Skip to content

build(deps): Bump ox from 0.7.0 to 1.8.12 - #9053

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/ox-1.8.12
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/ox-1.8.12

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Contributor

Bumps ox from 0.7.0 to 1.8.12.

Release notes

Sourced from ox's releases.

ox@1.8.12

Patch Changes

  • #534 93bc744 Thanks @​jxom! - ox/tempotempoxyz/tempo#8595AccountConfig.getAddress no longer takes a factory option.

ox@1.8.10

Patch Changes

  • #526 71decbb Thanks @​jxom! - Fixed AbiEvent.assertArgs and AbiEvent.extractLogs args filters not matching non-indexed string and bytes values, data-decoded indexed values in non-strict mode, or bytes values in a different hex case.

  • #526 71decbb Thanks @​jxom! - Fixed AbiItem.fromAbi overload resolution for arrays with a 0 in the element size (e.g. uint160[]) or the wrong fixed length, tuple objects with reordered keys, and ambiguous address[] overloads.

  • #526 71decbb Thanks @​jxom! - Added an even option to Hex.assert and Hex.validate that rejects hex values with an odd number of hexadecimal characters.

  • #526 71decbb Thanks @​jxom! - Fixed RpcTransport.fromHttp throwing when fetchOptions.signal is set on runtimes without AbortSignal.any.

  • #526 71decbb Thanks @​jxom! - Fixed RpcTransport.fromHttp not applying timeout to reading the response body.

  • #526 71decbb Thanks @​jxom! - Fixed Signature.toHex and Signature.toBytes producing a malformed signature when r or s is shorter than 32 bytes.

  • #526 71decbb Thanks @​jxom! - Fixed TypedData.extractEip712DomainTypes (and TypedData.encode, TypedData.getSignPayload, TypedData.hashDomain) dropping an empty version from the EIP712Domain type.

ox@1.8.9

Patch Changes

  • #518 010d6b5 Thanks @​jxom! - Added AccountConfig.fromUpgrade for deriving the version-one config an account installs when it migrates in place with upgradeAccount (TIP-1113).

  • #518 010d6b5 Thanks @​jxom! - Fixed AccountSimulation.toRpc passing through empty and 3-byte keyData, which the Tempo node rejects, by shimming them into a 2-byte length hint.

  • #518 010d6b5 Thanks @​jxom! - Renamed the Tempo configurable account hash domains from tempo:multisig:* to tempo:configurable-account:*tempoxyz/tempo#8502AccountConfig.getAddress, AccountConfig.getCommitment, and AccountConfig.getSignPayload result.

  • #518 010d6b5 Thanks @​jxom! - Renamed the configurable account RPC key type from multisig to configurableAccount and TransactionRequest.multisigSimulation to configurableAccountSimulation, and added the optional AccountSimulation grant signer, to match the Tempo node.

    - { keyType: 'multisig', multisigSimulation: spec }
    + { keyType: 'configurableAccount', configurableAccountSimulation: spec }
  • #518 010d6b5 Thanks @​jxom! - Stopped requiring an account binding on configurable account key grants, so KeyAuthorization and its zod schemas accept every grant the Tempo node accepts, and deprecated KeyAuthorization.MissingAccountError, which is no longer thrown.

ox@1.8.8

Patch Changes

  • #516 36dce4a Thanks @​jxom! - Fixed AbiItem.getSignature (and AbiFunction.getSelector, AbiEvent.getSelector) dropping the first parameter when a space directly follows an opening parenthesis.

ox@1.8.7

Patch Changes

  • #508 42a84e6 Thanks @​jxom! - Renamed the Tempo multisig account APIs to configurable accounts (TIP-1107), including the account_ relay RPC namespace, raised AccountConfig.maxThreshold to 255 per TIP-1114, and added AccountConfig.update for deriving the next config after an owner update.

... (truncated)

Changelog

Sourced from ox's changelog.

1.8.12

Patch Changes

  • #534 93bc744 Thanks @​jxom! - ox/tempotempoxyz/tempo#8595AccountConfig.getAddress no longer takes a factory option.

1.8.11

Patch Changes

  • #530 e8f3251 Thanks @​jxom! - Fixed Authorization.fromRpc, Authorization.fromTuple, Authorization.toTuple, and the zod Authorization schemas rejecting an EIP-7702 authorization yParity above 1, which made valid transactions fail to deserialize, serialize, or hash.

  • #530 e8f3251 Thanks @​jxom! - Fixed Siwe.createMessage rejecting domains with a punycode (internationalized) top-level domain, such as example.xn--p1ai, and accepting top-level domain labels longer than 63 characters.

1.8.10

Patch Changes

  • #526 71decbb Thanks @​jxom! - Fixed AbiEvent.assertArgs and AbiEvent.extractLogs args filters not matching non-indexed string and bytes values, data-decoded indexed values in non-strict mode, or bytes values in a different hex case.

  • #526 71decbb Thanks @​jxom! - Fixed AbiItem.fromAbi overload resolution for arrays with a 0 in the element size (e.g. uint160[]) or the wrong fixed length, tuple objects with reordered keys, and ambiguous address[] overloads.

  • #526 71decbb Thanks @​jxom! - Added an even option to Hex.assert and Hex.validate that rejects hex values with an odd number of hexadecimal characters.

  • #526 71decbb Thanks @​jxom! - Fixed RpcTransport.fromHttp throwing when fetchOptions.signal is set on runtimes without AbortSignal.any.

  • #526 71decbb Thanks @​jxom! - Fixed RpcTransport.fromHttp not applying timeout to reading the response body.

  • #526 71decbb Thanks @​jxom! - Fixed Signature.toHex and Signature.toBytes producing a malformed signature when r or s is shorter than 32 bytes.

  • #526 71decbb Thanks @​jxom! - Fixed TypedData.extractEip712DomainTypes (and TypedData.encode, TypedData.getSignPayload, TypedData.hashDomain) dropping an empty version from the EIP712Domain type.

1.8.9

Patch Changes

  • #518 010d6b5 Thanks @​jxom! - Added AccountConfig.fromUpgrade for deriving the version-one config an account installs when it migrates in place with upgradeAccount (TIP-1113).

  • #518 010d6b5 Thanks @​jxom! - Fixed AccountSimulation.toRpc passing through empty and 3-byte keyData, which the Tempo node rejects, by shimming them into a 2-byte length hint.

  • #518 010d6b5 Thanks @​jxom! - Renamed the Tempo configurable account hash domains from tempo:multisig:* to tempo:configurable-account:*tempoxyz/tempo#8502AccountConfig.getAddress, AccountConfig.getCommitment, and AccountConfig.getSignPayload result.

  • #518 010d6b5 Thanks @​jxom! - Renamed the configurable account RPC key type from multisig to configurableAccount and TransactionRequest.multisigSimulation to configurableAccountSimulation, and added the optional AccountSimulation grant signer, to match the Tempo node.

    - { keyType: 'multisig', multisigSimulation: spec }
    + { keyType: 'configurableAccount', configurableAccountSimulation: spec }
  • #518 010d6b5 Thanks @​jxom! - Stopped requiring an account binding on configurable account key grants, so KeyAuthorization and its zod schemas accept every grant the Tempo node accepts, and deprecated KeyAuthorization.MissingAccountError, which is no longer thrown.

... (truncated)

Commits
  • 280016f chore: version packages (#536)
  • c01b351 chore: publish prereleases to npm instead of pkg.pr.new (#537)
  • 5b59026 chore: version packages (#533)
  • 93bc744 feat(tempo): derive configurable account addresses without a factory (#534)
  • e8f3251 fix: port recent viem fixes to Siwe and Authorization (#530)
  • c9f6784 chore: version packages (#529)
  • 71decbb fix: port recent viem fixes to AbiItem, AbiEvent, Signature, `TypedData...
  • 88e9133 chore: bump node and bun (#522)
  • 2cc4b8f chore: version packages (#521)
  • 010d6b5 feat(tempo): sync configurable accounts with Tempo main (#518)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for ox since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [ox](https://github.com/wevm/ox) from 0.7.0 to 1.8.12.
- [Release notes](https://github.com/wevm/ox/releases)
- [Changelog](https://github.com/wevm/ox/blob/main/CHANGELOG.md)
- [Commits](https://github.com/wevm/ox/compare/ox@0.7.0...ox@1.8.12)

---
updated-dependencies:
- dependency-name: ox
  dependency-version: 1.8.12
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the Dependencies Pull requests that update a dependency file label Nov 2, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner November 2, 2026 21:13
@dependabot dependabot Bot added the javascript Pull requests that update Javascript code label Nov 2, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner November 2, 2026 21:13
@vercel

vercel Bot commented Nov 2, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
docs-v2 Error Error Nov 2, 2026 9:15pm UTC
nebula Error Error Nov 2, 2026 9:15pm UTC
thirdweb_playground Error Error Nov 2, 2026 9:15pm UTC
thirdweb-www Error Error Nov 2, 2026 9:15pm UTC
wallet-ui Error Error Nov 2, 2026 9:15pm UTC

@coderabbitai

coderabbitai Bot commented Nov 2, 2026

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 20766b60-d75c-49f3-8cdf-a23c11da24f4

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

@github-actions github-actions Bot added packages SDK Involves changes to the thirdweb SDK labels Nov 2, 2026
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addedzod@​4.6.710010010095100
Updatedox@​0.9.7 ⏵ 1.8.121001009997 +1100

View full report

This branch had an error being deployed

5 failed deployments
Preview – thirdweb_playground — 69e57599 Deployed Nov 2, 2026 by vercel[bot]
Preview – nebula — 69e57599 Deployed Nov 2, 2026 by vercel[bot]
Preview – thirdweb-www — 69e57599 Deployed Nov 2, 2026 by vercel[bot]
Preview – wallet-ui — 69e57599 Deployed Nov 2, 2026 by vercel[bot]
Preview – docs-v2 — 69e57599 Deployed Nov 2, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code packages SDK Involves changes to the thirdweb SDK

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants