dev-deps: bump the development-dependencies group with 5 updates by dependabot[bot] · Pull Request #443 · dominicusin/dominicusin.github.io

dependabot · 2026-10-13T05:43:42Z

Bumps the development-dependencies group with 5 updates:

Package	From	To
@nomicfoundation/hardhat-chai-matchers	`2.1.2`	`3.0.0`
@nomicfoundation/hardhat-ethers	`3.1.3`	`4.2.0`
@nomicfoundation/hardhat-network-helpers	`1.1.2`	`3.0.11`
cssnano	`9.4.0`	`9.5.0`
hardhat	`2.29.1`	`3.19.0`

Updates @nomicfoundation/hardhat-chai-matchers from 2.1.2 to 3.0.0

Release notes

Sourced from @nomicfoundation/hardhat-chai-matchers's releases.

Hardhat v2.29.1

This is a small bug fix release for Hardhat 2 that improves CLI argument validation.

Changes

NomicFoundation/hardhat@5a16885: Fixed the int, bigint and float CLI argument types rejecting hexadecimal values containing the digit f/F (e.g. 0xff, 0xdeadbeef). Thanks @pucedoteth.

Hardhat v2.29.0

This is a small Hardhat 2 release that upgrades the version of Mocha to make it compatible with Node 26, and uses a newer version of typescript when initializing projects.

Changes

a81ad1d: Upgrade Mocha to version ^11.1.0 to make it compatible with Node 26.

6ea5832: Update the initialization of new projects to use a newer typescript

@nomicfoundation/hardhat-viem@2.1.4

Changes

5589cfa: Load viem using require instead of a dynamic import.

Changelog

Sourced from @nomicfoundation/hardhat-chai-matchers's changelog.

3.0.0

Major Changes

09ae6db: Deprecate the latest npm tag and redirect users to migrate to Hardhat 3 or to the hh2 tag.

Commits

6372d08 Version Packages
a26e822 Remove the npm tags from the README.md files
18bef56 Quote the package in the installation instructions of the readmes
e5025ae Update the formatting and quote the package in the installation instructions ...
40525f5 Update hardhat-chai-matchers
See full diff in compare view

Updates @nomicfoundation/hardhat-ethers from 3.1.3 to 4.2.0

Release notes

Sourced from @nomicfoundation/hardhat-ethers's releases.

@nomicfoundation/hardhat-ethers@4.2.0

Changes

#8595 562cc0b Thanks @ChristopherDedominici! - Made ethers derive secp256k1 public keys with EDR's native implementation instead of its pure-JS one, speeding up new Wallet(secretKey), Wallet.createRandom(), HD wallet derivation and computeAddress.

Updated dependencies:

@nomicfoundation/hardhat-errors@3.1.0

@nomicfoundation/hardhat-utils@4.3.0

💡 The Nomic Foundation is hiring! Check our open positions.

@nomicfoundation/hardhat-ethers@4.1.0

Changes

#8580 8583e24 Thanks @ChristopherDedominici! - Made ethers use EDR's native Keccak-256 instead of its pure-JS one.

#8210 024b422 Thanks @renovate! - Update the cryptography dependencies to their latest major versions: @noble/hashes and @noble/ciphers to 2, ethereum-cryptography to 3, and micro-eth-signer to 0.19.

#8596 78f613c Thanks @schaable! - Fixed error shown when an HD key cannot be derived, to only include the derivation path.

Updated dependencies:

@nomicfoundation/hardhat-utils@4.2.0

💡 The Nomic Foundation is hiring! Check our open positions.

@nomicfoundation/hardhat-ethers@4.0.15

Changes

#8443 b7389c2 Thanks @Kropiunig! - Fixed the HD wallet derivation-path validator so malformed paths containing stray colons (e.g. m:/44'/60'/0'/0) are rejected with the INVALID_HD_PATH error.

Updated dependencies:

@nomicfoundation/hardhat-utils@4.1.5

@nomicfoundation/hardhat-errors@3.0.17

💡 The Nomic Foundation is hiring! Check our open positions.

@nomicfoundation/hardhat-ethers@4.0.14

Changes

#8249 8acc2cf Thanks @mmv08! - Add a per-network ethers.waitForTransactionReceipt option that makes HardhatEthersSigner.sendTransaction wait until the transaction receipt is available before resolving.

Updated dependencies:

@nomicfoundation/hardhat-errors@3.0.16

@nomicfoundation/hardhat-utils@4.1.4

... (truncated)

Changelog

Sourced from @nomicfoundation/hardhat-ethers's changelog.

4.2.0

Minor Changes

#8595 562cc0b Thanks @ChristopherDedominici! - Made ethers derive secp256k1 public keys with EDR's native implementation instead of its pure-JS one, speeding up new Wallet(secretKey), Wallet.createRandom(), HD wallet derivation and computeAddress.

Patch Changes

Updated dependencies:

@nomicfoundation/hardhat-errors@3.1.0

@nomicfoundation/hardhat-utils@4.3.0

4.1.0

Minor Changes

#8580 8583e24 Thanks @ChristopherDedominici! - Made ethers use EDR's native Keccak-256 instead of its pure-JS one.

#8210 024b422 Thanks @renovate! - Update the cryptography dependencies to their latest major versions: @noble/hashes and @noble/ciphers to 2, ethereum-cryptography to 3, and micro-eth-signer to 0.19.

Patch Changes

#8596 78f613c Thanks @schaable! - Fixed error shown when an HD key cannot be derived, to only include the derivation path.

Updated dependencies:

@nomicfoundation/hardhat-utils@4.2.0

4.0.15

Patch Changes

#8443 b7389c2 Thanks @Kropiunig! - Fixed the HD wallet derivation-path validator so malformed paths containing stray colons (e.g. m:/44'/60'/0'/0) are rejected with the INVALID_HD_PATH error.

Updated dependencies:

@nomicfoundation/hardhat-utils@4.1.5

@nomicfoundation/hardhat-errors@3.0.17

4.0.14

Patch Changes

#8249 8acc2cf Thanks @mmv08! - Add a per-network ethers.waitForTransactionReceipt option that makes HardhatEthersSigner.sendTransaction wait until the transaction receipt is available before resolving.

Updated dependencies:

@nomicfoundation/hardhat-errors@3.0.16

@nomicfoundation/hardhat-utils@4.1.4

4.0.13

Patch Changes

... (truncated)

Commits

c3bcf0a Version Packages
9fc81d9 Merge branch 'main' of https://github.com/NomicFoundation/hardhat into mvp-ed...
87caa67 improve test
73aa4df Version Packages
12def7f minor perf improv
711dd8d clean tests
206cf34 restore old test
8067517 clean comment and remove an export
a4c4446 further simplify tests
325e9a2 simplify tests
Additional commits viewable in compare view

Updates @nomicfoundation/hardhat-network-helpers from 1.1.2 to 3.0.11

Release notes

Sourced from @nomicfoundation/hardhat-network-helpers's releases.

@nomicfoundation/hardhat-network-helpers@3.0.11

Changes

#8367 82d00fc Thanks @alcuadrado! - Lazy load dependencies to optimize bootstrap time

Updated dependencies:

@nomicfoundation/hardhat-errors@3.0.16

@nomicfoundation/hardhat-utils@4.1.4

💡 The Nomic Foundation is hiring! Check our open positions.

@nomicfoundation/hardhat-network-helpers@3.0.10

Changes

#8339 00720e8 Thanks @alcuadrado! - The plugin now uses definePlugin from hardhat/plugins in its index.ts, so it participates in Hardhat's new "imported but unused plugin" warning when omitted from a project's plugins array.

Updated dependencies:

hardhat@3.8.0

@nomicfoundation/hardhat-errors@3.0.15

💡 The Nomic Foundation is hiring! Check our open positions.

Changelog

Sourced from @nomicfoundation/hardhat-network-helpers's changelog.

3.0.11

Patch Changes

#8367 82d00fc Thanks @alcuadrado! - Lazy load dependencies to optimize bootstrap time

Updated dependencies:

@nomicfoundation/hardhat-errors@3.0.16

@nomicfoundation/hardhat-utils@4.1.4

3.0.10

Patch Changes

#8339 00720e8 Thanks @alcuadrado! - The plugin now uses definePlugin from hardhat/plugins in its index.ts, so it participates in Hardhat's new "imported but unused plugin" warning when omitted from a project's plugins array.

Updated dependencies:

hardhat@3.8.0

@nomicfoundation/hardhat-errors@3.0.15

3.0.9

Patch Changes

#8264 8452f97 Thanks @alcuadrado! - Export ./package.json so consumers can import the package's manifest.

Updated dependencies:

@nomicfoundation/hardhat-errors@3.0.13

@nomicfoundation/hardhat-utils@4.1.2

3.0.8

Patch Changes

#8191 2a4ae8e Thanks @alcuadrado! - Update how type extensions are handled to optimize the bootstrap process of Hardhat.

Updated dependencies:

@nomicfoundation/hardhat-utils@4.1.1

3.0.7

Patch Changes

#8207 d594209 Thanks @alcuadrado! - Improved performance by replacing the debug logging library with a lightweight in-tree implementation.

Updated dependencies:

@nomicfoundation/hardhat-utils@4.1.0

@nomicfoundation/hardhat-errors@3.0.12

3.0.6

... (truncated)

Commits

a92ab66 Version Packages
f84f17e Merge pull request #8367 from NomicFoundation/update-imports-criteria-updated
9be35f7 Version Packages
0e60d4f hardhat-network-helpers lazy wrapper
76d0a2c Update external plugins
ccb55d9 Version Packages
54343f7 Upgrade TS everywhere
31f33cf Merge pull request #8264 from NomicFoundation/export-package-jsons
fb2a9ff Merge pull request #8261 from NomicFoundation/agent-scripts
0033686 scripts: run eslint before prettier in lint-file wrapper and pnpm lint/lint:fix
Additional commits viewable in compare view

Updates cssnano from 9.4.0 to 9.5.0

Release notes

Sourced from cssnano's releases.

v9.5.0

What's Changed

New Features

Minify unicode and reduce css-grid-template white space in cssnano/cssnano#2038

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@9.4.0...cssnano@9.5.0

Commits

f3a3590 Publish cssnano 9.5.0
4e65d31 doc: remove "aligned block" wording
332e2b9 test(postcss-normalize-unicode): add test explanations
e8448c4 test(cssnano-utils): reduce duplication
7b15fc5 chore: update stray TypeScript source maps
14e8650 fix(postcss-normalize-whitespace): normalize whitespace in CSS grid templates
536214d feat(postcss-normalize-unicode): normalize unicode ranges
6f7d4df chore: update mdn compatibility data
56627ff docs: update website dependencies
7928c95 docs: add semantic versioning policy
Additional commits viewable in compare view

Updates hardhat from 2.29.1 to 3.19.0

Release notes

Sourced from hardhat's releases.

Hardhat v3.19.0

This release expands our support for the upcoming Amsterdam hardfork, including: EIP-7976, EIP-7981, EIP-7997, EIP-8024 and EIP-8037. In particular, EIP-8037's separation of execution gas and state gas metering significantly changes the gas costs of state creation, so test early. See our Amsterdam Support guide for more details.

Changes

#8680 0e51fa2 Thanks @anaPerezGhiglia! - Added experimental EIP-7976 support to the Amsterdam hardfork: the calldata floor cost rises to 64 gas per byte. See the guide for more details.

#8680 b52d2eb Thanks @anaPerezGhiglia! - Added experimental EIP-7981 support to the Amsterdam hardfork: access list data costs an extra 64 gas per byte. See the guide for more details.

#8680 bb62bf6 Thanks @anaPerezGhiglia! - Added experimental EIP-7997 support to the Amsterdam hardfork: the deterministic CREATE2 factory is now part of the genesis state. See the guide for more details.

#8680 0e51fa2 Thanks @anaPerezGhiglia! - Added experimental EIP-8024 support to the Amsterdam hardfork: the DUPN, SWAPN and EXCHANGE opcodes reach stack items beyond DUP16 and SWAP16. See the guide for more details.

#8680 bb62bf6 Thanks @anaPerezGhiglia! - Added experimental EIP-8037 support to the Amsterdam hardfork: execution gas and state gas are metered separately, and a block's gasUsed reports the larger. See the guide for more details.

#8680 bb62bf6 Thanks @anaPerezGhiglia! - Upgraded EDR to v0.22.2.

#8679 63fb54a Thanks @Wodann! - Excluded the templates' node_modules folders from the published package, which broke installation with Yarn classic.

#8667 5793554 Thanks @schaable! - Improved the errors for invalid transactions sent from local accounts.

#8666 0295fef Thanks @schaable! - Fixed locally managed accounts silently dropping the blobs of EIP-4844 transactions; sending one now throws an error.

#8680 17133ce Thanks @kanej! - Removed the remaining built-in Holesky (chain ID 17000) hardfork history, as the network has been shut down.

#8680 17133ce Thanks @kanej! - Added the Amsterdam hardfork activation on Sepolia, so forking Sepolia uses amsterdam for blocks after it activates.

💡 The Nomic Foundation is hiring! Check our open positions.

Hardhat v3.18.1

This is a small bugfix release with fixes for simulated network predeploys and Solidity test error formatting.

Changes

#8631 d014d43 Thanks @Kropiunig! - Fixed edr-simulated networks with forking.enabled: false starting without the chain's predeploys (e.g. OP's GasPriceOracle and L1Block, or the L1 beacon roots and history storage contracts).

#8636 8b24451 Thanks @schaable! - Fixed the formatting of errors reported while running Solidity tests.

Updated dependencies:

@nomicfoundation/hardhat-utils@4.4.0

💡 The Nomic Foundation is hiring! Check our open positions.

Hardhat v3.18.0

This release includes two enhancements along with performance improvements and bug fixes: test profiles can now be used in Solidity tests, see our test profiles guide, and hardhat-mocha has been updated to mocha@12.

... (truncated)

Changelog

Sourced from hardhat's changelog.

3.19.0

Minor Changes

#8680 0e51fa2 Thanks @anaPerezGhiglia! - Added experimental EIP-7976 support to the Amsterdam hardfork: the calldata floor cost rises to 64 gas per byte.

#8680 b52d2eb Thanks @anaPerezGhiglia! - Added experimental EIP-7981 support to the Amsterdam hardfork: access list data costs an extra 64 gas per byte.

#8680 bb62bf6 Thanks @anaPerezGhiglia! - Added experimental EIP-7997 support to the Amsterdam hardfork: the deterministic CREATE2 factory is now part of the genesis state.

#8680 0e51fa2 Thanks @anaPerezGhiglia! - Added experimental EIP-8024 support to the Amsterdam hardfork: the DUPN, SWAPN and EXCHANGE opcodes reach stack items beyond DUP16 and SWAP16.

#8680 bb62bf6 Thanks @anaPerezGhiglia! - Added experimental EIP-8037 support to the Amsterdam hardfork: execution gas and state gas are metered separately, and a block's gasUsed reports the larger.

Patch Changes

#8680 bb62bf6 Thanks @anaPerezGhiglia! - Upgraded EDR to v0.22.2.

#8679 63fb54a Thanks @Wodann! - Excluded the templates' node_modules folders from the published package, which broke installation with Yarn classic.

#8667 5793554 Thanks @schaable! - Improved the errors for invalid transactions sent from local accounts.

#8666 0295fef Thanks @schaable! - Fixed locally managed accounts silently dropping the blobs of EIP-4844 transactions; sending one now throws an error.

#8680 17133ce Thanks @kanej! - Removed the remaining built-in Holesky (chain ID 17000) hardfork history, as the network has been shut down.

#8680 17133ce Thanks @kanej! - Added the Amsterdam hardfork activation on Sepolia, so forking Sepolia uses amsterdam for blocks after it activates.

3.18.1

Patch Changes

#8631 d014d43 Thanks @Kropiunig! - Fixed edr-simulated networks with forking.enabled: false starting without the chain's predeploys (e.g. OP's GasPriceOracle and L1Block, or the L1 beacon roots and history storage contracts).

#8636 8b24451 Thanks @schaable! - Fixed the formatting of errors reported while running Solidity tests.

Updated dependencies:

@nomicfoundation/hardhat-utils@4.4.0

3.18.0

Minor Changes

#8574 e28e4f5 Thanks @anaPerezGhiglia! - Removed the pre-Byzantium hardforks (chainstart, homestead, dao, tangerineWhistle, spuriousDragon) from the accepted hardfork and hardforkHistory values, as EDR cannot execute them.

#8595 562cc0b Thanks @ChristopherDedominici! - Made ethers derive secp256k1 public keys with EDR's native implementation instead of its pure-JS one, speeding up new Wallet(secretKey), Wallet.createRandom(), HD wallet derivation and computeAddress.

#8590 e2ebf54 Thanks @schaable! - Added Solidity test profiles, allowing test settings to vary across environments such as local development and CI.

Patch Changes

... (truncated)

Commits

083233c Version Packages
322d650 Merge remote-tracking branch 'origin/main' into build/edr-0.22.1
c96c040 Apply suggestion from @anaPerezGhiglia
d5f0bf8 fix(resolveDefaultTransactionGasLimit): apply EIP-8037 rules
29ddedc test(hardhat): assert the cause of INVALID_TX_PARAMS_TO_SIGN_LOCALLY
5793554 fix(hardhat): throw HardhatErrors for invalid EIP-7702 requests and signer fi...
ce8abca Merge pull request #8666 from NomicFoundation/local-accounts-reject-blob-txs
e5854f3 fix(hardhat): also reject type 0x3 transactions without blob fields
d4f90fc build: upgrade to EDR v0.22.2
4474064 build: upgrade to EDR v0.22.1
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the development-dependencies group with 5 updates: | Package | From | To | | --- | --- | --- | | [@nomicfoundation/hardhat-chai-matchers](https://github.com/NomicFoundation/hardhat/tree/HEAD/packages/hardhat-chai-matchers) | `2.1.2` | `3.0.0` | | [@nomicfoundation/hardhat-ethers](https://github.com/NomicFoundation/hardhat/tree/HEAD/packages/hardhat-ethers) | `3.1.3` | `4.2.0` | | [@nomicfoundation/hardhat-network-helpers](https://github.com/NomicFoundation/hardhat/tree/HEAD/packages/hardhat-network-helpers) | `1.1.2` | `3.0.11` | | [cssnano](https://github.com/cssnano/cssnano) | `9.4.0` | `9.5.0` | | [hardhat](https://github.com/NomicFoundation/hardhat/tree/HEAD/packages/hardhat) | `2.29.1` | `3.19.0` | Updates `@nomicfoundation/hardhat-chai-matchers` from 2.1.2 to 3.0.0 - [Release notes](https://github.com/NomicFoundation/hardhat/releases) - [Changelog](https://github.com/NomicFoundation/hardhat/blob/@nomicfoundation/hardhat-chai-matchers@3.0.0/packages/hardhat-chai-matchers/CHANGELOG.md) - [Commits](https://github.com/NomicFoundation/hardhat/commits/@nomicfoundation/hardhat-chai-matchers@3.0.0/packages/hardhat-chai-matchers) Updates `@nomicfoundation/hardhat-ethers` from 3.1.3 to 4.2.0 - [Release notes](https://github.com/NomicFoundation/hardhat/releases) - [Changelog](https://github.com/NomicFoundation/hardhat/blob/main/packages/hardhat-ethers/CHANGELOG.md) - [Commits](https://github.com/NomicFoundation/hardhat/commits/@nomicfoundation/hardhat-ethers@4.2.0/packages/hardhat-ethers) Updates `@nomicfoundation/hardhat-network-helpers` from 1.1.2 to 3.0.11 - [Release notes](https://github.com/NomicFoundation/hardhat/releases) - [Changelog](https://github.com/NomicFoundation/hardhat/blob/main/packages/hardhat-network-helpers/CHANGELOG.md) - [Commits](https://github.com/NomicFoundation/hardhat/commits/@nomicfoundation/hardhat-network-helpers@3.0.11/packages/hardhat-network-helpers) Updates `cssnano` from 9.4.0 to 9.5.0 - [Release notes](https://github.com/cssnano/cssnano/releases) - [Commits](https://github.com/cssnano/cssnano/compare/cssnano@9.4.0...cssnano@9.5.0) Updates `hardhat` from 2.29.1 to 3.19.0 - [Release notes](https://github.com/NomicFoundation/hardhat/releases) - [Changelog](https://github.com/NomicFoundation/hardhat/blob/main/packages/hardhat/CHANGELOG.md) - [Commits](https://github.com/NomicFoundation/hardhat/commits/hardhat@3.19.0/packages/hardhat) --- updated-dependencies: - dependency-name: "@nomicfoundation/hardhat-chai-matchers" dependency-version: 3.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: development-dependencies - dependency-name: "@nomicfoundation/hardhat-ethers" dependency-version: 4.2.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: development-dependencies - dependency-name: "@nomicfoundation/hardhat-network-helpers" dependency-version: 3.0.11 dependency-type: direct:development update-type: version-update:semver-major dependency-group: development-dependencies - dependency-name: cssnano dependency-version: 9.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: hardhat dependency-version: 3.19.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: development-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

vercel · 2026-10-13T05:43:44Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
dominicusin-github-io	Error		Oct 17, 2026 5:53am UTC

3 Skipped Deployments

Project	Deployment	Actions	Updated
dominicusin-dominicusin.github.io	Ignored	Preview	Oct 17, 2026 5:53am UTC
dominicusin-dominicusin.github.io-lw64	Ignored	Preview	Oct 17, 2026 5:53am UTC
dominicusin-github-io-5612	Ignored	Preview	Oct 17, 2026 5:53am UTC

bolt-new-by-stackblitz · 2026-10-13T05:43:47Z

Run & review this pull request in StackBlitz Codeflow.

coderabbitai · 2026-10-13T05:43:53Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI
Review profile: CHILL
Plan: Advanced
Run ID: 3c4aff10-2c7f-42b3-9f23-eeaa56955938

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

github-actions · 2026-10-13T05:43:56Z

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Scorecard details

Package

Version

Score

Details

npm/@noble/ciphers

1.3.0

Unknown

npm/@noble/ciphers

2.2.0

Unknown

npm/@noble/curves

1.9.7

Unknown

npm/@noble/curves

1.9.0

Unknown

npm/@noble/curves

2.2.0

Unknown

npm/@noble/hashes

1.8.0

Unknown

npm/@noble/hashes

2.2.0

Unknown

npm/@nomicfoundation/edr

0.22.2

Unknown

npm/@nomicfoundation/edr-darwin-arm64

0.22.2

Unknown

npm/@nomicfoundation/edr-darwin-x64

0.22.2

Unknown

npm/@nomicfoundation/edr-linux-arm64-gnu

0.22.2

Unknown

npm/@nomicfoundation/edr-linux-arm64-musl

0.22.2

Unknown

npm/@nomicfoundation/edr-linux-x64-gnu

0.22.2

Unknown

npm/@nomicfoundation/edr-linux-x64-musl

0.22.2

Unknown

npm/@nomicfoundation/edr-win32-x64-msvc

0.22.2

Unknown

npm/@nomicfoundation/hardhat-chai-matchers

3.0.0

Unknown

npm/@nomicfoundation/hardhat-errors

3.1.2

Unknown

npm/@nomicfoundation/hardhat-ethers

4.2.0

Unknown

npm/@nomicfoundation/hardhat-network-helpers

3.0.11

Unknown

npm/@nomicfoundation/hardhat-utils

4.4.0

Unknown

npm/@nomicfoundation/hardhat-vendored

3.0.4

Unknown

npm/@nomicfoundation/hardhat-zod-utils

3.0.7

Unknown

npm/@scure/base

2.2.0

Unknown

npm/@scure/bip32

1.7.0

Unknown

npm/@scure/bip39

1.6.0

Unknown

npm/@sentry/core

9.47.2

🟢 5.8

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10
Code-Review	🟢 10	all changesets reviewed
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
License	🟢 9	license file detected
Binary-Artifacts	🟢 8	binaries present in source code
Pinned-Dependencies	⚠️ 2	dependency not pinned by hash detected -- score normalized to 2
Security-Policy	🟢 10	security policy file detected
Branch-Protection	🟢 4	branch protection is not maximal on development and all release branches
Signed-Releases	⚠️ 0	Project has not signed or included provenance with any releases.
Fuzzing	⚠️ 0	project is not fuzzed
SAST	🟢 8	SAST tool detected but not run on all commits

npm/@streamparser/json

0.0.26

🟢 4.5

Details

Check	Score	Reason
Code-Review	⚠️ 0	Found 0/30 approved changesets -- score normalized to 0
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
SAST	⚠️ 0	no SAST tool detected
Maintained	🟢 10	30 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 4	dependency not pinned by hash detected -- score normalized to 4
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Security-Policy	⚠️ 0	security policy file not detected
License	🟢 10	license file detected
Fuzzing	⚠️ 0	project is not fuzzed
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches
Packaging	🟢 10	packaging workflow detected

npm/@streamparser/json-node

0.0.26

🟢 4.5

Details

Check	Score	Reason
Code-Review	⚠️ 0	Found 0/30 approved changesets -- score normalized to 0
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
SAST	⚠️ 0	no SAST tool detected
Maintained	🟢 10	30 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 4	dependency not pinned by hash detected -- score normalized to 4
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Security-Policy	⚠️ 0	security policy file not detected
License	🟢 10	license file detected
Fuzzing	⚠️ 0	project is not fuzzed
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches
Packaging	🟢 10	packaging workflow detected

npm/cssnano

9.5.0

🟢 7.4

Details

Check	Score	Reason
Code-Review	⚠️ 0	Found 0/9 approved changesets -- score normalized to 0
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Maintained	🟢 10	30 commit(s) and 17 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Security-Policy	🟢 10	security policy file detected
Token-Permissions	🟢 10	GitHub workflow tokens follow principle of least privilege
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 10	all dependencies are pinned
License	🟢 10	license file detected
Fuzzing	⚠️ 0	project is not fuzzed
Branch-Protection	🟢 5	branch protection is not maximal on development and all release branches
Signed-Releases	⚠️ -1	no releases found
SAST	🟢 10	SAST tool is run on all commits

npm/env-paths

4.0.0

🟢 3.6

Details

Check	Score	Reason
Code-Review	⚠️ 2	Found 7/30 approved changesets -- score normalized to 2
Binary-Artifacts	🟢 10	no binaries found in the repo
Maintained	⚠️ 0	1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	packaging workflow not detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Security-Policy	🟢 9	security policy file detected
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/ethereum-cryptography

3.2.0

🟢 3.8

Details

Check	Score	Reason
Code-Review	⚠️ 2	Found 5/19 approved changesets -- score normalized to 2
Maintained	⚠️ 0	0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Binary-Artifacts	🟢 10	no binaries found in the repo
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies	🟢 8	dependency not pinned by hash detected -- score normalized to 8
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Security-Policy	⚠️ 0	security policy file not detected
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 10	license file detected
Packaging	⚠️ -1	packaging workflow not detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	🟢 3	branch protection is not maximal on development and all release branches
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/fast-equals

6.1.1

🟢 4.5

Details

Check	Score	Reason
Packaging	⚠️ -1	packaging workflow not detected
Maintained	🟢 10	15 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions	⚠️ -1	No tokens found
Code-Review	⚠️ 2	Found 4/19 approved changesets -- score normalized to 2
Dangerous-Workflow	⚠️ -1	no workflows found
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ -1	no dependencies found
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Security-Policy	⚠️ 0	security policy file not detected
License	🟢 10	license file detected
Fuzzing	⚠️ 0	project is not fuzzed
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/fsevents

2.3.3

🟢 3.1

Details

Check	Score	Reason
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Maintained	⚠️ 0	0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Code-Review	🟢 3	Found 7/22 approved changesets -- score normalized to 3
Binary-Artifacts	🟢 10	no binaries found in the repo
Packaging	⚠️ -1	packaging workflow not detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Security-Policy	⚠️ 0	security policy file not detected
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/hardhat

3.19.0

Unknown

npm/is-safe-filename

0.1.1

Unknown

npm/micro-eth-signer

0.19.0

🟢 4.3

Details

Check	Score	Reason
Packaging	⚠️ -1	packaging workflow not detected
Code-Review	⚠️ 0	Found 0/30 approved changesets -- score normalized to 0
Maintained	🟢 10	22 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Binary-Artifacts	🟢 10	no binaries found in the repo
SAST	⚠️ 0	no SAST tool detected
Pinned-Dependencies	🟢 10	all dependencies are pinned
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Security-Policy	⚠️ 0	security policy file not detected
License	🟢 10	license file detected
Fuzzing	⚠️ 0	project is not fuzzed
Signed-Releases	⚠️ 0	Project has not signed or included provenance with any releases.
Branch-Protection	🟢 3	branch protection is not maximal on development and all release branches

npm/micro-packed

0.9.0

Unknown

npm/p-map

7.1.0

🟢 4.4

Details

Check	Score	Reason
Code-Review	⚠️ 0	Found 0/30 approved changesets -- score normalized to 0
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Maintained	🟢 10	30 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10
Binary-Artifacts	🟢 10	no binaries found in the repo
SAST	⚠️ 0	no SAST tool detected
Packaging	⚠️ -1	packaging workflow not detected
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Security-Policy	🟢 9	security policy file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches

npm/rfdc

1.4.1

🟢 3.3

Details

Check	Score	Reason
Code-Review	🟢 4	Found 9/22 approved changesets -- score normalized to 4
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Maintained	⚠️ 0	0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies	⚠️ 2	dependency not pinned by hash detected -- score normalized to 2
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Security-Policy	⚠️ 0	security policy file not detected
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/tsx

4.23.15

Unknown

npm/zod

3.25.76

🟢 5.1

Details

Check	Score	Reason
Security-Policy	🟢 10	security policy file detected
Maintained	🟢 10	30 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10
Code-Review	⚠️ 0	Found 1/30 approved changesets -- score normalized to 0
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	packaging workflow not detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies	🟢 5	dependency not pinned by hash detected -- score normalized to 5
License	🟢 10	license file detected
Fuzzing	⚠️ 0	project is not fuzzed
Signed-Releases	⚠️ -1	no releases found
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Branch-Protection	🟢 3	branch protection is not maximal on development and all release branches

Scanned Files

package-lock.json

…cies-9c748f57f8

…cies-9c748f57f8 Signed-off-by: dominicusin <497532+dominicusin@users.noreply.github.com>

…cies-9c748f57f8

dependabot · 2026-10-19T10:14:57Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot requested a review from dominicusin as a code owner October 13, 2026 05:43

dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 13, 2026

vercel Bot had a problem deploying to Preview – dominicusin-github-io October 13, 2026 05:43 Failure

github-actions Bot added the size/S label Oct 13, 2026

Merge branch 'main' into dependabot/npm_and_yarn/development-dependen…

66c2d6e

…cies-9c748f57f8

dominicusin enabled auto-merge (squash) October 13, 2026 22:59

vercel Bot had a problem deploying to Preview – dominicusin-github-io October 13, 2026 22:59 Failure

Merge branch 'main' into dependabot/npm_and_yarn/development-dependen…

07078c1

…cies-9c748f57f8 Signed-off-by: dominicusin <497532+dominicusin@users.noreply.github.com>

vercel Bot had a problem deploying to Preview – dominicusin-github-io October 17, 2026 05:20 Failure

dominicusin approved these changes Oct 17, 2026

View reviewed changes

Merge branch 'main' into dependabot/npm_and_yarn/development-dependen…

5891975

…cies-9c748f57f8

vercel Bot had a problem deploying to Preview – dominicusin-github-io October 17, 2026 05:24 Failure

dependabot Bot closed this Oct 19, 2026

auto-merge was automatically disabled October 19, 2026 10:15
Pull request was closed

dependabot Bot deleted the dependabot/npm_and_yarn/development-dependencies-9c748f57f8 branch October 19, 2026 10:15

Navigation Menu

Repository navigation

dev-deps: bump the development-dependencies group with 5 updates - #443

dev-deps: bump the development-dependencies group with 5 updates#443
dependabot[bot] wants to merge 4 commits into
mainfrom
dependabot/npm_and_yarn/development-dependencies-9c748f57f8

Uh oh!

Uh oh!

Uh oh!

Review skipped

Uh oh!

Uh oh!

Uh oh!

This branch had an error being deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

Uh oh!

Hardhat v2.29.1

Changes

Hardhat v2.29.0

Changes

@​nomicfoundation/hardhat-viem@​2.1.4

Changes

3.0.0

Major Changes

@​nomicfoundation/hardhat-ethers@​4.2.0

Changes

@​nomicfoundation/hardhat-ethers@​4.1.0

Changes

@​nomicfoundation/hardhat-ethers@​4.0.15

Changes

@​nomicfoundation/hardhat-ethers@​4.0.14

Changes

4.2.0

Minor Changes

Patch Changes

4.1.0

Minor Changes

Patch Changes

4.0.15

Patch Changes

4.0.14

Patch Changes

4.0.13

Patch Changes

@​nomicfoundation/hardhat-network-helpers@​3.0.11

Changes

@​nomicfoundation/hardhat-network-helpers@​3.0.10

Changes

3.0.11

Patch Changes

3.0.10

Patch Changes

3.0.9

Patch Changes

3.0.8

Patch Changes

3.0.7

Patch Changes

3.0.6

v9.5.0

What's Changed

New Features

Hardhat v3.19.0

Changes

Hardhat v3.18.1

Changes

Hardhat v3.18.0

3.19.0

Minor Changes

Patch Changes

3.18.1

Patch Changes

3.18.0

Minor Changes

Patch Changes

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Review skipped

Uh oh!

Uh oh!

Dependency Review

OpenSSF Scorecard

Scanned Files

Uh oh!

Uh oh!

This branch had an error being deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

`@nomicfoundation/hardhat-viem@2`.1.4

`@nomicfoundation/hardhat-ethers@4`.2.0

`@nomicfoundation/hardhat-ethers@4`.1.0

`@nomicfoundation/hardhat-ethers@4`.0.15

`@nomicfoundation/hardhat-ethers@4`.0.14

`@nomicfoundation/hardhat-network-helpers@3`.0.11

`@nomicfoundation/hardhat-network-helpers@3`.0.10