Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 27, 2025

Bumps ora from 8.2.0 to 9.0.0.

Release notes

Sourced from ora's releases.

v9.0.0

Breaking

  • Require Node.js 20 7aca06d

Fixes

  • Fix clearing in some cases aa51538
  • Fix frame() not displaying dynamic prefixText/suffixText from functions 0f19f57
  • Fix multiline text exceeding console height leaving garbage when scrolling 45d30ad

sindresorhus/ora@v8.2.0...v9.0.0

Commits
  • 20d4bdb 9.0.0
  • 7aca06d Require Node.js 20
  • aa51538 Fix clearing in some cases
  • 9125620 Add FAQs
  • 0f19f57 Fix frame() not displaying dynamic prefixText/suffixText from functions
  • 45d30ad Fix multiline text exceeding console height leaving garbage when scrolling
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

PR-Codex overview

This PR updates several package dependencies, mainly improving versions for compatibility and functionality. Key changes include major updates to ora, babel/core, and various @smithy packages, enhancing performance and addressing deprecations.

Detailed summary

  • Updated ora from 8.2.0 to 9.0.0.
  • Updated @babel/core from 7.28.4 to 7.28.5.
  • Updated qrcode from 1.5.3 to 1.5.4.
  • Updated @walletconnect packages to newer versions, including core, sign-client, and universal-provider.
  • Updated various @smithy packages to improve compatibility and performance.
  • Updated zod from 3.25.75 to 4.1.11.
  • Updated multiple dependencies in pnpm-lock.yaml for consistency and performance improvements.

The following files were skipped due to too many changes: pnpm-lock.yaml

✨ Ask PR-Codex anything about this PR by commenting with /codex {your question}

Bumps [ora](https://github.com/sindresorhus/ora) from 8.2.0 to 9.0.0.
- [Release notes](https://github.com/sindresorhus/ora/releases)
- [Commits](sindresorhus/ora@v8.2.0...v9.0.0)

---
updated-dependencies:
- dependency-name: ora
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 27, 2025
@dependabot dependabot bot requested review from a team as code owners October 27, 2025 20:33
@dependabot dependabot bot added Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 27, 2025
@changeset-bot
Copy link

changeset-bot bot commented Oct 27, 2025

⚠️ No Changeset found

Latest commit: 5cb814c

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@graphite-app
Copy link
Contributor

graphite-app bot commented Oct 27, 2025

How to use the Graphite Merge Queue

Add either label to this PR to merge it via the merge queue:

  • merge-queue - adds this PR to the back of the merge queue
  • hotfix - for urgent hot fixes, skip the queue and merge this PR next

You must have a Graphite account in order to use the merge queue. Sign up using this link.

An organization admin has enabled the Graphite Merge Queue in this repository.

Please do not merge from GitHub as this will restart CI on PRs being processed by the merge queue.

@vercel
Copy link

vercel bot commented Oct 27, 2025

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Preview Comments Updated (UTC)
docs-v2 Ready Ready Preview Comment Oct 27, 2025 8:48pm
nebula Ready Ready Preview Comment Oct 27, 2025 8:48pm
thirdweb_playground Error Error Oct 27, 2025 8:48pm
thirdweb-www Ready Ready Preview Comment Oct 27, 2025 8:48pm
wallet-ui Ready Ready Preview Comment Oct 27, 2025 8:48pm

@github-actions github-actions bot added packages SDK Involves changes to the thirdweb SDK labels Oct 27, 2025
@coderabbitai
Copy link
Contributor

coderabbitai bot commented Oct 27, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Comment @coderabbitai help to get the list of available commands and usage tips.

@socket-security
Copy link

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​wagmi/​cli@​2.6.0 ⏵ 2.7.197 -310078 -2297 -3100
Updatedora@​8.2.0 ⏵ 9.0.099 +1100100 +182100

View full report

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 29, 2025

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/ora-9.0.0 branch October 29, 2025 06:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code packages SDK Involves changes to the thirdweb SDK

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants