Skip to content

chore(deps): bump the production-major group across 1 directory with 10 updates#2288

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/production-major-6c0c01eb23
Closed

chore(deps): bump the production-major group across 1 directory with 10 updates#2288
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/production-major-6c0c01eb23

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 13, 2026

Bumps the production-major group with 10 updates in the / directory:

Package From To
@noble/hashes 1.8.0 2.0.1
@hcaptcha/react-hcaptcha 1.12.1 2.0.0
@hookform/resolvers 4.0.0 5.2.2
zod 3.25.76 4.3.5
react-syntax-highlighter 15.6.6 16.1.0
wagmi 2.19.4 3.3.2
@fastify/static 8.3.0 9.0.0
eslint-plugin-react-hooks 5.2.0 7.0.1
globals 16.5.0 17.0.0
non.geist 1.0.4 2.0.1

Updates @noble/hashes from 1.8.0 to 2.0.1

Release notes

Sourced from @​noble/hashes's releases.

2.0.1

  • .js extension must be used for all modules
    • Old: @noble/hashes/sha3
    • New: @noble/hashes/sha3.js
    • This simplifies working in browsers natively without transpilers
    • This was planned for 2.0.0, but was accidentally left out
  • package.json: specify exported submodules to ensure typescript autocompletion
  • scrypt: Fix error message for maxmem check by @​ChALkeR in paulmillr/noble-hashes#121
  • scrypt: 4% speed-up by @​ChALkeR in paulmillr/noble-hashes#122

Full Changelog: paulmillr/noble-hashes@2.0.0...2.0.1

2.0.0

High-level

  • The package is now ESM-only. ESM can finally be loaded from common.js on node v20.19+
    • Node v20.19 is now the minimum required version
    • Package imports now work correctly in bundler-less environments, such as browsers
    • Reduces npm package size (traffic consumed): 152KB => 136KB
    • Reduces unpacked npm size (on-disk space): 1.1MB => 669KB
  • Make bundle sizes smaller, compared to v1.x
  • .js extension must be used for all modules
    • Old: @noble/hashes/sha3
    • New: @noble/hashes/sha3.js
    • This simplifies working in browsers natively without transpilers

Changes

  • Only allow Uint8Array as hash inputs, prohibit string
    • Strict validation checks improve security
    • To replicate previous behavior, use utils.utf8ToBytes
  • Rename / remove some modules for consistency. Previously, sha384 resided in sha512, which was weird
    • sha256, sha512 => sha2.js (consistent with sha3.js)
    • blake2b, blake2s => blake2.js (consistent with blake3.js, blake1.js)
    • ripemd160, sha1, md5 => legacy.js (all low-security hashes are there)
    • _assert => utils.js
    • crypto internal module got removed: use built-in WebCrypto instead
  • Improve typescript types & option autocomplete
  • Upgrade typescript compilation env to ts5.9 and es2022
  • Massively improve error messages, make them more descriptive

Full Changelog: paulmillr/noble-hashes@1.8.0...2.0.0

Commits
  • d30e070 Release 2.0.1.
  • 4485505 anumber: fix error msg
  • dd62b81 pkg.json: add back export maps for text editor autocompletion
  • 59fda2c Merge pull request #122 from ChALkeR/chalker/perf/scrypt/0
  • 90dfe17 adjust comment
  • e6099ae add a comment
  • 15ee761 perf: tiny improvement in scrypt
  • 30f8780 Merge pull request #121 from ChALkeR/patch-2
  • f43e04b Fix error message for scrypt maxmem check
  • b048d14 Release 2.0.0 to JSR.
  • Additional commits viewable in compare view

Updates @hcaptcha/react-hcaptcha from 1.12.1 to 2.0.0

Release notes

Sourced from @​hcaptcha/react-hcaptcha's releases.

2.0.0

What's Changed

Full Changelog: hCaptcha/react-hcaptcha@1.17.4...v2.0.0

1.17.4

What's Changed

  • chore(deps): bump qs and express
  • fix: Fix imports/exports for Hooks

Full Changelog: hCaptcha/react-hcaptcha@1.17.3...1.17.4

1.17.3

What's Changed

Full Changelog: hCaptcha/react-hcaptcha@1.17.2...1.17.3

1.17.2

What's Changed

New Contributors

Full Changelog: hCaptcha/react-hcaptcha@1.17.1...1.17.2

1.17.1

What's Changed

New Contributors

Full Changelog: hCaptcha/react-hcaptcha@1.17.0...1.17.1

1.17.0

What's Changed

Full Changelog: hCaptcha/react-hcaptcha@1.16.0...1.17.0

... (truncated)

Commits
  • 5c6a8fe feat(esbuild): Switch to using esbuild and clean up repo (#346)
  • aedb4a4 fix: Fix imports/exports (#341)
  • 6df384e chore(deps): bump qs and express (#339)
  • edfa7fb fix: Add type module to ESM build output (#338)
  • 74d96ff fix: Add missing fields in HCaptchaProps (#335)
  • 3170803 fix: Add TypeScript types to package.json exports for ESM compatibility (#326)
  • a470bdf feat(hooks): Add Provider/Hook pattern (#323)
  • 3604bec chore: Clean up workflows (#321)
  • 24cd456 chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2 (#320)
  • 3cb0933 feat(package): Bump hCaptcha loader version (#319)
  • Additional commits viewable in compare view

Updates @hookform/resolvers from 4.0.0 to 5.2.2

Release notes

Sourced from @​hookform/resolvers's releases.

v5.2.2

5.2.2 (2025-09-14)

Bug Fixes

  • zod: fix output type for Zod 4 resolver (#803) (e95721d)

v5.2.1

5.2.1 (2025-07-29)

Bug Fixes

v5.2.0

5.2.0 (2025-07-25)

Features

  • ajv: add ajv-formats for ajvResolver (#797) (f040039)

v5.1.1

5.1.1 (2025-06-09)

Bug Fixes

v5.1.0

5.1.0 (2025-06-07)

Features

  • support Zod 4, Zod v4 mini, and retains compatibility with Zod v3. (#777) (8d083bd)

v5.0.1

5.0.1 (2025-04-02)

Bug Fixes

... (truncated)

Commits

Updates zod from 3.25.76 to 4.3.5

Release notes

Sourced from zod's releases.

v4.3.5

Commits:

  • 21afffdb42ccab554036312e33fed0ea3cb8f982 [Docs] Update migration guide docs for deprecation of message (#5595)
  • e36743e513aadb307b29949a80d6eb0dcc8fc278 Improve mini treeshaking
  • 0cdc0b8597999fd9ca99767b912c1e82c1ff2d6c 4.3.5

v4.3.4

Commits:

  • 1a8bea3b474eada6f219c163d0d3ad09fadabe72 Add integration tests
  • e01cd02b2f23d7e9078d3813830b146f8a2258b4 Support patternProperties for looserecord (#5592)
  • 089e5fbb0f58ce96d2c4fb34cd91724c78df4af5 Improve looseRecord docs
  • decef9c418d9a598c3f1bada06891ba5d922c5cd Fix lint
  • 9443aab00d44d5d5f4a7eada65fc0fc851781042 Drop iso time in fromJSONSchema
  • 66bda7491a1b9eab83bdeec0c12f4efc7290bd48 Remove .refine() from ZodMiniType
  • b4ab94ca608cd5b581bfc12b20dd8d95b35b3009 4.3.4

v4.3.3

Commits:

  • f3b2151959d215d405f54dff3c7ab3bf1fd887ca v4.3.3

v4.3.2

Commits:

  • bf96635d243118de6e4f260077aa137453790bf6 Loosen strictObjectinside intersection (#5587)
  • f71dc0182ab0f0f9a6be6295b07faca269e10179 Remove Juno (#5590)
  • 0f41e5a12a43e6913c9dcb501b2b5136ea86500d 4.3.2

v4.3.1

Commits:

  • 0fe88407a4149c907929b757dc6618d8afe998fc allow non-overwriting extends with refinements. 4.3.1

v4.3.0

This is Zod's biggest release since 4.0. It addresses several of Zod's longest-standing feature requests.

z.fromJSONSchema()

Convert JSON Schema to Zod (#5534, #5586)

You can now convert JSON Schema definitions directly into Zod schemas. This function supports JSON Schema "draft-2020-12", "draft-7", "draft-4", and OpenAPI 3.0.

import * as z from "zod";
const schema = z.fromJSONSchema({
type: "object",
properties: {
</tr></table>

... (truncated)

Commits

Updates react-syntax-highlighter from 15.6.6 to 16.1.0

Release notes

Sourced from react-syntax-highlighter's releases.

v16.1.0

What's Changed

New Contributors

Full Changelog: react-syntax-highlighter/react-syntax-highlighter@v16.0.0...v16.1.0

v16.0.0

New major version!

16.0.0 brings a major version update to the refractor dependency, which remedies some security issues but could result in a breaking change to your app's dependencies. Please update with care.

What's Changed

New Contributors

Full Changelog: react-syntax-highlighter/react-syntax-highlighter@v15.6.6...v16.0.0

Commits

Updates wagmi from 2.19.4 to 3.3.2

Release notes

Sourced from wagmi's releases.

[email protected]

Patch Changes

  • Updated query internals. (4fefa57)

  • Updated dependencies [4fefa57]:

    • @​wagmi/core@​3.2.2
    • @​wagmi/connectors@​7.1.2

[email protected]

Patch Changes

  • Updated dependencies [a373b50]:
    • @​wagmi/core@​3.2.1
    • @​wagmi/connectors@​7.1.1

[email protected]

Minor Changes

  • Updated to [email protected] with Tempo Moderato support. (#4940)

    Breaking Changes (Tempo)

    • Renamed reward.useStartreward.useDistribute
    • Renamed reward.useStartSyncreward.useDistributeSync
    • Renamed reward.useGetTotalPerSecondreward.useGetGlobalRewardPerToken
    • Renamed reward.useWatchRewardScheduledreward.useWatchRewardDistributed
    • Removed nonce.useNonceKeyCount
    • Removed nonce.useWatchActiveKeyCountChanged
    • Removed amm.useWatchFeeSwap

    New Features (Tempo)

    • Added dex.useCancelStale hook
    • Added dex.useCancelStaleSync hook

Patch Changes

  • Updated dependencies [2ee3f55]:
    • @​wagmi/core@​3.2.0
    • @​wagmi/connectors@​8.0.0

[email protected]

Minor Changes

  • Added first-class support and extension for Tempo via /tempo entrypoint. (#4922)

Patch Changes

... (truncated)

Changelog

Sourced from wagmi's changelog.

3.3.2

Patch Changes

  • Updated query internals. (4fefa57)

  • Updated dependencies [4fefa57]:

    • @​wagmi/core@​3.2.2
    • @​wagmi/connectors@​7.1.2

3.3.1

Patch Changes

  • Updated dependencies [a373b50]:
    • @​wagmi/core@​3.2.1
    • @​wagmi/connectors@​7.1.1

3.3.0

Minor Changes

  • Updated to [email protected] with Tempo Moderato support. (#4940)

    Breaking Changes (Tempo)

    • Renamed reward.useStartreward.useDistribute
    • Renamed reward.useStartSyncreward.useDistributeSync
    • Renamed reward.useGetTotalPerSecondreward.useGetGlobalRewardPerToken
    • Renamed reward.useWatchRewardScheduledreward.useWatchRewardDistributed
    • Removed nonce.useNonceKeyCount
    • Removed nonce.useWatchActiveKeyCountChanged
    • Removed amm.useWatchFeeSwap

    New Features (Tempo)

    • Added dex.useCancelStale hook
    • Added dex.useCancelStaleSync hook

Patch Changes

  • Updated dependencies [2ee3f55]:
    • @​wagmi/core@​3.2.0
    • @​wagmi/connectors@​8.0.0

3.2.0

Minor Changes

  • Added first-class support and extension for Tempo via /tempo entrypoint. (#4922)

... (truncated)

Commits

Updates @fastify/static from 8.3.0 to 9.0.0

Release notes

Sourced from @​fastify/static's releases.

v9.0.0

What's Changed

Full Changelog: fastify/fastify-static@v8.3.0...v9.0.0

Commits

Updates eslint-plugin-react-hooks from 5.2.0 to 7.0.1

Changelog

Sourced from eslint-plugin-react-hooks's changelog.

7.0.1

  • Disallowed passing inline useEffectEvent values as JSX props to guard against accidental propagation. (#34820 by @​jf-eirinha)
  • Switch to export = so eslint-plugin-react-hooks emits correct types for consumers in Node16 ESM projects. (#34949 by @​karlhorky)
  • Tightened the typing of configs.flat so the configs export is always defined. (#34950 by @​poteto)
  • Fix named import runtime errors. (#34951, #34953 by @​karlhorky)

7.0.0

This release slims down presets to just 2 configurations (recommended and recommended-latest), and all compiler rules are enabled by default.

  • Breaking: Removed recommended-latest-legacy and flat/recommended configs. The plugin now provides recommended (legacy and flat configs with all recommended rules), and recommended-latest (legacy and flat configs with all recommended rules plus new bleeding edge experimental compiler rules). (@​poteto in #34757)

6.1.1

Note: 6.1.0 accidentally allowed use of recommended without flat config, causing errors when used with ESLint v9's defineConfig() helper. This has been fixed in 6.1.1.

6.1.0

Note: Version 6.0.0 was mistakenly released and immediately deprecated and untagged on npm. This is the first official 6.x major release and includes breaking changes.

  • Breaking: Require Node.js 18 or newer. (@​michaelfaith in #32458)
  • Breaking: Flat config is now the default recommended preset. Legacy config moved to recommended-legacy. (@​michaelfaith in #32457)
  • New Violations: Disallow calling use within try/catch blocks. (@​poteto in #34040)
  • New Violations: Disallow calling useEffectEvent functions in arbitrary closures. (@​jbrown215 in #33544)
  • Handle React.useEffect in addition to useEffect in rules-of-hooks. (@​Ayc0 in #34076)
  • Added react-hooks settings config option that to accept additionalEffectHooks that are used across exhaustive-deps and rules-of-hooks rules. (@​jbrown215) in #34497

6.0.0

Accidentally released. See 6.1.0 for the actual changes.

Commits

Updates globals from 16.5.0 to 17.0.0

Release notes

Sourced from globals's releases.

v17.0.0

Breaking

  • Split audioWorklet environment from browser (#320) 7bc293e

Improvements

  • Update globals (#329) ebe1063
  • Get all browser globals from both chrome and firefox (#321) 59ceff8
  • Add bunBuiltin environment (#324) 1bc6e3b
  • Add denoBuiltin environment (#324) 1bc6e3b
  • Add paintWorklet environment (#323) 4b78f56
  • Add sharedWorker environment (#322) 4a02a85

sindresorhus/globals@v16.5.0...v17.0.0

Commits

Updates non.geist from 1.0.4 to 2.0.1

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added the D4-dependencies Package dependencies label Jan 13, 2026
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/production-major-6c0c01eb23 branch 2 times, most recently from 902ee8c to 7564a2a Compare January 19, 2026 09:57
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/production-major-6c0c01eb23 branch 2 times, most recently from 366dc41 to 3657ec8 Compare January 26, 2026 09:35
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/production-major-6c0c01eb23 branch from 3657ec8 to 987f03d Compare January 29, 2026 16:33
…10 updates

Bumps the production-major group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@noble/hashes](https://github.com/paulmillr/noble-hashes) | `1.8.0` | `2.0.1` |
| [@hcaptcha/react-hcaptcha](https://github.com/hCaptcha/react-hcaptcha) | `1.12.1` | `2.0.0` |
| [@hookform/resolvers](https://github.com/react-hook-form/resolvers) | `4.0.0` | `5.2.2` |
| [zod](https://github.com/colinhacks/zod) | `3.25.76` | `4.3.5` |
| [react-syntax-highlighter](https://github.com/react-syntax-highlighter/react-syntax-highlighter) | `15.6.6` | `16.1.0` |
| [wagmi](https://github.com/wevm/wagmi/tree/HEAD/packages/react) | `2.19.4` | `3.3.2` |
| [@fastify/static](https://github.com/fastify/fastify-static) | `8.3.0` | `9.0.0` |
| [eslint-plugin-react-hooks](https://github.com/facebook/react/tree/HEAD/packages/eslint-plugin-react-hooks) | `5.2.0` | `7.0.1` |
| [globals](https://github.com/sindresorhus/globals) | `16.5.0` | `17.0.0` |
| [non.geist](https://github.com/contigen/non.geist) | `1.0.4` | `2.0.1` |



Updates `@noble/hashes` from 1.8.0 to 2.0.1
- [Release notes](https://github.com/paulmillr/noble-hashes/releases)
- [Commits](paulmillr/noble-hashes@1.8.0...2.0.1)

Updates `@hcaptcha/react-hcaptcha` from 1.12.1 to 2.0.0
- [Release notes](https://github.com/hCaptcha/react-hcaptcha/releases)
- [Commits](hCaptcha/react-hcaptcha@1.12.1...2.0.0)

Updates `@hookform/resolvers` from 4.0.0 to 5.2.2
- [Release notes](https://github.com/react-hook-form/resolvers/releases)
- [Commits](react-hook-form/resolvers@v4.0.0...v5.2.2)

Updates `zod` from 3.25.76 to 4.3.5
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v3.25.76...v4.3.5)

Updates `react-syntax-highlighter` from 15.6.6 to 16.1.0
- [Release notes](https://github.com/react-syntax-highlighter/react-syntax-highlighter/releases)
- [Changelog](https://github.com/react-syntax-highlighter/react-syntax-highlighter/blob/master/CHANGELOG.MD)
- [Commits](react-syntax-highlighter/react-syntax-highlighter@v15.6.6...v16.1.0)

Updates `wagmi` from 2.19.4 to 3.3.2
- [Release notes](https://github.com/wevm/wagmi/releases)
- [Changelog](https://github.com/wevm/wagmi/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/wevm/wagmi/commits/[email protected]/packages/react)

Updates `@fastify/static` from 8.3.0 to 9.0.0
- [Release notes](https://github.com/fastify/fastify-static/releases)
- [Commits](fastify/fastify-static@v8.3.0...v9.0.0)

Updates `eslint-plugin-react-hooks` from 5.2.0 to 7.0.1
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/packages/eslint-plugin-react-hooks/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/HEAD/packages/eslint-plugin-react-hooks)

Updates `globals` from 16.5.0 to 17.0.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v16.5.0...v17.0.0)

Updates `non.geist` from 1.0.4 to 2.0.1
- [Commits](https://github.com/contigen/non.geist/commits)

---
updated-dependencies:
- dependency-name: "@noble/hashes"
  dependency-version: 2.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-major
- dependency-name: "@hcaptcha/react-hcaptcha"
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-major
- dependency-name: "@hookform/resolvers"
  dependency-version: 5.2.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-major
- dependency-name: zod
  dependency-version: 4.3.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-major
- dependency-name: react-syntax-highlighter
  dependency-version: 16.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-major
- dependency-name: wagmi
  dependency-version: 3.3.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-major
- dependency-name: "@fastify/static"
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-major
- dependency-name: eslint-plugin-react-hooks
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-major
- dependency-name: globals
  dependency-version: 17.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-major
- dependency-name: non.geist
  dependency-version: 2.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/production-major-6c0c01eb23 branch from 987f03d to b3b7cf0 Compare February 2, 2026 09:35
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 9, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Feb 9, 2026
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/production-major-6c0c01eb23 branch February 9, 2026 09:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

D4-dependencies Package dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants