Skip to content

chore(deps): bump the production-major group across 1 directory with 8 updates #2274

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
dependabot wants to merge 1 commit into from
Closed

chore(deps): bump the production-major group across 1 directory with 8 updates #2274

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 29, 2025 •
edited
Loading

Bumps the production-major group with 8 updates in the / directory:

Package From To
@noble/hashes 1.8.0 2.0.1
@hookform/resolvers 4.0.0 5.2.2
zod 3.25.76 4.2.1
react-syntax-highlighter 15.6.6 16.1.0
wagmi 2.19.4 3.1.3
@fastify/static 8.3.0 9.0.0
eslint-plugin-react-hooks 5.2.0 7.0.1
non.geist 1.0.4 2.0.1

Updates @noble/hashes from 1.8.0 to 2.0.1

Release notes

Sourced from @​noble/hashes's releases.

2.0.1

  • .js extension must be used for all modules
    • Old: @noble/hashes/sha3
    • New: @noble/hashes/sha3.js
    • This simplifies working in browsers natively without transpilers
    • This was planned for 2.0.0, but was accidentally left out
  • package.json: specify exported submodules to ensure typescript autocompletion
  • scrypt: Fix error message for maxmem check by @​ChALkeR in paulmillr/noble-hashes#121
  • scrypt: 4% speed-up by @​ChALkeR in paulmillr/noble-hashes#122

Full Changelog: paulmillr/noble-hashes@2.0.0...2.0.1

2.0.0

High-level

  • The package is now ESM-only. ESM can finally be loaded from common.js on node v20.19+
    • Node v20.19 is now the minimum required version
    • Package imports now work correctly in bundler-less environments, such as browsers
    • Reduces npm package size (traffic consumed): 152KB => 136KB
    • Reduces unpacked npm size (on-disk space): 1.1MB => 669KB
  • Make bundle sizes smaller, compared to v1.x
  • .js extension must be used for all modules
    • Old: @noble/hashes/sha3
    • New: @noble/hashes/sha3.js
    • This simplifies working in browsers natively without transpilers

Changes

  • Only allow Uint8Array as hash inputs, prohibit string
    • Strict validation checks improve security
    • To replicate previous behavior, use utils.utf8ToBytes
  • Rename / remove some modules for consistency. Previously, sha384 resided in sha512, which was weird
    • sha256, sha512 => sha2.js (consistent with sha3.js)
    • blake2b, blake2s => blake2.js (consistent with blake3.js, blake1.js)
    • ripemd160, sha1, md5 => legacy.js (all low-security hashes are there)
    • _assert => utils.js
    • crypto internal module got removed: use built-in WebCrypto instead
  • Improve typescript types & option autocomplete
  • Upgrade typescript compilation env to ts5.9 and es2022
  • Massively improve error messages, make them more descriptive

Full Changelog: paulmillr/noble-hashes@1.8.0...2.0.0

Commits
  • d30e070 Release 2.0.1.
  • 4485505 anumber: fix error msg
  • dd62b81 pkg.json: add back export maps for text editor autocompletion
  • 59fda2c Merge pull request #122 from ChALkeR/chalker/perf/scrypt/0
  • 90dfe17 adjust comment
  • e6099ae add a comment
  • 15ee761 perf: tiny improvement in scrypt
  • 30f8780 Merge pull request #121 from ChALkeR/patch-2
  • f43e04b Fix error message for scrypt maxmem check
  • b048d14 Release 2.0.0 to JSR.
  • Additional commits viewable in compare view

Updates @hookform/resolvers from 4.0.0 to 5.2.2

Release notes

Sourced from @​hookform/resolvers's releases.

v5.2.2

5.2.2 (2025-09-14)

Bug Fixes

  • zod: fix output type for Zod 4 resolver (#803) (e95721d)

v5.2.1

5.2.1 (2025-07-29)

Bug Fixes

v5.2.0

5.2.0 (2025-07-25)

Features

  • ajv: add ajv-formats for ajvResolver (#797) (f040039)

v5.1.1

5.1.1 (2025-06-09)

Bug Fixes

v5.1.0

5.1.0 (2025-06-07)

Features

  • support Zod 4, Zod v4 mini, and retains compatibility with Zod v3. (#777) (8d083bd)

v5.0.1

5.0.1 (2025-04-02)

Bug Fixes

... (truncated)

Commits

Updates zod from 3.25.76 to 4.2.1

Release notes

Sourced from zod's releases.

v4.2.1

Commits:

  • 5b5b129315fbc94a3b0d6244185eaeefcbe438d1 4.2.1

v4.2.0

Features

Implement Standard JSON Schema

standard-schema/standard-schema#134

Implement z.fromJSONSchema()

const jsonSchema = {
  type: "object",
  properties: {
    name: { type: "string" },
    age: { type: "number" }
  },
  required: ["name"]
};
const schema = z.fromJSONSchema(jsonSchema);

Implement z.xor()

const schema = z.xor(
  z.object({ type: "user", name: z.string() }),
  z.object({ type: "admin", role: z.string() })
);
// Exactly one of the schemas must match

Implement z.looseRecord()

const schema = z.looseRecord(z.string(), z.number());
// Allows additional properties beyond those defined

Commits:

  • af49c084f66339110d00e37ff71dc7b3b9f2b7ef Update docs for JSON Schema conversion of z.undefined() (#5504)
  • 767f320318986e422f524b939f1a7174544fda2e Add .toJSONSchema() method (#5477)
  • e17dcb63573397063e87d7c7fe10a5a78968181a Add z.fromJSONSchema(), z.looseRecord(), z.xor() (#5534)

... (truncated)

Commits

Updates react-syntax-highlighter from 15.6.6 to 16.1.0

Release notes

Sourced from react-syntax-highlighter's releases.

v16.1.0

What's Changed

New Contributors

Full Changelog: react-syntax-highlighter/react-syntax-highlighter@v16.0.0...v16.1.0

v16.0.0

New major version!

16.0.0 brings a major version update to the refractor dependency, which remedies some security issues but could result in a breaking change to your app's dependencies. Please update with care.

What's Changed

New Contributors

Full Changelog: react-syntax-highlighter/react-syntax-highlighter@v15.6.6...v16.0.0

Commits

Updates wagmi from 2.19.4 to 3.1.3

Release notes

Sourced from wagmi's releases.

wagmi@3.1.3

Patch Changes

  • Fixed published exports. (ed86500)

  • Updated dependencies [ed86500]:

    • @​wagmi/connectors@​7.0.5

wagmi@3.1.2

Patch Changes

  • Updated dependencies [9bbf13e]:
    • @​wagmi/connectors@​7.0.4

wagmi@3.1.1

Patch Changes

  • Fixed useReadContract return type inference for ABI function overloads. (058c8c1)

  • Updated dependencies [058c8c1]:

    • @​wagmi/core@​3.0.1
    • @​wagmi/connectors@​7.0.3

wagmi@3.1.0

Minor Changes

  • Deprecated custom mutate function names and renamed to mutate/mutateAsync to reduce destructure key renaming fatigue and align with TanStack Query terminology. (#4878)

    Before

    Had to destructure hook result and often rename keys when using multiple of the same hook. Could decide not to destructure, but syntax becomes awkward for mutate functions (e.g. connect.connect or connect.connectAsync).

    const { connect, isPending: connectIsPending } = useConnect();
const {
  writeContract: transfer,
  error: transferError,
  isPending: transferIsPending,
} = useWriteContract();
const { writeContract: approve, error: approveError } = useWriteContract();

    After

    Allows you to name the hook result whatever you want and not worry about also renaming properties.

    const connect = useConnect(); // connect.isPending
const transfer = useWriteContract(); // transfer.mutate, transfer.error, transfer.isPending
const approve = useWriteContract(); // approve.mutate, approve.error

... (truncated)

Changelog

Sourced from wagmi's changelog.

3.1.3

Patch Changes

  • Fixed published exports. (ed86500)

  • Updated dependencies [ed86500]:

    • @​wagmi/connectors@​7.0.5

3.1.2

Patch Changes

  • Updated dependencies [9bbf13e]:
    • @​wagmi/connectors@​7.0.4

3.1.1

Patch Changes

  • Fixed useReadContract return type inference for ABI function overloads. (058c8c1)

  • Updated dependencies [058c8c1]:

    • @​wagmi/core@​3.0.1
    • @​wagmi/connectors@​7.0.3

3.1.0

Minor Changes

  • Deprecated custom mutate function names and renamed to mutate/mutateAsync to reduce destructure key renaming fatigue and align with TanStack Query terminology. (#4878)

    Before

    Had to destructure hook result and often rename keys when using multiple of the same hook. Could decide not to destructure, but syntax becomes awkward for mutate functions (e.g. connect.connect or connect.connectAsync).

    const { connect, isPending: connectIsPending } = useConnect();
const {
  writeContract: transfer,
  error: transferError,
  isPending: transferIsPending,
} = useWriteContract();
const { writeContract: approve, error: approveError } = useWriteContract();

    After

    Allows you to name the hook result whatever you want and not worry about also renaming properties.

... (truncated)

Commits

Updates @fastify/static from 8.3.0 to 9.0.0

Release notes

Sourced from @​fastify/static's releases.

v9.0.0

What's Changed

Full Changelog: fastify/fastify-static@v8.3.0...v9.0.0

Commits

Updates eslint-plugin-react-hooks from 5.2.0 to 7.0.1

Changelog

Sourced from eslint-plugin-react-hooks's changelog.

7.0.1

  • Disallowed passing inline useEffectEvent values as JSX props to guard against accidental propagation. (#34820 by @​jf-eirinha)
  • Switch to export = so eslint-plugin-react-hooks emits correct types for consumers in Node16 ESM projects. (#34949 by @​karlhorky)
  • Tightened the typing of configs.flat so the configs export is always defined. (#34950 by @​poteto)
  • Fix named import runtime errors. (#34951, #34953 by @​karlhorky)

7.0.0

This release slims down presets to just 2 configurations (recommended and recommended-latest), and all compiler rules are enabled by default.

  • Breaking: Removed recommended-latest-legacy and flat/recommended configs. The plugin now provides recommended (legacy and flat configs with all recommended rules), and recommended-latest (legacy and flat configs with all recommended rules plus new bleeding edge experimental compiler rules). (@​poteto in #34757)

6.1.1

Note: 6.1.0 accidentally allowed use of recommended without flat config, causing errors when used with ESLint v9's defineConfig() helper. This has been fixed in 6.1.1.

6.1.0

Note: Version 6.0.0 was mistakenly released and immediately deprecated and untagged on npm. This is the first official 6.x major release and includes breaking changes.

  • Breaking: Require Node.js 18 or newer. (@​michaelfaith in #32458)
  • Breaking: Flat config is now the default recommended preset. Legacy config moved to recommended-legacy. (@​michaelfaith in #32457)
  • New Violations: Disallow calling use within try/catch blocks. (@​poteto in #34040)
  • New Violations: Disallow calling useEffectEvent functions in arbitrary closures. (@​jbrown215 in #33544)
  • Handle React.useEffect in addition to useEffect in rules-of-hooks. (@​Ayc0 in #34076)
  • Added react-hooks settings config option that to accept additionalEffectHooks that are used across exhaustive-deps and rules-of-hooks rules. (@​jbrown215) in #34497

6.0.0

Accidentally released. See 6.1.0 for the actual changes.

Commits

Updates non.geist from 1.0.4 to 2.0.1

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added the D4-dependencies Package dependencies label Dec 29, 2025
@dependabot
chore(deps): bump the production-major group across 1 directory with …
8104248 
…8 updates

Bumps the production-major group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@noble/hashes](https://github.com/paulmillr/noble-hashes) | `1.8.0` | `2.0.1` |
| [@hookform/resolvers](https://github.com/react-hook-form/resolvers) | `4.0.0` | `5.2.2` |
| [zod](https://github.com/colinhacks/zod) | `3.25.76` | `4.2.1` |
| [react-syntax-highlighter](https://github.com/react-syntax-highlighter/react-syntax-highlighter) | `15.6.6` | `16.1.0` |
| [wagmi](https://github.com/wevm/wagmi/tree/HEAD/packages/react) | `2.19.4` | `3.1.3` |
| [@fastify/static](https://github.com/fastify/fastify-static) | `8.3.0` | `9.0.0` |
| [eslint-plugin-react-hooks](https://github.com/facebook/react/tree/HEAD/packages/eslint-plugin-react-hooks) | `5.2.0` | `7.0.1` |
| [non.geist](https://github.com/contigen/non.geist) | `1.0.4` | `2.0.1` |



Updates `@noble/hashes` from 1.8.0 to 2.0.1
- [Release notes](https://github.com/paulmillr/noble-hashes/releases)
- [Commits](paulmillr/noble-hashes@1.8.0...2.0.1)

Updates `@hookform/resolvers` from 4.0.0 to 5.2.2
- [Release notes](https://github.com/react-hook-form/resolvers/releases)
- [Commits](react-hook-form/resolvers@v4.0.0...v5.2.2)

Updates `zod` from 3.25.76 to 4.2.1
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v3.25.76...v4.2.1)

Updates `react-syntax-highlighter` from 15.6.6 to 16.1.0
- [Release notes](https://github.com/react-syntax-highlighter/react-syntax-highlighter/releases)
- [Changelog](https://github.com/react-syntax-highlighter/react-syntax-highlighter/blob/master/CHANGELOG.MD)
- [Commits](react-syntax-highlighter/react-syntax-highlighter@v15.6.6...v16.1.0)

Updates `wagmi` from 2.19.4 to 3.1.3
- [Release notes](https://github.com/wevm/wagmi/releases)
- [Changelog](https://github.com/wevm/wagmi/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/wevm/wagmi/commits/wagmi@3.1.3/packages/react)

Updates `@fastify/static` from 8.3.0 to 9.0.0
- [Release notes](https://github.com/fastify/fastify-static/releases)
- [Commits](fastify/fastify-static@v8.3.0...v9.0.0)

Updates `eslint-plugin-react-hooks` from 5.2.0 to 7.0.1
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/packages/eslint-plugin-react-hooks/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/HEAD/packages/eslint-plugin-react-hooks)

Updates `non.geist` from 1.0.4 to 2.0.1
- [Commits](https://github.com/contigen/non.geist/commits)

---
updated-dependencies:
- dependency-name: "@noble/hashes"
  dependency-version: 2.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-major
- dependency-name: "@hookform/resolvers"
  dependency-version: 5.2.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-major
- dependency-name: zod
  dependency-version: 4.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-major
- dependency-name: react-syntax-highlighter
  dependency-version: 16.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-major
- dependency-name: wagmi
  dependency-version: 3.1.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-major
- dependency-name: "@fastify/static"
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-major
- dependency-name: eslint-plugin-react-hooks
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-major
- dependency-name: non.geist
  dependency-version: 2.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/production-major-96c9d57022 branch from 9ddcf37 to 8104248 Compare December 30, 2025 15:22
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 5, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jan 5, 2026
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/production-major-96c9d57022 branch January 5, 2026 09:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

D4-dependencies Package dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant