Skip to content

fix: refresh viem and audit dependencies - #717

Merged
brendanjryan merged 1 commit into
wevm:mainfrom
parvahuja:fix/current-dependency-audit
Jul 27, 2026
Merged

fix: refresh viem and audit dependencies#717
brendanjryan merged 1 commit into
wevm:mainfrom
parvahuja:fix/current-dependency-audit

Conversation

@parvahuja

Copy link
Copy Markdown
Contributor

Summary

  • replace the expired Viem preview with viem@2.55.10 and its compatible ox@0.14.33
  • preserve primitive-only subscription key authorizations with the updated Ox signature types
  • resolve the brace-expansion advisory through patched v5 resolution and a scoped readdir-glob upgrade, without forcing an incompatible major into minimatch 5

Supersedes #714 with the current published releases and a compatibility-safe audit remediation.

Validation

  • pnpm audit --ignore-registry-errors
  • pnpm check:ci
  • pnpm check:types
  • pnpm check:types:html
  • pnpm check:types:examples
  • pnpm build
  • VITE_TEMPO_NETWORK=none pnpm exec vp test --run src/tempo/subscription/KeyAuthorization.test.ts (13 tests)
  • Archiver 7 glob/archive smoke through readdir-glob@3.0.0

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addedviem@​2.55.109710010098100
Addedox@​0.14.33981009897100

View full report

@pkg-pr-new

pkg-pr-new Bot commented Jul 27, 2026

Copy link
Copy Markdown

Open in StackBlitz

npm i https://pkg.pr.new/mppx@717

commit: e84009d

@brendanjryan

Copy link
Copy Markdown
Collaborator

LGTM!

@brendanjryan
brendanjryan merged commit f538450 into wevm:main Jul 27, 2026
14 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants