Skip to content

chore(deps): bump undici from 5.19.1 to 5.29.0 in /solidity/ecdsa - #4108

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/solidity/ecdsa/undici-5.29.0
Open

chore(deps): bump undici from 5.19.1 to 5.29.0 in /solidity/ecdsa#4108
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/solidity/ecdsa/undici-5.29.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 23, 2026

Copy link
Copy Markdown
Contributor

Bumps undici from 5.19.1 to 5.29.0.

Release notes

Sourced from undici's releases.

v5.29.0

What's Changed

Full Changelog: nodejs/undici@v5.28.5...v5.29.0

v5.28.5

⚠️ Security Release ⚠️

Fixes CVE CVE-2025-22150 GHSA-c76h-2ccp-4975 (embargoed until 22-01-2025).

Full Changelog: nodejs/undici@v5.28.4...v5.28.5

Commits

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jun 23, 2026
piotr-roslaniec added a commit that referenced this pull request Jul 22, 2026
## Summary

- remove `@nomiclabs/hardhat-waffle` and `ethereum-waffle` from the
ECDSA package, which already registers
`@nomicfoundation/hardhat-chai-matchers`
- replace the remaining `waffle.provider` usages with `ethers.provider`
and rely on the globally registered Hardhat matchers
- migrate the affected custom-error assertions and fund the mocked
staking sender used by the backward-compatibility test
- prune the obsolete Waffle, Ganache, and transitive dependency subtree
from both lockfiles

Issue #3992 proposed upgrading Waffle, but `@nomiclabs/hardhat-waffle`
cannot coexist with the already-loaded
`@nomicfoundation/hardhat-chai-matchers` plugin. Removing the redundant
Waffle stack completes the migration without retaining two competing
Chai integrations.

## Validation

- `yarn install --immutable`
- `npm run build`
- `npm run lint` (passes with pre-existing warnings)
- `npm test` — 650 passing, 44 pending
- `npm run deploy:test`

The npm lockfile removes 1,019 package entries, adds none, and leaves
every surviving package entry unchanged apart from the root dependency
list. The Yarn lockfile removes 382 resolution locators and adds or
upgrades none.

## Lockfile overlap

Open PRs #4108, #4025, and #3904 also touch the ECDSA lockfiles and may
need regeneration or a rebase after this lands. This PR intentionally
includes none of their package upgrades.

Fixes #3992
Bumps [undici](https://github.com/nodejs/undici) from 5.19.1 to 5.29.0.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v5.19.1...v5.29.0)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 5.29.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/solidity/ecdsa/undici-5.29.0 branch from c8d5c72 to ebc8a23 Compare July 22, 2026 06:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants