build(deps): bump the javascript group with 39 updates

[dependabot]

Bumps the javascript group with 39 updates:

Package	From	To
@openzeppelin/contracts	3.4.0	5.6.1
openzeppelin-solidity	2.0.0	3.4.2
zod	4.0.13	4.4.3
@chainsafe/ssz	1.2.1	1.6.0
@commitlint/cli	19.8.1	21.1.0
@commitlint/config-conventional	19.8.1	21.1.0
@eslint/compat	1.3.0	2.1.0
@eslint/js	9.28.0	10.0.1
@nomicfoundation/hardhat-chai-matchers	2.0.9	3.0.0
@nomicfoundation/hardhat-ethers	3.0.9	4.0.13
@nomicfoundation/hardhat-ignition	0.15.11	3.1.7
@nomicfoundation/hardhat-ignition-ethers	0.15.12	3.1.6
@nomicfoundation/hardhat-network-helpers	1.0.12	3.0.10
@nomicfoundation/hardhat-toolbox	5.0.0	7.0.0
@nomicfoundation/hardhat-verify	2.1.1	3.0.20
@nomicfoundation/ignition-core	0.15.11	3.1.7
@types/node	22.15.31	26.0.1
chai	4.5.0	6.2.2
chalk	4.1.2	5.6.2
dotenv	16.5.0	17.4.2
eslint	9.28.0	10.6.0
eslint-config-prettier	10.1.5	10.1.8
eslint-plugin-no-only-tests	3.3.0	3.4.0
eslint-plugin-prettier	5.4.1	5.5.6
eslint-plugin-simple-import-sort	12.1.1	13.0.0
ethers	6.14.4	6.17.0
glob	11.1.0	13.0.6
globals	15.15.0	17.7.0
hardhat	2.26.1	3.9.0
hardhat-contract-sizer	2.10.0	2.10.1
hardhat-ignore-warnings	0.2.12	0.3.0
hardhat-tracer	3.2.1	3.4.0
lint-staged	16.1.0	17.0.8
prettier	3.5.3	3.9.4
prettier-plugin-solidity	2.0.0	2.3.1
solhint	5.1.0	6.2.3
solidity-coverage	0.8.16	0.8.17
typescript	5.8.3	6.0.3
typescript-eslint	8.34.0	8.62.1

Updates @openzeppelin/contracts from 3.4.0 to 5.6.1

Release notes

Sourced from @​openzeppelin/contracts's releases.

v5.6.1

• InteroperableAddress: Fix overflow in the parsing functions that caused silent misparse of large interoperable addresses. (#6372)

v5.6.0

Breaking changes

• Strings: The escapeJSON function now escapes all control characters in the range U+0000 to U+001F per RFC-4627. Previously only backspace, tab, newline, form feed, carriage return, double quote, and backslash were escaped. Input strings containing any other control character (e.g. null 0x00) or raw bytes in U+0001–U+001F will now produce different, longer output (e.g. \u0000 for null). (#6344)
• ERC1155: Performing batch transfers with exactly one id/value in the batch no-longer calls IERC1155Receiver.onERC1155Received. IERC1155Receiver.onERC1155BatchReceived is called instead (with arrays of length one). (#6170)
• ERC1967Proxy and TransparentUpgradeableProxy: Mandate initialization during construction. Deployment now reverts with ERC1967ProxyUninitialized if an initialize call is not provided. Developers that rely on the previous behavior and want to disable this check can do so by overriding the internal _unsafeAllowUninitialized function to return true. (#5906)
• ERC721 and ERC1155: Prevent setting an operator for address(0). In the case of ERC721 this type of operator allowance could lead to obfuscated mint permission. (#6171)
• RLP: The encode(bytes32) function now encodes bytes32 as a fixed size item and not as a scalar in encode(uint256). Users must replace calls to encode(bytes32) with encode(uint256(bytes32)) to preserve the same behavior. (#6167)
• ERC4337Utils: The parseValidationData now returns a ValidationRange as the last return tuple value indicating whether the validationData is compared against a timestamp or block number. Developers must update their code to handle this new return value (e.g. (aggregator, validAfter, validUntil) -> (aggregator, validAfter, validUntil, range)). (#6215)
• SignerWebAuthn: The _rawSignatureValidation function now returns false when the signature is not a valid WebAuthn authentication assertion. P256 fallback is removed. Developers can add it back by overriding the function. (#6337)
• Memory: The setFreeMemoryPointer function is renamed to unsafeSetFreeMemoryPointer. Developers should use unsafeSetFreeMemoryPointer instead of setFreeMemoryPointer after v5.6.0. (#6348)
• Memory: Remove the asBytes32 and asPointer function to reduce the risk of mistakes when manipulating memory pointers. (#6340)

Changes by category

Account

• Account: Update default version of the ERC-4337 entrypoint to v0.9. (#6135)
• AccountERC7579: Do not revert and perform the uninstall if the onUninstall hook of a module reverts. (#6142)
• ERC4337Utils: Added the paymasterSignature function to extract the signature in paymasterAndData after Entrypoint v0.9. Similarly, a variant of paymasterData that receives a flag to exclude the signature from the returned data. (#6215)
• ERC4337Utils: Added variants of packValidationData(address,uint48,uint48) and packValidationData(bool,uint48,uint48) that receive a ValidationRange argument, could be timestamp or block number. Similarly, the parseValidationData now returns a ValidationRange too. (#6215)

Tokens

• ERC1155: Introduce the _checkAuthorized internal virtual function to encapsulate isApprovedForAll and msg.sender == from checks. (#6133)
• ERC1155: Call IERC1155Receiver.onERC1155BatchReceived when performing a batch transfers with exactly one id/value in the batch. (#6170)
• ERC4626: Allow overriding underlying assets transfer mechanisms through new internal virtual functions (_transferIn and _transferOut). (#5970)
• ERC721URIStorage: Add _suffixURI, an internal getter for retrieving the custom tokenURI without the base prefix. (#6175)
• Add ERC-165 detection for the IERC6909ContentURI, IERC6909TokenSupply and IERC6909Metadata interfaces in the ERC6909ContentURI, ERC6909TokenSupply and ERC6909Metadata contracts respectively. (#6246) and (#6247)

Cross-chain

• BridgeFungible, BridgeERC20 and BridgeERC7802: Added bridge contracts to handle crosschain movements of ERC-20 (and ERC-7802) tokens. (#5914) (#6328)
• CrosschainLinked: Added a new helper contract to facilitate communication between a contract on one chain and counterparts on remote chains through ERC-7786 gateways. (#5914)
• ERC20Crosschain: Added an ERC-20 extension to embed an ERC-7786 based crosschain bridge directly in the token contract. (#5914)
• InteroperableAddress: Reject inputs with both chain reference and addresses empty. (#6340)

Cryptography

• MessageHashUtils: Add helper functions to build EIP-712 domain typehash and separator with fields selectively enabled/disabled. (#5908)
• SignatureChecker: Add isValidERC1271SignatureNowCalldata, a variant of isValidERC1271SignatureNow that takes the signature from calldata. (#6123)
• TrieProof: Add library for verifying Ethereum Merkle-Patricia trie inclusion proofs. (#5826)
• WebAuthn: Verification now returns false instead of reverting when client data contains an out-of-bounds challengeIndex. (#6329)

Structures

... (truncated)

Changelog

Sourced from @​openzeppelin/contracts's changelog.

5.6.1 (2026-02-27)

• InteroperableAddress: Fix overflow in the parsing functions that caused silent misparse of large interoperable addresses. (#6372)

5.6.0 (2026-02-25)

Breaking changes

• Strings: The escapeJSON function now escapes all control characters in the range U+0000 to U+001F per RFC-4627. Previously only backspace, tab, newline, form feed, carriage return, double quote, and backslash were escaped. Input strings containing any other control character (e.g. null 0x00) or raw bytes in U+0001–U+001F will now produce different, longer output (e.g. \u0000 for null). (#6344)
• ERC1155: Performing batch transfers with exactly one id/value in the batch no-longer calls IERC1155Receiver.onERC1155Received. IERC1155Receiver.onERC1155BatchReceived is called instead (with arrays of length one). (#6170)
• ERC1967Proxy and TransparentUpgradeableProxy: Mandate initialization during construction. Deployment now reverts with ERC1967ProxyUninitialized if an initialize call is not provided. Developers that rely on the previous behavior and want to disable this check can do so by overriding the internal _unsafeAllowUninitialized function to return true. (#5906)
• ERC721 and ERC1155: Prevent setting an operator for address(0). In the case of ERC721 this type of operator allowance could lead to obfuscated mint permission. (#6171)
• RLP: The encode(bytes32) function now encodes bytes32 as a fixed size item and not as a scalar in encode(uint256). Users must replace calls to encode(bytes32) with encode(uint256(bytes32)) to preserve the same behavior. (#6167)
• ERC4337Utils: The parseValidationData now returns a ValidationRange as the last return tuple value indicating whether the validationData is compared against a timestamp or block number. Developers must update their code to handle this new return value (e.g. (aggregator, validAfter, validUntil) -> (aggregator, validAfter, validUntil, range)). (#6215)
• SignerWebAuthn: The _rawSignatureValidation function now returns false when the signature is not a valid WebAuthn authentication assertion. P256 fallback is removed. Developers can add it back by overriding the function. (#6337)
• Memory: The setFreeMemoryPointer function is renamed to unsafeSetFreeMemoryPointer. Developers should use unsafeSetFreeMemoryPointer instead of setFreeMemoryPointer after v5.6.0. (#6348)
• Memory: Remove the asBytes32 and asPointer function to reduce the risk of mistakes when manipulating memory pointers. (#6340)

Changes by category

Account

• Account: Update default version of the ERC-4337 entrypoint to v0.9. (#6135)
• AccountERC7579: Do not revert and perform the uninstall if the onUninstall hook of a module reverts. (#6142)
• ERC4337Utils: Added the paymasterSignature function to extract the signature in paymasterAndData after Entrypoint v0.9. Similarly, a variant of paymasterData that receives a flag to exclude the signature from the returned data. (#6215)
• ERC4337Utils: Added variants of packValidationData(address,uint48,uint48) and packValidationData(bool,uint48,uint48) that receive a ValidationRange argument, could be timestamp or block number. Similarly, the parseValidationData now returns a ValidationRange too. (#6215)

Tokens

• ERC1155: Introduce the _checkAuthorized internal virtual function to encapsulate isApprovedForAll and msg.sender == from checks. (#6133)
• ERC1155: Call IERC1155Receiver.onERC1155BatchReceived when performing a batch transfers with exactly one id/value in the batch. (#6170)
• ERC4626: Allow overriding underlying assets transfer mechanisms through new internal virtual functions (_transferIn and _transferOut). (#5970)
• ERC721URIStorage: Add _suffixURI, an internal getter for retrieving the custom tokenURI without the base prefix. (#6175)
• Add ERC-165 detection for the IERC6909ContentURI, IERC6909TokenSupply and IERC6909Metadata interfaces in the ERC6909ContentURI, ERC6909TokenSupply and ERC6909Metadata contracts respectively. (#6246) and (#6247)

Cross-chain

• BridgeFungible, BridgeERC20 and BridgeERC7802: Added bridge contracts to handle crosschain movements of ERC-20 (and ERC-7802) tokens. (#5914) (#6328)
• CrosschainLinked: Added a new helper contract to facilitate communication between a contract on one chain and counterparts on remote chains through ERC-7786 gateways. (#5914)
• ERC20Crosschain: Added an ERC-20 extension to embed an ERC-7786 based crosschain bridge directly in the token contract. (#5914)
• InteroperableAddress: Reject inputs with both chain reference and addresses empty. (#6340)

Cryptography

• MessageHashUtils: Add helper functions to build EIP-712 domain typehash and separator with fields selectively enabled/disabled. (#5908)
• SignatureChecker: Add isValidERC1271SignatureNowCalldata, a variant of isValidERC1271SignatureNow that takes the signature from calldata. (#6123)
• TrieProof: Add library for verifying Ethereum Merkle-Patricia trie inclusion proofs. (#5826)
• WebAuthn: Verification now returns false instead of reverting when client data contains an out-of-bounds challengeIndex. (#6329)

Structures

... (truncated)

Commits

• 5fd1781 Release v5.6.1 (#6377)
• 82cad37 Fix support for very large inputs in InteroperableAddress (#6372)
• 56a3de2 Release v5.6.0 (#6340)
• 6ec651d Exit release candidate
• 4c10cbe Add support for inline extension nodes in TrieProof (#6351)
• aa110ab Fix typos and documentation for the 5.6 audit. (#6330)
• 27dddf8 Escape control characters in Strings.escapeJSON (#6344)
• f5cd8d8 Reject interoperable addresses whith both chain reference and addresses empty...
• 44d016c Check that slice are in the reserved space in Accumulator push and shift (#6302)
• cbaf3a4 Remove Memory.asPointer and Memory.asBytes32 + add warning about setting the ...
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​openzeppelin/contracts since your current version.

Updates openzeppelin-solidity from 2.0.0 to 3.4.2

Release notes

Sourced from openzeppelin-solidity's releases.

v3.4.2

• TimelockController: Add additional isOperationReady check.

v3.4.2-solc-0.7

• TimelockController: Add additional isOperationReady check.

v3.4.0

Read the full announcement in the blog or check out the changelog.

Security Fixes

• ERC777: fix potential reentrancy issues for custom extensions to ERC777. (#2483)

If you're using our implementation of ERC777 from version 3.3.0 or earlier, and you define a custom _beforeTokenTransfer function that writes to a storage variable, you may be vulnerable to a reentrancy attack. If you're affected and would like assistance please write to security@openzeppelin.com. Read more in the pull request.

v3.3.0

Read the full announcement in the forum or check out the changelog.

• Now supports both Solidity 0.6 and 0.7. Compiling with solc 0.7 will result in warnings. Install the solc-0.7 tag to compile without warnings.
• TimelockController: added a contract to augment access control schemes with a delay. (#2354)
• Address: added functionStaticCall, similar to the existing functionCall. (#2333)
• EnumerableSet: added Bytes32Set, for sets of bytes32. (#2395)

v3.2.1 for Solidity 0.7

This is a special release for Solidity 0.7 that gets rid of a warning in ERC777 using one of the new features of the language. (#2327)

Note: The variant for Solidity 0.7 can be installed using npm install @openzeppelin/contracts@solc-0.7.

v3.2.0

Welcome to a new release of OpenZeppelin Contracts! 👯

The big feature in this release is that we’ve migrated our proxy contracts from OpenZeppelin SDK into the Contracts project. We hope this will make more people aware of upgrades in Ethereum, and we also think the contracts will benefit greatly from the continued scrutiny by all of you in the community. This was also a migration of the proxies from Solidity 0.5 to 0.6, which we know some users have been waiting for.

For Solidity 0.7 users, a reminder that we have support for the newer compiler version published on npm under the tag solc-0.7, the latest release being 3.2.0-solc-0.7. We’re considering officially switching to 0.7 for the release after this one.

There is additionally a small breaking change in ERC20Snapshot that may affect some of its users. If you’re one of them please take a look at the changelog.

v3.1.0

This is the first release since v3.0, our last major release. It includes the long-awaited ERC1155 token and helpers for safe calls and downcasts, as well as a number of minor improvements.

To install this release, run:

npm install --save-dev @openzeppelin/contracts

ERC1155

This is a new token standard developed by the gaming industry, focusing on gas efficiency. It's key difference is that it is a multi-token contract: a single ERC1155 can be used to represent an arbitrary number of tokens, which is very useful in applications that require many tokens by removing the high gas costs associated with deploying them. Check out our new documentation page to learn more!.

... (truncated)

Changelog

Sourced from openzeppelin-solidity's changelog.

3.4.2 (2021-07-24)

• TimelockController: Add additional isOperationReady check.

3.4.1 (2021-03-03)

• ERC721: made _approve an internal function (was private).

3.4.0 (2021-02-02)

• BeaconProxy: added new kind of proxy that allows simultaneous atomic upgrades. (#2411)
• EIP712: added helpers to verify EIP712 typed data signatures on chain. (#2418)
• ERC20Permit: added an implementation of the ERC20 permit extension for gasless token approvals. (#2237)
• Presets: added token presets with preminted fixed supply ERC20PresetFixedSupply and ERC777PresetFixedSupply. (#2399)
• Address: added functionDelegateCall, similar to the existing functionCall. (#2333)
• Clones: added a library for deploying EIP 1167 minimal proxies. (#2449)
• Context: moved from contracts/GSN to contracts/utils. (#2453)
• PaymentSplitter: replace usage of .transfer() with Address.sendValue for improved compatibility with smart wallets. (#2455)
• UpgradeableProxy: bubble revert reasons from initialization calls. (#2454)
• SafeMath: fix a memory allocation issue by adding new SafeMath.tryOp(uint,uint)→(bool,uint) functions. SafeMath.op(uint,uint,string)→uint are now deprecated. (#2462)
• EnumerableMap: fix a memory allocation issue by adding new EnumerableMap.tryGet(uint)→(bool,address) functions. EnumerableMap.get(uint)→string is now deprecated. (#2462)
• ERC165Checker: added batch getSupportedInterfaces. (#2469)
• RefundEscrow: beneficiaryWithdraw will forward all available gas to the beneficiary. (#2480)
• Many view and pure functions have been made virtual to customize them via overrides. In many cases this will not imply that other functions in the contract will automatically adapt to the overridden definitions. People who wish to override should consult the source code to understand the impact and if they need to override any additional functions to achieve the desired behavior.

Security Fixes

• ERC777: fix potential reentrancy issues for custom extensions to ERC777. (#2483)

If you're using our implementation of ERC777 from version 3.3.0 or earlier, and you define a custom _beforeTokenTransfer function that writes to a storage variable, you may be vulnerable to a reentrancy attack. If you're affected and would like assistance please write to security@openzeppelin.com. Read more in the pull request.

3.3.0 (2020-11-26)

• Now supports both Solidity 0.6 and 0.7. Compiling with solc 0.7 will result in warnings. Install the solc-0.7 tag to compile without warnings.
• Address: added functionStaticCall, similar to the existing functionCall. (#2333)
• TimelockController: added a contract to augment access control schemes with a delay. (#2354)
• EnumerableSet: added Bytes32Set, for sets of bytes32. (#2395)

3.2.2-solc-0.7 (2020-10-28)

• Resolve warnings introduced by Solidity 0.7.4. (#2396)

3.2.1-solc-0.7 (2020-09-15)

• ERC777: Remove a warning about function state visibility in Solidity 0.7. (#2327)

3.2.0 (2020-09-10)

New features

... (truncated)

Commits

• 8e02960 3.4.2
• c8188c0 Add additional isOperationReady check in TimelockController
• cec0800 3.4.1
• b079293 Add a changelog entry
• a686a90 Make ERC721._approve internal
• fa64a1c 3.4.0
• 0f553e7 Remove SafeMathMock compilation warnings (#2497)
• a0e2bca Add "available since" comments in documentation
• ff300b1 3.4.0-rc.0
• 18c7efe Make view and pure functions virtual (#2473)
• Additional commits viewable in compare view

Install script changes

This version adds prepublish, prepare scripts that run during installation. Review the package contents before updating.

Updates zod from 4.0.13 to 4.4.3

Release notes

Sourced from zod's releases.

v4.4.3

Commits:

• 4c2fa95ce3f3390fbc522324e406b4e9e89b88f9 docs: use Zernio primary wordmark for gold sponsor logo
• 2aeec83eb135e3a83756e973ef44845fc5a455d2 docs: prune lapsed gold sponsors and rebalance logo sizing
• 7391be88ac1ee5cd02057f5ccc012a1f5df4efd0 docs: prune lapsed silver/bronze sponsors and add active ones
• 2c703322a21b4e2b12f33f49ea8430c451a68b4f docs: normalize bronze sponsor logos to github avatar pattern
• 9195250cab0e7950efe39c3926d6c203b4b0a170 docs: remove Mintlify from bronze sponsors (churned)
• b8dffe9e62f17e6571e6249d05cc5102b54d94e4 docs: remove Numeric and Speakeasy (2+ missed monthly cycles)
• 1cab69383fcdeae2a366d5e2a2fc4d8fc765d168 fix(v4): restore catch handling for absent object keys (#5937) (#5939)
• c2be4f819064eed62c7c350a2d399b5faecd15f8 fix(v4): generalize optin/fallback to transform; restore preprocess on absent keys (#5941)
• f3c9ec03ba7a28ae72d25cc295f38674bee0f559 4.4.3
• 1fb56a5c18c27102dbc92260a4007c7732a0ccca docs: document release procedure in AGENTS.md

v4.4.2

Commits:

• 0c62df0ea19fd05abdf90473e9eef7eea530fab2 Clean up docs navigation and stale labels (#5901)
• 20cc794895cc8604fe0c87d83a5d1c3f89fad0ac chore: add security policy and refresh tooling deps
• 6fbe07b0177efdd1bf1c0b05160e70d7a0702337 fix(docs): heading anchor links now include the hash so it doesnt scoll all the way up, follows navbar logic (#5791)
• 4bbed1b1c73eca4ce9e59b1189ed236aa6c8b5bd Tighten discriminated union option typing
• bbac3e567e7fccfaaf7cdc97f1ce30c295e2c908 Update PR guidance for agents
• cf0dc942a32805c292fff59ade20a7ace980735a Merge remote-tracking branch 'origin/main' into fix-discriminated-union-key-constraint
• 292c894a5fd2aa42e527900b83d8d7a3009a709c docs: add Zernio gold sponsor
• 1fc9f311c28dcf80d0bb5a36b177086cbc3d8eca docs: document codec inversion
• 1373c85da9aeff704a9762d27bc58699618aefb7 docs: remove AI disclosure guidance
• e20d02b473c08e3a4e557bc610b1b5fac079b649 chore: ignore triage notes
• e58ea4d91b1dfe8194b73508203213cbc7e9c936 docs: test Zod Mini tab code heights
• 905761a5d127e8d5dd2ebb3bc88c75cb0b8149ff docs: document preprocess input type narrowing
• bf64bac850d4dee2b7dde7e64909d5d796d32043 chore: tighten test guidance in AGENTS.md
• 8ec4e73f4c4693b6361ad591be40fb41eb8a9f95 chore: update play.ts scratch
• 02c2baf7d0d615872fa4528a8020603b71211702 Make z.preprocess defer optionality to inner schema (#5929)
• 88015df8e25c44fb5385eb3ef28935119cd5edea fix(docs): drop deprecated baseUrl from tsconfig
• c59d4474e3b4cad1b323462186cf607178ce8267 4.4.2

v4.4.1

Commits:

• 481f7be4238c83ed58183f921b2646f340a91c6a ci: gate release publishing on full test workflow
• 95ccab423aec720b2523c3a64cdc7e3204537cc7 test(v3): restore optional undefined expectations
• cede2c63739a5823d6aa5093d291e9a111da943d fix(v4): reject tuple holes before required defaults (#5900)
• edd0bf0f5ada4a8dc581c259407d7bbad0a71ea7 release: 4.4.1
• 180d83d1dbe6a59260710cc8637a3dea2281ee56 docs: remove Jazz featured sponsor

v4.4.0

4.4.0

This is a minor release with a wide set of correctness and soundness fixes. Some fixes intentionally make Zod stricter, so code that depended on previously accepted invalid or ambiguous inputs may need small updates.

Potentially breaking bug fixes

... (truncated)

Commits

• 1fb56a5 docs: document release procedure in AGENTS.md
• f3c9ec0 4.4.3
• c2be4f8 fix(v4): generalize optin/fallback to transform; restore preprocess on absent...
• 1cab693 fix(v4): restore catch handling for absent object keys (#5937) (#5939)
• b8dffe9 docs: remove Numeric and Speakeasy (2+ missed monthly cycles)
• 9195250 docs: remove Mintlify from bronze sponsors (churned)
• 2c70332 docs: normalize bronze sponsor logos to github avatar pattern
• 7391be8 docs: prune lapsed silver/bronze sponsors and add active ones
• 2aeec83 docs: prune lapsed gold sponsors and rebalance logo sizing
• 4c2fa95 docs: use Zernio primary wordmark for gold sponsor logo
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for zod since your current version.

Updates @chainsafe/ssz from 1.2.1 to 1.6.0

Changelog

Sourced from @​chainsafe/ssz's changelog.

1.6.0 (2026-05-19)

Features

• add progressive list view helpers (#530) (88cd4f6)

1.5.0 (2026-05-18)

Features

• add progressive types (#528) (bcbcae3)

Miscellaneous

• bump CI Node versions to 22 and 24 (#524) (e8c3edb)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @​chainsafe/persistent-merkle-tree bumped to 1.3.0

1.4.0 (2026-04-21)

Features

• allow array-like input for VectorCompositeType views (#525) (0feec86)

1.3.4 (2026-04-21)

Bug Fixes

• update package.json repo links so provenance works (#523) (d619c45)

Miscellaneous

• bump @​lodestar/spec-test-util to 1.42.0 (#518) (67a26aa)

Dependencies

• The following workspace dependencies were updated
  • dependencies

... (truncated)

Commits

• d7436f7 chore: release master (#531)
• 88cd4f6 feat: add progressive list view helpers (#530)
• 8ac39d6 chore: release master (#529)
• bcbcae3 feat: add progressive types (#528)
• e8c3edb chore: bump CI Node versions to 22 and 24 (#524)
• 07fb121 chore: release master (#526)
• 0feec86 feat: allow array-like input for VectorCompositeType views (#525)
• 5ae98cf chore: release master (#522)
• d619c45 fix: update package.json repo links so provenance works (#523)
• 67a26aa chore: bump @​lodestar/spec-test-util to 1.42.0 (#518)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​chainsafe/ssz since your current version.

Updates @commitlint/cli from 19.8.1 to 21.1.0

Release notes

Sourced from @​commitlint/cli's releases.

v21.1.0

21.1.0 (2026-06-23)

Bug Fixes

• fix: remove duplicate es-toolkit@1.47.1 keys from lockfile by @​escapedcat in conventional-changelog/commitlint#4833

Features

• feat(cli): add --default-config flag to lint without a config file by @​escapedcat in conventional-changelog/commitlint#4805
• feat(lint): allow for custom commit parser function by @​esatterwhite in conventional-changelog/commitlint#4829

Docs, chore, etc.

• test(cli): verify --cwd redirects config resolution #997 by @​escapedcat in conventional-changelog/commitlint#4796
• docs: add ai agent support (skill, guide, llms.txt) by @​escapedcat in conventional-changelog/commitlint#4804
• docs: add TDD commit flow and review expectations for contributors by @​escapedcat in conventional-changelog/commitlint#4836

New Contributors

• @​esatterwhite made their first contribution in conventional-changelog/commitlint#4829

Full Changelog: conventional-changelog/commitlint@v21.0.2...v21.1.0

v21.0.2

21.0.2 (2026-05-29)

Bug Fixes

• fix: emit actionable error when --edit cannot find COMMIT_EDITMSG (#589) by @​escapedcat in conventional-changelog/commitlint#4755
• fix: apply oxfmt formatting to get-edit-commit.ts by @​escapedcat in conventional-changelog/commitlint#4768
• fix(read): fail when --from and --to share no merge-base #4555 by @​CervEdin in conventional-changelog/commitlint#4754
• fix: disallow same commit hash for --from and --to by @​knocte in conventional-changelog/commitlint#4773

Chore/CI

• ci: have renovate rebase stale PRs before merging by @​escapedcat in conventional-changelog/commitlint#4782
• chore: have renovate hold PRs for 3 days after release by @​escapedcat in conventional-changelog/commitlint#4788
• chore: anchor vite 8 by @​escapedcat in conventional-changelog/commitlint#4790
• ci: run commitlint once per same-repo PR by @​escapedcat in conventional-changelog/commitlint#4795

... (truncated)

Changelog

Sourced from @​commitlint/cli's changelog.

21.1.0 (2026-06-23)

Features

• cli: add --default-config flag to lint without a config file (#4805) (7af27ba), closes #3662

21.0.2 (2026-05-29)

Bug Fixes

• disallow same commit hash for --from and --to (#4773) (121005e)

21.0.1 (2026-05-12)

Note: Version bump only for package @​commitlint/cli

21.0.0 (2026-05-08)

• chore!: minimum node version v22 (#4679) (ac2b3f4), closes #4679

BREAKING CHANGES

• drop node v18 and v20 support

• Bump engines to >=v22 in all 39 package.json files
• Update @​types/node to ^22.0.0
• Update CI matrix to [22, 24]
• Update Ubuntu baseline job to ubuntu:26.04
• Update Dockerfile.ci, .mise.toml, .codesandbox/ci.json
• Update pre-commit hook to use --ignore-engines
• Update README and docs

Co-authored-by: Claude Opus 4.6 (1M context) noreply@anthropic.com

... (truncated)

Commits

• 6f1c0af v21.1.0
• 7af27ba feat(cli): add --default-config flag to lint without a config file (#4805)
• 51a2d7f test(cli): verify --cwd redirects config resolution (#997) (#4796)
• 8069048 v21.0.2
• 121005e fix: disallow same commit hash for --from and --to (#4773)
• db8d7d6 v21.0.1
• 1329a25 chore: migrate to pnpm (#4762)
• db39968 chore: pre pnpm cleanup (#4759)
• 6099ae5 chore: replace eslint with oxlint (#4756)
• f081a8e v21.0.0
• Additional commits viewable in compare view

Updates @commitlint/config-conventional from 19.8.1 to 21.1.0

Release notes

Sourced from @​commitlint/config-conventional's releases.

v21.1.0

21.1.0 (2026-06-23)

Bug Fixes

• fix: remove duplicate es-toolkit@1.47.1 keys from lockfile by @​escapedcat in conventional-changelog/commitlint#4833

Features

• feat(cli): add --default-config flag to lint without a config file by @​escapedcat in conventional-changelog/commitlint#4805
• feat(lint): allow for custom commit parser function by @​esatterwhite in conventional-changelog/commitlint#4829

Docs, chore, etc.

• test(cli): verify --cwd redirects config resolution #997 by @​escapedcat in conventional-changelog/commitlint#4796
• docs: add ai agent support (skill, guide, llms.txt) by @​escapedcat in conventional-changelog/commitlint#4804
• docs: add TDD commit flow and review expectations for contributors by @​escapedcat in conventional-changelog/commitlint#4836

New Contributors

• @​esatterwhite made their first contribution in conventional-changelog/commitlint#4829

Full Changelog: conventional-changelog/commitlint@v21.0.2...v21.1.0

v21.0.2

21.0.2 (2026-05-29)

Bug Fixes

• fix: emit actionable error when --edit cannot find COMMIT_EDITMSG (#589) by @​escapedcat in conventional-changelog/commitlint#4755
• fix: apply oxfmt formatting to get-edit-commit.ts by