chore(deps): bump the client-deps group across 1 directory with 3 updates by dependabot[bot] · Pull Request #21 · Anastasia-Labs/proof-tool

dependabot · 2026-07-21T02:34:44Z

Bumps the client-deps group with 3 updates in the /packages/client-ts directory: @scure/bip39, typescript and vitest.

Updates @scure/bip39 from 1.6.0 to 2.4.0

Release notes

2.4.0

Hardening: Unpaired UTF-16 surrogates are now rejected in mnemonics & passphrases. Normal input is unaffected

Upgrade noble-hashes to 2.4.0

Improve tests

Full Changelog: paulmillr/scure-bip39@2.3.0...2.4.0

2.3.0

Rewrite package: the logic is now declared in scure-bip39 instead of @scure/base dependency, which was removed.

Upgrade noble-hashes to 2.3.0.

Full Changelog: paulmillr/scure-bip39@2.2.0...2.3.0

2.2.0

April 2026 self-audit (all files): no major issues found

Audited for spec compliance and security

Fix all Byte Array types, to ensure proper work in both TypeScript 5.6 & TypeScript 5.9+

TS 5.6 has Uint8Array, while TS 5.9+ made it generic Uint8Array<ArrayBuffer>

This creates incompatibility of code between versions

Previously, it was hard to use and constantly emitted errors similar to TS2345

See typescript#62240 for more context

Fix compilation issues on TypeScript v6

Improve tree-shaking, reduce bundle sizes

Fix wordlists/traditional-chinese.js: it was exported incorrectly

Wordlists: add PURE annotations to improve tree-shaking

Wordlists: freeze the arrays to improve security

New Contributors

@Yvem made their first contribution in paulmillr/scure-bip39#26

@rikublock made their first contribution in paulmillr/scure-bip39#29

(We're skipping v2.1, to align with other noble / scure packages)

Full Changelog: paulmillr/scure-bip39@2.0.1...2.2.0

2.0.1

.js extension must be used for all modules

Old: @scure/bip39/wordlists/english

New: @scure/bip39/wordlists/english.js

This simplifies working in browsers natively without transpilers

This was planned for 2.0.0, but was accidentally left out

Improve typescript autocompletion for imported submodules

Upgrade noble-hashes to 2.0.1

Upgrade noble-curves to 2.0.1

Full Changelog: paulmillr/scure-bip39@2.0.0...2.0.1

2.0.0

The package is now ESM-only. ESM can finally be loaded from common.js on node v20.19+

Node v20.19 is now the minimum required version

... (truncated)

Changelog

Sourced from @scure/bip39's changelog.

2.4.0 (2026-08-28)

Hardening: Unpaired UTF-16 surrogates are now rejected in mnemonics & passphrases. Normal input is unaffected

Upgrade noble-hashes to 2.4.0

Improve tests

2.3.0 (2026-08-08)

Rewrite package: the logic is now declared in scure-bip39 instead of @scure/base dependency, which was removed.

Upgrade noble-hashes to 2.3.0.

2.2.0 (2026-04-21)

April 2026 self-audit (all files): no major issues found

Audited for spec compliance and security

Fix all Byte Array types, to ensure proper work in both TypeScript 5.6 & TypeScript 5.9+

TS 5.6 has Uint8Array, while TS 5.9+ made it generic Uint8Array<ArrayBuffer>

This creates incompatibility of code between versions

Previously, it was hard to use and constantly emitted errors similar to TS2345

See typescript#62240 for more context

Fix compilation issues on TypeScript v6

Improve tree-shaking, reduce bundle sizes

Fix wordlists/traditional-chinese.js: it was exported incorrectly

Wordlists: add PURE annotations to improve tree-shaking

Wordlists: freeze the arrays to improve security

New Contributors

@Yvem made their first contribution in paulmillr/scure-bip39#26

@rikublock made their first contribution in paulmillr/scure-bip39#29

(We're skipping v2.1, to align with other noble / scure packages)

2.0.1 (2025-10-07)

.js extension must be used for all modules

Old: @scure/bip39/wordlists/english

New: @scure/bip39/wordlists/english.js

This simplifies working in browsers natively without transpilers

This was planned for 2.0.0, but was accidentally left out

Improve typescript autocompletion for imported submodules

Upgrade noble-hashes to 2.0.1

Upgrade noble-curves to 2.0.1

2.0.0 (2025-08-25)

The package is now ESM-only. ESM can finally be loaded from common.js on node v20.19+

Node v20.19 is now the minimum required version

Package imports now work correctly in bundler-less environments, such as browsers

Reduces npm package size (traffic consumed): 92KB => 78KB

Reduces unpacked npm size (on-disk space): 384KB => 201KB

... (truncated)

Commits

2c8cf46 Release 2.4.0.
af5414c Update devdeps, add changelog
f80dd87 wordlists: reject ill-formed words
8073136 Bump jsbt
4ccd7e5 Reject ill-formed Unicode from inputs
44ab886 Update devdeps / lockfile
dfcb773 Add more tests, update fetch-wordlist
db04e10 Bump devdeps
158de4a Release 2.3.0.
4507966 Rewrite package to not depend on scure-base.
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @scure/bip39 since your current version.

Updates typescript from 5.9.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

fixed issues query for TypeScript 6.0.0 (Beta).

fixed issues query for TypeScript 6.0.1 (RC).

fixed issues query for TypeScript 6.0.2 (Stable).

fixed issues query for TypeScript 6.0.3 (Stable).

Downloads are available on:

npm

TypeScript 6.0

For release notes, check out the release announcement blog post.

fixed issues query for TypeScript 6.0.0 (Beta).

fixed issues query for TypeScript 6.0.1 (RC).

fixed issues query for TypeScript 6.0.2 (Stable).

Downloads are available on:

npm

TypeScript 6.0.1 RC

For release notes, check out the release announcement blog post.

fixed issues query for TypeScript 6.0.0 (Beta).

fixed issues query for TypeScript 6.0.1 (RC).

Downloads are available on:

npm

TypeScript 6.0 Beta

For release notes, check out the release announcement.

fixed issues query for Typescript 6.0.0 (Beta).

Downloads are available on:

npm

Commits

1e4744d Merge branch 'main' into ts7-release
a5a219cmicrosoft/typescript-go#4558
ecfe30d Update status localization
5de25b5 Hide executable name in TypeScript status
d7ce74a Show bundled TypeScript version for packaged servers
29be66a Correct TS 7 release version to 7.0.2
ed2bd1b Merge branch 'main' into ts7-release
8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
9427131 Set up stable / nightly extension split, other prep (microsoft/typescript-go#...
d4eaca5microsoft/typescript-go#4549
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Updates vitest from 3.2.6 to 4.1.11

Release notes

Sourced from vitest's releases.

v4.1.11

   🐞 Bug Fixes

Revive global concurrency limit for test lifecycle [backport to v4] - by @sheremet-va and @hi-ogawa in vitest-dev/vitest#10992 (5146d)

browser:

Encode iframeId in tester iframe URL [backport to v4] - by @sheremet-va, Pduhard and Claude Opus 4.8 in vitest-dev/vitest#10955 (10b2c)

Trigger playwright/chromium gc on lower disk availability [backport to v4] - by @hi-ogawa, Hiroshi Ogawa and OpenCode in vitest-dev/vitest#10951 (9851d)

mocker:

Restrict redirect mocks to the fs allowlist [backport to v4] - by @sheremet-va in vitest-dev/vitest#10974 (fe5a1)

    View changes on GitHub

v4.1.10

   🐞 Bug Fixes

browser: Check fs access in builtin commands [backport to v4] - by @hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in vitest-dev/vitest#10680 (5c18d)

vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4] - by @SveLil and @hi-ogawa in vitest-dev/vitest#10661 (bae52)

    View changes on GitHub

v4.1.9

🐞 Bug Fixes

Fix importOriginal with optimizer and query import [backport to v4] - by Hiroshi Ogawa, David Harris, Codexand Vladimir in vitest-dev/vitest#10546 (a5180)

browser:

Wait for orchestrator readiness before resolving browser sessions [backport to v4] - by Vladimir and Séamus O'Connor in vitest-dev/vitest#10555 (7fb29)

Wait for iframe tester readiness before preparing [backport to v4] - by Vladimir and Séamus O'Connor in vitest-dev/vitest#10497 and vitest-dev/vitest#10556 (fbc62)

mocker:

Hoist vi.mock() for vite-plus/test imports [backport to v4] - by Hiroshi Ogawa, LongYinan, Claude Opus 4.8 and Vladimir in vitest-dev/vitest#10548 (2c955)

pool:

Prevent test run hang on worker crash [backport to v4] - by Ari Perkkiö and Jattioui Ismail in vitest-dev/vitest#10543 and vitest-dev/vitest#10564 (934b0)

View changes on GitHub

v4.1.8

   🐞 Bug Fixes

browser:

Disable client cdp API when allowWrite/allowExec: false [backport to v4] - by @hi-ogawa and Codex in vitest-dev/vitest#10450 (e4067)

Remove orphaned Playwright route when same module is mocked via multiple ids [backport to v4] - by @toxik and @Zelys-DFKH in vitest-dev/vitest#10474 (675b4)

    View changes on GitHub

v4.1.7

   🐞 Bug Fixes

runner: Limit concurrency per task branch in addition to per leaf callbacks (backport) - by @hi-ogawa in vitest-dev/vitest#10384 (4f0f2)

    View changes on GitHub

... (truncated)

Commits

9bd8d46 chore: release v4.1.11 (#10995)
9851dbc fix(browser): trigger playwright/chromium gc on lower disk availability [back...
db616d2 chore: release v4.1.10 (#10718)
bae52b5 fix(vm): fix external module resolve error with deps optimizer query for enco...
a7a61e7 chore: release v4.1.9 (#10598)
934b0f5 fix(pool): prevent test run hang on worker crash (#10543) [backport to v4] (#...
7fb2965 fix(browser): wait for orchestrator readiness before resolving browser sessio...
a518019 fix: fix importOriginal with optimizer and query import [backport to v4] (#...
e61f2dd chore: release v4.1.8
e4067b3 fix(browser): disable client cdp API when allowWrite/allowExec: false [ba...
Additional commits viewable in compare view

vercel · 2026-07-21T02:34:49Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
proof-tool	Ready	Preview	Sep 1, 2026 9:21pm UTC

…ates Bumps the client-deps group with 3 updates in the /packages/client-ts directory: [@scure/bip39](https://github.com/paulmillr/scure-bip39), [typescript](https://github.com/microsoft/TypeScript) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest). Updates `@scure/bip39` from 1.6.0 to 2.4.0 - [Release notes](https://github.com/paulmillr/scure-bip39/releases) - [Changelog](https://github.com/paulmillr/scure-bip39/blob/main/CHANGELOG.md) - [Commits](paulmillr/scure-bip39@1.6.0...2.4.0) Updates `typescript` from 5.9.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.9.3...v7.0.2) Updates `vitest` from 3.2.6 to 4.1.11 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/vitest) --- updated-dependencies: - dependency-name: "@scure/bip39" dependency-version: 2.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: client-deps - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: client-deps - dependency-name: vitest dependency-version: 4.1.10 dependency-type: direct:development update-type: version-update:semver-major dependency-group: client-deps ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 21, 2026

vercel Bot deployed to Preview July 21, 2026 02:36 View deployment

dependabot Bot changed the title ~~build(deps): bump the client-deps group in /packages/client-ts with 3 updates~~ build(deps): bump the client-deps group across 1 directory with 3 updates Jul 21, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/packages/client-ts/client-deps-c515d33695 branch from b206745 to 99329ba Compare July 21, 2026 21:15

vercel Bot deployed to Preview July 21, 2026 21:16 View deployment

dependabot Bot force-pushed the dependabot/npm_and_yarn/packages/client-ts/client-deps-c515d33695 branch from 99329ba to 8ce70fc Compare July 28, 2026 21:15

vercel Bot deployed to Preview July 28, 2026 21:16 View deployment

dependabot Bot changed the title ~~build(deps): bump the client-deps group across 1 directory with 3 updates~~ chore(deps): bump the client-deps group across 1 directory with 3 updates Aug 4, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/packages/client-ts/client-deps-c515d33695 branch from 8ce70fc to cd6a826 Compare August 4, 2026 21:15

vercel Bot deployed to Preview August 4, 2026 21:17 View deployment

dependabot Bot force-pushed the dependabot/npm_and_yarn/packages/client-ts/client-deps-c515d33695 branch from cd6a826 to 812a4e4 Compare September 1, 2026 21:19

vercel Bot deployed to Preview September 1, 2026 21:21 View deployment

Navigation Menu

Uh oh!

chore(deps): bump the client-deps group across 1 directory with 3 updates - #21

chore(deps): bump the client-deps group across 1 directory with 3 updates#21
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/packages/client-ts/client-deps-c515d33695

dependabot Bot commented on behalf of github Jul 21, 2026 •

edited

Loading

Uh oh!

vercel Bot commented Jul 21, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

2.4.0

2.3.0

2.2.0

New Contributors

2.0.1

2.0.0

2.4.0 (2026-08-28)

2.3.0 (2026-08-08)

2.2.0 (2026-04-21)

New Contributors

2.0.1 (2025-10-07)

2.0.0 (2025-08-25)

TypeScript 7.0.2

TypeScript 6.0.3

TypeScript 6.0

TypeScript 6.0.1 RC

TypeScript 6.0 Beta

v4.1.11

🐞 Bug Fixes

View changes on GitHub

v4.1.10

🐞 Bug Fixes

View changes on GitHub

v4.1.9

🐞 Bug Fixes

View changes on GitHub

v4.1.8

🐞 Bug Fixes

View changes on GitHub

v4.1.7

🐞 Bug Fixes

View changes on GitHub

Uh oh!

vercel Bot commented Jul 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 21, 2026 •

edited

Loading

vercel Bot commented Jul 21, 2026 •

edited

Loading