[dependabot]

Bumps the minor-and-patch group with 6 updates:

Package	From	To
@x402/evm	2.26.0	2.27.0
@x402/fetch	2.26.0	2.27.0
viem	2.56.8	2.57.0
ws	8.21.3	8.22.0
@types/node	26.6.2	26.6.3
vitest	5.0.1	5.0.2

Updates @x402/evm from 2.26.0 to 2.27.0

Commits

• 71eb9a5 chore: version python package  (#3554)
• 74ee0f5 chore(go): release (#3555)
• 5976943 chore: version typescript packages  (#3553)
• 1f3ccfc chore: harden verify-package-exports for @​x402 releases (#3550)
• 279f12c fix(go): match HTTP routes on escaped and decoded paths (#3543)
• 5d3a2b2 fix(ts): match HTTP routes on escaped and decoded paths (#3542)
• 7496533 feat: expand x402.org/protected routes (#3522)
• 59f1347 fix(evm): reject malformed CAIP-2 network identifiers in getEvmChainId (#3521)
• 6323ec7 fix(python): close literal-route bypass via percent-encoded path separator (#...
• 68b6fba docs: mark PayAI Facilitator as production-grade (#3539)
• Additional commits viewable in compare view

Updates @x402/fetch from 2.26.0 to 2.27.0

Commits

• 71eb9a5 chore: version python package  (#3554)
• 74ee0f5 chore(go): release (#3555)
• 5976943 chore: version typescript packages  (#3553)
• 1f3ccfc chore: harden verify-package-exports for @​x402 releases (#3550)
• 279f12c fix(go): match HTTP routes on escaped and decoded paths (#3543)
• 5d3a2b2 fix(ts): match HTTP routes on escaped and decoded paths (#3542)
• 7496533 feat: expand x402.org/protected routes (#3522)
• 59f1347 fix(evm): reject malformed CAIP-2 network identifiers in getEvmChainId (#3521)
• 6323ec7 fix(python): close literal-route bypass via percent-encoded path separator (#...
• 68b6fba docs: mark PayAI Facilitator as production-grade (#3539)
• Additional commits viewable in compare view

Updates viem from 2.56.8 to 2.57.0

Release notes

Sourced from viem's releases.

viem@2.57.0

Minor Changes

• #5138 6599af365a27476c9f9b7b6f2950941709807393 Thanks @​jxom! - Added createClientResolver to lazily resolve and cache typed clients across configured chains using a transport map or callback.

• #5140 8a5ef5b06400530e7a45b6b52ed01e49c42f34dd Thanks @​jxom! - viem/tempo: Added a Relay RPC handler with a composable plugin mechanism.

  import { createClient, Relay, Store } from "viem/tempo";
  const relay = Relay.create({
  client: createClient(),
  plugins: [
  Relay.multisig({ store: Store.memory() }),
  Relay.simulate(),
  Relay.feePayer(),
  Relay.feeToken(),
  ],
  });
  export default { fetch: relay.fetch };

Patch Changes

• #5136 d3b492aa4769a8fe05177799e3983bea2ae650ec Thanks @​Lukecele! - Added Kortana chain.

• #5128 51f9ad9595507c3a5032254b3bc1ed342af2ba68 Thanks @​cryptocandyio! - Added CandyChain.

• #5133 1106809071cea88eca868262ee7bab8a82081338 Thanks @​garywilson87! - Added the BlockDAG chain definition.

• #5145 f0bf794c2903663c8cf4c006ba1598bab6075ec1 Thanks @​fe-dudu! - Updated the Multicall3 deployment metadata for Creditcoin Devnet, Testnet, and Mainnet.

• #5130 33e3777a5291ec3553efcde025cf5d6037960002 Thanks @​HereForTheTechNFT! - Fixed getGame, getGames, getTimeToNextGame and getTimeToNextL2Output to treat a dispute game (or L2 output) at exactly the requested L2 block number as covering it.

• #5132 e713dba3b7e2751457952dc2ed6fde1fca2fbfeb Thanks @​gjija! - Fixed parseSiweMessage losing or truncating resources when Resources: appeared in the statement, URI, Request ID or a resource.

• #5142 e65f6640031af871622a4929d58a1593695c488c Thanks @​rubenmarcus! - Fixed waitForTransactionReceipt so concurrent calls for the same hash on one client each honor their own timeout, confirmations, pollingInterval, retryCount and checkReplacement instead of inheriting the first call's options.

viem@2.56.9

Patch Changes

• #5123 2068265d2fefb41da2ca672f7b8ef0d221efdbde Thanks @​rabbitmainnet! - Added Rabbit Chain Testnet (chain ID 9280) to viem/chains.

• #5124 4767ff7be7aed3845b617f8b16806d72469ea657 Thanks @​kyscott18! - Added the getStorageValues action for batch retrieval of contract storage slots.

• #5108 5a201d9a5996a836023bdb676c8d7c0f43f9c8fa Thanks @​Lukecele! - Added Plasma mainnet addresses for USDC and EURC.

• #5114 de663c98de19da2ffccdd1681fd616e6ed653b98 Thanks @​jxom! - Resynced Tempo contract ABIs and added the current committee address.

... (truncated)

Commits

• 31c874e ci: fix dependency audit and polling tests (#5149)
• 4ddf802 chore: version package (#5134)
• f0bf794 feat: add Creditcoin Multicall3 deployments (#5145)
• d3b492a feat(chains): add Kortana (chain 9002) (#5136)
• e65f664 fix: key waitForTransactionReceipt observer by call options (#5142)
• 38897e2 perf(tempo): reduce relay rpc calls (#5148)
• a89e103 docs(tempo): prefix relay changeset
• 8a5ef5b feat(tempo): relay handler (#5140)
• c0f16c4 ci: update zone image for no-proof settlement (#5143)
• 6599af3 feat: add multichain client resolver (#5138)
• Additional commits viewable in compare view

Updates ws from 8.21.3 to 8.22.0

Release notes

Sourced from ws's releases.

8.22.0

Features

• Introduced the protocols option (8b918b01).

Bug fixes

• Calling websocket.close() with invalid arguments no longer transitions the state to WebSocket.CLOSING (#2337).

Commits

• 297202c [dist] 8.22.0
• 8b918b0 [feature] Introduce the protocols option
• 73e03eb [ci] Update actions/setup-node action to v7
• d9b8954 [fix] Change the ready state after validating the arguments (#2337)
• See full diff in compare view

Updates @types/node from 26.6.2 to 26.6.3

Commits

• See full diff in compare view

Updates vitest from 5.0.1 to 5.0.2

Release notes

Sourced from vitest's releases.

v5.0.2

   🐞 Bug Fixes

• Bind process in case global is overwritten  -  by @​AriPerkkio in vitest-dev/vitest#11343 (0b792)
• detect-async-leaks:
  • Ignore process.stdio handles  -  by @​AriPerkkio in vitest-dev/vitest#11333 (0fd6b)
• expect:
  • Fix toMatchObject with asymmetric matchers  -  by @​ShreeBohara, Claude Opus 5, @​hi-ogawa, Hiroshi Ogawa and Codex (GPT-5) in vitest-dev/vitest#11100 (42523)
• jsdom:
  • Fix Request with Blob body on jsdom 28+  -  by @​harshit-d3v in vitest-dev/vitest#11295 (d1c3e)
• reporter:
  • agent to respect --silent  -  by @​Raj4478 and @​AriPerkkio in vitest-dev/vitest#11271 (5b95e)
• reporters:
  • Handle concurrent createReport calls  -  by @​7rulnik in vitest-dev/vitest#11278 (e8e55)
  • hanging-process to use ESM entrypoint  -  by @​AriPerkkio in vitest-dev/vitest#11316 (4e91e)
• spy:
  • Fix stack overflow when spying Set.prototype.add  -  by @​fengmk2 in vitest-dev/vitest#11299 (a0a93)
• ui:
  • Persist authentication cookie beyond current browser session  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in vitest-dev/vitest#11066 (f8819)

    View changes on GitHub

Commits

• 428e2e5 chore: release v5.0.2 (#11357)
• 0b79231 fix: bind process in case global is overwritten (#11343)
• 597df56 docs: correct stale config defaults (#11354)
• ea1c44f docs: sequence.setupFiles default is 'list' (#11351)
• 0fd6b97 fix(detect-async-leaks): ignore process.stdio handles (#11333)
• 4e91e56 fix(reporters): hanging-process to use ESM entrypoint (#11316)
• 1a57929 docs(browser): fix locators.exact default (#11338)
• 5b95efb fix(reporter): agent to respect --silent (#11271)
• f58a209 docs: correct benchmark.exclude and watch defaults (#11268)
• d1c3ecc fix(jsdom): fix Request with Blob body on jsdom 28+ (#11295)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.