[dependabot]

Bumps the minor-and-patch group in /packages/sdk with 5 updates:

Package	From	To
@x402/fetch	2.29.0	2.30.0
@x402/stellar	2.29.0	2.30.0
viem	2.57.13	2.57.16
ws	8.22.0	8.22.1
@x402/core	2.29.0	2.30.0

Updates @x402/fetch from 2.29.0 to 2.30.0

Commits

• 3414a56 chore: version typescript packages  (#4136)
• d95724b chore(go): release (#4138)
• 91806a3 chore: version python package  (#4137)
• 2884003 Pull request for mintlify/docs-update-1793816377937 (#4135)
• c349511 feat(ts): facilitator-managed voucher custody for EVM batch settlement (#4061)
• 0f41a8d fix(core): use phase-specific error codes for throwing gate hooks (#4133)
• 7c9d6ad fix(xrpl): enforce spend caps in issued-currency units (#4110)
• 8736fb7 Update docs/advanced-concepts/lifecycle-hooks.mdx (#4132)
• 29a8124 fix(core): fail closed when a gate hook throws (#3702)
• 58e667f fix(evm): return invalid_upto_evm_payload for malformed upto Permit2 payloads...
• Additional commits viewable in compare view

Updates @x402/stellar from 2.29.0 to 2.30.0

Commits

• 3414a56 chore: version typescript packages  (#4136)
• d95724b chore(go): release (#4138)
• 91806a3 chore: version python package  (#4137)
• 2884003 Pull request for mintlify/docs-update-1793816377937 (#4135)
• c349511 feat(ts): facilitator-managed voucher custody for EVM batch settlement (#4061)
• 0f41a8d fix(core): use phase-specific error codes for throwing gate hooks (#4133)
• 7c9d6ad fix(xrpl): enforce spend caps in issued-currency units (#4110)
• 8736fb7 Update docs/advanced-concepts/lifecycle-hooks.mdx (#4132)
• 29a8124 fix(core): fail closed when a gate hook throws (#3702)
• 58e667f fix(evm): return invalid_upto_evm_payload for malformed upto Permit2 payloads...
• Additional commits viewable in compare view

Updates viem from 2.57.13 to 2.57.16

Release notes

Sourced from viem's releases.

viem@2.57.16

Patch Changes

• #5395 c60ca26e030706610bcf61689331008a30a3db2a Thanks @​jxom! - viem/tempo: gatewayActions paid in the Gateway currency the Client account held most of, threw Gateway.InsufficientFundsError (with the account's balances) when it couldn't pay, and explained how to pay in Gateway.PaymentRequiredError.

• #5392 9348d386a9f62fd6713124e25360d6040e4a34cf Thanks @​gakonst! - Stopped retrying JSON-RPC method-not-found (-32601) and method-not-supported (-32004) errors from non-2xx HTTP responses, since a retry gets the same refusal.

• #5392 9348d386a9f62fd6713124e25360d6040e4a34cf Thanks @​gakonst! - Reduced per-request overhead of the http, webSocket and ipc transports by building the onFetchRequest Request only when the hook is set and the TimeoutError only when a request times out, and fetched the withdrawal receipt once in the ZKsync finalizeWithdrawal and isWithdrawalFinalized actions.

• #5392 9348d386a9f62fd6713124e25360d6040e4a34cf Thanks @​gakonst! - Cached signature hashes in toSignatureHash, so selector lookups in decodeFunctionData, decodeEventLog, decodeErrorResult and encodeFunctionData no longer hash every ABI item on each call.

• #5391 721d6824516514195c0a98971731c6d81b2f9032 Thanks @​jxom! - viem/tempo: Added experimental Gateway and gatewayActions (client.ai, client.bucket, client.compute, client.kv), with standalone Actions.ai, Actions.bucket, Actions.compute, and Actions.kv, with client.gateway.getCapabilities, Actions.gateway.getCapabilities and defaults for every option (gatewayActions()), for wallet-paid inference (including streamed text), object storage, metered and streamed CPU and GPU compute, and key-value state on a Tempo Gateway paid with a local Client account through the optional mppx peer dependency, with Tempo Wallet through the Accounts SDK, or with an app-supplied payment-aware fetch.

viem@2.57.15

Patch Changes

• #5339 a864b864b8b9031d970910fb8247471924d09280 Thanks @​mortezashojaei! - Fixed getAbiItem to throw AbiItemAmbiguityError for overloads that JavaScript cannot distinguish, such as bytes vs bytes32, uint256 vs int256, and uint256[] vs uint256[2], while resolving distinguishable values by byte length and integer range.

• #5321 af062571382ec3631cf1901aeda9b58a87c8fad5 Thanks @​evanaronson! - Removed a trailing slash to the ZKsync explorer URL.

• #5358 179a53682d9bf2ac2b7a65a86ec312fca0c7c9a8 Thanks @​Turkchain1919! - Added Turkchain Mainnet (Chain ID: 1919) to the supported chains.

• #5375 bb12b94649962cd7f03c339c226399c614b49805 Thanks @​jxom! - Fixed decodeEventLog and parseEventLogs to decode anonymous event logs when eventName names the event or every event in abi is anonymous, as with getLogs and watchEvent given a single anonymous event.

• #5364 8f2a79ba8b4d235a24c4c101f4ef04a824c3e429 Thanks @​jxom! - ccip: Applied the HTTP transport timeout (including its override) and 10 MiB response cap to CCIP-Read gateway requests, refused non-HTTP(S) gateway URLs (including data: URLs, which previously worked), and limited one lookup to 4 nested callbacks, 4 nested local batches, 256 gateway requests and 16 concurrent requests.

• #5372 f32ef6c41e623683b99989422eac7ac6cea5c107 Thanks @​jxom! - Fixed estimateGas and estimateContractGas returning a gas limit filled by eth_fillTransaction that ignored blockNumber, blockTag, and stateOverride.

• #5360 41801d827e339b96d1b4dd775f4dd379f17cc610 Thanks @​jxom! - Raised the default expiring nonce validBefore from 25 to 270 seconds, capped Relay.feePayer expiring nonce windows at 300 seconds, added Transaction.expiringNonceMaxExpiry, and replaced the random expiring nonce validAfter with a random nonce discriminator.

• #5360 41801d827e339b96d1b4dd775f4dd379f17cc610 Thanks @​jxom! - Fixed sponsored prepareTransactionRequest fills keeping a requested feeToken that the fee payer did not sign, which made the fee payer signature invalid.

• #5378 cbdd61078378012368464c9b0e4a76804a5ea987 Thanks @​mmv08! - Fixed fillTransaction and prepareTransactionRequest returning gasPrice next to EIP-1559 fees on Anvil, which made estimateGas and sendTransaction fail on Anvil 1.8.5 and later with "both gasPrice and (maxFeePerGas or maxPriorityFeePerGas) specified".

• #5346 7156f80f77c47c0a3f9df479b0a6e856029edb3b Thanks @​KieranAltman! - Updated HashKey Chain and HashKey Chain Testnet display names, native currency name, and block explorer URLs.

• #5373 ddc2d365d093793f9d8f5818743f169c98eed8d7 Thanks @​jxom! - Added an optional nonce to NonceManager reset parameters, which sendTransaction and sendTransactionSync now set to the consumed nonce when a send fails after consume returned.

• #5371 035c519b6b6b3f179fa741953751a501f05132a2 Thanks @​jxom! - Fixed parseTransaction to accept an EIP-7702 authorization yParity from 2 to 255 so a serialized transaction parses back, and made recoverAuthorizationAddress throw InvalidYParityError (and verifyAuthorization return false) for a yParity other than 0 or 1, which EIP-7702 treats as having no authority.

• #5318 57db085e896dfee3a3387fb7573bf7f7ebc6170d Thanks @​jxom! - Fixed parseTransaction not raising TipAboveFeeCapError when the encoded maxFeePerGas is zero.

• #5377 42c41ca3c42792e56a2e1f64d3007c28adc9fbba Thanks @​mmv08! - Fixed sendTransactionSync and writeContractSync failing at once and freeing the nonce when the node had accepted the transaction but stopped waiting for its receipt (eth_sendRawTransactionSync error code 4), even if the error had no transaction hash, and stopped fallback from sending that transaction to the next node.

• #5388 141f8c0ed7f5fdeafbfc514131781638e9340bd9 Thanks @​jxom! - Added Account.serialize and Account.deserialize to viem/tempo, which store a configurable account (TIP-1107) as JSON and rebuild it with passkey owners that sign, and Account.AddressMismatchError for a version-zero config that does not derive the stored address. Added a keyAuthorization option to access key accounts, which attaches a signed key authorization to the account's transactions until the chain registers the access key.

• #5318 57db085e896dfee3a3387fb7573bf7f7ebc6170d Thanks @​jxom! - Fixed maxPriorityFeePerGas above a maxFeePerGas of 0n not raising TipAboveFeeCapError or MaxFeePerGasTooLowError (including in actions that validate requests before calling the node, such as call and estimateGas), and fixed fee error messages dropping 0n values.

• #5370 18b6b9041ef9d19421d182e6b0ca4b1caf5be09e Thanks @​jxom! - Fixed validateTypedData (and so hashTypedData and signTypedData) accepting field types that are not EIP-712 types, such as uint7, uint264, uint08, int0 or bytes0, and field types that reference a struct missing from types, including in structs only referenced as array elements; it now throws InvalidTypedDataTypeError.

... (truncated)

Commits

• 98aa491 chore: raise viem/ens size limit (#5398)
• 71241b2 chore: version package (#5393)
• e1329c9 fix(tempo): check Gateway chain and refresh balances before payment errors (#...
• c60ca26 feat(tempo): fund-aware Gateway payments and InsufficientFundsError (#5395)
• 264ab41 docs(tempo): use code groups with viem.config in Gateway guides (#5394)
• 721d682 feat(tempo): add experimental Gateway actions (#5391)
• 9348d38 perf: skip retries for method refusals and trim per-request overhead (#5392)
• 5711b7e chore: version package (#5363)
• dbf8ae6 test: stabilize sendTransactionSync timeout and watchBlocks catch-up test...
• 141f8c0 feat(tempo): add Account.serialize, Account.deserialize and keyAuthorization ...
• Additional commits viewable in compare view

Updates ws from 8.22.0 to 8.22.1

Release notes

Sourced from ws's releases.

8.22.1

Bug fixes

• The path of IPC URLs is no longer truncated at : (#2344).

Other notable changes

• http.websocketMask() and http.websocketUnmask() are now used instead of the bufferutil variants when available (2ab3d3e5).
• Sender.frame() no longer returns empty chunks (85319a72).

Commits

• c18a80a [dist] 8.22.1
• 2ab3d3e [minor] Use http.websocket{M,Unm}ask() if possible (#2347)
• c9efa88 [ci] Test on node 27
• aa91518 [test] Skip test on Node.js versions where it does not apply (#2340)
• b54ca10 [fix] Do not truncate the URL path of IPC URLs at : (#2344)
• 85319a7 [minor] Prevent Sender.frame() from returning empty chunks
• See full diff in compare view

Updates @x402/core from 2.29.0 to 2.30.0

Commits

• 3414a56 chore: version typescript packages  (#4136)
• d95724b chore(go): release (#4138)
• 91806a3 chore: version python package  (#4137)
• 2884003 Pull request for mintlify/docs-update-1793816377937 (#4135)
• c349511 feat(ts): facilitator-managed voucher custody for EVM batch settlement (#4061)
• 0f41a8d fix(core): use phase-specific error codes for throwing gate hooks (#4133)
• 7c9d6ad fix(xrpl): enforce spend caps in issued-currency units (#4110)
• 8736fb7 Update docs/advanced-concepts/lifecycle-hooks.mdx (#4132)
• 29a8124 fix(core): fail closed when a gate hook throws (#3702)
• 58e667f fix(evm): return invalid_upto_evm_payload for malformed upto Permit2 payloads...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions