Skip to content

chore(deps): bump the npm-dependencies group across 1 directory with 5 updates - #754

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/apps/backend/npm-dependencies-1b6c19181d
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/apps/backend/npm-dependencies-1b6c19181d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 27, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-dependencies group with 5 updates in the /apps/backend directory:

Package From To
@filoz/synapse-core 0.8.1 0.10.2
class-validator 0.14.4 0.15.1
filecoin-pin 2.0.0 2.2.1
joi 18.2.9 18.3.0
viem 2.57.7 2.57.11

Updates @filoz/synapse-core from 0.8.1 to 0.10.2

Release notes

Sourced from @​filoz/synapse-core's releases.

synapse-core: v0.10.2

0.10.2 (2026-10-16)

Features

  • core: use @​hugomrdias/commp-wasm for PieceCID hashing (#1018) (d9bf76e)

Bug Fixes

  • core: default the data set payer to a session key's root wallet (b5aa6c8), closes #1025
  • core: keep confirmed pieces when another add-pieces tx fails (f218706)
  • core: stop polling add-pieces/create-dataset status on rejected tx (#1020) (96235c1)

Chores

  • synapse-core: align ox with viem and drop ox from mocks (#1021) (a830d0d)
  • synapse-core: update commp-wasm to 0.1.4 (#1030) (91b8502)

synapse-core: v0.10.1

0.10.1 (2026-10-09)

Features

  • core: accept AbortSignal in legacy uploadPiece (#1009) (596f768)
  • core: accept AbortSignal in sp actions and forward timeout in waitForCreateDataSetAddPieces (#998) (603403a)

Bug Fixes

  • core: add is() type guard to WaitForCreateDataSetRejectedError (#1001) (b85f512)
  • core: cancel sibling uploads when one fails in upload() (#1013) (57d84c2)
  • core: skip signing in pullPieces when the abort signal already fired (#1012) (47d5e64)
  • increase max upload size to 64 GiB padded (#997) (290ed9e)

synapse-core: v0.10.0

0.10.0 (2026-09-25)

⚠ BREAKING CHANGES

  • synapse-core: PdpDataSet.provider and Piece.url can now be null. Callers must check these fields before using them.

Bug Fixes

  • remove the temporary 40-piece batch limit (#975) (e03a00c)
  • synapse-core: handle inactive PDP providers (44fee17)

... (truncated)

Commits
  • e775fef chore(master): release synapse-core 0.10.2 (#1019)
  • 91b8502 chore(synapse-core): update commp-wasm to 0.1.4 (#1030)
  • 2e6b8e0 fix(react): reject a session key whose root is not the connected account
  • f218706 fix(core): keep confirmed pieces when another add-pieces tx fails
  • 4edbb1b refactor(core): share one concurrency limit helper in utils
  • f36d697 refactor(core): move the payer default into utils as getPayerAddress
  • 0da72d2 refactor(core): move multi-file upload into SP.uploadPieces
  • b5aa6c8 fix(core): default the data set payer to a session key's root wallet
  • 3a9a3d5 feat(react): add useUploadPieces streaming multi-file upload hook
  • 182e524 feat(react): accept an optional chainId on read hooks
  • Additional commits viewable in compare view

Updates class-validator from 0.14.4 to 0.15.1

Release notes

Sourced from class-validator's releases.

v0.15.1

What's Changed

Full Changelog: typestack/class-validator@v0.15.0...v0.15.1

v0.15.0

What's Changed

New Contributors

Full Changelog: typestack/class-validator@v0.14.4...v0.15.0

Changelog

Sourced from class-validator's changelog.

0.15.1 (2026-02-26)

BREAKING CHANGES

  • Added options argument to IsIBAN validator (#2618), which breaks any existing usage of this decorator that pass an argument to the decorator, e.g. @IsIBAN({forbidUnknownValues: false})

Fixed

  • Updated lockfile to patch vulnerabilities (#2669)
  • Fixed a small grammatical error in the docs (#2596)

Added

  • Added validateIf option to all validators, providing a lot more flexibility in using conditional validation (#1579)
  • Added IsISO31661Numeric validator for country codes (#2657)
  • Added IsISO6391 validator for language codes (#2626)
  • Added more versions to IsUUID validator options. (#2647)
Commits

Updates filecoin-pin from 2.0.0 to 2.2.1

Release notes

Sourced from filecoin-pin's releases.

v2.2.1

2.2.1 (2026-10-12)

Bug Fixes

  • cli: move console link flow from utm_campaign to utm_term (#758) (6f6dae1)

v2.2.0

2.2.0 (2026-10-08)

Features

  • cli: tag console links with utm params for human vs agent attribution (#746) (6d7550a)

Bug Fixes

  • cli: pdp explorer link (#766) (27fc264)
  • data-set: paginate listDataSets to avoid RPC timeouts on large accounts (#708) (913f418)
  • deps: upgrade synapse-core to 0.10.0 (#767) (aedfcb5)

Chores

  • deps-dev: bump @​types/node from 26.1.1 to 26.6.2 (#748) (0b4dcd4)
  • deps: bump env-paths from 3.0.0 to 4.0.0 (#749) (4f43b3f)
  • deps: bump pnpm/action-setup from 6.0.10 to 6.1.0 (#760) (0dc6dc2)
  • deps: bump pnpm/action-setup from 6.0.10 to 6.1.0 in /upload-action (#761) (9bc4bb0)
  • deps: bump pnpm/action-setup in /upload-action (9bc4bb0)

v2.1.1

2.1.1 (2026-09-16)

Bug Fixes

  • payments: accept a zero piece in setup check (#728) (6bbbd0b)

v2.1.0

2.1.0 (2026-09-16)

Features

  • add: funds preflight for session keys (#702) (40389ae)
  • cli: add balance and dashboard commands (#703) (c068a78)
  • cli: add login and logout commands (#700) (819dc6a)
  • cli: auto-load the login session and add the no-credentials error (#701) (7e431c2)

... (truncated)

Changelog

Sourced from filecoin-pin's changelog.

2.2.1 (2026-10-12)

Bug Fixes

  • cli: move console link flow from utm_campaign to utm_term (#758) (6f6dae1)

2.2.0 (2026-10-08)

Features

  • cli: tag console links with utm params for human vs agent attribution (#746) (6d7550a)

Bug Fixes

  • cli: pdp explorer link (#766) (27fc264)
  • data-set: paginate listDataSets to avoid RPC timeouts on large accounts (#708) (913f418)
  • deps: upgrade synapse-core to 0.10.0 (#767) (aedfcb5)

Chores

  • deps-dev: bump @​types/node from 26.1.1 to 26.6.2 (#748) (0b4dcd4)
  • deps: bump env-paths from 3.0.0 to 4.0.0 (#749) (4f43b3f)
  • deps: bump pnpm/action-setup from 6.0.10 to 6.1.0 (#760) (0dc6dc2)
  • deps: bump pnpm/action-setup from 6.0.10 to 6.1.0 in /upload-action (#761) (9bc4bb0)
  • deps: bump pnpm/action-setup in /upload-action (9bc4bb0)

2.1.1 (2026-09-16)

Bug Fixes

  • payments: accept a zero piece in setup check (#728) (6bbbd0b)

2.1.0 (2026-09-16)

Features

  • add: funds preflight for session keys (#702) (40389ae)
  • cli: add balance and dashboard commands (#703) (c068a78)
  • cli: add login and logout commands (#700) (819dc6a)
  • cli: auto-load the login session and add the no-credentials error (#701) (7e431c2)
  • logout: deep link to revoke the key (#726) (b81ff57)
  • session: add on-chain authorization watcher (#699) (0663f7a)

... (truncated)

Commits
  • 995d942 chore(master): release 2.2.1 (#769)
  • 6f6dae1 fix(cli): move console link flow from utm_campaign to utm_term (#758)
  • d72a5cc chore(master): release 2.2.0 (#751)
  • aedfcb5 fix(deps): upgrade synapse-core to 0.10.0 (#767)
  • 27fc264 fix(cli): pdp explorer link (#766)
  • 9bc4bb0 chore(deps): bump pnpm/action-setup from 6.0.10 to 6.1.0 in /upload-action (#...
  • 0dc6dc2 chore(deps): bump pnpm/action-setup from 6.0.10 to 6.1.0 (#760)
  • 4f43b3f chore(deps): bump env-paths from 3.0.0 to 4.0.0 (#749)
  • 0b4dcd4 chore(deps-dev): bump @​types/node from 26.1.1 to 26.6.2 (#748)
  • 913f418 fix(data-set): paginate listDataSets to avoid RPC timeouts on large accounts ...
  • Additional commits viewable in compare view

Updates joi from 18.2.9 to 18.3.0

Commits

Updates viem from 2.57.7 to 2.57.11

Release notes

Sourced from viem's releases.

viem@2.57.11

Patch Changes

viem@2.57.10

Patch Changes

  • #5260 b56592f7b6cc2d01d926bf6cf278d53cbc0b6e17 Thanks @​jxom! - viem/tempo: Added Actions.accounts.upgrade and Actions.accounts.upgradeSync to upgrade an existing account to a configurable account in place (TIP-1113), and an upgrade form of Account.fromConfig for the upgraded account.

  • #5260 b56592f7b6cc2d01d926bf6cf278d53cbc0b6e17 Thanks @​jxom! - viem/tempo: Added the configurable key type to Actions.accessKey.getMetadata and execution error messages for configurable account upgrades and retired root keys.

  • #5260 b56592f7b6cc2d01d926bf6cf278d53cbc0b6e17 Thanks @​jxom! - viem/tempo: Synced configurable accounts with Tempo T14, renaming the nativeMultisig ABI, address and selector exports to configurableAccount, sending configurableAccountSimulation to the node, deriving configurable account addresses and signatures with the tempo:configurable-account:* domains, and storing relay state under configurableAccount:* store keys.

    - Abis.nativeMultisig
    + Abis.configurableAccount
    - Addresses.nativeMultisig
    + Addresses.configurableAccount
    - Addresses.nativeMultisigFactory
    + Addresses.configurableAccountRecoveryFactory
    - Selectors.nativeMultisig
    + Selectors.configurableAccount
  • #5260 b56592f7b6cc2d01d926bf6cf278d53cbc0b6e17 Thanks @​jxom! - viem/tempo: Added Actions.accounts.deriveAccount and Actions.accounts.verifyHash for the configurable account precompiles, configurable account signature support in verifyHash, and a factory option on Account.fromConfig that defaults to Addresses.configurableAccountRecoveryFactory.

  • #5260 b56592f7b6cc2d01d926bf6cf278d53cbc0b6e17 Thanks @​jxom! - viem/tempo: Added hardforks t7 through t14 and fixed Hardfork.lt treating unknown hardforks as older than every known hardfork.

viem@2.57.8

... (truncated)

Commits
  • 1353255 chore: version package (#5268)
  • c0a3f34 chore: fix main CI (watchBlocks polling tests, size limits) (#5287)
  • 393957e chore: run bun postinstall in vercel install (#5278)
  • 4989463 docs: add self-hosted RPC proxy example to fallback transport (#5264)
  • 94e5c08 fix(chains): increase HyperEVM fee headroom (#5253)
  • 2d54066 fix: encode inline SVG avatars as UTF-8 in getEnsAvatar (#5250)
  • bea62b1 fix: cap default cacheTime at half of chain.blockTime (#5274)
  • 7315f38 fix: avoid zero or negative counts in getTransactionConfirmations (#5275)
  • ef92315 fix(chains): set Monad and Monad Testnet blockTime to 300ms (#5273)
  • bca9a1d chore: bump node and bun (#5262)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…5 updates

Bumps the npm-dependencies group with 5 updates in the /apps/backend directory:

| Package | From | To |
| --- | --- | --- |
| [@filoz/synapse-core](https://github.com/FilOzone/synapse-sdk) | `0.8.1` | `0.10.2` |
| [class-validator](https://github.com/typestack/class-validator) | `0.14.4` | `0.15.1` |
| [filecoin-pin](https://github.com/filecoin-project/filecoin-pin) | `2.0.0` | `2.2.1` |
| [joi](https://github.com/hapijs/joi) | `18.2.9` | `18.3.0` |
| [viem](https://github.com/wevm/viem) | `2.57.7` | `2.57.11` |



Updates `@filoz/synapse-core` from 0.8.1 to 0.10.2
- [Release notes](https://github.com/FilOzone/synapse-sdk/releases)
- [Commits](FilOzone/synapse-sdk@v0.8.1...synapse-core-v0.10.2)

Updates `class-validator` from 0.14.4 to 0.15.1
- [Release notes](https://github.com/typestack/class-validator/releases)
- [Changelog](https://github.com/typestack/class-validator/blob/develop/CHANGELOG.md)
- [Commits](typestack/class-validator@v0.14.4...v0.15.1)

Updates `filecoin-pin` from 2.0.0 to 2.2.1
- [Release notes](https://github.com/filecoin-project/filecoin-pin/releases)
- [Changelog](https://github.com/filecoin-project/filecoin-pin/blob/master/CHANGELOG.md)
- [Commits](filecoin-project/filecoin-pin@v2.0.0...v2.2.1)

Updates `joi` from 18.2.9 to 18.3.0
- [Commits](hapijs/joi@v18.2.9...v18.3.0)

Updates `viem` from 2.57.7 to 2.57.11
- [Release notes](https://github.com/wevm/viem/releases)
- [Commits](https://github.com/wevm/viem/compare/viem@2.57.7...viem@2.57.11)

---
updated-dependencies:
- dependency-name: "@filoz/synapse-core"
  dependency-version: 0.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: class-validator
  dependency-version: 0.15.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: filecoin-pin
  dependency-version: 2.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: joi
  dependency-version: 18.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: viem
  dependency-version: 2.57.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 27, 2026
@FilOzzy FilOzzy added this to FOC Oct 27, 2026
@github-project-automation github-project-automation Bot moved this to 📌 Triage in FOC Oct 27, 2026
@FilOzzy FilOzzy moved this from 📌 Triage to 🐱 Todo in FOC Oct 27, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

Status: 🐱 Todo

Development

Successfully merging this pull request may close these issues.

1 participant