413052)

ssr: rewrite computed key of destructing parameter (#23307) (9db0b61)

vite: update outdated upstream file links in license comments (#23285) (c0f2fc6)

Documentation

build: note cssTarget precedence (#23200) (a20a35e)

Miscellaneous Chores

fix ts errors in build test cases (#23209) (a0cfcf7)

Code Refactoring

use JSON import attributes instead of readFileSync in constants (#23258) (1d9fa39)

use named regex constants over inline literals (#22964) (5c1c6c6)

Tests

define: close rolldown bundler after generate (#23231) (b4d66fe)

module-runner: add TLA circular import case (#23299) (4a261f2)

module-runner: simplify server-hmr tests (#23300) (599b44b)

ssr: add destructing assignment case for moduleRunnerTransform (#23308) (cb77e2a)

Build System

use JSON import attributes instead of readFIleSync in rolldown configs (#23251) (d615bcd)

Commits

de1111a release: v8.2.2
cb77e2a test(ssr): add destructing assignment case for moduleRunnerTransform (#23308)
9db0b61 fix(ssr): rewrite computed key of destructing parameter (#23307)
8413052 fix: respect resolve.preserveSymlinks when resolving root (fix #23197) (#23...
05a003e fix(config): resolve sourcemap paths against sourcemap location (#23239)
495d9ff feat(deps): widen @vitejs/devtools peer range to v0.5.0 (#23302)
1d9fa39 refactor: use JSON import attributes instead of readFileSync in constants (#2...
2804636 fix(css): don't pass empty targets to lightningcss (#23295)
599b44b test(module-runner): simplify server-hmr tests (#23300)
4a261f2 test(module-runner): add TLA circular import case (#23299)
Additional commits viewable in compare view

Updates @remix-run/node-fetch-server from 0.14.0 to 0.14.1

Release notes

Sourced from @remix-run/node-fetch-server's releases.

node-fetch-server v0.14.1

Patch Changes

Request handlers now receive native Request instances instead of lazy request objects that emulated native requests. This fixes compatibility with standard APIs like new Request(request, init) that rely on native Request internals.

Changelog

Sourced from @remix-run/node-fetch-server's changelog.

v0.14.1

Patch Changes

Request handlers now receive native Request instances instead of lazy request objects that emulated native requests. This fixes compatibility with standard APIs like new Request(request, init) that rely on native Request internals.

Commits

See full diff in compare view

Updates bun from 1.3.14 to 1.4.0

Release notes

Sourced from bun's releases.

Bun v1.4

To install Bun v1.4
curl -fsSL https://bun.com/install | bash
# or you can use npm
# npm install -g bun
Windows:
powershell -c "irm bun.com/install.ps1|iex"
To upgrade to Bun v1.4.0:
bun upgrade
Read the blog post:

Thank you

Bun is free, open source, and MIT-licensed. We receive a lot of contributions from the community, and we'd like to thank everyone who fixed a bug or contributed since Bun v1.3.

@190n

@alanstott

@alii

<...
Description has been truncated

socket-security · 2026-09-09T16:24:39Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
wagmi@3.7.6 ⏵ 3.7.7	⁺²¹
bun@1.3.14 ⏵ 1.4.0	⁺¹		⁺⁸
@types/node@26.5.0
tsx@4.23.12 ⏵ 4.23.13
vite@8.2.1 ⏵ 8.2.2		⁺¹
file-type@22.0.1 ⏵ 22.0.2	⁺¹	⁺¹	^-1
eventsource-parser@4.1.0
@tanstack/react-query@5.101.4 ⏵ 5.102.8		⁺⁴	⁺¹
@hono/node-server@2.1.0 ⏵ 2.1.1	⁺¹
zod@4.4.3 ⏵ 4.5.4
stripe@17.7.0 ⏵ 22.6.1
accounts@0.16.0 ⏵ 0.18.3	⁺¹⁹	⁺¹	⁺¹
@x402/express@2.22.0 ⏵ 2.24.0		⁺¹	⁺¹
@x402/core@2.24.0
@x402/evm@2.22.0 ⏵ 2.24.0	⁺¹	⁺¹	⁺¹
ox@0.14.33 ⏵ 1.7.4	⁺¹	⁺¹	⁺²
@stripe/stripe-js@9.13.0 ⏵ 9.15.0	⁺¹		⁺¹

View full report

… updates Bumps the npm-production group with 18 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@stripe/stripe-js](https://github.com/stripe/stripe-js) | `9.13.0` | `9.15.0` | | [eventsource-parser](https://github.com/rexxars/eventsource-parser) | `3.1.1` | `4.1.0` | | [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.5.4` | | [@hono/node-server](https://github.com/honojs/node-server) | `2.1.0` | `2.1.1` | | [@x402/core](https://github.com/x402-foundation/x402) | `2.22.0` | `2.24.0` | | [@x402/evm](https://github.com/x402-foundation/x402) | `2.22.0` | `2.24.0` | | [@x402/express](https://github.com/x402-foundation/x402) | `2.22.0` | `2.24.0` | | [tsx](https://github.com/privatenumber/tsx) | `4.23.12` | `4.23.13` | | [viem](https://github.com/wevm/viem) | `2.55.13` | `2.56.3` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.1` | `8.2.2` | | [@remix-run/node-fetch-server](https://github.com/remix-run/remix/tree/HEAD/packages/node-fetch-server) | `0.14.0` | `0.14.1` | | [bun](https://github.com/oven-sh/bun) | `1.3.14` | `1.4.0` | | [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.101.4` | `5.102.8` | | [wagmi](https://github.com/wevm/wagmi/tree/HEAD/packages/react) | `3.7.6` | `3.7.7` | | [stripe](https://github.com/stripe/stripe-node) | `17.7.0` | `22.6.1` | | [accounts](https://github.com/tempoxyz/accounts) | `0.16.0` | `0.18.3` | | [file-type](https://github.com/sindresorhus/file-type) | `22.0.1` | `22.0.2` | | [ox](https://github.com/wevm/ox) | `0.14.33` | `1.7.4` | Updates `@stripe/stripe-js` from 9.13.0 to 9.15.0 - [Release notes](https://github.com/stripe/stripe-js/releases) - [Commits](stripe/stripe-js@v9.13.0...v9.15.0) Updates `eventsource-parser` from 3.1.1 to 4.1.0 - [Release notes](https://github.com/rexxars/eventsource-parser/releases) - [Changelog](https://github.com/rexxars/eventsource-parser/blob/main/CHANGELOG.md) - [Commits](rexxars/eventsource-parser@v3.1.1...v4.1.0) Updates `zod` from 4.4.3 to 4.5.4 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.4.3...v4.5.4) Updates `@hono/node-server` from 2.1.0 to 2.1.1 - [Release notes](https://github.com/honojs/node-server/releases) - [Commits](honojs/node-server@v2.1.0...v2.1.1) Updates `@x402/core` from 2.22.0 to 2.24.0 - [Commits](https://github.com/x402-foundation/x402/compare/npm-@x402/core@v2.22.0...npm-@x402/core@v2.24.0) Updates `@x402/evm` from 2.22.0 to 2.24.0 - [Commits](https://github.com/x402-foundation/x402/compare/npm-@x402/evm@v2.22.0...npm-@x402/evm@v2.24.0) Updates `@x402/express` from 2.22.0 to 2.24.0 - [Commits](https://github.com/x402-foundation/x402/compare/npm-@x402/express@v2.22.0...npm-@x402/express@v2.24.0) Updates `tsx` from 4.23.12 to 4.23.13 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.23.12...v4.23.13) Updates `viem` from 2.55.13 to 2.56.3 - [Release notes](https://github.com/wevm/viem/releases) - [Commits](https://github.com/wevm/viem/compare/viem@2.55.13...viem@2.56.3) Updates `vite` from 8.2.1 to 8.2.2 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.2.2/packages/vite) Updates `@remix-run/node-fetch-server` from 0.14.0 to 0.14.1 - [Release notes](https://github.com/remix-run/remix/releases) - [Changelog](https://github.com/remix-run/remix/blob/main/packages/node-fetch-server/CHANGELOG.md) - [Commits](https://github.com/remix-run/remix/commits/v0.14.1/packages/node-fetch-server) Updates `bun` from 1.3.14 to 1.4.0 - [Release notes](https://github.com/oven-sh/bun/releases) - [Commits](oven-sh/bun@bun-v1.3.14...bun-v1.4.0) Updates `@tanstack/react-query` from 5.101.4 to 5.102.8 - [Release notes](https://github.com/TanStack/query/releases) - [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md) - [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.102.8/packages/react-query) Updates `wagmi` from 3.7.6 to 3.7.7 - [Release notes](https://github.com/wevm/wagmi/releases) - [Changelog](https://github.com/wevm/wagmi/blob/main/packages/react/CHANGELOG.md) - [Commits](https://github.com/wevm/wagmi/commits/wagmi@3.7.7/packages/react) Updates `stripe` from 17.7.0 to 22.6.1 - [Release notes](https://github.com/stripe/stripe-node/releases) - [Changelog](https://github.com/stripe/stripe-node/blob/master/CHANGELOG.md) - [Commits](stripe/stripe-node@v17.7.0...v22.6.1) Updates `accounts` from 0.16.0 to 0.18.3 - [Release notes](https://github.com/tempoxyz/accounts/releases) - [Changelog](https://github.com/tempoxyz/accounts/blob/main/CHANGELOG.md) - [Commits](https://github.com/tempoxyz/accounts/compare/accounts@0.16.0...accounts@0.18.3) Updates `file-type` from 22.0.1 to 22.0.2 - [Release notes](https://github.com/sindresorhus/file-type/releases) - [Commits](sindresorhus/file-type@v22.0.1...v22.0.2) Updates `ox` from 0.14.33 to 1.7.4 - [Release notes](https://github.com/wevm/ox/releases) - [Changelog](https://github.com/wevm/ox/blob/main/CHANGELOG.md) - [Commits](https://github.com/wevm/ox/compare/ox@0.14.33...ox@1.7.4) --- updated-dependencies: - dependency-name: "@hono/node-server" dependency-version: 2.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-production - dependency-name: "@remix-run/node-fetch-server" dependency-version: 0.14.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-production - dependency-name: "@stripe/stripe-js" dependency-version: 9.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production - dependency-name: "@tanstack/react-query" dependency-version: 5.102.8 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production - dependency-name: "@x402/core" dependency-version: 2.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production - dependency-name: "@x402/evm" dependency-version: 2.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production - dependency-name: "@x402/express" dependency-version: 2.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production - dependency-name: accounts dependency-version: 0.18.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production - dependency-name: bun dependency-version: 1.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production - dependency-name: eventsource-parser dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-production - dependency-name: file-type dependency-version: 22.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-production - dependency-name: ox dependency-version: 1.7.4 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-production - dependency-name: stripe dependency-version: 22.6.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-production - dependency-name: tsx dependency-version: 4.23.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-production - dependency-name: viem dependency-version: 2.56.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production - dependency-name: vite dependency-version: 8.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-production - dependency-name: wagmi dependency-version: 3.7.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-production - dependency-name: zod dependency-version: 4.5.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 9, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-production-ddfc6ff726 branch from 653141d to 5b3cbd4 Compare September 9, 2026 16:50

Navigation Menu

Uh oh!

Uh oh!

chore(deps): bump the npm-production group across 1 directory with 18 updates - #885

chore(deps): bump the npm-production group across 1 directory with 18 updates#885
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-production-ddfc6ff726

dependabot Bot commented on behalf of github Sep 9, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Sep 9, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v9.15.0

New features

v9.14.0

New features

Fixes

Changed

v4.1.0

Minor Changes

v4.0.0

Major Changes

4.1.0

Minor Changes

4.0.0

Major Changes

v4.5.4

Commits:

v4.5.3

Commits:

v4.5.2

Commits:

v4.5.1

Commits:

v4.5.0

v2.1.1

What's Changed

v4.23.13

4.23.13 (2026-08-30)

Bug Fixes

viem@2.56.3

Patch Changes

viem@2.56.2

Patch Changes

viem@2.56.1

Patch Changes

viem@2.56.0

Minor Changes

plugin-legacy@8.2.2

v8.2.2

8.2.2 (2026-08-20)

Features

Bug Fixes

Documentation

Miscellaneous Chores

Code Refactoring

Tests

Build System

node-fetch-server v0.14.1

Patch Changes

v0.14.1

Patch Changes

Bun v1.4

Thank you

Uh oh!

socket-security Bot commented Sep 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Sep 9, 2026 •

edited

Loading

socket-security Bot commented Sep 9, 2026 •

edited

Loading