Skip to content

Bump the server-dependencies group across 1 directory with 7 updates #445

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
wants to merge 1 commit into from
Closed

Bump the server-dependencies group across 1 directory with 7 updates #445

wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 24, 2025 •
edited
Loading

Bumps the server-dependencies group with 7 updates in the / directory:

Package From To
@ethereumjs/common 10.0.0 10.1.0
@ethereumjs/tx 10.0.0 10.1.0
@types/node 24.9.1 24.10.1
@types/sinon 17.0.4 21.0.0
chai 6.2.0 6.2.1
mocha 11.7.4 11.7.5
webpack 5.102.1 5.103.0

Updates @ethereumjs/common from 10.0.0 to 10.1.0

Release notes

Sourced from @​ethereumjs/common's releases.

@​ethereumjs/common v10.1.0

  • Improve paramsCache updates, PR #4091
  • Improve nextHardforkBlockOrTimestamp method, PR #4080
  • Remove Verkle package support, PR #4145

EIP-7594 - PeerDAS - Peer Data Availability Sampling

This release adds support for EIP-7594 PeerDAS, which extends EIP-4844 blob transactions with data availability sampling capabilities. The Common library now includes EIP-7594 configuration and activation for the Osaka hardfork, enabling support for PeerDAS blob transactions with cell proofs and network wrapper version 1.

EIP-7823 - Set upper bounds for MODEXP

EIP-7823 support has been added, introducing an upper bound of 8192 bits (1024 bytes) on each input field (base, exponent, modulus) of the MODEXP precompile. The Common library includes the EIP configuration and activation for Osaka, ensuring MODEXP calls exceeding these limits are properly rejected.

EIP-7825 - Transaction Gas Limit Cap

Support for EIP-7825 has been implemented, introducing a protocol-level cap of 16,777,216 gas (2^24) for individual transactions. The Common library includes the EIP configuration and activation for Osaka, enabling transaction validation against this gas limit cap.

EIP-7883 - ModExp Gas Cost Increase

EIP-7883 support has been added, which increases the gas cost of the MODEXP precompile. The Common library includes the EIP configuration and activation for Osaka, ensuring MODEXP operations use the updated pricing algorithm with increased minimum gas cost and adjusted complexity calculations.

EIP-7918 - Blob base fee bounded by execution cost

EIP-7918 support has been implemented, which imposes that the price of GAS_PER_BLOB blob gas is greater than the price of BLOB_BASE_COST execution gas. The Common library includes the EIP configuration and activation for Osaka, ensuring proper blob fee market functionality.

EIP-7934 - RLP Execution Block Size Limit

Support for EIP-7934 has been added, introducing a protocol-level cap on the maximum RLP-encoded block size to 10 MiB (with a 2 MiB margin for beacon block size). The Common library includes the EIP configuration and activation for Osaka, enabling block size validation.

EIP-7939 - Count leading zeros (CLZ) opcode

EIP-7939 support has been implemented, adding a new opcode CLZ (0x1e) that counts the number of leading zero bits in a 256-bit word. The Common library includes the EIP configuration and activation for Osaka, enabling the use of the CLZ opcode in EVM execution.

EIP-7951 - Precompile for secp256r1 Curve Support

EIP-7951 support has been added, introducing a new precompile at address 0x100 (P256VERIFY) for ECDSA signature verification over the secp256r1 curve. The Common library includes the EIP configuration and activation for Osaka, enabling native support for secp256r1 signatures from modern secure hardware devices.

EIP-7892 - Blob Parameter Only Hardforks

Support for Blob Parameter Only (BPO) hardforks has been implemented according to EIP-7892. BPO hardforks are lightweight protocol upgrades that modify only blob-related parameters (target, max, and blobGasPriceUpdateFraction) without requiring code changes, enabling rapid scaling of blob capacity in response to network demand.

Two BPO hardforks are scheduled alongside Fusaka:

  • BPO 1: Increases blob target to 10 and max to 15 blobs per block
  • BPO 2: Further increases blob target to 14 and max to 21 blobs per block

The Common library now includes BPO hardfork definitions and activation timestamps for testnets (Holešky, Sepolia, Hoodi). The getBlobGasSchedule() method returns the appropriate blob gas schedule parameters based on the active hardfork, automatically handling BPO transitions.

import { Common, Hardfork, Mainnet } from @ethereumjs/common
</tr></table>

... (truncated)

Commits

Updates @ethereumjs/tx from 10.0.0 to 10.1.0

Release notes

Sourced from @​ethereumjs/tx's releases.

@​ethereumjs/tx v10.1.0

  • tx: throw on toCreationAddress for 4844 and 7702, PR #4162
  • tx: improve JSDoc annotations, PR #4161
  • 4844 Tx Constructor Consistency and UX, PR #4155
  • valueBoundaryCheck chores, PR #4083
  • updates regarding blobtx serialization, PR #4065

EIP-7594 - PeerDAS - Peer Data Availability Sampling

Support for EIP-7594 PeerDAS blob transactions has been added. This extends EIP-4844 blob transactions with data availability sampling capabilities. PeerDAS transactions use network wrapper version 1 and include cell proofs instead of blob proofs. The transaction library now supports creating and validating PeerDAS transactions with a maximum of 6 blobs per transaction.

import { Blob4844Tx } from @ethereumjs/tx
import { Common, Hardfork } from @ethereumjs/common
import { hexToBytes } from @ethereumjs/util
const common = new Common({ chain: mainnet, hardfork: Hardfork.Osaka })
// Create a PeerDAS blob transaction (network wrapper version 1)
const tx = Blob4844Tx.fromTxData({
chainId: common.chainId(),
nonce: 0n,
maxFeePerGas: 1000000000n,
maxPriorityFeePerGas: 1000000000n,
maxFeePerBlobGas: 1000000000n,
gasLimit: 100000n,
to: 0x...,
value: 0n,
blobVersionedHashes: [0x...],
blobs: [0x...], // Blob data
kzgCommitments: [0x...],
kzgProofs: [0x...], // Cell proofs for PeerDAS
networkWrapperVersion: 1 // EIP-7594
}, { common })

EIP-7825 - Transaction Gas Limit Cap

EIP-7825 support has been implemented, introducing a protocol-level cap of 16,777,216 gas (2^24) for individual transactions. The transaction library now validates that transaction gas limits do not exceed this cap. Transactions with gas limits above the cap will be rejected during construction.

import { LegacyTx } from @ethereumjs/tx
import { Common, Hardfork } from @ethereumjs/common
const common = new Common({ chain: mainnet, hardfork: Hardfork.Osaka })
// Transaction with gas limit exceeding 16,777,216 will throw an error
try {
const tx = LegacyTx.fromTxData({
gasLimit: 20000000n, // Exceeds EIP-7825 cap
</tr></table>

... (truncated)

Commits

Updates @types/node from 24.9.1 to 24.10.1

Commits

Updates @types/sinon from 17.0.4 to 21.0.0

Commits

Updates chai from 6.2.0 to 6.2.1

Release notes

Sourced from chai's releases.

v6.2.1

What's Changed

New Contributors

Full Changelog: chaijs/chai@v6.2.0...v6.2.1

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for chai since your current version.


Updates mocha from 11.7.4 to 11.7.5

Release notes

Sourced from mocha's releases.

v11.7.5

11.7.5 (2025-11-04)

🩹 Fixes

  • swallow more require errors from *ts files (#5498) (d89dbaf)

🧹 Chores

Changelog

Sourced from mocha's changelog.

11.7.5 (2025-11-04)

🩹 Fixes

  • swallow more require errors from *ts files (#5498) (d89dbaf)

🧹 Chores

Commits

Updates webpack from 5.102.1 to 5.103.0

Release notes

Sourced from webpack's releases.

v5.103.0

Features

  • Added DotenvPlugin and top level dotenv option to enable this plugin
  • Added WebpackManifestPlugin
  • Added support the ignoreList option in devtool plugins
  • Allow to use custom javascript parse function
  • Added import.meta.env support for environment variables
  • Added support for import.meta.dirname and import.meta.filename
  • Added support import.defer() for statistical path
  • Handle import.meta.main
  • Added suport to setup named exports for JSON modules and disable usage named export for import file from "./file.json" with { type: "json" }
  • Added support __dirname/__filename/import.meta.dirname/import.meta.filename for universal target
  • [CSS] Added the exportType option with link (by default), "text" and css-style-sheet values
  • [CSS] Added support for composes properties

Fixes

  • The dependOn chunk must be loaded before the common chunk
  • Return to namespace import when the external request includes a specific export
  • No runtime extra runtime code for module libraries
  • Delay HMR accept dependencies to preserve import attributes
  • Properly handle external presets for universal target
  • Fixed incorrect identifier of import binding for module externals
  • Fixed when defer import and dynamic default export mixed
  • Reduce generated output when globalThis supported
  • Fixed loading async modules in defer import
  • Reexport module for default import when no used exports for systemjs library
  • Rename HarmonyExportDependencyParserPlugin exported id to CompatibilityPlugin tagged id
  • Handle __dirname and __filename for ES modules
  • Rename single nested __webpack_export__ and __webpack_require__ in already bundled code
  • [Types] webpack function type
  • [Types] NormalModule type
  • [Types] Multi compiler configuration type
  • [Types] Fixed regression in custom hashDigest type
  • [CSS] No extra runtime for initial chunk
  • [CSS] Fixed a lot of CSS modules bugs
Commits
  • e021948 chore(release): 5.103.0
  • 1dc6967 chore(deps): bump actions/checkout from 5.0.0 to 5.0.1 (#20130)
  • 077417f fix(css): many css modules bugs (#20129)
  • 7722518 chore: fix script (#20128)
  • 688a7f9 test: no runtime requirements for module library (#20127)
  • 04fe5a1 refactor: pkg.pr.new publish (#20093)
  • 27c05c7 fix: return to namespace import when the external request includes a specific...
  • 067cc60 refactor: no runtime requirements for module library (#20096)
  • d4208ba fix: delay HMR accept dependencies to preserve import attributes (#20124)
  • 102e1a4 feat(css): added css-style-sheet to exportType for CSSStyleSheet return (#20104)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the server-dependencies group across 1 directory with 7 updates
5f9678a 
Bumps the server-dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@ethereumjs/common](https://github.com/ethereumjs/ethereumjs-monorepo) | `10.0.0` | `10.1.0` |
| [@ethereumjs/tx](https://github.com/ethereumjs/ethereumjs-monorepo) | `10.0.0` | `10.1.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.9.1` | `24.10.1` |
| [@types/sinon](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/sinon) | `17.0.4` | `21.0.0` |
| [chai](https://github.com/chaijs/chai) | `6.2.0` | `6.2.1` |
| [mocha](https://github.com/mochajs/mocha) | `11.7.4` | `11.7.5` |
| [webpack](https://github.com/webpack/webpack) | `5.102.1` | `5.103.0` |



Updates `@ethereumjs/common` from 10.0.0 to 10.1.0
- [Release notes](https://github.com/ethereumjs/ethereumjs-monorepo/releases)
- [Commits](https://github.com/ethereumjs/ethereumjs-monorepo/compare/@ethereumjs/[email protected]...@ethereumjs/[email protected])

Updates `@ethereumjs/tx` from 10.0.0 to 10.1.0
- [Release notes](https://github.com/ethereumjs/ethereumjs-monorepo/releases)
- [Commits](https://github.com/ethereumjs/ethereumjs-monorepo/compare/@ethereumjs/[email protected]...@ethereumjs/[email protected])

Updates `@types/node` from 24.9.1 to 24.10.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/sinon` from 17.0.4 to 21.0.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/sinon)

Updates `chai` from 6.2.0 to 6.2.1
- [Release notes](https://github.com/chaijs/chai/releases)
- [Changelog](https://github.com/chaijs/chai/blob/main/History.md)
- [Commits](chaijs/chai@v6.2.0...v6.2.1)

Updates `mocha` from 11.7.4 to 11.7.5
- [Release notes](https://github.com/mochajs/mocha/releases)
- [Changelog](https://github.com/mochajs/mocha/blob/v11.7.5/CHANGELOG.md)
- [Commits](mochajs/mocha@v11.7.4...v11.7.5)

Updates `webpack` from 5.102.1 to 5.103.0
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v5.102.1...v5.103.0)

---
updated-dependencies:
- dependency-name: "@ethereumjs/common"
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-dependencies
- dependency-name: "@ethereumjs/tx"
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-dependencies
- dependency-name: "@types/node"
  dependency-version: 24.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-dependencies
- dependency-name: "@types/sinon"
  dependency-version: 21.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: server-dependencies
- dependency-name: chai
  dependency-version: 6.2.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: server-dependencies
- dependency-name: mocha
  dependency-version: 11.7.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: server-dependencies
- dependency-name: webpack
  dependency-version: 5.103.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: server-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 24, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 1, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Dec 1, 2025
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/server-dependencies-5e6f585d18 branch December 1, 2025 20:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant