Skip to content

Bump the npm_and_yarn group across 2 directories with 12 updates - #18

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm_and_yarn-bba6b12840
Open

Bump the npm_and_yarn group across 2 directories with 12 updates#18
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm_and_yarn-bba6b12840

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 16, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm_and_yarn group with 1 update in the / directory: bn.js.
Bumps the npm_and_yarn group with 1 update in the /client directory: js-yaml.

Updates bn.js from 4.11.6 to 5.2.3

Release notes

Sourced from bn.js's releases.

v5.2.1

  • fix: serious issue in .toString(16) (#295)

v5.2.0

  • fix: Buffer not using global in browser (#260)
  • fix: LE constructor for HEX (#265)

v5.1.3

  • Add support for defined but not implemented Symbol.for (#252)

v5.1.2

  • Fix BN v5/v4 interoperability issue (#249)

v5.1.1

  • Temporary workaround for BN#_move (#236)
  • Add eslintrc instead config in package.json (#237)

v5.1.0

  • Benchmark for BigInt (#226)
  • Add documentation for max/min (#232)
  • Update BN#inspect for Symbols (#225)
  • Improve performance of toArrayLike (#222)
  • temporary disable jumboMulTo in BN#mulTo (#221)
  • optimize toBitArray function (#212)
  • fix iaddn sign issue (#216)

v5.0.0

  • travis: update node versions (#205)
  • Refactor buffer constructor (#200)
  • lib: fix for negative numbers: imuln, modrn, idivn (#185)
  • bn: fix Red#imod (#178)
  • check unexpected high bits for invalid characters (#173)
  • document support very large integers (#158)
  • only define toBuffer if Buffer is defined (#172)
  • lib: better validation of string input (#151)
  • tests: reject decimal input in constructor (#91)
  • bn: make .strip() an internal method (#105)
  • lib: deprecate .modn() introduce .modrn() (#112 #129 #130)
  • bn: don't accept invalid characters (#141)
  • package: use files insteadof .npmignore (#152)
  • bn: improve allocation speed for buffers (#167)
  • toJSON to default to interoperable hex (length % 2) (#164)
Changelog

Sourced from bn.js's changelog.

5.2.3 / 2026-02-19

  • fix: imaskn state (#317)

5.2.2 / 2025-04-25

  • fix: imuln/muln with zero (#313)

5.2.1 / 2022-02-23

  • fix: serious issue in .toString(16) (#295)

5.2.0 / 2021-02-23

  • fix: Buffer not using global in browser (#260)
  • Fix LE constructor for HEX (#265)

5.1.3 / 2020-08-14

  • Add support for defined but not implemented Symbol.for (#252)

5.1.2 / 2020-05-20

  • Fix BN v5/v4 interoperability issue (#249)

5.1.1 / 2019-12-24

  • Temporary workaround for BN#_move (#236)
  • Add eslintrc instead config in package.json (#237)

5.1.0 / 2019-12-23

  • Benchmark for BigInt (#226)
  • Add documentation for max/min (#232)
  • Update BN#inspect for Symbols (#225)
  • Improve performance of toArrayLike (#222)
  • temporary disable jumboMulTo in BN#mulTo (#221)
  • optimize toBitArray function (#212)
  • fix iaddn sign issue (#216)

5.0.0 / 2019-07-04

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by fanatid, a new releaser for bn.js since your current version.


Updates diff from 4.0.2 to 5.0.0

Changelog

Sourced from diff's changelog.

v5.0.0

  • Breaking: UMD export renamed from JsDiff to Diff.
  • Breaking: Newlines separated into separate tokens for word diff.
  • Breaking: Unified diffs now match "quirks"

Commits

v4.0.4 - January 2026

Only change from 4.0.2 is a backport of the fix to GHSA-73rr-hh4g-fpgx.

v4.0.3 (deprecated)

Accidental release - do not use.

Commits

Updates elliptic from 6.6.1 to 6.5.4

Commits

Updates got from 9.6.0 to 11.8.6

Release notes

Sourced from got's releases.

v11.8.6

  • Destroy request object after successful response

sindresorhus/got@v11.8.5...v11.8.6

v11.8.5

sindresorhus/got@v11.8.4...v11.8.5

v11.8.3

  • Bump cacheable-request dependency (#1921) 9463bb6
  • Fix HTTPError missing .code property (#1739) 0e167b8

sindresorhus/got@v11.8.2...v11.8.3

v11.8.2

  • Make the dnsCache option lazy (#1529) 3bd245f This slightly improves Got startup performance and fixes an issue with Jest.

sindresorhus/got@v11.8.1...v11.8.2

v11.8.1

  • Do not throw on custom stack traces (#1491) 4c815c3a609eb74d0eb139414d9996b4f65dc3c0

v11.8.0

  • Fix for sending files with size 0 on stat (#1488) 7acd380
  • beforeRetry allows stream body if different from original (#1501) 3dd2273
  • Set default value for an options object (#1495) 390b145

sindresorhus/got@v11.7.0...v11.8.0

v11.7.0

Improvements

  • Add pfx HTTPS option (#1364) c33df7f
  • Update body after beforeRequest (#1453) e1c1844
  • Don't allocate buffer twice (#1403) 7bc69d9

Fixes

  • Fix a regression where body was sent after redirect 88b32ea
  • Fix destructure error on promise.json() c97ce7c
  • Do not ignore userinfo on a redirect to the same origin 52de13b

sindresorhus/got@v11.6.2...v11.7.0

v11.6.2

Bug fixes

... (truncated)

Commits
Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates js-yaml from 3.14.0 to 4.1.0

Changelog

Sourced from js-yaml's changelog.

[4.2.0] - 2026-06-01

Added

  • Added docs/safety.md with notes about processing untrusted YAML.
  • Added maxDepth (100) loader option. Not a problem, but gives a better exception instead of RangeError on stack overflow.
  • Added maxMergeSeqLength (20) loader option. Not a problem after merge fix, but an additional restriction for safety.
  • Added sourcemaps to dist/ builds.

Changed

  • Stop resolving numbers with underscores as numeric scalars, #627.
  • Switched dev toolchains to Vite / neostandard.
  • Updated demo.
  • Reorganized tests.
  • dist/ files are no longer kept in the repository.

Fixed

  • Fix parsing of properties on the first implicit block mapping key, #62.
  • Fix trailing whitespace handling when folding flow scalar lines, #307.
  • Reject top-level block scalars without content indentation, #280.
  • Ensure numbers survive round-trip, #737.
  • Fix test coverage for issue #221.
  • Fix flow scalar trailing whitespace folding, #307.
  • Fix digits in YAML named tag handles.

Security

  • Fix potential DoS via quadratic complexity in merge - deduplicate repeated elements (makes sense for malformed files > 10K).

[3.14.2] - 2025-11-15

Security

  • Backported v4.1.1 fix to v3
Commits

Updates minimatch from 3.0.4 to 3.1.5

Commits

Updates nanoid from 2.1.11 to 3.3.3

Release notes

Sourced from nanoid's releases.

3.0 Migration Guide

Nano ID 3.0 is the biggest release in the project history. Unfortunately, you will need to change the code of your application. But the changes are very small in most cases. In return, you will have better performance, smaller size, ES modules and TypeScript support.

Known Issues

  • Only Create React App 4.0 supports dual ESM/CJS modules.

Simple Case

In simple cases, you just need to change default import to named import.

- import nanoid from 'nanoid'
+ import { nanoid } from 'nanoid'
nanoid() //=> "sSAi9F8yakJZPxOCr_WFb"
nanoid(5) //=> "ISe9l"

If you support IE, you need to transpile node_modules by Babel.

Non-secure and asynchronous Nano ID need only import changes as well.

- import nanoid from 'nanoid/non-secure'
+ import { nanoid } from 'nanoid/non-secure'
nanoid() //=> "sSAi9F8yakJZPxOCr_WFb"

- import nanoid from 'nanoid/async'
+ import { nanoid } from 'nanoid/async'
nanoid().then(id => {
id //=> "sSAi9F8yakJZPxOCr_WFb"
})

TypeScript

Remove @types/nanoid if you have it. Nano ID now have built-in types.

npm uninstall @types/nanoid

React Native

For Expo you need to load the file by direct path:

... (truncated)

Changelog

Sourced from nanoid's changelog.

3.3.3

  • Reduced size (by Anton Khlynovskiy).

3.3.2

  • Fixed enhanced-resolve support.

3.3.1

  • Reduced package size.

3.3

  • Added size argument to function from customAlphabet (by Stefan Sundin).

3.2

  • Added --size and --alphabet arguments to binary (by Vitaly Baev).

3.1.32

  • Reduced async exports size (by Artyom Arutyunyan).
  • Moved from Jest to uvu (by Vitaly Baev).

3.1.31

  • Fixed collision vulnerability on object in size (by Artyom Arutyunyan).

3.1.30

  • Reduced size for project with brotli compression (by Anton Khlynovskiy).

3.1.29

  • Reduced npm package size.

3.1.28

  • Reduced npm package size.

3.1.27

  • Cleaned dependencies from development tools.

3.1.26

  • Improved performance (by Eitan Har-Shoshanim).
  • Reduced npm package size.

... (truncated)

Commits

Updates uuid from 3.2.1 to 2.0.1

Changelog

Sourced from uuid's changelog.

Change Log

14.0.0 (2026-04-19)

Security

  • Fixes GHSA-w5hq-g745-h8pq: v3(), v5(), and v6() did not validate that writes would remain within the bounds of a caller-supplied buffer, allowing out-of-bounds writes when an invalid offset was provided. A RangeError is now thrown if offset < 0 or offset + 16 > buf.length.

⚠ BREAKING CHANGES

  • crypto is now expected to be globally defined (requires node@20+) (#935)
  • drop node@18 support (#934)
  • upgrade minimum supported TypeScript version to 5.4.3, in keeping with the project's policy of supporting TypeScript versions released within the last two years

13.0.0 (2025-09-08)

⚠ BREAKING CHANGES

  • make browser exports the default (#901)

Bug Fixes

12.0.0 (2025-09-05)

⚠ BREAKING CHANGES

  • update to typescript@5.2 (#887)
  • remove CommonJS support (#886)
  • drop node@16 support (#883)

Features

Bug Fixes

11.1.0 (2025-02-19)

... (truncated)

Commits

Updates serialize-javascript from 4.0.0 to 6.0.0

Release notes

Sourced from serialize-javascript's releases.

v6.0.0

Changelog

  • Add support for URL's (#123)
  • Bump mocha from 9.0.0 to 9.0.1 (#124)
  • Bump mocha from 8.4.0 to 9.0.0 (#121)
  • Update Node.js CI matrix (#122)
  • Bump mocha from 8.3.2 to 8.4.0 (#120)
  • Bump lodash from 4.17.19 to 4.17.21 (#119)
  • Bump y18n from 4.0.0 to 4.0.1 (#116)
  • Bump chai from 4.3.3 to 4.3.4 (#115)
  • Bump mocha from 8.3.1 to 8.3.2 (#114)
  • Bump mocha from 8.3.0 to 8.3.1 (#113)
  • Bump chai from 4.3.1 to 4.3.3 (#112)
  • Bump chai from 4.2.0 to 4.3.1 (#111)
  • Bump mocha from 8.2.1 to 8.3.0 (#109)
  • Bump mocha from 8.1.3 to 8.2.1 (#105)
  • Drop Travis CI settings (#100)
  • Change default branch name to main (#99)
  • GitHub Aactions (#98)

Behavior changes for URL objects

It serializes URL objects as follows since this version. The result of serialization may be changed if you are passing URL object values into the serialize-javascript.

const serialize = require("serialize-javascript");
serialize({u: new URL("http://example.com/&quot;)}); // '{"u":new URL("http://example.com/&quot;)}'

Thank you @​rrdelaney for this release.

v5.0.1

Changelog

  • Exclude .vscode and .github directories from package (#97)

v5.0.0

Changelog

  • Bump mocha from 8.1.2 to 8.1.3 (#96)
  • Support sparse arrays (#95)
  • Bump mocha from 8.1.1 to 8.1.2 (#94)
  • Bump mocha from 8.1.0 to 8.1.1 (#92)
  • Create Dependabot config file (#91)
  • Bump mocha from 8.0.1 to 8.1.0 (#90)
  • Bump lodash from 4.17.15 to 4.17.19 (#89)
  • Bump mocha from 7.2.0 to 8.0.1 (#88)

Behavior changes for sparse arrays

... (truncated)

Commits

Updates web3 from 1.3.6 to 1.10.0

Release notes

Sourced from web3's releases.

web3-eth@4.0.0-alpha.0

Initial alpha release

Install with yarn add web3-eth@4.0.0-alpha.0

web3-core-requestmanager@4.0.0-alpha.0

Initial alpha release

Install with yarn add web3-core-requestmanager@4.0.0-alpha.0

web3-providers-http@4.0.0-alpha.0

Initial alpha release

Install with yarn add web3-providers-http@4.0.0-alpha.0

web3-providers-base@1.0.0-alpha.1

Changed

  • Update version to 1.0.0-alpha.1 for web3-providers-base
  • Update version to 4.0.0-alpha.0 for web3-utils in web3-providers-base

web3-utils@4.0.0-alpha.0

Initial alpha release

Install with yarn add web3-utils@4.0.0-alpha.0

web3-packagetemplate@1.0.0-alpha.0

Initial alpha release

Install with yarn add web3-packagetemplate@1.0.0-alpha.0

Changelog

Sourced from web3's changelog.

[1.3.6]

Changes

  • Bump underscore package from 1.9.1 to 1.12.1 (#4051)
  • Bump @ensdomains/ens package from ^0.4.5 to ^0.6.0 (#4059)
  • Bump ethers package from ^5.0.18 to ^5.1.4 (#4059)

Removes

  • Accidental commit (yarn-error.log) (#4062)

[1.4.0]

Added

  • Berlin Transaction Support (#4083)
  • When signing a transaction, common object now defaults to berlin instead of petersburg

Changed

  • Changed Geth Docker verision from stable to 1.10.3 in e2e.geth.instamine.sh and scripts/e2e.geth.automine.sh (#4154)

[1.4.1]

Removes

  • Removing the underscore package

[1.5.0]

Added

  • London transaction support (#4155)
  • RPC support eth_feehistory call (#4191)
  • Add toNumber method to web3.utils (#4191)

Changed

  • Grammar fix (#4088) and updated Swarm (#4151)and Whisper doc links (#4170)
  • Removed deprecation notice for HttpProvider (#4008)
  • Nonce added to send options in documentation and types (#4052)
  • Updated Solidity example to modern syntax (#4147)
  • Changing web3 connection example from lets to const (#3967)
  • Updated the documentation for the transaction object to include EIP-2718 and EIP-1559 options (#4188)

[1.5.1]

Added

  • maxPriorityFeePerGas and maxFeePerGas now included in _txInputFormatter (#4217)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by jdevcs, a new releaser for web3 since your current version.

Install script changes

This version modifies postinstall script that runs during installation. Review the package contents before updating.


Updates web3-core-method from 1.3.6 to 1.10.0

Release notes

Sourced from web3-core-method's releases.

v1.10.0

Fixed

  • Improved the error propagation in web3-providers-http package to effectively propagate useful error infomation about failed HTTP connections (#5955)
  • Fixed "Uncaught TypeError" calling a contract function that revert using MetaMask (#4454) and related "n.data.substring is not a function", that is raised when there is a revert and web.eth.handleRevert = true (#6000)

Changed

  • transaction.type is now formatted to a hex string before being send to provider (#5979)
  • When sending a transaction, if transaction.type === '0x1' && transaction.accessList === undefined, then transaction.accessList is set to [] (#5979)
  • Removed an unnecessary chainId parameter from toChecksumAddress() function types (#5888)

Added

  • Added support for getPastEvents method to filter allEvents and specific event (#6015)

Security

  • Updated dependencies (#6044)

v1.10.0-rc.0

Fixed

  • Improved the error propagation in web3-providers-http package to effectively propagate useful error infomation about failed HTTP connections (#5955)
  • Fixed "Uncaught TypeError" calling a contract function that revert using MetaMask (#4454) and related "n.data.substring is not a function", that is raised when there is a revert and web.eth.handleRevert = true (#6000)

Changed

  • transaction.type is now formatted to a hex string before being send to provider (#5979)
  • When sending a transaction, if transaction.type === '0x1' && transaction.accessList === undefined, then transaction.accessList is set to [] (#5979)
  • Removed an unnecessary chainId parameter from toChecksumAddress() function types (#5888)

Added

  • Added support for getPastEvents method to filter allEvents and specific event (#6015)

Security

  • Updated dependencies (#6044)

v1.9.0

Fixed

  • Fixed skipped ws-ganache tests (#5759)
  • Fixed "provider started to reconnect error" in web3-provider-ws (#5820)
  • Fixed Error: Number can only safely store up to 53 bits (#5845)
  • Fixed types for packages which have default exports but not declared default export in .d.ts (#5866)
  • Fixed Transaction type by adding missing properties (#5856)

Changed

  • Add optional hexFormat param to getTransaction and getBlock that accepts the value 'hex' (#5845)
  • utils.toNumber and utils.hexToNumber can now return the large unsafe numbers as BigInt, if true was passed to a new optional parameter called bigIntOnOverflow (#5845)
  • Updated @​types/bn.js dependency to 5.1.1 in web3, web3-core and web3-eth-contract as reason mentioned in #5640 (#5885)
  • Add description to error for failed connection on websocket (#5884)

... (truncated)

Changelog

Sourced from web3-core-method's changelog.

[1.3.6]

Changes

  • Bump underscore package from 1.9.1 to 1.12.1 (#4051)
  • Bump @ensdomains/ens package from ^0.4.5 to ^0.6.0 (#4059)
  • Bump ethers package from ^5.0.18 to ^5.1.4 (#4059)

Removes

  • Accidental commit (yarn-error.log) (#4062)

[1.4.0]

Added

  • Berlin Transaction Support (#4083)
  • When signing a transaction, common object now defaults to berlin instead of petersburg

Changed

  • Changed Geth Docker verision from stable to 1.10.3 in e2e.geth.instamine.sh and scripts/e2e.geth.automine.sh (#4154)

[1.4.1]

Removes

  • Removing the underscore package

[1.5.0]

Added

  • London transaction support (#4155)
  • RPC support eth_feehistory call (#4191)
  • Add toNumber method to web3.utils (#4191)

Changed

  • Grammar fix (#4088) and updated Swarm (#4151)and Whisper doc links (#4170)
  • Removed deprecation notice for HttpProvider (#4008)
  • Nonce added to send options in documentation and types (#4052)
  • Updated Solidity example to modern syntax (#4147)
  • Changing web3 connection example from lets to const (#3967)
  • Updated the documentation for the transaction object to include EIP-2718 and EIP-1559 options (#4188)

[1.5.1]

Added

  • maxPriorityFeePerGas and maxFeePerGas now included in _txInputFormatter (#4217)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by jdevcs, a new releaser for web3-core-method since your current version.


Updates web3-core-subscriptions from 1.3.6 to 1.10.0

Release notes

Sourced from web3-core-subscriptions's releases.

v1.10.0

Fixed

  • Improved the error propagation in web3-providers-http package to effectively propagate useful error infomation about failed HTTP connections (#5955)
  • Fixed "Uncaught TypeError" calling a contract function that revert using MetaMask (#4454) and related "n.data.substring is not a function", that is raised when there is a revert and web.eth.handleRevert = true (#6000)

Changed

  • transaction.type is now formatted to a hex string before being send to provider (#5979)
  • When sending a transaction, if transaction.type === '0x1' && transaction.accessList === undefined, then transaction.accessList is set to [] (#5979)
  • Removed an unnecessary chainId parameter from toChecksumAddress() function types (#5888)

Added

  • Added support for getPastEvents method to filter allEvents and specific event (#6015)

Security

  • Updated dependencies (#6044)

v1.10.0-rc.0

Fixed

  • Improved the error propagation in web3-providers-http package to effectively propagate useful error infomation about failed HTTP connections (#5955)
  • Fixed "Uncaught TypeError" calling a contract function that revert using MetaMask (#4454) and related "n.data.substring is not a function", that is raised when there is a revert and web.eth.handleRevert = true (#6000)

Changed

  • transaction.type is now formatted to a hex string before being send to provider (#5979)
  • When sending a transaction, if transaction.type === '0x1' && transaction.accessList === undefined, then transaction.accessList is set to [] (#5979)
  • Removed an unnecessary chainId parameter from toChecksumAddress() function types (#5888)

Added

  • Added support for getPastEvents method to filter allEvents and specific event (#6015)

Security

  • Updated dependencies (#6044)

v1.9.0

Fixed

  • Fixed skipped ws-ganache tests (#5759)
  • Fixed "provider started to reconnect error" in web3-provider-ws (#5820)
  • Fixed Error: Number can only safely store up to 53 bits (#5845)
  • Fixed types for packages which have default exports but not declared default export in .d.ts (#5866)
  • Fixed Transaction type by adding missing properties (#5856)

Changed

  • Add optional hexFormat param to getTransaction and getBlock that accepts the value 'hex' (#5845)
  • utils.toNumber and utils.hexToNumber can now return the large unsafe numbers as BigInt, if true was passed to a new optional parameter called bigIntOnOverflow (

@dependabot
Bump the npm_and_yarn group across 2 directories with 12 updates
c9282b6 
Bumps the npm_and_yarn group with 1 update in the / directory: [bn.js](https://github.com/indutny/bn.js).
Bumps the npm_and_yarn group with 1 update in the /client directory: [js-yaml](https://github.com/nodeca/js-yaml).


Updates `bn.js` from 4.11.6 to 5.2.3
- [Release notes](https://github.com/indutny/bn.js/releases)
- [Changelog](https://github.com/indutny/bn.js/blob/master/CHANGELOG.md)
- [Commits](indutny/bn.js@v4.11.6...v5.2.3)

Updates `diff` from 4.0.2 to 5.0.0
- [Changelog](https://github.com/kpdecker/jsdiff/blob/master/release-notes.md)
- [Commits](kpdecker/jsdiff@v4.0.2...v5.0.0)

Updates `elliptic` from 6.6.1 to 6.5.4
- [Commits](indutny/elliptic@v6.6.1...v6.5.4)

Updates `got` from 9.6.0 to 11.8.6
- [Release notes](https://github.com/sindresorhus/got/releases)
- [Commits](sindresorhus/got@v9.6.0...v11.8.6)

Updates `js-yaml` from 3.14.0 to 4.1.0
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/commits)

Updates `minimatch` from 3.0.4 to 3.1.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.0.4...v3.1.5)

Updates `nanoid` from 2.1.11 to 3.3.3
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@2.1.11...3.3.3)

Updates `uuid` from 3.2.1 to 2.0.1
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](uuidjs/uuid@v3.2.1...v2.0.1)

Updates `serialize-javascript` from 4.0.0 to 6.0.0
- [Release notes](https://github.com/yahoo/serialize-javascript/releases)
- [Commits](yahoo/serialize-javascript@v4.0.0...v6.0.0)

Updates `web3` from 1.3.6 to 1.10.0
- [Release notes](https://github.com/ChainSafe/web3.js/releases)
- [Changelog](https://github.com/web3/web3.js/blob/v1.10.0/CHANGELOG.md)
- [Commits](web3/web3.js@v1.3.6...v1.10.0)

Updates `web3-core-method` from 1.3.6 to 1.10.0
- [Release notes](https://github.com/ethereum/web3.js/releases)
- [Changelog](https://github.com/web3/web3.js/blob/v1.10.0/CHANGELOG.md)
- [Commits](web3/web3.js@v1.3.6...v1.10.0)

Updates `web3-core-subscriptions` from 1.3.6 to 1.10.0
- [Release notes](https://github.com/ethereum/web3.js/releases)
- [Changelog](https://github.com/web3/web3.js/blob/v1.10.0/CHANGELOG.md)
- [Commits](web3/web3.js@v1.3.6...v1.10.0)

Updates `js-yaml` from 4.1.1 to 4.2.0
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/commits)

---
updated-dependencies:
- dependency-name: bn.js
  dependency-version: 5.2.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: diff
  dependency-version: 5.0.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: elliptic
  dependency-version: 6.5.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: got
  dependency-version: 11.8.6
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: js-yaml
  dependency-version: 4.1.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: minimatch
  dependency-version: 3.1.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: nanoid
  dependency-version: 3.3.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: uuid
  dependency-version: 2.0.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: serialize-javascript
  dependency-version: 6.0.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: web3
  dependency-version: 1.10.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: web3-core-method
  dependency-version: 1.10.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: web3-core-subscriptions
  dependency-version: 1.10.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: js-yaml
  dependency-version: 4.2.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 16, 2026
@dependabot dependabot Bot mentioned this pull request Jun 16, 2026
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants