Skip to content

chore(deps): bump @scallop-io/sui-scallop-sdk from 4.4.0 to 5.4.0 - #45

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/scallop-io/sui-scallop-sdk-5.4.0
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/scallop-io/sui-scallop-sdk-5.4.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown
Contributor

Bumps @scallop-io/sui-scallop-sdk from 4.4.0 to 5.4.0.

Release notes

Sourced from @​scallop-io/sui-scallop-sdk's releases.

v5.4.0

What's Changed

Full Changelog: scallop-io/sui-scallop-sdk@v5.3.0...v5.4.0

v5.3.0

What's Changed

Full Changelog: scallop-io/sui-scallop-sdk@v5.2.6...v5.3.0

v5.2.6

What's Changed

Full Changelog: scallop-io/sui-scallop-sdk@v5.2.5...v5.2.6

v5.2.5

What's Changed

Full Changelog: scallop-io/sui-scallop-sdk@v5.2.4...v5.2.5

v5.2.4

What's Changed

Full Changelog: scallop-io/sui-scallop-sdk@v5.2.3...v5.2.4

v5.2.3

What's Changed

Full Changelog: scallop-io/sui-scallop-sdk@v5.2.2...v5.2.3

v5.2.2

What's Changed

Full Changelog: scallop-io/sui-scallop-sdk@v5.2.1...v5.2.2

... (truncated)

Changelog

Sourced from @​scallop-io/sui-scallop-sdk's changelog.

5.4.0 (2026-08-28)

Added

  • sca is now priced from the indexer's CoinGecko passthrough (/api/price/coingecko?id=scallop-2) instead of Pyth, matching its migration to the custom oracle. Coins whose xOracle rules route away from Pyth are split out of the Pyth read and fetched from their own source; a coin with no configured CoinGecko id, or whose read fails, resolves to 0 rather than throwing (f4b527a)

Changed

  • getCoinPricesWithFallback now defaults to indexer prices, and the two price sources fall back to each other — a failure or a gap in either is filled by the other, so neither is a single point of failure. Affects getLendings, getAllCoinPrices, getTvl, and portfolio reads; reported values may differ from previous releases where the indexer and Pyth disagree. Pass indexer: false (or the legacy source: 'rpc') to prefer oracle prices (f4b527a)

Fixed

  • Coins moved off Pyth no longer return a stale Pyth price. A coin's core.coins.*.oracle.pyth feed can outlive an oracle migration, so all three read paths — the Pyth API, the indexer Pyth passthrough (keyed by coinType), and the on-chain feed object — now skip coins whose xOracle rules no longer list Pyth. NOTE: this exclusion is derived from the static xOracleList, so an on-chain oracle migration needs a matching SDK release or prices go stale again (f4b527a)
  • Indexer coin prices are returned as a dense record, zeroing coins with no lending pool instead of omitting them, so downstream arithmetic yields 0 rather than NaN (f4b527a)

5.3.0 (2026-08-18)

Added

  • New custom xOracle provider. SupportedOracleType now includes 'custom', and updateOracles routes such coins through CustomOracleRule, which reads a single authorized on-chain price registry (core.oracles.custom.registry) via core.packages.customOracle.id rather than per-coin feed metadata. When those addresses are unconfigured the rule throws a typed ScallopTransactionBuildError naming the missing path instead of building an invalid Move call. AddressesInterface gains core.oracles.custom (registry, registryCap) (ae9b25a)
  • xOracle price-feed entries for wal, haedal, hawal, wwal, xbtc, zwbtc, suiusde, usdsui, xaum, and scasui, all resolving through Pyth (ae9b25a)
  • On-chain asset-oracle reads now recognize custom rules: getAssetOraclesFromOnChain maps the custom rule type so coins priced by it report their real primary/secondary providers instead of silently omitting them. Requires core.packages.customOracle.object from the address API (47ce731)

Changed

  • sca now resolves its primary price through the custom oracle instead of Pyth. SCA price updates require core.packages.customOracle.id and core.oracles.custom.registry to be populated by the address API; until then updateOracles for SCA throws ScallopTransactionBuildError (ae9b25a)

Deprecated

  • The exported type SupportOracleType is renamed to SupportedOracleType. The old name remains as a deprecated alias and will be removed in the next major — update imports from @scallop-io/sui-scallop-sdk/types at your convenience (47ce731)

5.2.6 (2026-08-03)

Changed

  • Breaking (types only): ScallopQuery, ScallopBuilder, ScallopClient, and Scallop are now generic over the read transport and default to 'grpc', so coreClient resolves to the concrete SuiGrpcClient or SuiGraphQLClient for the configured readTransport instead of the union of both. This makes generic-signature Core methods such as simulateTransaction callable without narrowing. Runtime behavior is unchanged; code that annotates a GraphQL instance with a bare ScallopQuery / ScallopBuilder / ScallopClient must now write ScallopQuery<'graphql'> or the transport-agnostic ScallopQuery<ReadTransport> (ReadTransport is exported from the package root) (4e83cee)

  • getTvl now prices the TVL calculation from Pyth (with the built-in per-coin on-chain fallback, then the indexer for anything still missing) instead of always reading indexer prices — reported TVL values may differ from previous releases. Passing indexer: true (or source: 'indexer' / 'indexer-first') still reads indexer prices only (403eb5d)

  • getAllCoinPrices, getLendings, and getSCoinSwapRate now resolve coin prices through one shared chain — Pyth API, then the on-chain feed, then the indexer — and honor the legacy source: 'indexer' | 'indexer-first' option, which previously left price reads on Pyth while routing market data to the indexer (403eb5d)

Fixed

  • getLendings had no price fallback: any coin Pyth returned as missing or 0 stayed 0, zeroing that pool's supplied and borrowed values. Missing prices are now backfilled from the indexer (403eb5d)
  • Indexer price-fallback failures in getSCoinSwapRate were swallowed silently; they now surface through the SDK logger as a warning (403eb5d)

5.2.5 (2026-08-01)

Fixed

  • The borrow-incentive pool query used the raw on-chain pool_type field (which can be an object) instead of the parsed pool type, and silently dropped point updates once a reward campaign was exhausted instead of still emitting the accrued points with a zeroed APR (c5d68c0)

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@scallop-io/sui-scallop-sdk](https://github.com/scallop-io/sui-scallop-sdk) from 4.4.0 to 5.4.0.
- [Release notes](https://github.com/scallop-io/sui-scallop-sdk/releases)
- [Changelog](https://github.com/scallop-io/sui-scallop-sdk/blob/main/CHANGELOG.md)
- [Commits](https://github.com/scallop-io/sui-scallop-sdk/commits/v5.4.0)

---
updated-dependencies:
- dependency-name: "@scallop-io/sui-scallop-sdk"
  dependency-version: 5.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants