Skip to content

chore(deps): bump js-yaml and hardhat - #12

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-5753ba5ae9
Open

chore(deps): bump js-yaml and hardhat#12
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-5753ba5ae9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 21, 2026

Copy link
Copy Markdown

Removes js-yaml. It's no longer used after updating ancestor dependency hardhat. These dependencies need to be updated together.

Removes js-yaml

Updates hardhat from 2.22.3 to 3.11.0

Release notes

Sourced from hardhat's releases.

Hardhat v3.11.0

This release adds two further EIPs to Hardhat's experimental Amsterdam support: EIP-7778: block gas accounting without refunds and EIP-7928: Block-Level Access Lists. See our Amsterdam support reference for full details of how these work within Hardhat.

Changes

  • #8447 dff401d Thanks @​kanej! - Added experimental EIP-7778 support to the Amsterdam hardfork: a block's gasUsed excludes gas refunds; transaction receipts are unchanged.

  • #8447 dff401d Thanks @​kanej! - Added experimental EIP-7928 support to the Amsterdam hardfork: blocks on Amsterdam now include the blockAccessListHash header field. The value is simulated, not the real keccak256(rlp(blockAccessList)).

  • #8447 dff401d Thanks @​kanej! - Fixed JSON-RPC provider call traces omitting event logs (NomicFoundation/edr#1542)


💡 The Nomic Foundation is hiring! Check our open positions.


Hardhat v3.10.0

This release adds initial experimental support for the upcoming Amsterdam hardfork, to aid your testing. We are beginning with EIP-7708: ETH transfers emit a log, and will incrementally add further EIPs before the Amsterdam mainnet activation. See our Amsterdam support reference for full details.

Changes

  • #8431 39c93e4 Thanks @​anaPerezGhiglia! - Add support for the new experimental amsterdam L1 hardfork, which currently implements EIP-7708 (ETH transfers emit logs).

  • #8421 1ab0408 Thanks @​BROCCOLO1D! - Fix SolidityBuildSystem#compileBuildInfo so build infos produced by non-solc compiler types are replayed through the Solidity compiler hooks.

  • #8414 6ba2bf3 Thanks @​goutamadwant! - Fixed Solidity tests failing to run in projects with very large compilation outputs.

  • #8438 d8d2eb7 Thanks @​kanej! - Fixed the hardhat node task so the --chain-id, --fork, and --fork-block-number CLI options are applied to the network again.

  • #8417 eb4826a Thanks @​ChristopherDedominici! - Fix a bug where the EIP-712 collector throws for a struct of the same name in a source file the user didn't include.

  • #8443 b5674ea Thanks @​Kropiunig! - Fixed the HD wallet derivation-path validator so malformed paths containing stray colons (e.g. m:/44'/60'/0'/0) are rejected with the INVALID_HD_PATH error.

  • #8411 5eb4f0e Thanks @​BROCCOLO1D! - Support Solidity test memoryLimit and fuzz/invariant timeout config options.

  • Updated dependencies:

    • @​nomicfoundation/hardhat-utils@​4.1.5
    • @​nomicfoundation/hardhat-errors@​3.0.17

💡 The Nomic Foundation is hiring! Check our open positions.


Hardhat v3.9.1

This release improves Solidity Tests with configurable transaction gas caps and safer gas snapshot checks, while also making Hardhat faster to start and easier to migrate to from Hardhat 2.

Changes

... (truncated)

Changelog

Sourced from hardhat's changelog.

3.11.0

Minor Changes

  • #8447 dff401d Thanks @​kanej! - Added experimental EIP-7778 support to the Amsterdam hardfork: a block's gasUsed excludes gas refunds; transaction receipts are unchanged.

  • #8447 dff401d Thanks @​kanej! - Added experimental EIP-7928 support to the Amsterdam hardfork: blocks on Amsterdam now include the blockAccessListHash header field. The value is simulated, not the real keccak256(rlp(blockAccessList)).

Patch Changes

3.10.0

Minor Changes

  • #8431 39c93e4 Thanks @​anaPerezGhiglia! - Add support for the new experimental amsterdam L1 hardfork, which currently implements EIP-7708 (ETH transfers emit logs).

Patch Changes

  • #8421 1ab0408 Thanks @​BROCCOLO1D! - Fix SolidityBuildSystem#compileBuildInfo so build infos produced by non-solc compiler types are replayed through the Solidity compiler hooks.

  • #8414 6ba2bf3 Thanks @​goutamadwant! - Fixed Solidity tests failing to run in projects with very large compilation outputs.

  • #8438 d8d2eb7 Thanks @​kanej! - Fixed the hardhat node task so the --chain-id, --fork, and --fork-block-number CLI options are applied to the network again.

  • #8417 eb4826a Thanks @​ChristopherDedominici! - Fix a bug where the EIP-712 collector throws for a struct of the same name in a source file the user didn't include.

  • #8443 b5674ea Thanks @​Kropiunig! - Fixed the HD wallet derivation-path validator so malformed paths containing stray colons (e.g. m:/44'/60'/0'/0) are rejected with the INVALID_HD_PATH error.

  • #8411 5eb4f0e Thanks @​BROCCOLO1D! - Support Solidity test memoryLimit and fuzz/invariant timeout config options.

  • Updated dependencies:

    • @​nomicfoundation/hardhat-utils@​4.1.5
    • @​nomicfoundation/hardhat-errors@​3.0.17

3.9.1

Patch Changes

  • #8234 81871fd Thanks @​tenderdeve! - Explain the unsupported cheatcode eip712HashType(string,string) and point to the documentation for the alternative instead.

  • #8400 2f48724 Thanks @​kanej! - Support setting the transaction gas cap in Solidity Tests

  • #8367 82d00fc Thanks @​alcuadrado! - Lazy load dependencies to optimize bootstrap time

  • #8391 f3c5727 Thanks @​schaable! - Make hardhat test solidity --snapshot-check read-only. It no longer rewrites or deletes .gas-snapshot or snapshots/*.json files, and instead reports differences. The command now fails when a stored gas value differs from the current one, or when no baseline exists, with a hint to run --snapshot.

  • #8332 e542a48 Thanks @​gultekinmakif! - Fixed a crash that could occur when a network returned an unexpected response while resolving the default sender account

... (truncated)

Commits
  • 17032e0 Version Packages
  • dff401d feat: upgrade EDR to 0.14.2
  • a377178 Version Packages
  • f643501 update amsterdam warning message
  • 1c95fe4 Merge pull request #8431 from NomicFoundation/build/edr-0.14.0
  • 827c1c8 add a new line to the warning
  • b5674ea fix(network): reject malformed HD derivation paths in HD_PATH_REGEX
  • 85b3a3e refactor: use error rather than warn for warning
  • bdcaf40 update the warning message to match other warnings
  • 5fdcdd3 test: inject the logger to simpify the tests
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for hardhat since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Removes [js-yaml](https://github.com/nodeca/js-yaml). It's no longer used after updating ancestor dependency [hardhat](https://github.com/NomicFoundation/hardhat/tree/HEAD/packages/hardhat). These dependencies need to be updated together.


Removes `js-yaml`

Updates `hardhat` from 2.22.3 to 3.11.0
- [Release notes](https://github.com/NomicFoundation/hardhat/releases)
- [Changelog](https://github.com/NomicFoundation/hardhat/blob/main/packages/hardhat/CHANGELOG.md)
- [Commits](https://github.com/NomicFoundation/hardhat/commits/hardhat@3.11.0/packages/hardhat)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version:
  dependency-type: indirect
- dependency-name: hardhat
  dependency-version: 3.11.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 21, 2026
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatednpm/​hardhat@​2.22.3 ⏵ 3.11.099 +810082 -796 +1100 +20

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants