Skip to content

chore(deps)(deps): bump the transitive group across 1 directory with 28 updates#1281

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/transitive-d931f66a77
Open

chore(deps)(deps): bump the transitive group across 1 directory with 28 updates#1281
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/transitive-d931f66a77

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 22, 2026

Copy link
Copy Markdown
Contributor

Bumps the transitive group with 28 updates in the / directory:

Package From To
@libp2p/peer-id 6.0.9 6.0.11
ethers 6.16.0 6.17.0
@libp2p/autonat 3.0.20 3.0.22
@libp2p/bootstrap 12.0.22 12.0.25
@libp2p/circuit-relay-v2 4.2.5 4.2.7
@libp2p/crypto 5.1.18 5.1.20
@libp2p/dcutr 3.0.20 3.0.22
@libp2p/identify 4.1.6 4.1.8
@libp2p/interface 3.2.2 3.2.4
@libp2p/kad-dht 16.2.7 16.3.3
@libp2p/mdns 12.0.22 12.0.25
@libp2p/ping 3.1.5 3.1.7
@libp2p/tcp 11.0.20 11.0.22
@libp2p/websockets 10.1.13 10.1.15
libp2p 3.3.1 3.3.4
protobufjs 8.3.0 8.6.4
ajv 8.18.0 8.20.0
@openzeppelin/contracts 5.4.0 5.6.1
force-graph 1.51.1 1.51.4
oxigraph 0.5.5 0.5.9
@modelcontextprotocol/sdk 1.27.1 1.29.0
yaml 2.8.3 2.9.0
react 19.2.4 19.2.7
react-dom 19.2.4 19.2.7
@openuidev/react-lang 0.2.3 0.2.6
lucide-react 1.14.0 1.21.0
shiki 4.0.2 4.2.0
zustand 5.0.12 5.0.14

Updates @libp2p/peer-id from 6.0.9 to 6.0.11

Release notes

Sourced from @​libp2p/peer-id's releases.

peer-id: v6.0.11

6.0.11 (2026-06-13)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​libp2p/crypto bumped from ^5.1.19 to ^5.1.20
      • @​libp2p/interface bumped from ^3.2.3 to ^3.2.4

peer-id: v6.0.10

6.0.10 (2026-05-30)

Dependencies

  • upgrade multiformats to 14 and multiaddr to 13.0.3 (#3526) (5b8813a)
  • upgrade to aegir v48 (#3495) (29797a5)
  • The following workspace dependencies were updated
    • dependencies
      • @​libp2p/crypto bumped from ^5.1.18 to ^5.1.19
      • @​libp2p/interface bumped from ^3.2.2 to ^3.2.3
Commits

Updates ethers from 6.16.0 to 6.17.0

Release notes

Sourced from ethers's releases.

ethers/v6.17.0 (2026-06-18 00:49)

  • Add requestRate throttle to calls (b48bfe3).
  • Added provider requestRate throttle support (b74b6d3).
  • Disable AlchemyProvider which does not provide the necessary API capacity for tests (1523ca8).
  • Map ResolverNotFound error to null for reverse lookup (d07cfb6).
  • Use bigint for coinType instead of number values (4f6ec03).
  • Updated AlchemyProvider endpoints for BNB (9bec2f9).
  • Added basic ENSv2 tests and fixed issues with EVM cointypes (0e9a73d).
  • Adding ENSv2 integrations from adraffy (a2d0af4).
  • Update Blockscout deffault API key and links (5647ae3).
  • Added transactionsRoot to Block (#5077, #5078; 5bd2ce9).
  • Preserve 301/302 method and support 307/308 (#3106, #5115; 999af5f).
  • Fix maxFeePerGas property for EtherscanProvider transactions (#5080; ca45d23).
  • Added rich inspection for Network and Plugins (f2ffb86).
  • Tweaking API for Universal Resolver to be completely backward compatible (9a5c4b5).
  • Updated ENS Universal Resolver to latest API (0b3b12b).
  • Added CCIP to ENS Universal Resolver reverse resolution (982eef2).
  • Added reverse lookup for ENS UniversalResolver (9a9a11d).
  • Initial forward resolution using ENS UniversalResolver (51df7b9).
Changelog

Sourced from ethers's changelog.

ethers/v6.17.0 (2026-06-17 23:50)

  • Add requestRate throttle to calls (b48bfe3).
  • Added provider requestRate throttle support (b74b6d3).
  • Disable AlchemyProvider which does not provide the necessary API capacity for tests (1523ca8).
  • Map ResolverNotFound error to null for reverse lookup (d07cfb6).
  • Use bigint for coinType instead of number values (4f6ec03).
  • Updated AlchemyProvider endpoints for BNB (9bec2f9).
  • Added basic ENSv2 tests and fixed issues with EVM cointypes (0e9a73d).
  • Adding ENSv2 integrations from adraffy (a2d0af4).
  • Update Blockscout deffault API key and links (5647ae3).
  • Added transactionsRoot to Block (#5077, #5078; 5bd2ce9).
  • Preserve 301/302 method and support 307/308 (#3106, #5115; 999af5f).
  • Fix maxFeePerGas property for EtherscanProvider transactions (#5080; ca45d23).
  • Added rich inspection for Network and Plugins (f2ffb86).
  • Tweaking API for Universal Resolver to be completely backward compatible (9a5c4b5).
  • Updated ENS Universal Resolver to latest API (0b3b12b).
  • Added CCIP to ENS Universal Resolver reverse resolution (982eef2).
  • Added reverse lookup for ENS UniversalResolver (9a9a11d).
  • Initial forward resolution using ENS UniversalResolver (51df7b9).
Commits
  • 3ea4c22 admin: updated dist files
  • 2d35b6a docs: fix property access order for Flatworm
  • b48bfe3 Add requestRate throttle to calls.
  • 39f5ce1 tests: add INFURA_APIKEY for docs and workflows
  • 96bd29c tests: added provider throttling to test suites
  • b74b6d3 Added provider requestRate throttle support.
  • 1523ca8 Disable AlchemyProvider which does not provide the necessary API capacity for...
  • d07cfb6 Map ResolverNotFound error to null for reverse lookup.
  • c32c542 docs: fix typo in config for INFURA API key
  • 7c6b840 admin: include INFURA_APIKEY in docs generation to resolve throttling
  • Additional commits viewable in compare view

Updates @libp2p/autonat from 3.0.20 to 3.0.22

Release notes

Sourced from @​libp2p/autonat's releases.

dcutr: v3.0.22

3.0.22 (2026-06-13)

Dependencies

  • update uint8array related deps (#3542) (54ec417)
  • The following workspace dependencies were updated
    • dependencies
      • @​libp2p/interface bumped from ^3.2.3 to ^3.2.4
      • @​libp2p/interface-internal bumped from ^3.1.6 to ^3.1.7
      • @​libp2p/utils bumped from ^7.2.2 to ^7.2.3

autonat: v3.0.22

3.0.22 (2026-06-13)

Dependencies

  • update uint8array related deps (#3542) (54ec417)
  • The following workspace dependencies were updated
    • dependencies
      • @​libp2p/interface bumped from ^3.2.3 to ^3.2.4
      • @​libp2p/interface-internal bumped from ^3.1.6 to ^3.1.7
      • @​libp2p/peer-collections bumped from ^7.0.21 to ^7.0.22
      • @​libp2p/peer-id bumped from ^6.0.10 to ^6.0.11
      • @​libp2p/utils bumped from ^7.2.2 to ^7.2.3
    • devDependencies
      • @​libp2p/crypto bumped from ^5.1.19 to ^5.1.20
      • @​libp2p/logger bumped from ^6.2.8 to ^6.2.9

plaintext: v3.0.22

3.0.22 (2026-06-13)

Dependencies

  • update uint8array related deps (#3542) (54ec417)
  • The following workspace dependencies were updated
    • dependencies
      • @​libp2p/crypto bumped from ^5.1.19 to ^5.1.20
      • @​libp2p/interface bumped from ^3.2.3 to ^3.2.4
      • @​libp2p/peer-id bumped from ^6.0.10 to ^6.0.11
      • @​libp2p/utils bumped from ^7.2.2 to ^7.2.3
    • devDependencies
      • @​libp2p/crypto bumped from ^5.1.19 to ^5.1.20
      • @​libp2p/logger bumped from ^6.2.8 to ^6.2.9

dcutr: v3.0.21

3.0.21 (2026-05-30)

... (truncated)

Commits

Updates @libp2p/bootstrap from 12.0.22 to 12.0.25

Release notes

Sourced from @​libp2p/bootstrap's releases.

mplex: v12.0.25

12.0.25 (2026-06-13)

Bug Fixes

Dependencies

  • update uint8array related deps (#3542) (54ec417)
  • The following workspace dependencies were updated
    • dependencies
      • @​libp2p/interface bumped from ^3.2.3 to ^3.2.4
      • @​libp2p/utils bumped from ^7.2.2 to ^7.2.3
    • devDependencies
      • @​libp2p/interface-compliance-tests bumped from ^7.0.24 to ^7.0.25
      • @​libp2p/logger bumped from ^6.2.8 to ^6.2.9
Commits

Updates @libp2p/circuit-relay-v2 from 4.2.5 to 4.2.7

Commits

Updates @libp2p/crypto from 5.1.18 to 5.1.20

Release notes

Sourced from @​libp2p/crypto's releases.

crypto: v5.1.20

5.1.20 (2026-06-13)

Bug Fixes

Dependencies

  • update uint8array related deps (#3542) (54ec417)
  • The following workspace dependencies were updated
    • dependencies
      • @​libp2p/interface bumped from ^3.2.3 to ^3.2.4
Commits

Updates @libp2p/dcutr from 3.0.20 to 3.0.22

Release notes

Sourced from @​libp2p/dcutr's releases.

dcutr: v3.0.22

3.0.22 (2026-06-13)

Dependencies

  • update uint8array related deps (#3542) (54ec417)
  • The following workspace dependencies were updated
    • dependencies
      • @​libp2p/interface bumped from ^3.2.3 to ^3.2.4
      • @​libp2p/interface-internal bumped from ^3.1.6 to ^3.1.7
      • @​libp2p/utils bumped from ^7.2.2 to ^7.2.3

autonat: v3.0.22

3.0.22 (2026-06-13)

Dependencies

  • update uint8array related deps (#3542) (54ec417)
  • The following workspace dependencies were updated
    • dependencies
      • @​libp2p/interface bumped from ^3.2.3 to ^3.2.4
      • @​libp2p/interface-internal bumped from ^3.1.6 to ^3.1.7
      • @​libp2p/peer-collections bumped from ^7.0.21 to ^7.0.22
      • @​libp2p/peer-id bumped from ^6.0.10 to ^6.0.11
      • @​libp2p/utils bumped from ^7.2.2 to ^7.2.3
    • devDependencies
      • @​libp2p/crypto bumped from ^5.1.19 to ^5.1.20
      • @​libp2p/logger bumped from ^6.2.8 to ^6.2.9

plaintext: v3.0.22

3.0.22 (2026-06-13)

Dependencies

  • update uint8array related deps (#3542) (54ec417)
  • The following workspace dependencies were updated
    • dependencies
      • @​libp2p/crypto bumped from ^5.1.19 to ^5.1.20
      • @​libp2p/interface bumped from ^3.2.3 to ^3.2.4
      • @​libp2p/peer-id bumped from ^6.0.10 to ^6.0.11
      • @​libp2p/utils bumped from ^7.2.2 to ^7.2.3
    • devDependencies
      • @​libp2p/crypto bumped from ^5.1.19 to ^5.1.20
      • @​libp2p/logger bumped from ^6.2.8 to ^6.2.9

dcutr: v3.0.21

3.0.21 (2026-05-30)

... (truncated)

Commits

Updates @libp2p/identify from 4.1.6 to 4.1.8

Release notes

Sourced from @​libp2p/identify's releases.

identify: v4.1.8

4.1.8 (2026-06-13)

Dependencies

  • update uint8array related deps (#3542) (54ec417)
  • The following workspace dependencies were updated
    • dependencies
      • @​libp2p/crypto bumped from ^5.1.19 to ^5.1.20
      • @​libp2p/interface bumped from ^3.2.3 to ^3.2.4
      • @​libp2p/interface-internal bumped from ^3.1.6 to ^3.1.7
      • @​libp2p/peer-id bumped from ^6.0.10 to ^6.0.11
      • @​libp2p/peer-record bumped from ^9.0.11 to ^9.0.12
      • @​libp2p/utils bumped from ^7.2.2 to ^7.2.3
    • devDependencies
      • @​libp2p/logger bumped from ^6.2.8 to ^6.2.9

fetch: v4.1.7

4.1.7 (2026-06-13)

Dependencies

  • update uint8array related deps (#3542) (54ec417)
  • The following workspace dependencies were updated
    • dependencies
      • @​libp2p/interface bumped from ^3.2.3 to ^3.2.4
      • @​libp2p/interface-internal bumped from ^3.1.6 to ^3.1.7
      • @​libp2p/utils bumped from ^7.2.2 to ^7.2.3
    • devDependencies
      • @​libp2p/crypto bumped from ^5.1.19 to ^5.1.20
      • @​libp2p/peer-id bumped from ^6.0.10 to ^6.0.11

identify: v4.1.7

4.1.7 (2026-05-30)

Dependencies

  • upgrade multiformats to 14 and multiaddr to 13.0.3 (#3526) (5b8813a)
  • upgrade to aegir v48 (#3495) (29797a5)
  • The following workspace dependencies were updated
    • dependencies
      • @​libp2p/crypto bumped from ^5.1.18 to ^5.1.19
      • @​libp2p/interface bumped from ^3.2.2 to ^3.2.3
      • @​libp2p/interface-internal bumped from ^3.1.5 to ^3.1.6
      • @​libp2p/peer-id bumped from ^6.0.9 to ^6.0.10
      • @​libp2p/peer-record bumped from ^9.0.10 to ^9.0.11
      • @​libp2p/utils bumped from ^7.2.1 to ^7.2.2

... (truncated)

Commits

Updates @libp2p/interface from 3.2.2 to 3.2.4

Release notes

Sourced from @​libp2p/interface's releases.

interface: v3.2.4

3.2.4 (2026-06-13)

Dependencies

interface: v3.2.3

3.2.3 (2026-05-30)

Dependencies

Commits

Updates @libp2p/kad-dht from 16.2.7 to 16.3.3

Release notes

Sourced from @​libp2p/kad-dht's releases.

kad-dht: v16.3.3

16.3.3 (2026-06-13)

Bug Fixes

Documentation

  • kad-dht: correct the alpha option default in the JSDoc (#3541) (5e07d59)

Dependencies

  • update uint8array related deps (#3542) (54ec417)
  • The following workspace dependencies were updated
    • dependencies
      • @​libp2p/crypto bumped from ^5.1.19 to ^5.1.20
      • @​libp2p/interface bumped from ^3.2.3 to ^3.2.4
      • @​libp2p/interface-internal bumped from ^3.1.6 to ^3.1.7
      • @​libp2p/peer-collections bumped from ^7.0.21 to ^7.0.22
      • @​libp2p/peer-id bumped from ^6.0.10 to ^6.0.11
      • @​libp2p/ping bumped from ^3.1.6 to ^3.1.7
      • @​libp2p/record bumped from ^4.0.13 to ^4.0.14
      • @​libp2p/utils bumped from ^7.2.2 to ^7.2.3
    • devDependencies
      • @​libp2p/logger bumped from ^6.2.8 to ^6.2.9
      • @​libp2p/peer-store bumped from ^12.0.21 to ^12.0.22

kad-dht: v16.3.2

16.3.2 (2026-06-06)

Refactors

  • kad-dht: only check dialability for closer peers (#3528) (7550173)

kad-dht: v16.3.1

16.3.1 (2026-05-30)

Dependencies

  • upgrade multiformats to 14 and multiaddr to 13.0.3 (#3526) (5b8813a)
  • upgrade to aegir v48 (#3495) (29797a5)
  • The following workspace dependencies were updated
    • dependencies
      • @​libp2p/crypto bumped from ^5.1.18 to ^5.1.19

... (truncated)

Commits

Updates @libp2p/mdns from 12.0.22 to 12.0.25

Release notes

Sourced from @​libp2p/mdns's releases.

mplex: v12.0.25

12.0.25 (2026-06-13)

Bug Fixes

Dependencies

  • update uint8array related deps (#3542) (54ec417)
  • The following workspace dependencies were updated
    • dependencies
      • @​libp2p/interface bumped from ^3.2.3 to ^3.2.4
      • @​libp2p/utils bumped from ^7.2.2 to ^7.2.3
    • devDependencies
      • @​libp2p/interface-compliance-tests bumped from ^7.0.24 to ^7.0.25
      • @​libp2p/logger bumped from ^6.2.8 to ^6.2.9
Commits

Updates @libp2p/ping from 3.1.5 to 3.1.7

Release notes

Sourced from @​libp2p/ping's releases.

ping: v3.1.7

3.1.7 (2026-06-13)

Bug Fixes

Dependencies

  • update uint8array related deps (#3542) (54ec417)
  • The following workspace dependencies were updated
    • dependencies
      • @​libp2p/interface bumped from ^3.2.3 to ^3.2.4
      • @​libp2p/interface-internal bumped from ^3.1.6 to ^3.1.7
    • devDependencies
      • @​libp2p/crypto bumped from ^5.1.19 to ^5.1.20
      • @​libp2p/peer-id bumped from ^6.0.10 to ^6.0.11
      • @​libp2p/utils bumped from ^7.2.2 to ^7.2.3

echo: v3.1.7

3.1.7 (2026-06-13)

Dependencies

  • update uint8array related deps (#3542) (54ec417)
  • The following workspace dependencies were updated
    • dependencies
      • @​libp2p/interface bumped from ^3.2.3 to ^3.2.4
      • @​libp2p/interface-internal bumped from ^3.1.6 to ^3.1.7
      • @​libp2p/utils bumped from ^7.2.2 to ^7.2.3

interface-internal: v3.1.7

3.1.7 (2026-06-13)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​libp2p/interface bumped from ^3.2.3 to ^3.2.4
      • @​libp2p/peer-collections bumped from ^7.0.21 to ^7.0.22

ping: v3.1.6

3.1.6 (2026-05-30)

Dependencies

... (truncated)

Commits

Updates @libp2p/tcp from 11.0.20 to 11.0.22

Release notes

Sourced from @​libp2p/tcp's releases.

tcp: v11.0.22

11.0.22 (2026-06-13)

Dependencies

  • update uint8array related deps (#3542) (54ec417)
  • The following workspace dependencies were updated
    • dependencies
      • @​libp2p/interface bumped from ^3.2.3 to ^3.2.4
      • @​libp2p/utils bumped from ^7.2.2 to ^7.2.3
    • devDependencies
      • @​libp2p/logger bumped from ^6.2.8 to ^6.2.9

tcp: v11.0.21

11.0.21 (2026-05-30)

Dependencies

  • upgrade multiformats to 14 and multiaddr to 13.0.3 (#3526) (5b8813a)
  • upgrade to aegir v48 (#3495) (29797a5)
  • The following workspace dependencies were updated
    • dependencies
      • @​libp2p/interface bumped from ^3.2.2 to ^3.2.3
      • @​libp2p/utils bumped from ^7.2.1 to ^7.2.2
    • devDependencies
      • @​libp2p/logger bumped from ^6.2.7 to ^6.2.8
Commits

@dependabot
chore(deps)(deps): bump the transitive group across 1 directory with …
15b0c95 
…28 updates

Bumps the transitive group with 28 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@libp2p/peer-id](https://github.com/libp2p/js-libp2p) | `6.0.9` | `6.0.11` |
| [ethers](https://github.com/ethers-io/ethers.js) | `6.16.0` | `6.17.0` |
| [@libp2p/autonat](https://github.com/libp2p/js-libp2p) | `3.0.20` | `3.0.22` |
| [@libp2p/bootstrap](https://github.com/libp2p/js-libp2p) | `12.0.22` | `12.0.25` |
| [@libp2p/circuit-relay-v2](https://github.com/libp2p/js-libp2p) | `4.2.5` | `4.2.7` |
| [@libp2p/crypto](https://github.com/libp2p/js-libp2p) | `5.1.18` | `5.1.20` |
| [@libp2p/dcutr](https://github.com/libp2p/js-libp2p) | `3.0.20` | `3.0.22` |
| [@libp2p/identify](https://github.com/libp2p/js-libp2p) | `4.1.6` | `4.1.8` |
| [@libp2p/interface](https://github.com/libp2p/js-libp2p) | `3.2.2` | `3.2.4` |
| [@libp2p/kad-dht](https://github.com/libp2p/js-libp2p) | `16.2.7` | `16.3.3` |
| [@libp2p/mdns](https://github.com/libp2p/js-libp2p) | `12.0.22` | `12.0.25` |
| [@libp2p/ping](https://github.com/libp2p/js-libp2p) | `3.1.5` | `3.1.7` |
| [@libp2p/tcp](https://github.com/libp2p/js-libp2p) | `11.0.20` | `11.0.22` |
| [@libp2p/websockets](https://github.com/libp2p/js-libp2p) | `10.1.13` | `10.1.15` |
| [libp2p](https://github.com/libp2p/js-libp2p) | `3.3.1` | `3.3.4` |
| [protobufjs](https://github.com/protobufjs/protobuf.js) | `8.3.0` | `8.6.4` |
| [ajv](https://github.com/ajv-validator/ajv) | `8.18.0` | `8.20.0` |
| [@openzeppelin/contracts](https://github.com/OpenZeppelin/openzeppelin-contracts) | `5.4.0` | `5.6.1` |
| [force-graph](https://github.com/vasturiano/force-graph) | `1.51.1` | `1.51.4` |
| [oxigraph](https://github.com/oxigraph/oxigraph/tree/HEAD/js) | `0.5.5` | `0.5.9` |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.27.1` | `1.29.0` |
| [yaml](https://github.com/eemeli/yaml) | `2.8.3` | `2.9.0` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.4` | `19.2.7` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.4` | `19.2.7` |
| [@openuidev/react-lang](https://github.com/thesysdev/openui/tree/HEAD/packages/react-lang) | `0.2.3` | `0.2.6` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.14.0` | `1.21.0` |
| [shiki](https://github.com/shikijs/shiki/tree/HEAD/packages/shiki) | `4.0.2` | `4.2.0` |
| [zustand](https://github.com/pmndrs/zustand) | `5.0.12` | `5.0.14` |



Updates `@libp2p/peer-id` from 6.0.9 to 6.0.11
- [Release notes](https://github.com/libp2p/js-libp2p/releases)
- [Commits](libp2p/js-libp2p@daemon-v6.0.9...daemon-v6.0.11)

Updates `ethers` from 6.16.0 to 6.17.0
- [Release notes](https://github.com/ethers-io/ethers.js/releases)
- [Changelog](https://github.com/ethers-io/ethers.js/blob/main/CHANGELOG.md)
- [Commits](ethers-io/ethers.js@v6.16.0...v6.17.0)

Updates `@libp2p/autonat` from 3.0.20 to 3.0.22
- [Release notes](https://github.com/libp2p/js-libp2p/releases)
- [Commits](libp2p/js-libp2p@perf-v3.0.20...perf-v3.0.22)

Updates `@libp2p/bootstrap` from 12.0.22 to 12.0.25
- [Release notes](https://github.com/libp2p/js-libp2p/releases)
- [Commits](libp2p/js-libp2p@mdns-v12.0.22...mdns-v12.0.25)

Updates `@libp2p/circuit-relay-v2` from 4.2.5 to 4.2.7
- [Release notes](https://github.com/libp2p/js-libp2p/releases)
- [Commits](libp2p/js-libp2p@circuit-relay-v2-v4.2.5...circuit-relay-v2-v4.2.7)

Updates `@libp2p/crypto` from 5.1.18 to 5.1.20
- [Release notes](https://github.com/libp2p/js-libp2p/releases)
- [Commits](libp2p/js-libp2p@crypto-v5.1.18...crypto-v5.1.20)

Updates `@libp2p/dcutr` from 3.0.20 to 3.0.22
- [Release notes](https://github.com/libp2p/js-libp2p/releases)
- [Commits](libp2p/js-libp2p@perf-v3.0.20...perf-v3.0.22)

Updates `@libp2p/identify` from 4.1.6 to 4.1.8
- [Release notes](https://github.com/libp2p/js-libp2p/releases)
- [Commits](libp2p/js-libp2p@fetch-v4.1.6...crypto-v4.1.8)

Updates `@libp2p/interface` from 3.2.2 to 3.2.4
- [Release notes](https://github.com/libp2p/js-libp2p/releases)
- [Commits](libp2p/js-libp2p@libp2p-v3.2.2...libp2p-v3.2.4)

Updates `@libp2p/kad-dht` from 16.2.7 to 16.3.3
- [Release notes](https://github.com/libp2p/js-libp2p/releases)
- [Commits](libp2p/js-libp2p@kad-dht-v16.2.7...kad-dht-v16.3.3)

Updates `@libp2p/mdns` from 12.0.22 to 12.0.25
- [Release notes](https://github.com/libp2p/js-libp2p/releases)
- [Commits](libp2p/js-libp2p@mdns-v12.0.22...mdns-v12.0.25)

Updates `@libp2p/ping` from 3.1.5 to 3.1.7
- [Release notes](https://github.com/libp2p/js-libp2p/releases)
- [Commits](libp2p/js-libp2p@echo-v3.1.5...echo-v3.1.7)

Updates `@libp2p/tcp` from 11.0.20 to 11.0.22
- [Release notes](https://github.com/libp2p/js-libp2p/releases)
- [Commits](libp2p/js-libp2p@tcp-v11.0.20...tcp-v11.0.22)

Updates `@libp2p/websockets` from 10.1.13 to 10.1.15
- [Release notes](https://github.com/libp2p/js-libp2p/releases)
- [Commits](libp2p/js-libp2p@tcp-v10.1.13...tcp-v10.1.15)

Updates `libp2p` from 3.3.1 to 3.3.4
- [Release notes](https://github.com/libp2p/js-libp2p/releases)
- [Commits](libp2p/js-libp2p@libp2p-v3.3.1...libp2p-v3.3.4)

Updates `protobufjs` from 8.3.0 to 8.6.4
- [Release notes](https://github.com/protobufjs/protobuf.js/releases)
- [Changelog](https://github.com/protobufjs/protobuf.js/blob/master/CHANGELOG.md)
- [Commits](protobufjs/protobuf.js@protobufjs-v8.3.0...protobufjs-v8.6.4)

Updates `ajv` from 8.18.0 to 8.20.0
- [Release notes](https://github.com/ajv-validator/ajv/releases)
- [Commits](ajv-validator/ajv@v8.18.0...v8.20.0)

Updates `@openzeppelin/contracts` from 5.4.0 to 5.6.1
- [Release notes](https://github.com/OpenZeppelin/openzeppelin-contracts/releases)
- [Changelog](https://github.com/OpenZeppelin/openzeppelin-contracts/blob/master/CHANGELOG.md)
- [Commits](OpenZeppelin/openzeppelin-contracts@v5.4.0...v5.6.1)

Updates `force-graph` from 1.51.1 to 1.51.4
- [Commits](vasturiano/force-graph@v1.51.1...v1.51.4)

Updates `oxigraph` from 0.5.5 to 0.5.9
- [Release notes](https://github.com/oxigraph/oxigraph/releases)
- [Changelog](https://github.com/oxigraph/oxigraph/blob/v0.5.9/CHANGELOG.md)
- [Commits](https://github.com/oxigraph/oxigraph/commits/v0.5.9/js)

Updates `@modelcontextprotocol/sdk` from 1.27.1 to 1.29.0
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@v1.27.1...v1.29.0)

Updates `yaml` from 2.8.3 to 2.9.0
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.8.3...v2.9.0)

Updates `react` from 19.2.4 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react)

Updates `react-dom` from 19.2.4 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-dom)

Updates `@openuidev/react-lang` from 0.2.3 to 0.2.6
- [Commits](https://github.com/thesysdev/openui/commits/HEAD/packages/react-lang)

Updates `lucide-react` from 1.14.0 to 1.21.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.21.0/packages/lucide-react)

Updates `shiki` from 4.0.2 to 4.2.0
- [Release notes](https://github.com/shikijs/shiki/releases)
- [Commits](https://github.com/shikijs/shiki/commits/v4.2.0/packages/shiki)

Updates `zustand` from 5.0.12 to 5.0.14
- [Release notes](https://github.com/pmndrs/zustand/releases)
- [Commits](pmndrs/zustand@v5.0.12...v5.0.14)

---
updated-dependencies:
- dependency-name: "@libp2p/peer-id"
  dependency-version: 6.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: transitive
- dependency-name: ethers
  dependency-version: 6.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: transitive
- dependency-name: "@libp2p/autonat"
  dependency-version: 3.0.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: transitive
- dependency-name: "@libp2p/bootstrap"
  dependency-version: 12.0.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: transitive
- dependency-name: "@libp2p/circuit-relay-v2"
  dependency-version: 4.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: transitive
- dependency-name: "@libp2p/crypto"
  dependency-version: 5.1.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: transitive
- dependency-name: "@libp2p/dcutr"
  dependency-version: 3.0.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: transitive
- dependency-name: "@libp2p/identify"
  dependency-version: 4.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: transitive
- dependency-name: "@libp2p/interface"
  dependency-version: 3.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: transitive
- dependency-name: "@libp2p/kad-dht"
  dependency-version: 16.3.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: transitive
- dependency-name: "@libp2p/mdns"
  dependency-version: 12.0.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: transitive
- dependency-name: "@libp2p/ping"
  dependency-version: 3.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: transitive
- dependency-name: "@libp2p/tcp"
  dependency-version: 11.0.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: transitive
- dependency-name: "@libp2p/websockets"
  dependency-version: 10.1.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: transitive
- dependency-name: libp2p
  dependency-version: 3.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: transitive
- dependency-name: protobufjs
  dependency-version: 8.6.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: transitive
- dependency-name: ajv
  dependency-version: 8.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: transitive
- dependency-name: "@openzeppelin/contracts"
  dependency-version: 5.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: transitive
- dependency-name: force-graph
  dependency-version: 1.51.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: transitive
- dependency-name: oxigraph
  dependency-version: 0.5.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: transitive
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: transitive
- dependency-name: yaml
  dependency-version: 2.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: transitive
- dependency-name: react
  dependency-version: 19.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: transitive
- dependency-name: react-dom
  dependency-version: 19.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: transitive
- dependency-name: "@openuidev/react-lang"
  dependency-version: 0.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: transitive
- dependency-name: lucide-react
  dependency-version: 1.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: transitive
- dependency-name: shiki
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: transitive
- dependency-name: zustand
  dependency-version: 5.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: transitive
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jun 22, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, npm, security. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

otReviewAgent
otReviewAgent reviewed Jun 22, 2026
View reviewed changes
Comment thread pnpm-lock.yaml

packages/evm-module:
dependencies:
'@openzeppelin/contracts':
specifier: ^5.1.0
version: 5.4.0
version: 5.6.1

@otReviewAgent otReviewAgent Jun 22, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Issue: This lockfile-only change updates the OpenZeppelin contracts used by packages/evm-module from 5.4.0 to 5.6.1. The module imports OZ ERC20/ERC721/SafeERC20/ReentrancyGuard/Ownable sources and its release/integration build path runs hardhat compile, so this can change deployed bytecode without any Solidity, ABI, artifact, or migration diff for reviewers to inspect. For smart-contract code, please either pin the previously reviewed OZ version or include the regenerated artifacts/bytecode review and contract tests showing the upgrade is intentional and behavior-compatible.

Comment thread pnpm-lock.yaml
vitest:
specifier: ^4.0.18
version: 4.0.18(@types/node@22.19.11)(happy-dom@20.8.9(bufferutil@4.1.0)(utf-8-validate@5.0.10))(jiti@2.7.0)(tsx@4.21.0)(yaml@2.9.0)
version: 4.0.18(@types/node@26.0.0)(happy-dom@20.8.9(bufferutil@4.1.0)(utf-8-validate@5.0.10))(jiti@2.7.0)(tsx@4.21.0)(yaml@2.9.0)

packages/evm-module:
dependencies:
'@openzeppelin/contracts':
specifier: ^5.1.0

@otReviewAgent otReviewAgent Jun 22, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Issue: This lockfile-only PR updates the EVM dependency graph (@openzeppelin/contracts, ethers, Hardhat plugins), but the dedicated EVM Integration Tests workflow is path-filtered to source/workflow files and does not include pnpm-lock.yaml or package manifests. Because this PR only changes the lockfile, the live Hardhat-backed chain/publisher/agent integration matrix in .github/workflows/evm-integration.yml will not run, leaving the dependency refresh validated only by the main CI lanes. Add the lockfile/package manifests to that workflow’s paths filter or provide an explicit ./scripts/test-evm-integration.sh all run for this PR.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@otReviewAgent otReviewAgent otReviewAgent left review comments

@branarakic branarakic Awaiting requested review from branarakic branarakic is a code owner

@Jurij89 Jurij89 Awaiting requested review from Jurij89 Jurij89 is a code owner

@zsculac zsculac Awaiting requested review from zsculac zsculac is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@otReviewAgent