chore(deps): bump the npm_and_yarn group with 6 updates by dependabot[bot] · Pull Request #149 · PracticalParticle/Bloxchain-Protocol

dependabot · 2026-03-29T16:33:16Z

Bumps the npm_and_yarn group with 6 updates:

Package	From	To
@openzeppelin/contracts	`5.4.0`	`5.6.1`
@openzeppelin/contracts-upgradeable	`5.4.0`	`5.6.1`
@commitlint/cli	`20.4.4`	`20.5.0`
@commitlint/config-conventional	`20.4.4`	`20.5.0`
hardhat	`3.1.12`	`3.2.0`
viem	`2.47.4`	`2.47.6`

Updates @openzeppelin/contracts from 5.4.0 to 5.6.1

Release notes

Sourced from @openzeppelin/contracts's releases.

v5.6.1

InteroperableAddress: Fix overflow in the parsing functions that caused silent misparse of large interoperable addresses. (#6372)

v5.6.0

Breaking changes

Strings: The escapeJSON function now escapes all control characters in the range U+0000 to U+001F per RFC-4627. Previously only backspace, tab, newline, form feed, carriage return, double quote, and backslash were escaped. Input strings containing any other control character (e.g. null 0x00) or raw bytes in U+0001–U+001F will now produce different, longer output (e.g. \u0000 for null). (#6344)

ERC1155: Performing batch transfers with exactly one id/value in the batch no-longer calls IERC1155Receiver.onERC1155Received. IERC1155Receiver.onERC1155BatchReceived is called instead (with arrays of length one). (#6170)

ERC1967Proxy and TransparentUpgradeableProxy: Mandate initialization during construction. Deployment now reverts with ERC1967ProxyUninitialized if an initialize call is not provided. Developers that rely on the previous behavior and want to disable this check can do so by overriding the internal _unsafeAllowUninitialized function to return true. (#5906)

ERC721 and ERC1155: Prevent setting an operator for address(0). In the case of ERC721 this type of operator allowance could lead to obfuscated mint permission. (#6171)

RLP: The encode(bytes32) function now encodes bytes32 as a fixed size item and not as a scalar in encode(uint256). Users must replace calls to encode(bytes32) with encode(uint256(bytes32)) to preserve the same behavior. (#6167)

ERC4337Utils: The parseValidationData now returns a ValidationRange as the last return tuple value indicating whether the validationData is compared against a timestamp or block number. Developers must update their code to handle this new return value (e.g. (aggregator, validAfter, validUntil) -> (aggregator, validAfter, validUntil, range)). (#6215)

SignerWebAuthn: The _rawSignatureValidation function now returns false when the signature is not a valid WebAuthn authentication assertion. P256 fallback is removed. Developers can add it back by overriding the function. (#6337)

Memory: The setFreeMemoryPointer function is renamed to unsafeSetFreeMemoryPointer. Developers should use unsafeSetFreeMemoryPointer instead of setFreeMemoryPointer after v5.6.0. (#6348)

Memory: Remove the asBytes32 and asPointer function to reduce the risk of mistakes when manipulating memory pointers. (#6340)

Changes by category

Account

Account: Update default version of the ERC-4337 entrypoint to v0.9. (#6135)

AccountERC7579: Do not revert and perform the uninstall if the onUninstall hook of a module reverts. (#6142)

ERC4337Utils: Added the paymasterSignature function to extract the signature in paymasterAndData after Entrypoint v0.9. Similarly, a variant of paymasterData that receives a flag to exclude the signature from the returned data. (#6215)

ERC4337Utils: Added variants of packValidationData(address,uint48,uint48) and packValidationData(bool,uint48,uint48) that receive a ValidationRange argument, could be timestamp or block number. Similarly, the parseValidationData now returns a ValidationRange too. (#6215)

Tokens

ERC1155: Introduce the _checkAuthorized internal virtual function to encapsulate isApprovedForAll and msg.sender == from checks. (#6133)

ERC1155: Call IERC1155Receiver.onERC1155BatchReceived when performing a batch transfers with exactly one id/value in the batch. (#6170)

ERC4626: Allow overriding underlying assets transfer mechanisms through new internal virtual functions (_transferIn and _transferOut). (#5970)

ERC721URIStorage: Add _suffixURI, an internal getter for retrieving the custom tokenURI without the base prefix. (#6175)

Add ERC-165 detection for the IERC6909ContentURI, IERC6909TokenSupply and IERC6909Metadata interfaces in the ERC6909ContentURI, ERC6909TokenSupply and ERC6909Metadata contracts respectively. (#6246) and (#6247)

Cross-chain

BridgeFungible, BridgeERC20 and BridgeERC7802: Added bridge contracts to handle crosschain movements of ERC-20 (and ERC-7802) tokens. (#5914) (#6328)

CrosschainLinked: Added a new helper contract to facilitate communication between a contract on one chain and counterparts on remote chains through ERC-7786 gateways. (#5914)

ERC20Crosschain: Added an ERC-20 extension to embed an ERC-7786 based crosschain bridge directly in the token contract. (#5914)

InteroperableAddress: Reject inputs with both chain reference and addresses empty. (#6340)

Cryptography

MessageHashUtils: Add helper functions to build EIP-712 domain typehash and separator with fields selectively enabled/disabled. (#5908)

SignatureChecker: Add isValidERC1271SignatureNowCalldata, a variant of isValidERC1271SignatureNow that takes the signature from calldata. (#6123)

TrieProof: Add library for verifying Ethereum Merkle-Patricia trie inclusion proofs. (#5826)

WebAuthn: Verification now returns false instead of reverting when client data contains an out-of-bounds challengeIndex. (#6329)

Structures

... (truncated)

Changelog

Sourced from @openzeppelin/contracts's changelog.

5.6.1 (2026-02-27)

InteroperableAddress: Fix overflow in the parsing functions that caused silent misparse of large interoperable addresses. (#6372)

5.6.0 (2026-02-25)

Breaking changes

Strings: The escapeJSON function now escapes all control characters in the range U+0000 to U+001F per RFC-4627. Previously only backspace, tab, newline, form feed, carriage return, double quote, and backslash were escaped. Input strings containing any other control character (e.g. null 0x00) or raw bytes in U+0001–U+001F will now produce different, longer output (e.g. \u0000 for null). (#6344)

ERC1155: Performing batch transfers with exactly one id/value in the batch no-longer calls IERC1155Receiver.onERC1155Received. IERC1155Receiver.onERC1155BatchReceived is called instead (with arrays of length one). (#6170)

ERC1967Proxy and TransparentUpgradeableProxy: Mandate initialization during construction. Deployment now reverts with ERC1967ProxyUninitialized if an initialize call is not provided. Developers that rely on the previous behavior and want to disable this check can do so by overriding the internal _unsafeAllowUninitialized function to return true. (#5906)

ERC721 and ERC1155: Prevent setting an operator for address(0). In the case of ERC721 this type of operator allowance could lead to obfuscated mint permission. (#6171)

RLP: The encode(bytes32) function now encodes bytes32 as a fixed size item and not as a scalar in encode(uint256). Users must replace calls to encode(bytes32) with encode(uint256(bytes32)) to preserve the same behavior. (#6167)

ERC4337Utils: The parseValidationData now returns a ValidationRange as the last return tuple value indicating whether the validationData is compared against a timestamp or block number. Developers must update their code to handle this new return value (e.g. (aggregator, validAfter, validUntil) -> (aggregator, validAfter, validUntil, range)). (#6215)

SignerWebAuthn: The _rawSignatureValidation function now returns false when the signature is not a valid WebAuthn authentication assertion. P256 fallback is removed. Developers can add it back by overriding the function. (#6337)

Memory: The setFreeMemoryPointer function is renamed to unsafeSetFreeMemoryPointer. Developers should use unsafeSetFreeMemoryPointer instead of setFreeMemoryPointer after v5.6.0. (#6348)

Memory: Remove the asBytes32 and asPointer function to reduce the risk of mistakes when manipulating memory pointers. (#6340)

Changes by category

Account

Account: Update default version of the ERC-4337 entrypoint to v0.9. (#6135)

AccountERC7579: Do not revert and perform the uninstall if the onUninstall hook of a module reverts. (#6142)

ERC4337Utils: Added the paymasterSignature function to extract the signature in paymasterAndData after Entrypoint v0.9. Similarly, a variant of paymasterData that receives a flag to exclude the signature from the returned data. (#6215)

ERC4337Utils: Added variants of packValidationData(address,uint48,uint48) and packValidationData(bool,uint48,uint48) that receive a ValidationRange argument, could be timestamp or block number. Similarly, the parseValidationData now returns a ValidationRange too. (#6215)

Tokens

ERC1155: Introduce the _checkAuthorized internal virtual function to encapsulate isApprovedForAll and msg.sender == from checks. (#6133)

ERC1155: Call IERC1155Receiver.onERC1155BatchReceived when performing a batch transfers with exactly one id/value in the batch. (#6170)

ERC4626: Allow overriding underlying assets transfer mechanisms through new internal virtual functions (_transferIn and _transferOut). (#5970)

ERC721URIStorage: Add _suffixURI, an internal getter for retrieving the custom tokenURI without the base prefix. (#6175)

Add ERC-165 detection for the IERC6909ContentURI, IERC6909TokenSupply and IERC6909Metadata interfaces in the ERC6909ContentURI, ERC6909TokenSupply and ERC6909Metadata contracts respectively. (#6246) and (#6247)

Cross-chain

BridgeFungible, BridgeERC20 and BridgeERC7802: Added bridge contracts to handle crosschain movements of ERC-20 (and ERC-7802) tokens. (#5914) (#6328)

CrosschainLinked: Added a new helper contract to facilitate communication between a contract on one chain and counterparts on remote chains through ERC-7786 gateways. (#5914)

ERC20Crosschain: Added an ERC-20 extension to embed an ERC-7786 based crosschain bridge directly in the token contract. (#5914)

InteroperableAddress: Reject inputs with both chain reference and addresses empty. (#6340)

Cryptography

MessageHashUtils: Add helper functions to build EIP-712 domain typehash and separator with fields selectively enabled/disabled. (#5908)

SignatureChecker: Add isValidERC1271SignatureNowCalldata, a variant of isValidERC1271SignatureNow that takes the signature from calldata. (#6123)

TrieProof: Add library for verifying Ethereum Merkle-Patricia trie inclusion proofs. (#5826)

WebAuthn: Verification now returns false instead of reverting when client data contains an out-of-bounds challengeIndex. (#6329)

Structures

... (truncated)

Commits

5fd1781 Release v5.6.1 (#6377)
82cad37 Fix support for very large inputs in InteroperableAddress (#6372)
56a3de2 Release v5.6.0 (#6340)
6ec651d Exit release candidate
4c10cbe Add support for inline extension nodes in TrieProof (#6351)
aa110ab Fix typos and documentation for the 5.6 audit. (#6330)
27dddf8 Escape control characters in Strings.escapeJSON (#6344)
f5cd8d8 Reject interoperable addresses whith both chain reference and addresses empty...
44d016c Check that slice are in the reserved space in Accumulator push and shift (#6302)
cbaf3a4 Remove Memory.asPointer and Memory.asBytes32 + add warning about setting the ...
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @openzeppelin/contracts since your current version.

Updates @openzeppelin/contracts-upgradeable from 5.4.0 to 5.6.1

Release notes

Sourced from @openzeppelin/contracts-upgradeable's releases.

v5.6.1

InteroperableAddress: Fix overflow in the parsing functions that caused silent misparse of large interoperable addresses. (#6372)

v5.6.0

Breaking changes

Strings: The escapeJSON function now escapes all control characters in the range U+0000 to U+001F per RFC-4627. Previously only backspace, tab, newline, form feed, carriage return, double quote, and backslash were escaped. Input strings containing any other control character (e.g. null 0x00) or raw bytes in U+0001–U+001F will now produce different, longer output (e.g. \u0000 for null). (#6344)

ERC1155: Performing batch transfers with exactly one id/value in the batch no-longer calls IERC1155Receiver.onERC1155Received. IERC1155Receiver.onERC1155BatchReceived is called instead (with arrays of length one). (#6170)

ERC1967Proxy and TransparentUpgradeableProxy: Mandate initialization during construction. Deployment now reverts with ERC1967ProxyUninitialized if an initialize call is not provided. Developers that rely on the previous behavior and want to disable this check can do so by overriding the internal _unsafeAllowUninitialized function to return true. (#5906)

ERC721 and ERC1155: Prevent setting an operator for address(0). In the case of ERC721 this type of operator allowance could lead to obfuscated mint permission. (#6171)

RLP: The encode(bytes32) function now encodes bytes32 as a fixed size item and not as a scalar in encode(uint256). Users must replace calls to encode(bytes32) with encode(uint256(bytes32)) to preserve the same behavior. (#6167)

ERC4337Utils: The parseValidationData now returns a ValidationRange as the last return tuple value indicating whether the validationData is compared against a timestamp or block number. Developers must update their code to handle this new return value (e.g. (aggregator, validAfter, validUntil) -> (aggregator, validAfter, validUntil, range)). (#6215)

SignerWebAuthn: The _rawSignatureValidation function now returns false when the signature is not a valid WebAuthn authentication assertion. P256 fallback is removed. Developers can add it back by overriding the function. (#6337)

Memory: The setFreeMemoryPointer function is renamed to unsafeSetFreeMemoryPointer. Developers should use unsafeSetFreeMemoryPointer instead of setFreeMemoryPointer after v5.6.0. (#6348)

Memory: Remove the asBytes32 and asPointer function to reduce the risk of mistakes when manipulating memory pointers. (#6340)

Changes by category

Account

Account: Update default version of the ERC-4337 entrypoint to v0.9. (#6135)

AccountERC7579: Do not revert and perform the uninstall if the onUninstall hook of a module reverts. (#6142)

ERC4337Utils: Added the paymasterSignature function to extract the signature in paymasterAndData after Entrypoint v0.9. Similarly, a variant of paymasterData that receives a flag to exclude the signature from the returned data. (#6215)

ERC4337Utils: Added variants of packValidationData(address,uint48,uint48) and packValidationData(bool,uint48,uint48) that receive a ValidationRange argument, could be timestamp or block number. Similarly, the parseValidationData now returns a ValidationRange too. (#6215)

Tokens

ERC1155: Introduce the _checkAuthorized internal virtual function to encapsulate isApprovedForAll and msg.sender == from checks. (#6133)

ERC1155: Call IERC1155Receiver.onERC1155BatchReceived when performing a batch transfers with exactly one id/value in the batch. (#6170)

ERC4626: Allow overriding underlying assets transfer mechanisms through new internal virtual functions (_transferIn and _transferOut). (#5970)

ERC721URIStorage: Add _suffixURI, an internal getter for retrieving the custom tokenURI without the base prefix. (#6175)

Add ERC-165 detection for the IERC6909ContentURI, IERC6909TokenSupply and IERC6909Metadata interfaces in the ERC6909ContentURI, ERC6909TokenSupply and ERC6909Metadata contracts respectively. (#6246) and (#6247)

Cross-chain

BridgeFungible, BridgeERC20 and BridgeERC7802: Added bridge contracts to handle crosschain movements of ERC-20 (and ERC-7802) tokens. (#5914) (#6328)

CrosschainLinked: Added a new helper contract to facilitate communication between a contract on one chain and counterparts on remote chains through ERC-7786 gateways. (#5914)

ERC20Crosschain: Added an ERC-20 extension to embed an ERC-7786 based crosschain bridge directly in the token contract. (#5914)

InteroperableAddress: Reject inputs with both chain reference and addresses empty. (#6340)

Cryptography

MessageHashUtils: Add helper functions to build EIP-712 domain typehash and separator with fields selectively enabled/disabled. (#5908)

SignatureChecker: Add isValidERC1271SignatureNowCalldata, a variant of isValidERC1271SignatureNow that takes the signature from calldata. (#6123)

TrieProof: Add library for verifying Ethereum Merkle-Patricia trie inclusion proofs. (#5826)

WebAuthn: Verification now returns false instead of reverting when client data contains an out-of-bounds challengeIndex. (#6329)

Structures

Accumulator: Check that slices being added (shift or push) are in the reserved space. (#6302)

... (truncated)

Changelog

Sourced from @openzeppelin/contracts-upgradeable's changelog.

5.6.1 (2026-02-27)

InteroperableAddress: Fix overflow in the parsing functions that caused silent misparse of large interoperable addresses. (#6372)

5.6.0 (2026-02-25)

Breaking changes

Strings: The escapeJSON function now escapes all control characters in the range U+0000 to U+001F per RFC-4627. Previously only backspace, tab, newline, form feed, carriage return, double quote, and backslash were escaped. Input strings containing any other control character (e.g. null 0x00) or raw bytes in U+0001–U+001F will now produce different, longer output (e.g. \u0000 for null). (#6344)

ERC1155: Performing batch transfers with exactly one id/value in the batch no-longer calls IERC1155Receiver.onERC1155Received. IERC1155Receiver.onERC1155BatchReceived is called instead (with arrays of length one). (#6170)

ERC1967Proxy and TransparentUpgradeableProxy: Mandate initialization during construction. Deployment now reverts with ERC1967ProxyUninitialized if an initialize call is not provided. Developers that rely on the previous behavior and want to disable this check can do so by overriding the internal _unsafeAllowUninitialized function to return true. (#5906)

ERC721 and ERC1155: Prevent setting an operator for address(0). In the case of ERC721 this type of operator allowance could lead to obfuscated mint permission. (#6171)

RLP: The encode(bytes32) function now encodes bytes32 as a fixed size item and not as a scalar in encode(uint256). Users must replace calls to encode(bytes32) with encode(uint256(bytes32)) to preserve the same behavior. (#6167)

ERC4337Utils: The parseValidationData now returns a ValidationRange as the last return tuple value indicating whether the validationData is compared against a timestamp or block number. Developers must update their code to handle this new return value (e.g. (aggregator, validAfter, validUntil) -> (aggregator, validAfter, validUntil, range)). (#6215)

SignerWebAuthn: The _rawSignatureValidation function now returns false when the signature is not a valid WebAuthn authentication assertion. P256 fallback is removed. Developers can add it back by overriding the function. (#6337)

Memory: The setFreeMemoryPointer function is renamed to unsafeSetFreeMemoryPointer. Developers should use unsafeSetFreeMemoryPointer instead of setFreeMemoryPointer after v5.6.0. (#6348)

Memory: Remove the asBytes32 and asPointer function to reduce the risk of mistakes when manipulating memory pointers. (#6340)

Changes by category

Account

Account: Update default version of the ERC-4337 entrypoint to v0.9. (#6135)

AccountERC7579: Do not revert and perform the uninstall if the onUninstall hook of a module reverts. (#6142)

ERC4337Utils: Added the paymasterSignature function to extract the signature in paymasterAndData after Entrypoint v0.9. Similarly, a variant of paymasterData that receives a flag to exclude the signature from the returned data. (#6215)

ERC4337Utils: Added variants of packValidationData(address,uint48,uint48) and packValidationData(bool,uint48,uint48) that receive a ValidationRange argument, could be timestamp or block number. Similarly, the parseValidationData now returns a ValidationRange too. (#6215)

Tokens

ERC1155: Introduce the _checkAuthorized internal virtual function to encapsulate isApprovedForAll and msg.sender == from checks. (#6133)

ERC1155: Call IERC1155Receiver.onERC1155BatchReceived when performing a batch transfers with exactly one id/value in the batch. (#6170)

ERC4626: Allow overriding underlying assets transfer mechanisms through new internal virtual functions (_transferIn and _transferOut). (#5970)

ERC721URIStorage: Add _suffixURI, an internal getter for retrieving the custom tokenURI without the base prefix. (#6175)

Add ERC-165 detection for the IERC6909ContentURI, IERC6909TokenSupply and IERC6909Metadata interfaces in the ERC6909ContentURI, ERC6909TokenSupply and ERC6909Metadata contracts respectively. (#6246) and (#6247)

Cross-chain

BridgeFungible, BridgeERC20 and BridgeERC7802: Added bridge contracts to handle crosschain movements of ERC-20 (and ERC-7802) tokens. (#5914) (#6328)

CrosschainLinked: Added a new helper contract to facilitate communication between a contract on one chain and counterparts on remote chains through ERC-7786 gateways. (#5914)

ERC20Crosschain: Added an ERC-20 extension to embed an ERC-7786 based crosschain bridge directly in the token contract. (#5914)

InteroperableAddress: Reject inputs with both chain reference and addresses empty. (#6340)

Cryptography

MessageHashUtils: Add helper functions to build EIP-712 domain typehash and separator with fields selectively enabled/disabled. (#5908)

SignatureChecker: Add isValidERC1271SignatureNowCalldata, a variant of isValidERC1271SignatureNow that takes the signature from calldata. (#6123)

TrieProof: Add library for verifying Ethereum Merkle-Patricia trie inclusion proofs. (#5826)

WebAuthn: Verification now returns false instead of reverting when client data contains an out-of-bounds challengeIndex. (#6329)

Structures

... (truncated)

Commits

7bf4727 Transpile 5fd1781b1
9f0cff2 Transpile 82cad372d
c9f48f0 Transpile 56a3de2ce
ba19ec8 Transpile 4c10cbe5c
ecb8798 Transpile aa110ab23
e45f559 Transpile 27dddf8e3
890cc90 Transpile f5cd8d897
b24df7d Transpile cbaf3a415
c202809 Transpile c2a2752d5
14a69ea Transpile d88b6fe2d
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @openzeppelin/contracts-upgradeable since your current version.

Updates @commitlint/cli from 20.4.4 to 20.5.0

Release notes

Sourced from @commitlint/cli's releases.

v20.5.0

20.5.0 (2026-03-15)

Bug Fixes

fix(resolve-extends): always resolve extended parser presets for proper merging by @omar-y-abdi in conventional-changelog/commitlint#4647

fix(load): resolve async config exports in CJS projects by @omar-y-abdi in conventional-changelog/commitlint#4659

fix(cli): validate that --cwd directory exists before execution by @omar-y-abdi in conventional-changelog/commitlint#4658

Features

feat(cz-commitlint): add exclamation mark support for breaking changes by @mrt181 in conventional-changelog/commitlint#4655

New Contributors

@mrt181 made their first contribution in conventional-changelog/commitlint#4655

@omar-y-abdi made their first contribution in conventional-changelog/commitlint#4647

Full Changelog: conventional-changelog/commitlint@v20.4.4...v20.5.0

Changelog

Sourced from @commitlint/cli's changelog.

20.5.0 (2026-03-15)

Bug Fixes

cli: validate that --cwd directory exists before execution (#4658) (cf80f75), closes #4595

Commits

a7918e9 v20.5.0
cf80f75 fix(cli): validate that --cwd directory exists before execution (#4658)
See full diff in compare view

Updates @commitlint/config-conventional from 20.4.4 to 20.5.0

Release notes

Sourced from @commitlint/config-conventional's releases.

v20.5.0

20.5.0 (2026-03-15)

Bug Fixes

fix(resolve-extends): always resolve extended parser presets for proper merging by @omar-y-abdi in conventional-changelog/commitlint#4647

fix(load): resolve async config exports in CJS projects by @omar-y-abdi in conventional-changelog/commitlint#4659

fix(cli): validate that --cwd directory exists before execution by @omar-y-abdi in conventional-changelog/commitlint#4658

Features

feat(cz-commitlint): add exclamation mark support for breaking changes by @mrt181 in conventional-changelog/commitlint#4655

New Contributors

@mrt181 made their first contribution in conventional-changelog/commitlint#4655

@omar-y-abdi made their first contribution in conventional-changelog/commitlint#4647

Full Changelog: conventional-changelog/commitlint@v20.4.4...v20.5.0

Changelog

Sourced from @commitlint/config-conventional's changelog.

20.5.0 (2026-03-15)

Note: Version bump only for package @commitlint/config-conventional

Commits

a7918e9 v20.5.0
See full diff in compare view

Updates hardhat from 3.1.12 to 3.2.0

Release notes

Sourced from hardhat's releases.

Hardhat v3.2.0

This release adds support for exporting the gas-stats report to a json file with --gas-stats-json <path>, along with other smaller bug fixes and improvements.

Changes

#8064 392fc38 Thanks @schaable! - Add --gas-stats-json <path> global option to write gas usage statistics to a JSON file (#7990).

#8061 c03f647 Thanks @ChristopherDedominici! - Fixed bug to preserve revert data in JSON-RPC responses for non-ProviderErrors (8061).

#8060 4461d1e Thanks @kanej! - Updated network.createServer signature to type non-generic chainTypes

#8038 465d00d Thanks @schaable! - Aggregate deployment gas statistics (min, avg, median, max, count) instead of showing only the last deployment cost and size (#8037)

#8060 0e8abcf Thanks @kanej! - Added guard against http network configs in network.createServer(...)

#8036 954825a Thanks @schaable! - Aggregate --gas-stats output when using multiple test runners, printing a single consolidated table at the end instead of separate tables per runner (#7500).

#8062 45963d4 Thanks @ChristopherDedominici! - Fixed compiler download for old versions in ARM64 (8062).

Updated dependencies:

@nomicfoundation/hardhat-errors@3.0.9

💡 The Nomic Foundation is hiring! Check our open positions.

Changelog

Sourced from hardhat's changelog.

3.2.0

Minor Changes

#8064 392fc38 Thanks @schaable! - Add --gas-stats-json <path> global option to write gas usage statistics to a JSON file (#7990).

Patch Changes

#8061 c03f647 Thanks @ChristopherDedominici! - Fixed bug to preserve revert data in JSON-RPC responses for non-ProviderErrors (8061).

#8060 4461d1e Thanks @kanej! - Updated network.createServer signature to type non-generic chainTypes

#8038 465d00d Thanks @schaable! - Aggregate deployment gas statistics (min, avg, median, max, count) instead of showing only the last deployment cost and size (#8037)

#8060 0e8abcf Thanks @kanej! - Added guard against http network configs in network.createServer(...)

#8036 954825a Thanks @schaable! - Aggregate --gas-stats output when using multiple test runners, printing a single consolidated table at the end instead of separate tables per runner (#7500).

#8062 45963d4 Thanks @ChristopherDedominici! - Fixed compiler download for old versions in ARM64 (8062).

Updated dependencies:

@nomicfoundation/hardhat-errors@3.0.9

Commits

6fb35f3 Version Packages
848e542 Potential fix for pull request finding
e6360cb remove mocked dir in test
ef7e280 Add tests for hasNativeBuildForPlatform
eb529d0 use tmp dir in test
c1364fb Merge branch 'main' of github.com:NomicFoundation/hardhat into fix-compiler-d...
01945b0 fallback to WASM for old ARM64 compilers
6f37801 Merge pull request #8064 from NomicFoundation/gas-stats-json-output
f1b501e Merge pull request #8038 from NomicFoundation/deployment-gas-stats
2dd2356 test: update useEphemeralFixtureProject path creation
Additional commits viewable in compare view

Updates viem from 2.47.4 to 2.47.6

Release notes

Sourced from viem's releases.

viem@2.47.6

Patch Changes

09d9f3520ce8837cb352e0bf3a7d735b511abd6f Thanks @jxom! - Updated Ox

#4401 928ae87a32a13c72c9adf9390172d7b92bf99ce7 Thanks @ndavd! - Ensured that dataSuffix is applied to all transactions regardless of data presence.

#4405 4ad0de0ebc543a9054bd7d57976eede1d3612440 Thanks @jxom! - Added mode parameter to verifyMessage and verifyHash.

viem@2.47.5

Patch Changes

#4376 64383c9e53cb42e5c371cc8da5a91cdfa47a3331 Thanks @nowooj! - Added CONX chain.

#4377 94248ab65c00c6254158e4cd985d8f5eec41f870 Thanks @Aboudjem! - Fixed unbounded LRU cache growth on iOS 18+.

a168f08272962f495306f72301a9d6c148428564 Thanks @tmm! - Updated chain definition.

#4391 a8c8e6ed4ee40f6259899742a2be20d0772841ce Thanks @mohamedhesham840! - Fixed incorrect error message for PaymasterStakeTooLowError (code -32505)

#4403 e8435e340592986fcd9c21a7626ff40b1af1e850 Thanks @GuillermoEscobero! - Removed Zircuit Mainnet deprecated RPCs and Zircuit old testnet.

#4385 ee1f2950dc5f8bf51ed9682ac0e9c4d9ef96a7bf Thanks @pxrl! - Defined DisputeGameFactory for Lisk, Mode & Zora

#4388 60f701f16217ef099c25184be97dc0e70e686b40 Thanks @alcuadrado! - Added error preservation in getContractError.

Commits

3cab404 chore: version package (#4406)
1fa5f35 ci: up
97d36ef chore: deps
09d9f35 chore: up ox
0f7837c ...
Description has been truncated

Bumps the npm_and_yarn group with 6 updates: | Package | From | To | | --- | --- | --- | | [@openzeppelin/contracts](https://github.com/OpenZeppelin/openzeppelin-contracts) | `5.4.0` | `5.6.1` | | [@openzeppelin/contracts-upgradeable](https://github.com/OpenZeppelin/openzeppelin-contracts-upgradeable) | `5.4.0` | `5.6.1` | | [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli) | `20.4.4` | `20.5.0` | | [@commitlint/config-conventional](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-conventional) | `20.4.4` | `20.5.0` | | [hardhat](https://github.com/NomicFoundation/hardhat/tree/HEAD/v-next/hardhat) | `3.1.12` | `3.2.0` | | [viem](https://github.com/wevm/viem) | `2.47.4` | `2.47.6` | Updates `@openzeppelin/contracts` from 5.4.0 to 5.6.1 - [Release notes](https://github.com/OpenZeppelin/openzeppelin-contracts/releases) - [Changelog](https://github.com/OpenZeppelin/openzeppelin-contracts/blob/master/CHANGELOG.md) - [Commits](OpenZeppelin/openzeppelin-contracts@v5.4.0...v5.6.1) Updates `@openzeppelin/contracts-upgradeable` from 5.4.0 to 5.6.1 - [Release notes](https://github.com/OpenZeppelin/openzeppelin-contracts-upgradeable/releases) - [Changelog](https://github.com/OpenZeppelin/openzeppelin-contracts-upgradeable/blob/master/CHANGELOG.md) - [Commits](OpenZeppelin/openzeppelin-contracts-upgradeable@v5.4.0...v5.6.1) Updates `@commitlint/cli` from 20.4.4 to 20.5.0 - [Release notes](https://github.com/conventional-changelog/commitlint/releases) - [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/commitlint/commits/v20.5.0/@commitlint/cli) Updates `@commitlint/config-conventional` from 20.4.4 to 20.5.0 - [Release notes](https://github.com/conventional-changelog/commitlint/releases) - [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/config-conventional/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/commitlint/commits/v20.5.0/@commitlint/config-conventional) Updates `hardhat` from 3.1.12 to 3.2.0 - [Release notes](https://github.com/NomicFoundation/hardhat/releases) - [Changelog](https://github.com/NomicFoundation/hardhat/blob/main/v-next/hardhat/CHANGELOG.md) - [Commits](https://github.com/NomicFoundation/hardhat/commits/hardhat@3.2.0/v-next/hardhat) Updates `viem` from 2.47.4 to 2.47.6 - [Release notes](https://github.com/wevm/viem/releases) - [Commits](https://github.com/wevm/viem/compare/viem@2.47.4...viem@2.47.6) --- updated-dependencies: - dependency-name: "@openzeppelin/contracts" dependency-version: 5.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm_and_yarn - dependency-name: "@openzeppelin/contracts-upgradeable" dependency-version: 5.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm_and_yarn - dependency-name: "@commitlint/cli" dependency-version: 20.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm_and_yarn - dependency-name: "@commitlint/config-conventional" dependency-version: 20.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm_and_yarn - dependency-name: hardhat dependency-version: 3.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm_and_yarn - dependency-name: viem dependency-version: 2.47.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 29, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the npm_and_yarn group with 6 updates#149

chore(deps): bump the npm_and_yarn group with 6 updates#149
dependabot[bot] wants to merge 1 commit intodevfrom
dependabot/npm_and_yarn/dev/npm_and_yarn-8ada382499

dependabot bot commented on behalf of github Mar 29, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Mar 29, 2026

v5.6.1

v5.6.0

Breaking changes

Changes by category

Account

Tokens

Cross-chain

Cryptography

Structures

5.6.1 (2026-02-27)

5.6.0 (2026-02-25)

Breaking changes

Changes by category

Account

Tokens

Cross-chain

Cryptography

Structures

v5.6.1

v5.6.0

Breaking changes

Changes by category

Account

Tokens

Cross-chain

Cryptography

Structures

5.6.1 (2026-02-27)

5.6.0 (2026-02-25)

Breaking changes

Changes by category

Account

Tokens

Cross-chain

Cryptography

Structures

v20.5.0

20.5.0 (2026-03-15)

Bug Fixes

Features

New Contributors

20.5.0 (2026-03-15)

Bug Fixes

v20.5.0

20.5.0 (2026-03-15)

Bug Fixes

Features

New Contributors

20.5.0 (2026-03-15)

Hardhat v3.2.0

Changes

3.2.0

Minor Changes

Patch Changes

viem@2.47.6

Patch Changes

viem@2.47.5

Patch Changes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants