Skip to content

Update ERC-4337 gas options and dependency security fixes - #260

Merged
ihsraham merged 2 commits into
tetherto:developfrom
AlonzoRicardo:docs/erc-4337-gas-overrides-on-options
Oct 10, 2026
Merged

ihsraham merged 2 commits into
tetherto:developfrom
AlonzoRicardo:docs/erc-4337-gas-overrides-on-options

Conversation

@AlonzoRicardo

@AlonzoRicardo AlonzoRicardo commented Sep 15, 2026 •

Copy link
Copy Markdown
Contributor

Updates the published ERC-4337 beta.21 API so transfer(), quoteTransfer(), and approve() take UserOperation gas and fee overrides on their options object. Updates the signatures, examples, and matching generated feed; examples use caller-supplied recipientAddress.

Consolidates all three currently open Dependabot updates in a separate commit:

  • #263: AI SDK 7, React adapter 4, compatible provider 3, and undici 7.
  • #284: DOMPurify 3.4.16.
  • #285: all three brace-expansion versions.

Regenerated the lockfile on current develop, preserving Inkeep’s Zod 3 peer. The site has no direct AI SDK consumers, and CI already uses the required Node 22.

Merge order for the release stack: this PR → #281 → #286. Rebase #281 after this merges; rebase and retarget #286 after #281 merges. The Dependabot PRs target main, so their fixes remain pending there until promotion is verified.

Validation on Node 22.22.2: clean npm ci, LINK_CHECK_EXTERNAL=false npm run quality, LINK_CHECK_EXTERNAL=true npm run check:links (zero broken; access warnings remain), dependency-tree and ESM import checks, Mermaid in both themes, raw feeds, and generated parity. Audit findings decrease from 23 to 14 with no new findings; 14 inherited findings remain. Local-search result testing exposed an unchanged Fumadocs defect recorded separately for follow-up.

Hosted checks on c666e0f: both Socket checks passed. Quality Gates failed before validation at npm ci: GitHub Packages returned 403 permission_denied: read_package for unchanged @tetherto/docs-seo-schema@1.1.0. The fork run has no repository secrets and no npm cache; yesterday’s passing run restored a warm cache. Maintainer action is needed to resolve intended package-read access and rerun CI before merge.

Document the new WalletAccountEvmErc4337 signatures where quoteTransfer,
transfer and approve read UserOperation gas/fee overrides from the options
object instead of a trailing txOverrides argument. Adds the
EvmErc4337TransferOptions and EvmErc4337ApproveOptions types to the API
reference and rewrites the gas-override transfer guide accordingly.

Companion to tetherto/wdk-wallet-evm-erc-4337#143.
@ihsraham
ihsraham force-pushed the docs/erc-4337-gas-overrides-on-options branch from 3b719cd to 86e2a66 Compare October 9, 2026 09:39
@ihsraham
ihsraham marked this pull request as ready for review October 9, 2026 09:40
@ihsraham ihsraham changed the title docs: move ERC-4337 gas overrides onto the transfer and approve options Update ERC-4337 gas options and dependency security fixes Oct 10, 2026
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​ai-sdk/​react@​2.0.256 ⏵ 4.0.10999 +110075 +398100
Updated@​ai-sdk/​openai-compatible@​1.0.53 ⏵ 3.0.5299 +910010098100
Updatedai@​5.0.253 ⏵ 7.0.10699 +110010099100

View full report

@ihsraham
ihsraham merged commit 34d3a78 into tetherto:develop Oct 10, 2026
2 of 5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants