Skip to content

Bump js-yaml, @nomicfoundation/hardhat-foundry, @nomicfoundation/hardhat-toolbox, @openzeppelin/hardhat-upgrades and hardhat in /contracts - #21

Open
dependabot[bot] wants to merge 1 commit into
release/firehosefrom
dependabot/npm_and_yarn/contracts/multi-527c7b7d4b
Open

Bump js-yaml, @nomicfoundation/hardhat-foundry, @nomicfoundation/hardhat-toolbox, @openzeppelin/hardhat-upgrades and hardhat in /contracts#21
dependabot[bot] wants to merge 1 commit into
release/firehosefrom
dependabot/npm_and_yarn/contracts/multi-527c7b7d4b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 24, 2026

Copy link
Copy Markdown

Removes js-yaml. It's no longer used after updating ancestor dependencies js-yaml, @nomicfoundation/hardhat-foundry, @nomicfoundation/hardhat-toolbox, @openzeppelin/hardhat-upgrades and hardhat. These dependencies need to be updated together.

Removes js-yaml

Updates @nomicfoundation/hardhat-foundry from 1.1.4 to 3.0.4

Release notes

Sourced from @​nomicfoundation/hardhat-foundry's releases.

@​nomicfoundation/hardhat-foundry@​3.0.4

Changes

  • #8339 00720e8 Thanks @​alcuadrado! - The plugin now uses definePlugin from hardhat/plugins in its index.ts, so it participates in Hardhat's new "imported but unused plugin" warning when omitted from a project's plugins array.

  • Updated dependencies:

    • hardhat@3.8.0
    • @​nomicfoundation/hardhat-errors@​3.0.15

💡 The Nomic Foundation is hiring! Check our open positions.

@​nomicfoundation/hardhat-foundry@​3.0.3

Changes

  • #8264 8452f97 Thanks @​alcuadrado! - Export ./package.json so consumers can import the package's manifest.

  • Updated dependencies:

    • @​nomicfoundation/hardhat-errors@​3.0.13
    • @​nomicfoundation/hardhat-utils@​4.1.2

💡 The Nomic Foundation is hiring! Check our open positions.

Changelog

Sourced from @​nomicfoundation/hardhat-foundry's changelog.

3.0.4

Patch Changes

  • #8339 00720e8 Thanks @​alcuadrado! - The plugin now uses definePlugin from hardhat/plugins in its index.ts, so it participates in Hardhat's new "imported but unused plugin" warning when omitted from a project's plugins array.

  • Updated dependencies:

    • hardhat@3.8.0
    • @​nomicfoundation/hardhat-errors@​3.0.15

3.0.3

Patch Changes

  • #8264 8452f97 Thanks @​alcuadrado! - Export ./package.json so consumers can import the package's manifest.

  • Updated dependencies:

    • @​nomicfoundation/hardhat-errors@​3.0.13
    • @​nomicfoundation/hardhat-utils@​4.1.2

3.0.2

Patch Changes

  • #8179 d16d82a Thanks @​alcuadrado! - Await all returned promises for better debuggability

  • Updated dependencies:

    • @​nomicfoundation/hardhat-utils@​4.0.4

3.0.1

Patch Changes

  • #8096 7fb721b Thanks @​alcuadrado! - [chore] Move to packages/ folder.

  • Updated dependencies:

    • @​nomicfoundation/hardhat-errors@​3.0.11
    • @​nomicfoundation/hardhat-utils@​4.0.3

3.0.0

Major Changes

  • 4cd63e9: Introduce the @nomicfoundation/hardhat-foundry plugin for Hardhat 3
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​nomicfoundation/hardhat-foundry since your current version.


Updates @nomicfoundation/hardhat-toolbox from 4.0.0 to 7.0.0

Release notes

Sourced from @​nomicfoundation/hardhat-toolbox's releases.

@​nomicfoundation/hardhat-toolbox-viem@​5.0.7

Changes

  • #8339 00720e8 Thanks @​alcuadrado! - The plugin now uses definePlugin from hardhat/plugins in its index.ts, so it participates in Hardhat's new "imported but unused plugin" warning when omitted from a project's plugins array.

  • Updated dependencies:

    • hardhat@3.8.0

💡 The Nomic Foundation is hiring! Check our open positions.

@​nomicfoundation/hardhat-toolbox-viem@​5.0.6

Changes

💡 The Nomic Foundation is hiring! Check our open positions.

@​nomicfoundation/hardhat-toolbox-viem@​5.0.5

Changes

💡 The Nomic Foundation is hiring! Check our open positions.

Changelog

Sourced from @​nomicfoundation/hardhat-toolbox's changelog.

7.0.0

Major Changes

  • 09ae6db: Deprecate the latest npm tag and redirect users to migrate to Hardhat 3 or to the hh2 tag.
Commits
  • 6372d08 Version Packages
  • a26e822 Remove the npm tags from the README.md files
  • 18bef56 Quote the package in the installation instructions of the readmes
  • e5025ae Update the formatting and quote the package in the installation instructions ...
  • ee34347 Update hardhat-toolbox
  • 7ade974 Version Packages
  • a7e4215 feat: bump minimum version of solidity-coverage to Osaka
  • e4ad0ad chore: update package metadata for provenance
  • f65ee74 Version Packages
  • a4f1e27 Hardhat 2 documentation links updated to reflect the domain change to v2.hard...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​nomicfoundation/hardhat-toolbox since your current version.


Updates @openzeppelin/hardhat-upgrades from 3.9.0 to 4.1.0

Release notes

Sourced from @​openzeppelin/hardhat-upgrades's releases.

@​openzeppelin/hardhat-upgrades@​4.1.0

  • Add a viem-based API at @openzeppelin/hardhat-upgrades/viem, following @nomicfoundation/hardhat-viem conventions: contracts are identified by name, addresses are typed as `0x${string}`, and the returned contract instances are viem contract instances. (#1279)
    • To use the viem-based API, install viem and @nomicfoundation/hardhat-viem, then import both the plugin (for your Hardhat config's plugins array) and the API (for your scripts) from @openzeppelin/hardhat-upgrades/viem. It supports wallet clients backed by local accounts, such as viem's privateKeyToAccount. The proxyFilesToBuild helper for Solidity tests is also exported from this entry point, so viem-only projects can configure npmFilesToBuild without importing the ethers-typed root entry.
    • The ethers-based API is unchanged. Import its plugin and API from @openzeppelin/hardhat-upgrades as before, or from the new @openzeppelin/hardhat-upgrades/ethers alias.
    • Potentially breaking changes: ethers and @nomicfoundation/hardhat-ethers are now optional peer dependencies, required only by the ethers-based API; viem-only projects no longer need them. If you use the ethers-based API, install them explicitly with npm install --save-dev @nomicfoundation/hardhat-ethers ethers. Previously they were required peer dependencies that package managers installed automatically.

@​openzeppelin/hardhat-upgrades@​4.0.2

  • Re-export @nomicfoundation/hardhat-ethers types so that TypeScript recognizes connection.ethers when only this plugin is registered. (#1275)

@​openzeppelin/hardhat-upgrades@​4.0.1

  • Update dependencies. (#1255)

@​openzeppelin/hardhat-upgrades@​4.0.0

  • Migrate to Hardhat 3 with ESM module structure and plugin hooks architecture. (#1241)

    Breaking Changes

    • Requires Hardhat 3: minimum hardhat@^3.6.0 required.
    • ESM-only: package converted to ESM; CommonJS is no longer supported.
    • API Changes:
      • No automatic hre.upgrades — call the upgrades(hre, connection) factory explicitly.
      • Factory functions (upgrades, defender) are async and require a network connection.
      • Network connection must be explicitly created: const connection = await hre.network.create(). Share one connection across operations.
      • ethers now comes from the connection (const { ethers } = connection), not hre.ethers.
    • Import Changes: import factory functions instead of a side-effect import.
      • Before: import '@openzeppelin/hardhat-upgrades'
      • After: import { upgrades, defender } from '@openzeppelin/hardhat-upgrades'

    Usage and Migration

    See the README for Hardhat 3 usage, the examples directory for sample projects, and the Migration Guide for Hardhat 2 to 3 migration steps.

    Changes

    • Migrated from extendEnvironment to Hardhat 3's HardhatPlugin with hookHandlers.
    • Converted package to ESM.
    • Etherscan verification requires @nomicfoundation/hardhat-verify@^3.0.10 (optional peer dependency).
    • Support Solidity tests in Hardhat 3 with @openzeppelin/foundry-upgrades.
    • Added example projects for Hardhat 3 (Transparent, UUPS, and Solidity-test scaffolds under packages/plugin-hardhat/examples/).

  • Updated dependencies [7f3e4c6, 668f70c]:

    • @​openzeppelin/upgrades-core@​1.45.0

@​openzeppelin/hardhat-upgrades@​4.0.0-alpha.0

Note ⚠️ This version is still in testing. Do not use it to deploy or upgrade production deployments.

  • Migrate to Hardhat 3 with ESM module structure and plugin hooks architecture. (#1194)

    Breaking Changes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​openzeppelin/hardhat-upgrades since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates hardhat from 2.25.0 to 3.11.1

Release notes

Sourced from hardhat's releases.

Hardhat v3.11.1

This release removes the Hardhat 2 option from project initialization and fixes how Solidity files are classified when the same directory is configured for both sources and tests.

Changes

  • #8451 5c9d4a4 Thanks @​kanej! - Remove Hardhat 2 option from init process

  • #8452 724b7cd Thanks @​kanej! - Fixed Solidity source classification so that a directory listed in both paths.sources.solidity and paths.tests.solidity is treated as a source.

  • Updated dependencies:

    • @​nomicfoundation/hardhat-utils@​4.1.6

💡 The Nomic Foundation is hiring! Check our open positions.

Hardhat v3.11.0

This release adds two further EIPs to Hardhat's experimental Amsterdam support: EIP-7778: block gas accounting without refunds and EIP-7928: Block-Level Access Lists. See our Amsterdam support reference for full details of how these work within Hardhat.

Changes

  • #8447 dff401d Thanks @​kanej! - Added experimental EIP-7778 support to the Amsterdam hardfork: a block's gasUsed excludes gas refunds; transaction receipts are unchanged.

  • #8447 dff401d Thanks @​kanej! - Added experimental EIP-7928 support to the Amsterdam hardfork: blocks on Amsterdam now include the blockAccessListHash header field. The value is simulated, not the real keccak256(rlp(blockAccessList)).

  • #8447 dff401d Thanks @​kanej! - Fixed JSON-RPC provider call traces omitting event logs (NomicFoundation/edr#1542)

💡 The Nomic Foundation is hiring! Check our open positions.

Hardhat v3.10.0

This release adds initial experimental support for the upcoming Amsterdam hardfork, to aid your testing. We are beginning with EIP-7708: ETH transfers emit a log, and will incrementally add further EIPs before the Amsterdam mainnet activation. See our Amsterdam support reference for full details.

Changes

  • #8431 39c93e4 Thanks @​anaPerezGhiglia! - Add support for the new experimental amsterdam L1 hardfork, which currently implements EIP-7708 (ETH transfers emit logs).

  • #8421 1ab0408 Thanks @​BROCCOLO1D! - Fix SolidityBuildSystem#compileBuildInfo so build infos produced by non-solc compiler types are replayed through the Solidity compiler hooks.

  • #8414 6ba2bf3 Thanks @​goutamadwant! - Fixed Solidity tests failing to run in projects with very large compilation outputs.

  • #8438 d8d2eb7 Thanks @​kanej! - Fixed the hardhat node task so the --chain-id, --fork, and --fork-block-number CLI options are applied to the network again.

  • #8417 eb4826a Thanks @​ChristopherDedominici! - Fix a bug where the EIP-712 collector throws for a struct of the same name in a source file the user didn't include.

  • #8443 b5674ea Thanks @​Kropiunig! - Fixed the HD wallet derivation-path validator so malformed paths containing stray colons (e.g. m:/44'/60'/0'/0) are rejected with the INVALID_HD_PATH error.

  • #8411 5eb4f0e Thanks @​BROCCOLO1D! - Support Solidity test memoryLimit and fuzz/invariant timeout config options.

  • Updated dependencies:

    • @​nomicfoundation/hardhat-utils@​4.1.5

... (truncated)

Changelog

Sourced from hardhat's changelog.

3.11.1

Patch Changes

  • #8451 5c9d4a4 Thanks @​kanej! - Remove Hardhat 2 option from init process

  • #8452 724b7cd Thanks @​kanej! - Fixed Solidity source classification so that a directory listed in both paths.sources.solidity and paths.tests.solidity is treated as a source.

  • Updated dependencies:

    • @​nomicfoundation/hardhat-utils@​4.1.6

3.11.0

Minor Changes

  • #8447 dff401d Thanks @​kanej! - Added experimental EIP-7778 support to the Amsterdam hardfork: a block's gasUsed excludes gas refunds; transaction receipts are unchanged.

  • #8447 dff401d Thanks @​kanej! - Added experimental EIP-7928 support to the Amsterdam hardfork: blocks on Amsterdam now include the blockAccessListHash header field. The value is simulated, not the real keccak256(rlp(blockAccessList)).

Patch Changes

3.10.0

Minor Changes

  • #8431 39c93e4 Thanks @​anaPerezGhiglia! - Add support for the new experimental amsterdam L1 hardfork, which currently implements EIP-7708 (ETH transfers emit logs).

Patch Changes

  • #8421 1ab0408 Thanks @​BROCCOLO1D! - Fix SolidityBuildSystem#compileBuildInfo so build infos produced by non-solc compiler types are replayed through the Solidity compiler hooks.

  • #8414 6ba2bf3 Thanks @​goutamadwant! - Fixed Solidity tests failing to run in projects with very large compilation outputs.

  • #8438 d8d2eb7 Thanks @​kanej! - Fixed the hardhat node task so the --chain-id, --fork, and --fork-block-number CLI options are applied to the network again.

  • #8417 eb4826a Thanks @​ChristopherDedominici! - Fix a bug where the EIP-712 collector throws for a struct of the same name in a source file the user didn't include.

  • #8443 b5674ea Thanks @​Kropiunig! - Fixed the HD wallet derivation-path validator so malformed paths containing stray colons (e.g. m:/44'/60'/0'/0) are rejected with the INVALID_HD_PATH error.

  • #8411 5eb4f0e Thanks @​BROCCOLO1D! - Support Solidity test memoryLimit and fuzz/invariant timeout config options.

  • Updated dependencies:

    • @​nomicfoundation/hardhat-utils@​4.1.5
    • @​nomicfoundation/hardhat-errors@​3.0.17

3.9.1

Patch Changes

... (truncated)

Commits
  • d6804b4 Version Packages
  • 964a461 Merge pull request #8451 from NomicFoundation/drop-hardhat2-init
  • 5985cd7 test: cover getScope sources-over-tests precedence on overlapping paths
  • a90ee1b fix(solidity): let sources scope take precedence over tests in getScope
  • cb8a46f test: reproduce missing TypeChain types for test folder mocks
  • 70de6f1 refactor: remove the Hardhat 2 template compatibility branch
  • 199d031 refactor: hardcode the init analytics event to hardhat-3
  • b77e6c6 feat: drop the Hardhat version selection from init
  • 81fdc12 refactor(init): move Hardhat 3 templates up and drop Hardhat 2 templates
  • 17032e0 Version Packages
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for hardhat since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
Bump js-yaml, @nomicfoundation/hardhat-foundry, @nomicfoundation/hard…
a90c28a 
…hat-toolbox, @openzeppelin/hardhat-upgrades and hardhat

Removes [js-yaml](https://github.com/nodeca/js-yaml). It's no longer used after updating ancestor dependencies [js-yaml](https://github.com/nodeca/js-yaml), [@nomicfoundation/hardhat-foundry](https://github.com/NomicFoundation/hardhat/tree/HEAD/packages/hardhat-foundry), [@nomicfoundation/hardhat-toolbox](https://github.com/NomicFoundation/hardhat/tree/HEAD/packages/hardhat-toolbox), [@openzeppelin/hardhat-upgrades](https://github.com/OpenZeppelin/openzeppelin-upgrades) and [hardhat](https://github.com/NomicFoundation/hardhat/tree/HEAD/packages/hardhat). These dependencies need to be updated together.


Removes `js-yaml`

Updates `@nomicfoundation/hardhat-foundry` from 1.1.4 to 3.0.4
- [Release notes](https://github.com/NomicFoundation/hardhat/releases)
- [Changelog](https://github.com/NomicFoundation/hardhat/blob/main/packages/hardhat-foundry/CHANGELOG.md)
- [Commits](https://github.com/NomicFoundation/hardhat/commits/@nomicfoundation/hardhat-foundry@3.0.4/packages/hardhat-foundry)

Updates `@nomicfoundation/hardhat-toolbox` from 4.0.0 to 7.0.0
- [Release notes](https://github.com/NomicFoundation/hardhat/releases)
- [Changelog](https://github.com/NomicFoundation/hardhat/blob/@nomicfoundation/hardhat-toolbox@7.0.0/packages/hardhat-toolbox/CHANGELOG.md)
- [Commits](https://github.com/NomicFoundation/hardhat/commits/@nomicfoundation/hardhat-toolbox@7.0.0/packages/hardhat-toolbox)

Updates `@openzeppelin/hardhat-upgrades` from 3.9.0 to 4.1.0
- [Release notes](https://github.com/OpenZeppelin/openzeppelin-upgrades/releases)
- [Commits](https://github.com/OpenZeppelin/openzeppelin-upgrades/compare/@openzeppelin/hardhat-upgrades@3.9.0...@openzeppelin/hardhat-upgrades@4.1.0)

Updates `hardhat` from 2.25.0 to 3.11.1
- [Release notes](https://github.com/NomicFoundation/hardhat/releases)
- [Changelog](https://github.com/NomicFoundation/hardhat/blob/main/packages/hardhat/CHANGELOG.md)
- [Commits](https://github.com/NomicFoundation/hardhat/commits/hardhat@3.11.1/packages/hardhat)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version:
  dependency-type: indirect
- dependency-name: "@nomicfoundation/hardhat-foundry"
  dependency-version: 3.0.4
  dependency-type: direct:development
- dependency-name: "@nomicfoundation/hardhat-toolbox"
  dependency-version: 7.0.0
  dependency-type: direct:development
- dependency-name: "@openzeppelin/hardhat-upgrades"
  dependency-version: 4.1.0
  dependency-type: direct:development
- dependency-name: hardhat
  dependency-version: 3.11.1
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 24, 2026
@dependabot dependabot Bot mentioned this pull request Jul 24, 2026
Closed
@github-actions

github-actions Bot commented Jul 24, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest Buf updates on your PR. Results from workflow Buf / buf (pull_request).

BuildFormatLintBreakingUpdated (UTC)
✅ passed✅ passed✅ passed✅ passedJul 24, 2026, 2:38 AM

@github-actions

github-actions Bot commented Jul 24, 2026

Copy link
Copy Markdown

The latest Buf updates on your PR. Results from workflow Buf / buf (pull_request).

BuildFormatLintBreakingUpdated (UTC)
✅ passed✅ passed✅ passed✅ passedJul 24, 2026, 2:37 AM

@github-actions

github-actions Bot commented Jul 24, 2026

Copy link
Copy Markdown

The latest Buf updates on your PR. Results from workflow Buf / buf (pull_request).

BuildFormatLintBreakingUpdated (UTC)
✅ passed✅ passed✅ passed✅ passedJul 24, 2026, 2:37 AM

@github-actions

github-actions Bot commented Jul 24, 2026

Copy link
Copy Markdown

The latest Buf updates on your PR. Results from workflow Buf / buf (pull_request).

BuildFormatLintBreakingUpdated (UTC)
✅ passed✅ passed✅ passed✅ passedJul 24, 2026, 2:37 AM

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants