renovate preparation - update major deps with no API changes and other packages with minors and patches by kanej · Pull Request #8470 · NomicFoundation/hardhat

kanej · 2026-07-28T14:20:07Z

This PR represents multiple dependency updates that require no code changes:

The hardhat-node-test-reporter deps have been update through several major versions, but no used API changed.
p-map in Hardhat (a runtime dependency) has similarly been updated but with no code changes
Chokidar 4->5 - commonjs was dropped in the move to 5. No API changes, I am taking a full CI run to be proof of no regressions.
env-paths major update with no code changes.
immer in Ignition core (thoroughly covered by unit tests) updated with no code changes.
cbor major update - change to minimum node version, no code changes.
A set of small minor/patch changes.

These dependency updates are part of the renovate preparation.

Changesets

A changeset has been added for each package with a runtime dependency that has been bumped.

…diff 29→30) Update the two runtime dependencies of hardhat-node-test-reporter to their latest majors. Both APIs in use are unchanged — `core.error()` with annotation properties and `diff(expected, actual)` — so no code changes are needed.

…glefile, @types/styled-components) Minor/patch bumps of ignition-ui's build/dev dependencies: - @fontsource/roboto ^5.0.8 → ^5.3.0 - vite-plugin-singlefile ^2.0.1 → ^2.3.3 - @types/styled-components 5.1.26 → 5.1.36 Validated by building the vite single-file bundle and running the package test suite.

Patch bump of the API report tooling. Validated by running `api-extractor run` against a fresh build — completes successfully with no API report changes.

Lockfile-only update.

Lockfile only update.

Minor bump of the shared ESLint TypeScript stack.

Patch bump of a runtime dependency (used for concurrent solc compilation in the solidity build system).

changeset-bot · 2026-07-28T14:20:14Z

🦋 Changeset detected

Latest commit: 6e1818e

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 5 packages

Name	Type
hardhat	Patch
@nomicfoundation/hardhat-utils	Patch
@nomicfoundation/hardhat-verify	Patch
@nomicfoundation/ignition-core	Patch
@nomicfoundation/hardhat-node-test-reporter	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

socket-security · 2026-07-28T14:21:18Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@types/styled-components@5.1.36
	typescript-eslint@8.65.0
	chokidar@5.0.0
	vite-plugin-singlefile@2.3.3
	cbor2@2.3.0
	immer@11.1.15
	@fontsource/roboto@5.3.0
	@actions/core@3.0.1
	jest-diff@30.4.1
	@microsoft/api-extractor@7.58.12
	p-map@7.0.6
	sinon@22.1.0

View full report

socket-security · 2026-07-28T14:21:20Z

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

Ignoring alerts on:

@fontsource/roboto@5.3.0

View full report

github-actions · 2026-07-28T14:22:01Z

hardhat

Total size of the bundle: 226M
Total number of dependencies (including transitive): 44

List of dependencies (sorted by size)

217M	total
32M	@nomicfoundation/edr-linux-x64-musl
32M	@nomicfoundation/edr-linux-x64-gnu
28M	@nomicfoundation/edr-linux-arm64-musl
28M	@nomicfoundation/edr-linux-arm64-gnu
26M	@nomicfoundation/edr-darwin-x64
24M	@nomicfoundation/edr-win32-x64-msvc
21M	@nomicfoundation/edr-darwin-arm64
7.3M	@sentry/core
5.2M	zod
2.7M	micro-eth-signer
1.9M	@noble/curves
1.7M	undici
1.3M	@nomicfoundation/hardhat-utils
1.2M	@noble/hashes
884K	@nomicfoundation/hardhat-vendored
864K	@streamparser/json
688K	tsx
632K	@nomicfoundation/hardhat-errors
624K	micro-packed
492K	@scure/bip39
408K	json-stream-stringify
368K	ethereum-cryptography
332K	@streamparser/json-node
320K	enquirer
320K	@nomicfoundation/hardhat-zod-utils
308K	fast-equals
292K	semver
204K	ws
204K	adm-zip
168K	esbuild
168K	@scure/base
144K	@nomicfoundation/edr
100K	chokidar
96K	@scure/bip32
72K	@nomicfoundation/solidity-analyzer
56K	rfdc
48K	ansi-colors
44K	resolve.exports
36K	readdirp
36K	p-map
24K	strip-ansi
24K	is-safe-filename
24K	env-paths
24K	ansi-regex

kanej · 2026-07-28T14:22:03Z

@SocketSecurity ignore npm/@fontsource/roboto@5.3.0

Copilot

Pull request overview

Prepares the repo for Renovate by updating a small set of dependencies (including the node test reporter deps and some minor/patch bumps) and recording the changes via Changesets.

Changes:

Bump @nomicfoundation/hardhat-node-test-reporter deps (@actions/core, jest-diff) to newer major versions.
Update hardhat runtime dependency p-map and refresh related lockfile entries.
Apply several minor/patch dependency updates across workspace packages (e.g. mocha, sinon, typescript-eslint, ignition-ui dev deps).

Reviewed changes

Copilot reviewed 7 out of 8 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
pnpm-lock.yaml	Updates the resolved dependency graph to match the bumped package versions.
packages/ignition-ui/package.json	Bumps UI dev deps (`@fontsource/roboto`, `@types/styled-components`, `vite-plugin-singlefile`).
packages/ignition-core/package.json	Updates `@microsoft/api-extractor` patch version.
packages/hardhat/package.json	Bumps `p-map` runtime dependency.
packages/hardhat-node-test-reporter/package.json	Updates reporter runtime deps to newer major versions.
packages/config/package.json	Bumps `typescript-eslint` patch version.
.changeset/update-node-test-reporter-deps.md	Adds release note entry for reporter dependency bumps.
.changeset/update-hardhat-p-map.md	Adds release note entry for `p-map` bump.

Files not reviewed (1)

pnpm-lock.yaml: Generated file

Major bump of a runtime dependency (used to compute the config/cache/ telemetry directories in global-dir.ts). v3/v4 only added ESM-only and Node-version requirements (both already satisfied); the computed paths are unchanged (still `<dir>/hardhat-nodejs`).

Major bump of a runtime dependency (backs the execution-state reducers). Only the basic `produce(base, recipe)` API is used, so no code changes.

Major bump of a runtime dependency (used to watch the build-info dir in build-info-watcher.ts). v5 is ESM-only + Node >=20.19, both already satisfied; the `watch`/`FSWatcher`/options/`.close()` API is unchanged and the watched path is a plain directory (not a glob).

Copilot

Pull request overview

Copilot reviewed 11 out of 12 changed files in this pull request and generated no new comments.

Files not reviewed (1)

pnpm-lock.yaml: Generated file

Major bump of a runtime dependency (used via `decode` to parse Solidity metadata CBOR in hardhat-verify, and as a validity check in ignition-core reconciliation). v2's breaking changes are Node 20+ (satisfied) and a TypeScript-only registerDecoder/ITag change we don't use; default `decode` output is unchanged. No code changes.

Copilot

Pull request overview

Copilot reviewed 14 out of 15 changed files in this pull request and generated no new comments.

Files not reviewed (1)

pnpm-lock.yaml: Generated file

kanej added 7 commits July 28, 2026 14:15

chore: bump @microsoft/api-extractor 7.58.11 → 7.58.12 in ignition-core

4028fe1

Patch bump of the API report tooling. Validated by running `api-extractor run` against a fresh build — completes successfully with no API report changes.

chore: bump mocha 11.7.3 → 11.7.6

8e92dc4

Lockfile-only update.

chore: bump sinon 22.0.0 → 22.1.0

bd8ccf7

Lockfile only update.

chore: bump typescript-eslint 8.64.0 → 8.65.0 in config

6e02cb5

Minor bump of the shared ESLint TypeScript stack.

chore: bump p-map 7.0.5 → 7.0.6 in hardhat

4a71543

Patch bump of a runtime dependency (used for concurrent solc compilation in the solidity build system).

Copilot AI review requested due to automatic review settings July 28, 2026 14:20

kanej added no docs needed This PR doesn't require links to documentation no peer bump needed labels Jul 28, 2026

Copilot started reviewing on behalf of kanej July 28, 2026 14:20 View session

Copilot AI reviewed Jul 28, 2026

View reviewed changes

Comment thread .changeset/update-node-test-reporter-deps.md

Comment thread packages/hardhat/package.json

kanej changed the title ~~renovate preparation - update node test runner deps and other packages minor and patches~~ renovate preparation - update node test reporter deps and other packages minor and patches Jul 28, 2026

kanej marked this pull request as ready for review July 28, 2026 14:30

kanej added 3 commits July 28, 2026 14:50

chore: bump immer 10 → 11 in ignition-core

5878afd

Major bump of a runtime dependency (backs the execution-state reducers). Only the basic `produce(base, recipe)` API is used, so no code changes.

Copilot AI review requested due to automatic review settings July 28, 2026 14:57

Copilot started reviewing on behalf of kanej July 28, 2026 14:57 View session

Copilot AI reviewed Jul 28, 2026

View reviewed changes

kanej changed the title ~~renovate preparation - update node test reporter deps and other packages minor and patches~~ renovate preparation - update major deps with no API changes and other packages with minors and patches Jul 28, 2026

Copilot AI review requested due to automatic review settings July 28, 2026 15:15

Copilot started reviewing on behalf of kanej July 28, 2026 15:16 View session

Copilot AI reviewed Jul 28, 2026

View reviewed changes

kanej requested a review from alcuadrado July 28, 2026 15:41

alcuadrado approved these changes Jul 28, 2026

View reviewed changes

kanej added this pull request to the merge queue Jul 28, 2026

Merged via the queue into main with commit 2dbf49d Jul 28, 2026
463 of 465 checks passed

kanej deleted the chore/update-node-test-runner-deps-and-other-packages-minor-and-patches branch July 28, 2026 19:22

github-actions Bot mentioned this pull request Jul 28, 2026

Version Packages (v3) #8462

Merged

Navigation Menu

Uh oh!

renovate preparation - update major deps with no API changes and other packages with minors and patches - #8470

renovate preparation - update major deps with no API changes and other packages with minors and patches#8470
kanej merged 11 commits into
mainfrom
chore/update-node-test-runner-deps-and-other-packages-minor-and-patches

kanej commented Jul 28, 2026 •

edited

Loading

Uh oh!

changeset-bot Bot commented Jul 28, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jul 28, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jul 28, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jul 28, 2026 •

edited

Loading

Uh oh!

kanej commented Jul 28, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

kanej commented Jul 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Changesets

Uh oh!

changeset-bot Bot commented Jul 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🦋 Changeset detected

Uh oh!

socket-security Bot commented Jul 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Jul 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

hardhat

Uh oh!

kanej commented Jul 28, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

kanej commented Jul 28, 2026 •

edited

Loading

changeset-bot Bot commented Jul 28, 2026 •

edited

Loading

socket-security Bot commented Jul 28, 2026 •

edited

Loading

socket-security Bot commented Jul 28, 2026 •

edited

Loading

github-actions Bot commented Jul 28, 2026 •

edited

Loading