Skip to content

Bump the npm-production group with 3 updates#45

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-production-0a4b43b4f7
Open

Bump the npm-production group with 3 updates#45
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-production-0a4b43b4f7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 24, 2026

Copy link
Copy Markdown

Bumps the npm-production group with 3 updates: accounts, mppx and viem.

Updates accounts from 0.15.2 to 0.15.5

Release notes

Sourced from accounts's releases.

accounts@0.15.5

Patch Changes

  • 77a68ab: Fixed the Privy React adapter to select embedded wallets and continue when an embedded wallet is available before Privy reports wallet readiness.

accounts@0.15.3

Patch Changes

  • 7480125: Forward fee payer URLs to JSON-RPC wallets.
Changelog

Sourced from accounts's changelog.

0.15.5

Patch Changes

  • 77a68ab: Fixed the Privy React adapter to select embedded wallets and continue when an embedded wallet is available before Privy reports wallet readiness.

0.15.4

Patch Changes

  • 0a39059: Fixed MPP clients routing chain RPCs through the active chain instead of the requested chain.

0.15.3

Patch Changes

  • 7480125: Forward fee payer URLs to JSON-RPC wallets.
Commits

Updates mppx from 0.8.12 to 0.8.14

Release notes

Sourced from mppx's releases.

mppx@0.8.14

Patch Changes

  • a8e73b7: Replaced per-sender sponsored charge serialization with durable atomic aggregate fee-budget reservations. Independent expiring-nonce transactions ran concurrently, waited for capacity when the sponsor budget was full, and retained pending exposure until receipt reconciliation or transaction expiry.
  • 6156f80: Added an optional topUpAmount policy for batching automatic Tempo session top-ups while preserving exact-shortfall behavior by default.
  • 7711982: Added a single-file Hono Tempo API relay-backed charge example.
  • 8935947: Fixed automatic session top-ups before signing HTTP, SSE, and WebSocket credentials, including preserving a durable resumed channel after a committed top-up when the paid request failed.
  • 9cc198e: Fixed Tempo relay verification fallback and restricted server lifecycle hook combinations to unambiguous configurations.
  • a3a0d82: Use expiring nonces for sponsored and unsponsored Tempo session management transactions.
  • 4fbcd0a: Added automatic stablecoin swaps for Tempo session channel opens and top-ups.
  • 0f91d5d: Marked legacy combined payment verification hooks as deprecated in favor of separate validation and broadcast hooks.
  • 9932a58: Added structured error codes and diagnostics for payment validation failures.
  • 8f2e847: Added Tempo API relay configuration for server-side charge validation and broadcast.
  • c7c1e4b: Added generic validate/broadcast credential lifecycle APIs and a Tempo charge implementation; Tempo session credential handling remained unchanged.

mppx@0.8.13

Patch Changes

  • d807f92: Improved agent environment detection for automatic JSON validate output.

    Added SDK guidance when validate could not find an OpenAPI discovery document.

  • 2ff74a5: Fixed server method handlers to require request fields that were not configured as defaults, and exposed Tempo's resolved currency and decimals as defaults.

  • bd9b05c: Added explicit per-message amounts and cancellation signals to manual WebSocket session metering.

  • ae30448: Fixed server-driven Tempo session close and settlement transactions when the configured account is also the fee payer.

  • 92c7b6e: Fixed hosted fee payer routing for caller-provided custom Viem transports.

  • a20358e: Add a Node SQLite session ChannelStore that defaults to Tempo Wallet's channels database and can read existing wallet-cli v2 session rows.

  • 8e95155: Added persistent CLI payment sessions with automatic reuse, inspection, and explicit closing.

  • 8e71221: Rehydrate Tempo client sessions from server snapshots, reconciling the last accepted voucher with on-chain channel state before continuing cumulative payments.

  • fb45074: Include the highest signed voucher in Tempo session bootstrap snapshots so cold clients can safely validate and resume an existing channel.

  • 0f256ef: Added onSessionSettlement hook for visibility into on-chain session settlement transactions, with chain-agnostic context including trigger, txHash, channelId, cumulative amount, and incremental delta.

Changelog

Sourced from mppx's changelog.

0.8.14

Patch Changes

  • a8e73b7: Replaced per-sender sponsored charge serialization with durable atomic aggregate fee-budget reservations. Independent expiring-nonce transactions ran concurrently, waited for capacity when the sponsor budget was full, and retained pending exposure until receipt reconciliation or transaction expiry.
  • 6156f80: Added an optional topUpAmount policy for batching automatic Tempo session top-ups while preserving exact-shortfall behavior by default.
  • 7711982: Added a single-file Hono Tempo API relay-backed charge example.
  • 8935947: Fixed automatic session top-ups before signing HTTP, SSE, and WebSocket credentials, including preserving a durable resumed channel after a committed top-up when the paid request failed.
  • 9cc198e: Fixed Tempo relay verification fallback and restricted server lifecycle hook combinations to unambiguous configurations.
  • a3a0d82: Use expiring nonces for sponsored and unsponsored Tempo session management transactions.
  • 4fbcd0a: Added automatic stablecoin swaps for Tempo session channel opens and top-ups.
  • 0f91d5d: Marked legacy combined payment verification hooks as deprecated in favor of separate validation and broadcast hooks.
  • 9932a58: Added structured error codes and diagnostics for payment validation failures.
  • 8f2e847: Added Tempo API relay configuration for server-side charge validation and broadcast.
  • c7c1e4b: Added generic validate/broadcast credential lifecycle APIs and a Tempo charge implementation; Tempo session credential handling remained unchanged.

0.8.13

Patch Changes

  • d807f92: Improved agent environment detection for automatic JSON validate output.

    Added SDK guidance when validate could not find an OpenAPI discovery document.

  • 2ff74a5: Fixed server method handlers to require request fields that were not configured as defaults, and exposed Tempo's resolved currency and decimals as defaults.

  • bd9b05c: Added explicit per-message amounts and cancellation signals to manual WebSocket session metering.

  • ae30448: Fixed server-driven Tempo session close and settlement transactions when the configured account is also the fee payer.

  • 92c7b6e: Fixed hosted fee payer routing for caller-provided custom Viem transports.

  • a20358e: Add a Node SQLite session ChannelStore that defaults to Tempo Wallet's channels database and can read existing wallet-cli v2 session rows.

  • 8e95155: Added persistent CLI payment sessions with automatic reuse, inspection, and explicit closing.

  • 8e71221: Rehydrate Tempo client sessions from server snapshots, reconciling the last accepted voucher with on-chain channel state before continuing cumulative payments.

  • fb45074: Include the highest signed voucher in Tempo session bootstrap snapshots so cold clients can safely validate and resume an existing channel.

  • 0f256ef: Added onSessionSettlement hook for visibility into on-chain session settlement transactions, with chain-agnostic context including trigger, txHash, channelId, cumulative amount, and incremental delta.

Commits
  • 0bf4dd0 chore: version packages (#692)
  • 9cc198e fix: tighten relay lifecycle hooks (#703)
  • 90e236e fix(tempo): preserve committed session top-ups (#702)
  • a8e73b7 fix(tempo): coordinate parallel sponsor fee exposure (#699)
  • 4fbcd0a feat: auto-swap session deposits (#693)
  • 8935947 fix: top up sessions before signing credentials (#687)
  • a3a0d82 fix(tempo): expire session management transactions (#697)
  • 0f91d5d docs: clarify validation and verification hooks (#700)
  • 70be339 docs(examples): use Tempo relay configuration (#696)
  • 8f2e847 feat(tempo): add API relay configuration (#695)
  • Additional commits viewable in compare view

Updates viem from 2.55.2 to 2.55.8

Release notes

Sourced from viem's releases.

viem@2.55.8

Patch Changes

viem@2.55.7

Patch Changes

viem@2.55.5

Patch Changes

viem@2.55.4

Patch Changes

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the npm-production group with 3 updates
ab8ad16 
Bumps the npm-production group with 3 updates: [accounts](https://github.com/tempoxyz/accounts), [mppx](https://github.com/wevm/mppx) and [viem](https://github.com/wevm/viem).


Updates `accounts` from 0.15.2 to 0.15.5
- [Release notes](https://github.com/tempoxyz/accounts/releases)
- [Changelog](https://github.com/tempoxyz/accounts/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tempoxyz/accounts/compare/accounts@0.15.2...accounts@0.15.5)

Updates `mppx` from 0.8.12 to 0.8.14
- [Release notes](https://github.com/wevm/mppx/releases)
- [Changelog](https://github.com/wevm/mppx/blob/main/CHANGELOG.md)
- [Commits](https://github.com/wevm/mppx/compare/mppx@0.8.12...mppx@0.8.14)

Updates `viem` from 2.55.2 to 2.55.8
- [Release notes](https://github.com/wevm/viem/releases)
- [Commits](https://github.com/wevm/viem/compare/viem@2.55.2...viem@2.55.8)

---
updated-dependencies:
- dependency-name: accounts
  dependency-version: 0.15.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: mppx
  dependency-version: 0.8.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: viem
  dependency-version: 2.55.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 24, 2026
@socket-security

socket-security Bot commented Jul 24, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Addedmppx@​0.8.13661009898100
Addedaccounts@​0.15.3791009999100
Addedviem@​2.55.89710010098100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants