Skip to content

chore(deps): bump the sdk group across 2 directories with 5 updates - #709

Merged
ankurdotb merged 3 commits into
betafrom
dependabot/npm_and_yarn/beta/sdk-c6b0397bc5
Sep 9, 2026
Merged

ankurdotb merged 3 commits into
betafrom
dependabot/npm_and_yarn/beta/sdk-c6b0397bc5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 7, 2026 •

Copy link
Copy Markdown
Contributor

Note: the original @fhevm/sdk bump (0.13.2→0.14.1) was removed from this PR — it tracks the FHEVM protocol version and is bumped via alpha per the SDK Release Process, not through routine Dependabot bumps on beta. See #728 for the corresponding dependabot.yml ignore rule.

Bumps the sdk group with 4 updates in the / directory:

Package From To
codemod 1.15.2 1.17.3
happy-dom 20.12.0 20.14.0
oxfmt 0.65.0 0.66.0
oxlint 1.80.0 1.81.0

Updates codemod from 1.15.2 to 1.17.3

Release notes

Sourced from codemod's releases.

codemod-cli@1.17.3

Changelog

All notable changes to this project will be documented in this file.

[codemod-cli@1.17.3] - 2026-09-02

🐛 Bug Fixes

  • (jssg) Align selector extraction with runtime (#2407)

⚙️ Miscellaneous Tasks

  • (bump) Bump codemod crates version to v1.17.3 (#2408)

What's Changed

Full Changelog: https://github.com/codemod/codemod/compare/codemod-cli@1.16.3...codemod-cli@1.17.3

codemod-cli@1.16.3

Changelog

All notable changes to this project will be documented in this file.

[codemod-cli@1.16.3] - 2026-08-31

🐛 Bug Fixes

  • Make nested JSSG execution cancellable (#2402)

⚙️ Miscellaneous Tasks

  • (bump) Bump codemod crates version to v1.16.3 (#2405)

What's Changed

Full Changelog: https://github.com/codemod/codemod/compare/codemod-cli@1.15.3...codemod-cli@1.16.3

codemod-cli@1.15.3

Changelog

... (truncated)

Changelog

Sourced from codemod's changelog.

Changelog

All notable changes to this project will be documented in this file.

Commits
  • 2c505cd chore(bump): Bump codemod crates version to v1.17.3 (#2408)
  • 058af70 fix(jssg): align selector extraction with runtime (#2407)
  • ecad63b chore(bump): Bump codemod crates version to v1.16.3 (#2405)
  • f74c128 fix: make nested JSSG execution cancellable (#2402)
  • 7a0ebd9 chore(bump): Bump codemod crates version to v1.15.3 (#2397)
  • 3f110ee fix(sandbox): expose runtime module in memory (#2400)
  • f0537c0 ci: run TUI perf workflow only on relevant path changes (#2399)
  • 808f876 docs: document package dashboard templates for JSSG publishes (#2398)
  • 7c1e9a6 chore(changelog): Update changelog for codemod-cli@1.15.2 (#2395)
  • 7e9527d chore(changelog): Update changelog for codemod-cli@1.15.1 (#2392)
  • Additional commits viewable in compare view

Updates happy-dom from 20.12.0 to 20.14.0

Release notes

Sourced from happy-dom's releases.

v20.14.0

🎨 Features

v20.13.2

👷‍♂️ Patch fixes

  • Fix problem with getComputedStyle with :host and :host-context selectors - By @​capricorn86 in task #2349

v20.13.1

👷‍♂️ Patch fixes

  • GetComputedStyle should return inherited value when it is set to inherit - By @​capricorn86 in task #2347

v20.13.0

🎨 Features

v20.12.2

👷‍♂️ Patch fixes

v20.12.1

🎨 Features

  • Adds support for kebab-case properties on CSSStyleDeclaration - By @​capricorn86 in task #2256
  • Adds support for all Chromium CSS properties to CSSStyleDeclaration - By @​capricorn86 in task #2256
    • Downloads a list from the Chromium project when compiling

👷‍♂️ Patch fixes

Commits

Updates oxfmt from 0.65.0 to 0.66.0

Commits

Updates oxlint from 1.80.0 to 1.81.0

Release notes

Sourced from oxlint's releases.

oxlint v1.81.0 & oxfmt v0.66.0

Table of Contents

Oxlint v1.81.0

🚀 Features

  • 60b945d linter/nextjs/no-typos: Implement suggestion (#26091) (Mikhail Baev)

🐛 Bug Fixes

  • 33ac4b0 linter/lsp: Prevent tsgolint from holding onto processes (#25570) (Adrian Schaedle)
  • baf4b1e linter/import/no-empty-named-blocks: Make empty value import removal a suggestion (#26155) (camc314)
  • 77cfaec linter/eslint/object-shorthand: Preserve __proto__ semantics (#26154) (camc314)
  • fa3c082 linter/unicorn/prefer-set-size: Ignore shadowed Set constructors (#26153) (camc314)
  • e412cf2 linter: Clamp invalid JS plugin locations (#26144) (camc314)
  • d86c113 linter: Normalize reversed JS plugin locations (#26138) (camc314)
  • 73c09b2 linter/eslint/no-use-before-define: Run on JS, JSX files (#26114) (camc314)
  • 03ef0f2 linter/unicorn/no-useless-spread: Treat typed arrays as a distinct value hint (#26067) (Aadharsh Pannirselvam)
  • bd15905 linter/react/no-unstable-nested-components: Check nested component object property names (#26101) (camc314)
  • 3910e2b linter/eslint/no-unassigned-vars: Skip Svelte and Vue files (#26042) (Hamody We)
  • 047f7ca linter/plugins: Fix interaction between JS plugins and Vue rules (#26080) (overlookmotel)
  • 8531b9b linter/plugins: Alter method for obtaining mutable Program when sending AST to JS plugins (#26077) (overlookmotel)
  • dc464ff linter/unicorn/prefer-math-min-max: Avoid unsafe autofix (#26060) (camc314)

📚 Documentation

  • 464ddd1 linter: Support a shared short description for jest/vitest rules (#26186) (connorshea)
  • 9db5ad3 linter: Add short description to vue/no-dupe-keys (#26183) (connorshea)
  • db66f58 linter: Correct export/import mismatch in bar and foo example (#25927) (billychannnnnn)
  • d5be037 linter/typescript/switch-exhaustiveness-check: Clarify default case comment pattern (#26100) (camc314)

Oxfmt v0.66.0

🚀 Features

  • 1fb37b6 formatter/css: Format declaration-shaped raw-prelude rules (postcss nested config blocks) (#26194) (leaysgur)

🐛 Bug Fixes

  • 9f81002 formatter: Re-add suppressed statement terminators per options.semi (#26220) (leaysgur)
  • 769ffd5 formatter: Print suppressed typecast parens (#26218) (leaysgur)
  • 5ff57f8 formatter/sort-imports: Handle custom side effect groups (#26217) (leaysgur)
  • 2f4d759 formatter: Do not skip cast comment lookup (#26216) (leaysgur)
  • 1213e12 formatter: Preserve comment for statement terminators and binary casts (#26213) (leaysgur)
  • 57e8e22 formatter_css: Space a folded sign after a call in Less operations (#26134) (leaysgur)
  • e4298fb formatter/jsdoc: Follow CommonMark for interrupting lists and guard wrapping from creating them (#26098) (leaysgur)
  • a1e21c2 formatter: Apply head body policy everywhere (#26074) (leaysgur)
  • 676b7e1 formatter: Keep comments in their for-head slot, before an empty-statement body and do-while (#26073) (leaysgur)

... (truncated)

Changelog

Sourced from oxlint's changelog.

[1.81.0] - 2026-08-31

📚 Documentation

  • d5be037 linter/typescript/switch-exhaustiveness-check: Clarify default case comment pattern (#26100) (camc314)

[1.79.0] - 2026-08-18

💥 BREAKING CHANGES

  • 8c4552d linter: [BREAKING] Split react/react-compiler into per-category rules (#25500) (Boshen)

🐛 Bug Fixes

  • 228e8e0 linter: Resolve inactive React compiler rules (#25830) (Boshen)
  • aa49d86 linter: Allow spread rule options in config types (#25675) (ch3rry)
  • 36f8451 linter/eslint/no-eval: Align indirect default with ESLint (#25656) (camc314)
  • beb724d linter/eslint/no-unused-vars: Report bare underscore parameters (#25663) (camc314)
  • 4004c10 linter/eslint/no-irregular-whitespace: Check comments by default (#25660) (camc314)
  • 285820e linter/no-large-snapshots: Precompile and document allowed snapshot matchers (#25611) (Mikhail Baev)
  • 4df5835 linter: Allow capitalized built-in calls (#25516) (Boshen)

[1.78.0] - 2026-08-10

🚀 Features

  • ccb8fe8 linter/jsdoc: Implement no-blank-blocks rule (#25207) (Mikhail Baev)
  • d4a897c linter/eslint: Implement one-var rule (#24470) (Cole Ellison)
  • 5ab9340 linter/jsx-a11y/anchor-has-content: Add options to match eslint (#24571) (Cole Ellison)

🐛 Bug Fixes

  • 9573937 linter/typescript: Validate ban-ts-comment description_format (#25320) (Mikhail Baev)

[1.77.0] - 2026-08-03

🐛 Bug Fixes

  • 5c0fa61 linter/eslint/no-warning-comments: Unify config structs and remove manual options docs (#25151) (Mikhail Baev)

📚 Documentation

  • 9dc7756 linter/typescript/no-unnecessary-condition: Clarify options (#25110) (camc314)

[1.76.0] - 2026-07-27

🚀 Features

  • 8d31dfa linter: Verify eslint/no-restricted-globals config schema (#24598) (vigneshwar)
  • 7069621 linter: Verify jest/vitest prefer-lowercase-title config schema (#24724) (Bartok)

... (truncated)

Commits
  • 0b4e2e6 release(apps): oxlint v1.81.0 && oxfmt v0.66.0 (#26199)
  • d5be037 docs(linter/typescript/switch-exhaustiveness-check): clarify default case com...
  • 63bc313 chore(npm): update funding URL (#26066)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the sdk group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [codemod](https://github.com/codemod/codemod) | `1.15.2` | `1.17.3` |
| [happy-dom](https://github.com/capricorn86/happy-dom) | `20.12.0` | `20.14.0` |
| [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.65.0` | `0.66.0` |
| [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.80.0` | `1.81.0` |
| [@fhevm/sdk](https://github.com/zama-ai/fhevm) | `0.13.2` | `0.14.1` |

Bumps the sdk group with 1 update in the /packages/sdk directory: [@fhevm/sdk](https://github.com/zama-ai/fhevm).


Updates `codemod` from 1.15.2 to 1.17.3
- [Release notes](https://github.com/codemod/codemod/releases)
- [Changelog](https://github.com/codemod/codemod/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemod/codemod/compare/codemod-cli@1.15.2...codemod-cli@1.17.3)

Updates `happy-dom` from 20.12.0 to 20.14.0
- [Release notes](https://github.com/capricorn86/happy-dom/releases)
- [Commits](capricorn86/happy-dom@v20.12.0...v20.14.0)

Updates `oxfmt` from 0.65.0 to 0.66.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.66.0/npm/oxfmt)

Updates `oxlint` from 1.80.0 to 1.81.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.81.0/npm/oxlint)

Updates `@fhevm/sdk` from 0.13.2 to 0.14.1
- [Release notes](https://github.com/zama-ai/fhevm/releases)
- [Commits](zama-ai/fhevm@v0.13.2...v0.14.1)

Updates `@fhevm/sdk` from 0.13.2 to 0.14.1
- [Release notes](https://github.com/zama-ai/fhevm/releases)
- [Commits](zama-ai/fhevm@v0.13.2...v0.14.1)

---
updated-dependencies:
- dependency-name: codemod
  dependency-version: 1.17.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: sdk
- dependency-name: happy-dom
  dependency-version: 20.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: sdk
- dependency-name: oxfmt
  dependency-version: 0.66.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: sdk
- dependency-name: oxlint
  dependency-version: 1.81.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: sdk
- dependency-name: "@fhevm/sdk"
  dependency-version: 0.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: sdk
- dependency-name: "@fhevm/sdk"
  dependency-version: 0.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: sdk
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 7, 2026
@cla-bot cla-bot Bot added the cla-signed label Sep 7, 2026
@github-actions

github-actions Bot commented Sep 7, 2026

Copy link
Copy Markdown

Public API Changes

✅ No public API changes detected.

@github-actions

github-actions Bot commented Sep 7, 2026 •

Copy link
Copy Markdown

Coverage Report

Status Category Percentage Covered / Total
🟢 Lines 93.54% (🎯 80%) 3668 / 3921
🔵 Statements 93.54% 3752 / 4011
🟢 Functions 92.06% (🎯 80%) 1148 / 1247
🟢 Branches 88.09% (🎯 80%) 1658 / 1882
File CoverageNo changed files found.
Generated in workflow #684 for commit 57b2040 by the Vitest Coverage Report Action

@fhevm/sdk tracks the FHEVM protocol version, not general dependency
hygiene - per the SDK Release Process, protocol-version bumps go
through alpha (the protocol-breaking-change testing channel) and are
only promoted to beta/main once mainnet and testnet are both fully on
the new protocol version. Compatibility only runs one direction: an
SDK built for a newer protocol won't work against a network still on
the old one. Routine Dependabot bumps on beta shouldn't move this.
Reverted to 0.13.2, keeping the other four intended bumps (oxfmt,
oxlint, happy-dom, codemod).
ankurdotb added a commit that referenced this pull request Sep 9, 2026
## Summary
- Adds an `ignore` rule for `@fhevm/sdk` in the SDK-core Dependabot
block.
- `@fhevm/sdk` tracks the FHEVM protocol version, not general dependency
hygiene — per the [Zama SDK Release
Process](https://app.notion.com/p/3ab5a7358d5e8196845afb4b3ee983f9),
bumps go through `alpha` (the protocol-breaking-change testing channel)
and are only promoted to `beta`/`main` once mainnet and testnet are both
fully on the new protocol version. Compatibility only runs one
direction, so a routine Dependabot bump on `beta` risks shipping an SDK
built for a protocol version the live networks aren't on yet.
- Prompted by PR #709, which bundled a `@fhevm/sdk` 0.13.2→0.14.1 bump
alongside unrelated tooling updates; that bump was reverted separately
on #709 itself.

🤖 Generated with [Claude Code](https://claude.com/claude-code)
@ankurdotb
ankurdotb merged commit f9d396b into beta Sep 9, 2026
18 checks passed
@ankurdotb
ankurdotb deleted the dependabot/npm_and_yarn/beta/sdk-c6b0397bc5 branch September 9, 2026 07:30
@zama-bot

Copy link
Copy Markdown
Collaborator

🎉 This PR is included in version 3.6.0-beta.3 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

@zama-bot

Copy link
Copy Markdown
Collaborator

🎉 This PR is included in version 3.6.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cla-signed dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code released on @beta released

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants