Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Oct 24, 2025

This PR contains the following updates:

Package Change Age Confidence
base-x ^3.0.11 -> ^5.0.0 age confidence

Release Notes

cryptocoinjs/base-x (base-x)

v5.0.1

Compare Source

v5.0.0

Compare Source

v4.0.1

Compare Source

v4.0.0

Compare Source


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@graphite-app
Copy link

graphite-app bot commented Oct 24, 2025

How to use the Graphite Merge Queue

Add either label to this PR to merge it via the merge queue:

  • MQ - adds this PR to the back of the merge queue
  • Hotfix - for urgent hot fixes, skip the queue and merge this PR next

You must have a Graphite account in order to use the merge queue. Sign up using this link.

An organization admin has enabled the Graphite Merge Queue in this repository.

Please do not merge from GitHub as this will restart CI on PRs being processed by the merge queue.

@coderabbitai
Copy link
Contributor

coderabbitai bot commented Oct 24, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Comment @coderabbitai help to get the list of available commands and usage tips.

@socket-security
Copy link

socket-security bot commented Oct 24, 2025

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedbase-x@​3.0.11 ⏵ 5.0.1100 +110092 +386100

View full report

@renovate renovate bot force-pushed the renovate/base-x-5.x branch 8 times, most recently from 740f6e0 to 6108e77 Compare October 29, 2025 15:37
@renovate renovate bot force-pushed the renovate/base-x-5.x branch 2 times, most recently from d46ad66 to c1bd753 Compare November 6, 2025 13:18
@renovate renovate bot force-pushed the renovate/base-x-5.x branch 6 times, most recently from d63c84c to 8ed1014 Compare November 23, 2025 13:32
@renovate renovate bot force-pushed the renovate/base-x-5.x branch 5 times, most recently from f060367 to 3e84a45 Compare November 30, 2025 11:15
@renovate renovate bot force-pushed the renovate/base-x-5.x branch 5 times, most recently from ff58b4f to 958f10c Compare December 6, 2025 08:29
@renovate renovate bot force-pushed the renovate/base-x-5.x branch from 958f10c to a84bd79 Compare December 6, 2025 13:06
@renovate renovate bot force-pushed the renovate/base-x-5.x branch from a84bd79 to a4d92f7 Compare December 6, 2025 13:07
fengmk2 added a commit that referenced this pull request Dec 6, 2025
Addresses #864 - upgrades `base-x` from v3 to v5.

## Breaking Change

`base-x` v5 returns `Uint8Array` from `decode()` instead of `Buffer`.
The `Buffer.readUInt32BE()` method doesn't exist on `Uint8Array`.

## Changes

- **package.json**: `base-x` `^3.0.11` → `^5.0.0`
- **app/common/UserUtil.ts**: Use `DataView` to read the CRC32 value
from decoded bytes

```typescript
// Before (v3 - Buffer)
return crcBytes.readUInt32BE(0) === crc32(bytes);

// After (v5 - Uint8Array)
const dataView = new DataView(crcBytes.buffer, crcBytes.byteOffset, crcBytes.byteLength);
return dataView.getUint32(0, false) === crc32(bytes);
```

> [!WARNING]
>
> <details>
> <summary>Firewall rules blocked me from connecting to one or more
addresses (expand for details)</summary>
>
> #### I tried to connect to the following addresses, but was blocked by
firewall rules:
>
> - `https://api.github.com//advisories`
> - Triggering command:
`/home/REDACTED/work/_temp/ghcca-node/node/bin/node
/home/REDACTED/work/_temp/ghcca-node/node/bin/node --enable-source-maps
/home/REDACTED/work/_temp/copilot-developer-action-main/dist/index.js`
(http block)
>
> If you need me to access, download, or install something from one of
these locations, you can either:
>
> - Configure [Actions setup
steps](https://gh.io/copilot/actions-setup-steps) to set up my
environment, which run before the firewall is enabled
> - Add the appropriate URLs or hosts to the custom allowlist in this
repository's [Copilot coding agent
settings](https://github.com/cnpm/cnpmcore/settings/copilot/coding_agent)
(admins only)
>
> </details>

<!-- START COPILOT CODING AGENT SUFFIX -->



<details>

<summary>Original prompt</summary>

> fix #864, upgrade base-x to v5


</details>



<!-- START COPILOT CODING AGENT TIPS -->
---

💡 You can make Copilot smarter by setting up custom instructions,
customizing its development environment and configuring Model Context
Protocol (MCP) servers. Learn more [Copilot coding agent
tips](https://gh.io/copilot-coding-agent-tips) in the docs.

---------

Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: fengmk2 <[email protected]>
Co-authored-by: MK (fengmk2) <[email protected]>
@fengmk2 fengmk2 closed this in #897 Dec 6, 2025
@renovate renovate bot deleted the renovate/base-x-5.x branch December 6, 2025 13:22
fengmk2 pushed a commit that referenced this pull request Dec 6, 2025
[skip ci]

## <small>4.13.3 (2025-12-06)</small>

* fix: zero copy to create a new Buffer (#916) ([683ee1d](683ee1d)), closes [#916](#916) [hi#level](https://github.com/hi/issues/level)
* chore(deps): update mime-types to v3 (#899) ([0a5c90c](0a5c90c)), closes [#899](#899) [#865](#865)
* chore(deps): upgrade base-x to v5 (#897) ([d3e4fae](d3e4fae)), closes [#897](#897) [#864](#864)
@github-actions
Copy link

github-actions bot commented Dec 6, 2025

🎉 This PR is included in version 4.13.3 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant