Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Jan 22, 2024

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
viem (source) ^1.19.11^2.0.0 age confidence

Release Notes

wevm/viem (viem)

v2.44.1

Compare Source

Patch Changes

v2.44.0

Compare Source

Minor Changes
  • #​4201 0268ca88c67c7851ae03d8d41508657f2b62729d Thanks @​jxom! - ### viem/tempo Extension

    Added support for Tempo Moderato testnet.

    • (Breaking): Renamed tempoTestnettempoModerato. The old export is deprecated but still available as an alias.
    • (Breaking): Renamed reward.startreward.distribute: Renamed for distributing rewards (no longer supports streaming).
    • (Breaking): Renamed reward.getTotalPerSecondreward.getGlobalRewardPerToken: Returns the global reward per token value instead of per-second rate.
    • (Breaking): Renamed reward.watchRewardScheduledreward.watchRewardDistributed: Watches for reward distributed events.
    • (Breaking): Removed nonce.getNonceKeyCount.
    • (Breaking): Removed nonce.watchActiveKeyCountChanged.
    • (Breaking): Removed amm.watchFeeSwap (FeeSwap event no longer emitted by protocol).
    • (Breaking): OrderPlaced event now includes isFlipOrder and flipTick fields. The FlipOrderPlaced event has been removed and merged into OrderPlaced.
    • (Breaking): Renamed Address.stablecoinExchangeAddress.stablecoinDex.
    • (Breaking): Renamed Abis.stablecoinExchangeAbis.stablecoinDex.
    • Added dex.cancelStale action to cancel stale orders from restricted makers.
    • Added salt parameter to token.create.
Patch Changes

v2.43.5

Compare Source

Patch Changes

v2.43.4

Compare Source

Patch Changes

v2.43.3

Compare Source

Patch Changes

v2.43.2

Compare Source

Patch Changes

v2.43.1

Compare Source

Patch Changes

v2.43.0

Compare Source

Minor Changes
  • #​4107 b423fc17eba4f9f0648f72f5358a8e5ed9d5f092 Thanks @​tmm! - Added experimental named tuple support for contract-related actions and utilities.

  • #​4147 734d99d9da4b76f9aa985a800213b4ba581607df Thanks @​jxom! - Added first-class support and extension for Tempo.


    Attaching a Tempo chain to your client grants your transaction actions with Tempo superpowers like batched calls and external fee payer capabilities.

    import { createClient, http } from "viem";
    import { privateKeyToAccount } from "viem/accounts";
    import { tempoTestnet } from "viem/chains";
    
    const client = createClient({
      account: privateKeyToAccount("0x…"),
      chain: tempoTestnet.extend({
        feeToken: "0x20c00000000000000000000000000000000000fa",
      }),
      transport: http(),
    });
    
    const receipt = client.sendTransactionSync({
      calls: [
        { data: "0x…", to: "0x…" },
        { data: "0x…", to: "0x…" },
        { data: "0x…", to: "0x…" },
      ],
      feePayer: privateKeyToAccount("0x…"),
    });

    You can also use Tempo Actions to call to enshrined protocol features like the Stablecoin Token Factory:

    import { createClient, http } from "viem";
    import { privateKeyToAccount } from "viem/accounts";
    import { tempoTestnet } from "viem/chains";
    import { tempoActions } from "viem/tempo";
    
    const client = createClient({
      account: privateKeyToAccount("0x…"),
      chain: tempoTestnet,
      transport: http(),
    }).extend(tempoActions());
    
    const { receipt, token } = await client.token.createSync({
      currency: "USD",
      name: "My Company USD",
      symbol: "CUSD",
    });
Patch Changes

v2.42.1

Compare Source

Patch Changes

v2.42.0

Compare Source

Minor Changes
  • #​4134 d9d666beeccf748157d1292849f5a0d18768baf7 Thanks @​mikelxc! - Added EntryPoint v0.9 support for Account Abstraction (ERC-4337).

    • Added entryPoint09Abi and entryPoint09Address constants
    • Added '0.9' to EntryPointVersion type
    • Added UserOperation<'0.9'> with new paymasterSignature field for parallelizable paymaster signing
    • Updated getUserOperationHash to support v0.9 (uses EIP-712 typed data like v0.8)
    • Updated toPackedUserOperation to handle paymasterSignature
    • Updated prepareUserOperation type definitions for v0.9
Patch Changes

v2.41.2

Compare Source

Patch Changes

v2.41.1

Compare Source

Minor Changes
Patch Changes

v2.40.4

Compare Source

Patch Changes

v2.40.3

Compare Source

Patch Changes

v2.40.2

Compare Source

Patch Changes

v2.40.1

Compare Source

Patch Changes

v2.40.0

Compare Source

Minor Changes
Patch Changes

v2.39.3

Compare Source

Patch Changes

v2.39.2

Compare Source

Patch Changes

v2.39.0

Compare Source

Minor Changes
Patch Changes

v2.38.6

Compare Source

Patch Changes

v2.38.5

Compare Source

Patch Changes

v2.38.4

Compare Source

Patch Changes

v2.38.3

Compare Source

Patch Changes

v2.38.2

Compare Source

Patch Changes

v2.38.1

Compare Source

Patch Changes

v2.38.0

Compare Source

Minor Changes

v2.37.13

Compare Source

Patch Changes

v2.37.12

Compare Source

Patch Changes

v2.37.11

Compare Source

Patch Changes

v2.37.10

Compare Source

Patch Changes

v2.37.9

Compare Source

Patch Changes

v2.37.8

Compare Source

Patch Changes

v2.37.7

Compare Source

Patch Changes

v2.37.6

Compare Source

Patch Changes

v2.37.5

Compare Source

Patch Changes

v2.37.4

Compare Source

Patch Changes

v2.37.3

Compare Source

Patch Changes

v2.37.2

Compare Source

Patch Changes

v2.37.1

Compare Source

Patch Changes

v2.37.0

Compare Source

Minor Changes

v2.36.1

Compare Source

Patch Changes

v2.36.0

Compare Source

Minor Changes
Patch Changes

v2.35.1

Compare Source

Patch Changes

v2.35.0

Compare Source

Minor Changes
Patch Changes

v2.34.0

Compare Source

Minor Changes
Patch Changes

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@socket-security
Copy link

socket-security bot commented Jan 22, 2024

@renovate renovate bot force-pushed the renovate/viem-2.x branch from 80f821b to 696c0e3 Compare March 20, 2024 21:08
@renovate renovate bot force-pushed the renovate/viem-2.x branch from 696c0e3 to 58be86a Compare September 11, 2024 07:59
@renovate renovate bot force-pushed the renovate/viem-2.x branch from 58be86a to 0ea5196 Compare October 8, 2024 05:56
@renovate renovate bot force-pushed the renovate/viem-2.x branch 2 times, most recently from eb29e11 to b571fb6 Compare August 10, 2025 06:56
@renovate renovate bot force-pushed the renovate/viem-2.x branch from b571fb6 to 6f5f4bf Compare August 23, 2025 16:09
@socket-security
Copy link

socket-security bot commented Aug 23, 2025

Caution

Review the following alerts detected in dependencies.

According to your organization's Security Policy, you must resolve all "Block" alerts before proceeding. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Block Low
[email protected] is a AI-detected potential code anomaly.

Notes: The code appears to be a legitimate, feature-rich Ethereum call utility with support for deployless calls and multicall scheduling. No hardcoded credentials or malicious backdoors are evident. The dynamic require in the error path (ccip.js) is a legitimate pattern for CCIP workflows but represents a dynamic dependency surface that should be monitored. Overall, the module shows standard security-risk characteristics for a blockchain-facing library, with a moderate risk due to complexity and dynamic module loading, but no direct malware indicators.

Confidence: 1.00

Severity: 0.60

From: package.jsonnpm/[email protected]

ℹ Read more on: This package | This alert | What is an AI-detected potential code anomaly?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at [email protected].

Suggestion: An AI system found a low-risk anomaly in this package. It may still be fine to use, but you should check that it is safe before proceeding.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/[email protected]. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Block Low
[email protected] is a AI-detected potential code anomaly.

Notes: The code implements a cross-chain deposit flow with proper validations, artifact reads, and on-chain interactions. There is no evidence of hidden backdoors, data exfiltration, or malware. The main security considerations relate to token approval logic and correct configuration of flags to avoid granting excessive allowances. Overall, the module appears legitimate for a bridge deposit flow, with moderate risk primarily around configuration of approvals and correct handling of gas/fees.

Confidence: 1.00

Severity: 0.60

From: package.jsonnpm/[email protected]

ℹ Read more on: This package | This alert | What is an AI-detected potential code anomaly?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at [email protected].

Suggestion: An AI system found a low-risk anomaly in this package. It may still be fine to use, but you should check that it is safe before proceeding.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/[email protected]. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@renovate renovate bot force-pushed the renovate/viem-2.x branch 3 times, most recently from 4d42ad6 to 46f84f5 Compare September 7, 2025 19:25
@renovate renovate bot force-pushed the renovate/viem-2.x branch 2 times, most recently from 1e76c53 to c062f30 Compare September 15, 2025 04:09
@renovate renovate bot force-pushed the renovate/viem-2.x branch 2 times, most recently from 897327b to edf3fe9 Compare September 24, 2025 19:54
@renovate renovate bot force-pushed the renovate/viem-2.x branch 3 times, most recently from 91c079b to e5164b5 Compare October 7, 2025 03:33
@renovate renovate bot force-pushed the renovate/viem-2.x branch 2 times, most recently from a8c3328 to 7857d8c Compare October 18, 2025 15:41
@renovate renovate bot force-pushed the renovate/viem-2.x branch from 7857d8c to ae844b5 Compare October 25, 2025 20:03
@renovate renovate bot force-pushed the renovate/viem-2.x branch from ae844b5 to 406267f Compare November 2, 2025 07:45
@renovate renovate bot force-pushed the renovate/viem-2.x branch 3 times, most recently from 8276609 to 1279155 Compare November 22, 2025 11:45
@renovate renovate bot force-pushed the renovate/viem-2.x branch from 1279155 to 5235a14 Compare November 27, 2025 22:55
@renovate renovate bot force-pushed the renovate/viem-2.x branch from 5235a14 to 441b688 Compare December 5, 2025 11:31
@renovate renovate bot force-pushed the renovate/viem-2.x branch 3 times, most recently from 0e170a1 to 1f93fb7 Compare December 23, 2025 07:41
@renovate renovate bot force-pushed the renovate/viem-2.x branch 2 times, most recently from 97f4f23 to b78c360 Compare January 3, 2026 15:09
@renovate renovate bot force-pushed the renovate/viem-2.x branch 2 times, most recently from b5d4a23 to bf2f588 Compare January 12, 2026 11:47
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate renovate bot force-pushed the renovate/viem-2.x branch from bf2f588 to 3199275 Compare January 14, 2026 08:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant