Skip to content

chore(deps): bump the production-dependencies group with 7 updates#20

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/production-dependencies-6bba8035aa
Open

chore(deps): bump the production-dependencies group with 7 updates#20
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/production-dependencies-6bba8035aa

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Feb 12, 2026 •
edited
Loading

Bumps the production-dependencies group with 7 updates:

Package From To
@openzeppelin/contracts 4.9.6 5.4.0
@peculiar/asn1-ecc 2.3.8 2.6.0
@peculiar/asn1-schema 2.3.8 2.6.0
cbor 9.0.1 10.0.11
elliptic 6.5.4 6.6.1
@types/elliptic 6.4.16 6.4.18
web3-utils 4.2.1 4.3.3

Updates @openzeppelin/contracts from 4.9.6 to 5.4.0

Release notes

Sourced from @​openzeppelin/contracts's releases.

v5.4.0

Breaking changes

  • Update minimum pragma to 0.8.24 in SignatureChecker, Governor and Governor's extensions. (#5716).

Pragma changes

  • Reduced pragma requirement of interface files

Changes by category

Account

  • Account: Added a simple ERC-4337 account implementation with minimal logic to process user operations. (#5657)
  • AccountERC7579: Extension of Account that implements support for ERC-7579 modules of type executor, validator, and fallback handler. (#5657)
  • AccountERC7579Hooked: Extension of AccountERC7579 that implements support for ERC-7579 hook modules. (#5657)
  • EIP7702Utils: Add a library for checking if an address has an EIP-7702 delegation in place. (#5587)
  • IERC7821, ERC7821: Interface and logic for minimal batch execution. No support for additional opData is included. (#5657)

Governance

  • GovernorNoncesKeyed: Extension of Governor that adds support for keyed nonces when voting by sig. (#5574)

Tokens

  • ERC20Bridgeable: Implementation of ERC-7802 that makes an ERC-20 compatible with crosschain bridges. (#5739)

Cryptography

Signers
  • AbstractSigner, SignerECDSA, SignerP256, and SignerRSA: Add an abstract contract and various implementations for contracts that deal with signature verification. (#5657)
  • SignerERC7702: Implementation of AbstractSigner for Externally Owned Accounts (EOAs). Useful with ERC-7702. (#5657)
  • SignerERC7913: Abstract signer that verifies signatures using the ERC-7913 workflow. (#5659)
  • MultiSignerERC7913: Implementation of AbstractSigner that supports multiple ERC-7913 signers with a threshold-based signature verification system. (#5659)
  • MultiSignerERC7913Weighted: Extension of MultiSignerERC7913 that supports assigning different weights to each signer, enabling more flexible governance schemes. (#5741)
Verifiers
  • ERC7913P256Verifier and ERC7913RSAVerifier: Ready to use ERC-7913 verifiers that implement key verification for P256 (secp256r1) and RSA keys. (#5659)
Other
  • SignatureChecker: Add support for ERC-7913 signatures alongside existing ECDSA and ERC-1271 signature verification. (#5659)
  • ERC7739: An abstract contract to validate signatures following the rehashing scheme from ERC7739Utils. (#5664)
  • ERC7739Utils: Add a library that implements a defensive rehashing mechanism to prevent replayability of smart contract signatures based on the ERC-7739. (#5664)

Structures

  • EnumerableMap: Add support for BytesToBytesMap type. (#5658)

... (truncated)

Changelog

Sourced from @​openzeppelin/contracts's changelog.

5.4.0 (2025-07-17)

Breaking changes

  • Update minimum pragma to 0.8.24 in SignatureChecker, Governor and Governor's extensions. (#5716).

Pragma changes

  • Reduced pragma requirement of interface files.

Changes by category

Account

  • Account: Added a simple ERC-4337 account implementation with minimal logic to process user operations. (#5657)
  • AccountERC7579: Extension of Account that implements support for ERC-7579 modules of type executor, validator, and fallback handler. (#5657)
  • AccountERC7579Hooked: Extension of AccountERC7579 that implements support for ERC-7579 hook modules. (#5657)
  • EIP7702Utils: Add a library for checking if an address has an EIP-7702 delegation in place. (#5587)
  • IERC7821, ERC7821: Interface and logic for minimal batch execution. No support for additional opData is included. (#5657)

Governance

  • GovernorNoncesKeyed: Extension of Governor that adds support for keyed nonces when voting by sig. (#5574)

Tokens

  • ERC20Bridgeable: Implementation of ERC-7802 that makes an ERC-20 compatible with crosschain bridges. (#5735)

Cryptography

Signers
  • AbstractSigner, SignerECDSA, SignerP256, and SignerRSA: Add an abstract contract and various implementations for contracts that deal with signature verification. (#5657)
  • SignerERC7702: Implementation of AbstractSigner for Externally Owned Accounts (EOAs). Useful with ERC-7702. (#5657)
  • SignerERC7913: Abstract signer that verifies signatures using the ERC-7913 workflow. (#5659)
  • MultiSignerERC7913: Implementation of AbstractSigner that supports multiple ERC-7913 signers with a threshold-based signature verification system. (#5659)
  • MultiSignerERC7913Weighted: Extension of MultiSignerERC7913 that supports assigning different weights to each signer, enabling more flexible governance schemes. (#5718)
Verifiers
  • ERC7913P256Verifier and ERC7913RSAVerifier: Ready to use ERC-7913 verifiers that implement key verification for P256 (secp256r1) and RSA keys. (#5659)
Other
  • SignatureChecker: Add support for ERC-7913 signatures alongside existing ECDSA and ERC-1271 signature verification. (#5659)
  • ERC7739: An abstract contract to validate signatures following the rehashing scheme from ERC7739Utils. (#5664)
  • ERC7739Utils: Add a library that implements a defensive rehashing mechanism to prevent replayability of smart contract signatures based on the ERC-7739. (#5664)

Structures

... (truncated)

Commits
  • c64a1ed Release v5.4.0 (#5801)
  • 6f9f523 Exit release candidate
  • f19bf29 Fix bug in Bytes.lastIndexOf when array is empty and position is not 2²⁵⁶-1 (...
  • fffade5 Add warning about Clones pointing to implementation with no code (#5798)
  • 54a8027 Clarify documentation for IAccessManager.canCall (#5795)
  • f12605a Add Account framework docs and guides (#5660)
  • 83b829e Address 5.4 audit documentation improvements (#5779)
  • 2e152ba Cause _addSigners to revert if it triggers a totalWeight overflow (#5790)
  • a341850 Minimize pragma for MultiSignerERC7913Weighted.sol (#5778)
  • ca1494a Improve naming consystency in EnumerableSet (#5776)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by ernestognw, a new releaser for @​openzeppelin/contracts since your current version.


Updates @peculiar/asn1-ecc from 2.3.8 to 2.6.0

Commits
  • 84379a0 v2.6.0
  • 2297277 fix(x509-qualified): update statementInfo to be optional in QCStatement class
  • f431bf9 fix(csr): add support for parsing certification requests with omitted attributes
  • 4a2edb0 refactor(parser): streamline sequence handling and remove manual mapping logic
  • c5e77b6 v2.5.0
  • 218807e Merge pull request #112 from PeculiarVentures:asn-prop-raw
  • cf8b25a feat(asn1): add raw attribute support and corresponding raw properties in var...
  • 148065a feat(schema): add support for raw ASN.1 encoded bytes in parsing logic
  • 813d42d v2.4.0
  • 9bcc0e0 chore(deps): update dependencies
  • Additional commits viewable in compare view

Updates @peculiar/asn1-schema from 2.3.8 to 2.6.0

Commits
  • 84379a0 v2.6.0
  • 2297277 fix(x509-qualified): update statementInfo to be optional in QCStatement class
  • f431bf9 fix(csr): add support for parsing certification requests with omitted attributes
  • 4a2edb0 refactor(parser): streamline sequence handling and remove manual mapping logic
  • c5e77b6 v2.5.0
  • 218807e Merge pull request #112 from PeculiarVentures:asn-prop-raw
  • cf8b25a feat(asn1): add raw attribute support and corresponding raw properties in var...
  • 148065a feat(schema): add support for raw ASN.1 encoded bytes in parsing logic
  • 813d42d v2.4.0
  • 9bcc0e0 chore(deps): update dependencies
  • Additional commits viewable in compare view

Updates cbor from 9.0.1 to 10.0.11

Release notes

Sourced from cbor's releases.

v10.0.11

What's Changed

Full Changelog: hildjj/node-cbor@v10.0.10...v10.0.11

v10.0.10

What's Changed

Full Changelog: hildjj/node-cbor@v10.0.9...v10.0.10

v10.0.9

Note: versions 10.0.4 - 10.0.8 were not published to NPM.

What's Changed

Full Changelog: hildjj/node-cbor@v10.0.8...v10.0.9

v10.0.8

Note: versions 10.0.4-10.0.7 were not released to NPM.

What's Changed

Full Changelog: hildjj/node-cbor@v10.0.7...v10.0.8

v10.0.7

Note: 10.0.4-10.0.6 never got published correctly to NPM.

What's Changed

Full Changelog: hildjj/node-cbor@v10.0.6...v10.0.7

v10.0.6

What's Changed

Full Changelog: hildjj/node-cbor@v10.0.5...v10.0.6

v10.0.5

What's Changed

... (truncated)

Commits

Updates elliptic from 6.5.4 to 6.6.1

Commits

Updates @types/elliptic from 6.4.16 to 6.4.18

Commits

Updates web3-utils from 4.2.1 to 4.3.3

Release notes

Sourced from web3-utils's releases.

web3-utils@4.0.0-alpha.0

Initial alpha release

Install with yarn add web3-utils@4.0.0-alpha.0

Changelog

Sourced from web3-utils's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[1.2.0]

Released with 1.0.0-beta.37 code base.

[1.2.1]

Fixed

  • websocket dependency fixed (#2971, #2976)
  • requestOptions added to WebsocketProvider (#2979)
  • Node >= v8.0.0 support (#2938)

[1.2.2]

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the production-dependencies group with 7 updates
1ae6135 
Bumps the production-dependencies group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [@openzeppelin/contracts](https://github.com/OpenZeppelin/openzeppelin-contracts) | `4.9.6` | `5.4.0` |
| [@peculiar/asn1-ecc](https://github.com/PeculiarVentures/asn1-schema) | `2.3.8` | `2.6.0` |
| [@peculiar/asn1-schema](https://github.com/PeculiarVentures/asn1-schema) | `2.3.8` | `2.6.0` |
| [cbor](https://github.com/hildjj/node-cbor/tree/HEAD/packages/cbor) | `9.0.1` | `10.0.11` |
| [elliptic](https://github.com/indutny/elliptic) | `6.5.4` | `6.6.1` |
| [@types/elliptic](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/elliptic) | `6.4.16` | `6.4.18` |
| [web3-utils](https://github.com/ChainSafe/web3.js) | `4.2.1` | `4.3.3` |


Updates `@openzeppelin/contracts` from 4.9.6 to 5.4.0
- [Release notes](https://github.com/OpenZeppelin/openzeppelin-contracts/releases)
- [Changelog](https://github.com/OpenZeppelin/openzeppelin-contracts/blob/master/CHANGELOG.md)
- [Commits](OpenZeppelin/openzeppelin-contracts@v4.9.6...v5.4.0)

Updates `@peculiar/asn1-ecc` from 2.3.8 to 2.6.0
- [Commits](PeculiarVentures/asn1-schema@v2.3.8...v2.6.0)

Updates `@peculiar/asn1-schema` from 2.3.8 to 2.6.0
- [Commits](PeculiarVentures/asn1-schema@v2.3.8...v2.6.0)

Updates `cbor` from 9.0.1 to 10.0.11
- [Release notes](https://github.com/hildjj/node-cbor/releases)
- [Commits](https://github.com/hildjj/node-cbor/commits/v10.0.11/packages/cbor)

Updates `elliptic` from 6.5.4 to 6.6.1
- [Commits](indutny/elliptic@v6.5.4...v6.6.1)

Updates `@types/elliptic` from 6.4.16 to 6.4.18
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/elliptic)

Updates `web3-utils` from 4.2.1 to 4.3.3
- [Release notes](https://github.com/ChainSafe/web3.js/releases)
- [Changelog](https://github.com/web3/web3.js/blob/4.x/CHANGELOG.md)
- [Commits](https://github.com/ChainSafe/web3.js/commits)

---
updated-dependencies:
- dependency-name: "@openzeppelin/contracts"
  dependency-version: 5.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: "@peculiar/asn1-ecc"
  dependency-version: 2.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@peculiar/asn1-schema"
  dependency-version: 2.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: cbor
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: elliptic
  dependency-version: 6.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@types/elliptic"
  dependency-version: 6.4.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: web3-utils
  dependency-version: 4.3.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Feb 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants