Skip to content

chore(deps): bump the npm-minor-patch group across 1 directory with 11 updates - #27

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-patch-e262d6e431
Open

chore(deps): bump the npm-minor-patch group across 1 directory with 11 updates#27
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-patch-e262d6e431

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026

Copy link
Copy Markdown

Bumps the npm-minor-patch group with 11 updates in the / directory:

Package From To
@coinbase/cdp-sdk 1.55.0 1.57.0
@x402/core 2.23.0 2.27.0
@x402/evm 2.23.0 2.27.0
@x402/express 2.23.0 2.27.0
@x402/extensions 2.23.0 2.27.0
@x402/svm 2.23.0 2.27.0
express 4.22.2 4.22.3
tsx 4.23.1 4.23.15
viem 2.55.2 2.56.9
@types/node 22.20.1 22.20.4
typescript-eslint 8.64.0 8.70.1

Updates @coinbase/cdp-sdk from 1.55.0 to 1.57.0

Commits

Updates @x402/core from 2.23.0 to 2.27.0

Commits
  • 71eb9a5 chore: version python package  (#3554)
  • 74ee0f5 chore(go): release (#3555)
  • 5976943 chore: version typescript packages  (#3553)
  • 1f3ccfc chore: harden verify-package-exports for @​x402 releases (#3550)
  • 279f12c fix(go): match HTTP routes on escaped and decoded paths (#3543)
  • 5d3a2b2 fix(ts): match HTTP routes on escaped and decoded paths (#3542)
  • 7496533 feat: expand x402.org/protected routes (#3522)
  • 59f1347 fix(evm): reject malformed CAIP-2 network identifiers in getEvmChainId (#3521)
  • 6323ec7 fix(python): close literal-route bypass via percent-encoded path separator (#...
  • 68b6fba docs: mark PayAI Facilitator as production-grade (#3539)
  • Additional commits viewable in compare view

Updates @x402/evm from 2.23.0 to 2.27.0

Commits
  • 71eb9a5 chore: version python package  (#3554)
  • 74ee0f5 chore(go): release (#3555)
  • 5976943 chore: version typescript packages  (#3553)
  • 1f3ccfc chore: harden verify-package-exports for @​x402 releases (#3550)
  • 279f12c fix(go): match HTTP routes on escaped and decoded paths (#3543)
  • 5d3a2b2 fix(ts): match HTTP routes on escaped and decoded paths (#3542)
  • 7496533 feat: expand x402.org/protected routes (#3522)
  • 59f1347 fix(evm): reject malformed CAIP-2 network identifiers in getEvmChainId (#3521)
  • 6323ec7 fix(python): close literal-route bypass via percent-encoded path separator (#...
  • 68b6fba docs: mark PayAI Facilitator as production-grade (#3539)
  • Additional commits viewable in compare view

Updates @x402/express from 2.23.0 to 2.27.0

Commits
  • 71eb9a5 chore: version python package  (#3554)
  • 74ee0f5 chore(go): release (#3555)
  • 5976943 chore: version typescript packages  (#3553)
  • 1f3ccfc chore: harden verify-package-exports for @​x402 releases (#3550)
  • 279f12c fix(go): match HTTP routes on escaped and decoded paths (#3543)
  • 5d3a2b2 fix(ts): match HTTP routes on escaped and decoded paths (#3542)
  • 7496533 feat: expand x402.org/protected routes (#3522)
  • 59f1347 fix(evm): reject malformed CAIP-2 network identifiers in getEvmChainId (#3521)
  • 6323ec7 fix(python): close literal-route bypass via percent-encoded path separator (#...
  • 68b6fba docs: mark PayAI Facilitator as production-grade (#3539)
  • Additional commits viewable in compare view

Updates @x402/extensions from 2.23.0 to 2.27.0

Commits
  • 71eb9a5 chore: version python package  (#3554)
  • 74ee0f5 chore(go): release (#3555)
  • 5976943 chore: version typescript packages  (#3553)
  • 1f3ccfc chore: harden verify-package-exports for @​x402 releases (#3550)
  • 279f12c fix(go): match HTTP routes on escaped and decoded paths (#3543)
  • 5d3a2b2 fix(ts): match HTTP routes on escaped and decoded paths (#3542)
  • 7496533 feat: expand x402.org/protected routes (#3522)
  • 59f1347 fix(evm): reject malformed CAIP-2 network identifiers in getEvmChainId (#3521)
  • 6323ec7 fix(python): close literal-route bypass via percent-encoded path separator (#...
  • 68b6fba docs: mark PayAI Facilitator as production-grade (#3539)
  • Additional commits viewable in compare view

Updates @x402/svm from 2.23.0 to 2.27.0

Commits
  • 71eb9a5 chore: version python package  (#3554)
  • 74ee0f5 chore(go): release (#3555)
  • 5976943 chore: version typescript packages  (#3553)
  • 1f3ccfc chore: harden verify-package-exports for @​x402 releases (#3550)
  • 279f12c fix(go): match HTTP routes on escaped and decoded paths (#3543)
  • 5d3a2b2 fix(ts): match HTTP routes on escaped and decoded paths (#3542)
  • 7496533 feat: expand x402.org/protected routes (#3522)
  • 59f1347 fix(evm): reject malformed CAIP-2 network identifiers in getEvmChainId (#3521)
  • 6323ec7 fix(python): close literal-route bypass via percent-encoded path separator (#...
  • 68b6fba docs: mark PayAI Facilitator as production-grade (#3539)
  • Additional commits viewable in compare view

Updates express from 4.22.2 to 4.22.3

Changelog

Sourced from express's changelog.

4.22.3

  • Allow conditional revalidation for QUERY requests
    • req.fresh now includes QUERY in the freshness check, so QUERY responses can return 304 when a validator matches
  • deps: qs@~6.16.0
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for express since your current version.


Updates tsx from 4.23.1 to 4.23.15

Release notes

Sourced from tsx's releases.

v4.23.15

4.23.15 (2026-09-20)

Bug Fixes

  • exclude bare builtins from namespace inheritance (38e1588)
  • expose require.cache and require.extensions to tsImport CommonJS modules (2da3407)
  • make namespaced register() overloads portable for declaration emit (562c434)

This release is also available on:

v4.23.14

4.23.14 (2026-09-20)

Bug Fixes

  • restore the CJS bridge namespace for Node 24 require(esm) under tsImport() (#802) (6e5236b)

This release is also available on:

v4.23.13

4.23.13 (2026-08-30)

Bug Fixes

  • cache: bound shared transform cache memory (#835) (28e1f12)

This release is also available on:

v4.23.12

4.23.12 (2026-08-10)

Bug Fixes

  • shim import.meta when tokens are split by comments or newlines (#829) (ed9d330), closes #828

This release is also available on:

... (truncated)

Commits
  • ca66105 test: fix drive-less file URLs in ESM resolver fixtures
  • 2da3407 fix: expose require.cache and require.extensions to tsImport CommonJS modules
  • 38e1588 fix: exclude bare builtins from namespace inheritance
  • 562c434 fix: make namespaced register() overloads portable for declaration emit
  • edfb1f0 build: upgrade pkgroll and externalize CJS loader reference
  • 70e7828 test: upgrade tinyspy for disposable API
  • 9ed2022 ci: avoid duplicate release notifications
  • 872e77f refactor: use disposables for cleanup
  • 6e5236b fix: restore the CJS bridge namespace for Node 24 require(esm) under tsImport...
  • 28e1f12 fix(cache): bound shared transform cache memory (#835)
  • Additional commits viewable in compare view

Updates viem from 2.55.2 to 2.56.9

Release notes

Sourced from viem's releases.

viem@2.56.9

Patch Changes

  • #5123 2068265d2fefb41da2ca672f7b8ef0d221efdbde Thanks @​rabbitmainnet! - Added Rabbit Chain Testnet (chain ID 9280) to viem/chains.

  • #5124 4767ff7be7aed3845b617f8b16806d72469ea657 Thanks @​kyscott18! - Added the getStorageValues action for batch retrieval of contract storage slots.

  • #5108 5a201d9a5996a836023bdb676c8d7c0f43f9c8fa Thanks @​Lukecele! - Added Plasma mainnet addresses for USDC and EURC.

  • #5114 de663c98de19da2ffccdd1681fd616e6ed653b98 Thanks @​jxom! - Resynced Tempo contract ABIs and added the current committee address.

     // Abis.earnMerkleRewardDistributor contract calls
-functionName: 'fundWithAssets',
-args: [funder, assets, minEarnShares],
+functionName: 'fundAndPublishRoot',
+args: [settlementId, expectedRootVersion, funder, assets, minEarnShares, root, totalEntitlement, statementHash],
functionName: 'publishRoot',
-args: [root, totalEntitlement, statementHash],
+args: [expectedRootVersion, root, totalEntitlement, statementHash],
-const verifierAbi = Abis.zone
+const verifierAbi = Abis.core
-const selector = Selectors.zoneVerifier.verify
+const selector = Selectors.zoneVerifier.verify[

'verify(uint32,uint64,uint64,bytes32,uint64,(bytes32,bytes32),(bytes32,bytes32,uint64,uint64),bytes32,bytes,bytes)'
+]

  • #5112 c704647d93ed5eaabe3ca9e22fdd4f7e9132b641 Thanks @​spalladino! - Added optional maxUsedGas to simulateBlocks call results, preserving the per-call maxUsedGas reported by eth_simulateV1.

    maxUsedGas is the node's measurement of the gas used by a call before gas refunds are applied – it is not a guaranteed minimum sufficient gas limit for the call. It is undefined against nodes that do not report it, and is available on both successful and failed call results.

  • #5126 6feacb3a9066b47d3f083a0da0da2d8172577870 Thanks @​jxom! - viem/tempo: Added PropAMM actions.

    • viem@2.56.8

    Patch Changes

    viem@2.56.7

    Patch Changes

    ... (truncated)

    Commits

    Updates @types/node from 22.20.1 to 22.20.4

    Commits

    Updates typescript-eslint from 8.64.0 to 8.70.1

    Release notes

    Sourced from typescript-eslint's releases.

    v8.70.1

    8.70.1 (2026-09-21)

    🩹 Fixes

    • ast-spec: narrow import attribute keys to identifiers and strings (#12879)
    • eslint-plugin: [no-useless-default-assignment] avoid false positives on tuples with a rest element (#12768)
    • eslint-plugin: [no-unnecessary-type-parameters] handle type precedence in the suggestion fixer (#12637)
    • eslint-plugin: [no-explicit-any] use unknown[] for bare any rest parameters (#12818)
    • eslint-plugin: [no-generated-empty-object-type] don't report a mapped type whose keys are not resolved yet (#12854)
    • eslint-plugin: [no-misused-spread] omit WeakMap spread suggestions (#12850)
    • eslint-plugin: [no-unnecessary-type-assertion] false positive for empty object asserted to a type alias of Record (#12869)
    • eslint-plugin: [no-meaningless-void-operator] allow void on assignment expressions (#12873)
    • eslint-plugin: [await-thenable] prevent autofix from breaking code when removing await (#12716)
    • eslint-plugin: [no-unnecessary-parameter-property-assignment] account for parameter reassignment (#12880)
    • eslint-plugin: [unbound-method] treat Intl.Collator.prototype.compare as spec-bound (#12845)
    • eslint-plugin: [no-unnecessary-condition] handle union-keyed index access on the left-hand side of nullish assignment (#12747)
    • eslint-plugin: [no-useless-default-assignment] convert the fixer to a suggestion fixer (#12826)
    • eslint-plugin: [no-misused-promises] handle multiple Promise constituents (#12904)
    • rule-tester: test the final autofix output instead of the first pass (#12867)
    • scope-manager: merge implicit global definitions (#12809)
    • type-utils: match package specifiers on whole path components (#12838)
    • typescript-estree: resolve symlinked paths when matching files to projects (#12725)
    • typescript-estree: add missing < token opening type arguments (#12821)
    • typescript-estree: require string literal import attribute values (#12894)
    • website: prevent playground from breaking down after opening link with the .js file type (#12777)

    ❤️ Thank You

    See GitHub Releases for more information.

    ... (truncated)

    Changelog

    Sourced from typescript-eslint's changelog.

    8.70.1 (2026-09-21)

    This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

    See GitHub Releases for more information.

    You can read about our versioning strategy and releases on our website.

    8.70.0 (2026-09-07)

    🩹 Fixes

    • eslint-plugin: [no-deprecated] report deprecated imported values used in object shorthand properties (#12780)

    ❤️ Thank You

    See GitHub Releases for more information.

    You can read about our versioning strategy and releases on our website.

    8.69.0 (2026-08-31)

    This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

    See GitHub Releases for more information.

    You can read about our versioning strategy and releases on our website.

    8.68.0 (2026-08-24)

    This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

    See GitHub Releases for more information.

    You can read about our versioning strategy and releases on our website.

    8.67.0 (2026-08-10)

    🚀 Features

    • typescript-eslint: export basic globs for using tseslint (#12105)

    ❤️ Thank You

    • Claude Sonnet 5
    • Evyatar Daud @​StyleShit
    • Josh Goldberg
    • Josh Goldberg ✨

    ... (truncated)

    Commits
    • 23d38ce chore(release): publish 8.70.1
    • eb42d9b chore: cleanup and fix Nx dependencies and missing tasks (#12897)
    • 8c80531 chore: fix typos in comments and docs (#12846)
    • b6b86a1 chore: migrate to nx 23.2.0 (#12843)
    • 7ee7608 chore(release): publish 8.70.0
    • 4586535 fix(eslint-plugin): [no-deprecated] report deprecated imported values used in...
    • 9a6e546 chore(release): publish 8.69.0
    • 8f4e00a chore(release): publish 8.68.0
    • 55f6d5d chore: enable source maps (#12677)
    • 20a261f chore(release): publish 8.67.0
    • Additional commits viewable in compare view

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
    • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
    • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
    • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
    • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
    • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

    @dependabot
    chore(deps): bump the npm-minor-patch group across 1 directory with 1…
    85cdee2 
    …1 updates

Bumps the npm-minor-patch group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@coinbase/cdp-sdk](https://github.com/coinbase/cdp-sdk) | `1.55.0` | `1.57.0` |
| [@x402/core](https://github.com/x402-foundation/x402) | `2.23.0` | `2.27.0` |
| [@x402/evm](https://github.com/x402-foundation/x402) | `2.23.0` | `2.27.0` |
| [@x402/express](https://github.com/x402-foundation/x402) | `2.23.0` | `2.27.0` |
| [@x402/extensions](https://github.com/x402-foundation/x402) | `2.23.0` | `2.27.0` |
| [@x402/svm](https://github.com/x402-foundation/x402) | `2.23.0` | `2.27.0` |
| [express](https://github.com/expressjs/express) | `4.22.2` | `4.22.3` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.1` | `4.23.15` |
| [viem](https://github.com/wevm/viem) | `2.55.2` | `2.56.9` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.20.1` | `22.20.4` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.64.0` | `8.70.1` |



Updates `@coinbase/cdp-sdk` from 1.55.0 to 1.57.0
- [Changelog](https://github.com/coinbase/cdp-sdk/blob/main/RELEASE.md)
- [Commits](https://github.com/coinbase/cdp-sdk/commits)

Updates `@x402/core` from 2.23.0 to 2.27.0
- [Commits](https://github.com/x402-foundation/x402/compare/npm-@x402/core@v2.23.0...npm-@x402/core@v2.27.0)

Updates `@x402/evm` from 2.23.0 to 2.27.0
- [Commits](https://github.com/x402-foundation/x402/compare/npm-@x402/evm@v2.23.0...npm-@x402/evm@v2.27.0)

Updates `@x402/express` from 2.23.0 to 2.27.0
- [Commits](https://github.com/x402-foundation/x402/compare/npm-@x402/express@v2.23.0...npm-@x402/express@v2.27.0)

Updates `@x402/extensions` from 2.23.0 to 2.27.0
- [Commits](https://github.com/x402-foundation/x402/compare/npm-@x402/extensions@v2.23.0...npm-@x402/extensions@v2.27.0)

Updates `@x402/svm` from 2.23.0 to 2.27.0
- [Commits](https://github.com/x402-foundation/x402/compare/npm-@x402/svm@v2.23.0...npm-@x402/svm@v2.27.0)

Updates `express` from 4.22.2 to 4.22.3
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/v4.22.3/History.md)
- [Commits](expressjs/express@v4.22.2...v4.22.3)

Updates `tsx` from 4.23.1 to 4.23.15
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.1...v4.23.15)

Updates `viem` from 2.55.2 to 2.56.9
- [Release notes](https://github.com/wevm/viem/releases)
- [Commits](https://github.com/wevm/viem/compare/viem@2.55.2...viem@2.56.9)

Updates `@types/node` from 22.20.1 to 22.20.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `typescript-eslint` from 8.64.0 to 8.70.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.1/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: "@coinbase/cdp-sdk"
  dependency-version: 1.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@x402/core"
  dependency-version: 2.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@x402/evm"
  dependency-version: 2.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@x402/express"
  dependency-version: 2.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@x402/extensions"
  dependency-version: 2.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@x402/svm"
  dependency-version: 2.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: express
  dependency-version: 4.22.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: tsx
  dependency-version: 4.23.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: viem
  dependency-version: 2.56.9
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@types/node"
  dependency-version: 22.20.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: typescript-eslint
  dependency-version: 8.70.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 1, 2026

    This branch has not been deployed

    No deployments
    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

    Reviewers

    No reviews

    Assignees

    No one assigned

    Labels

    dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

    Projects

    None yet

    Milestone

    No milestone

    Development

    Successfully merging this pull request may close these issues.

    0 participants