Skip to content

chore(deps): bump the minor-and-patch group across 1 directory with 9 updates - #275

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-5f52caae59
Open

chore(deps): bump the minor-and-patch group across 1 directory with 9 updates#275
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-5f52caae59

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 9 updates in the / directory:

Package From To
@graphprotocol/graph-ts 0.29.3 0.38.2
fs-extra 11.3.3 11.4.1
handlebars 4.7.9 4.7.10
ts-node 10.9.1 10.9.2
@graphprotocol/graph-cli 0.69.2 0.98.1
@nomiclabs/hardhat-ethers 2.2.2 2.2.3
@nomiclabs/hardhat-waffle 2.0.5 2.0.6
@types/mocha 10.0.1 10.0.10
typechain 8.1.1 8.3.2

Updates @graphprotocol/graph-ts from 0.29.3 to 0.38.2

Release notes

Sourced from @​graphprotocol/graph-ts's releases.

@​graphprotocol/graph-ts@​0.38.2

Patch Changes

@​graphprotocol/graph-ts@​0.38.1

Patch Changes

@​graphprotocol/graph-ts@​0.38.0

Minor Changes

@​graphprotocol/graph-ts@​0.37.0

Minor Changes

@​graphprotocol/graph-ts@​0.36.0

Minor Changes

@​graphprotocol/graph-ts@​0.35.1

Patch Changes

@​graphprotocol/graph-ts@​0.35.0

Minor Changes

@​graphprotocol/graph-ts@​0.34.0

Minor Changes

... (truncated)

Changelog

Sourced from @​graphprotocol/graph-ts's changelog.

0.38.2

Patch Changes

0.38.1

Patch Changes

0.38.0

Minor Changes

0.37.0

Minor Changes

0.36.0

Minor Changes

0.35.1

Patch Changes

0.35.0

Minor Changes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by yaroshkvorets, a new releaser for @​graphprotocol/graph-ts since your current version.


Updates fs-extra from 11.3.3 to 11.4.1

Changelog

Sourced from fs-extra's changelog.

11.4.1 / 2026-09-22

  • Properly handle read errors (e.g. due to permissions) in emptyDir*() (#1080)
  • Allow renaming with only Unicode normalization difference in the filename (APFS-specific) (#859, #1079)

11.4.0 / 2026-07-23

  • Proper EEXIST error when trying to create a symlink and the dest already exists as a broken symlink (#925, #1076)

11.3.6 / 2026-06-29

  • Fix handling of symlinked destination ancestors in copy/move methods (#1071, #1073)
  • Docs typo fixed (#1074)

11.3.5 / 2026-05-06

  • Fix ensureLink*/ensureSymlink* identical file detection on Windows (#1068)
  • Fix error handling in timestamp preservation code (#1065, #1069)
  • Fix potential file descriptor leak on error in synchronous timestamp preservation code (#1066)

11.3.4 / 2026-03-03

  • Fix bug where calling ensureSymlink/ensureSymlinkSync with a relative srcPath would fail if the symlink already existed (#1038, #1064)
Commits

Updates handlebars from 4.7.9 to 4.7.10

Release notes

Sourced from handlebars's releases.

v4.7.10

  • security: Sanitize the source map URL when minifying - f37c599
  • security: Iterate lazily in #each and strip whitespace in linear time - 812c226
  • security: Escape <!-- and <script in precompiled output - 609d1b1 GHSA-xw65-4hp5-5hc7
  • security: Don't trust special properties on context data - ceec388 GHSA-p8wg-vrv2-v86f
  • security: Only compile partials that are template strings - c28ee7a
  • security: Only dispatch known node types in the Compiler and Visitor - 7d501a5
  • security: Validate AST values in the compiler instead of the parser - 703fdcc GHSA-8r5x-fm3f-whwj
  • Clarify that --root does not restrict filesystem access - 0fcf25c
  • Bump minimist to ^1.2.8 - ea8ed82
  • Fix Ruby component publishing documentation - d069c1c
  • Fix Composer component definition - 6714e07

Compatibility notes:

  • {{#each}} iterates iterables such as Map, Set and generators lazily, like for...of, instead of copying them into an array first. Values added to the iterable while the block renders are now visited too.

Commits

Changelog

Sourced from handlebars's changelog.

v4.7.10 - October 5th, 2026

  • security: Sanitize the source map URL when minifying - f37c599
  • security: Iterate lazily in #each and strip whitespace in linear time - 812c226
  • security: Escape <!-- and <script in precompiled output - 609d1b1 GHSA-xw65-4hp5-5hc7
  • security: Don't trust special properties on context data - ceec388 GHSA-p8wg-vrv2-v86f
  • security: Only compile partials that are template strings - c28ee7a
  • security: Only dispatch known node types in the Compiler and Visitor - 7d501a5
  • security: Validate AST values in the compiler instead of the parser - 703fdcc GHSA-8r5x-fm3f-whwj
  • Clarify that --root does not restrict filesystem access - 0fcf25c
  • Bump minimist to ^1.2.8 - ea8ed82
  • Fix Ruby component publishing documentation - d069c1c
  • Fix Composer component definition - 6714e07

Compatibility notes:

  • {{#each}} iterates iterables such as Map, Set and generators lazily, like for...of, instead of copying them into an array first. Values added to the iterable while the block renders are now visited too.

Commits

Commits
  • 45ce152 v4.7.10
  • e47b236 Update release notes
  • f37c599 Sanitize the source map URL when minifying
  • 812c226 Iterate lazily in #each and strip whitespace in linear time
  • 609d1b1 Escape <!-- and <script in precompiled output
  • ceec388 Don't trust special properties on context data
  • c28ee7a Only compile partials that are template strings
  • 7d501a5 Only dispatch known node types in the Compiler and Visitor
  • 703fdcc Validate AST values in the compiler instead of the parser
  • 0fcf25c Clarify that --root does not restrict filesystem access
  • Additional commits viewable in compare view

Updates ts-node from 10.9.1 to 10.9.2

Release notes

Sourced from ts-node's releases.

Fix tsconfig.json file not found

Fixed

Commits

Updates @graphprotocol/graph-cli from 0.69.2 to 0.98.1

Release notes

Sourced from @​graphprotocol/graph-cli's releases.

@​graphprotocol/graph-cli@​0.98.1

Patch Changes

@​graphprotocol/graph-cli@​0.98.0

Minor Changes

Patch Changes

@​graphprotocol/graph-cli@​0.97.1

Patch Changes

@​graphprotocol/graph-cli@​0.97.0

Minor Changes

... (truncated)

Changelog

Sourced from @​graphprotocol/graph-cli's changelog.

0.98.1

Patch Changes

0.98.0

Minor Changes

Patch Changes

0.97.1

Patch Changes

0.97.0

Minor Changes

  • #1993 3e04952 Thanks @​incrypto32! - Composed subgraphs are modified to only accept immutable entites as triggers from a source subgraph

... (truncated)

Commits
  • 639cc23 Upcoming Release Changes (#2069)
  • 84d94cf fix(deps): update dependency @​pinax/graph-networks-registry to ^0.7.0 (#2058)
  • 3ac1c17 fix(deps): update all non-major dependencies (#2032)
  • a44fe8a chore(release): update monorepo packages versions (#2053)
  • 42f3803 Add graph node install command to install local dev node (#2041)
  • 4b4ad3e chore(release): update monorepo packages versions (#1998)
  • 3a3546a fix(deps): update all non-major dependencies (#2029)
  • db72b2d chore: update urls to documentation (#2018)
  • 91291f1 fix(deps): update all non-major dependencies (#1996)
  • 5237e9d chore(release): update monorepo packages versions (#1975)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by yaroshkvorets, a new releaser for @​graphprotocol/graph-cli since your current version.


Updates @nomiclabs/hardhat-ethers from 2.2.2 to 2.2.3

Commits
  • 29a55f2 Version Packages
  • 7645946 Merge pull request #3767 from NomicFoundation/shanghai
  • 5426f58 Merge pull request #3806 from zZoMROT/aurora-apiurl
  • 4e1fcdc Add changeset
  • c939a4c Fix aurora api url
  • dfc4465 Merge pull request #3778 from shungo0222/patch-1
  • 83254fd Merge pull request #3797 from NomicFoundation/add-hh-storage-dumper
  • 1cc5cee Run prettier
  • 7bb0025 Add docs/**/*.ts files to prettier script
  • 57ce19a Merge branch 'NomicFoundation:main' into hardhat-storage-dumper
  • Additional commits viewable in compare view

Updates @nomiclabs/hardhat-waffle from 2.0.5 to 2.0.6

Changelog

Sourced from @​nomiclabs/hardhat-waffle's changelog.

2.0.6

Patch Changes

  • 7926cc9: Support Waffle ^4.0.8
Commits

Updates @types/mocha from 10.0.1 to 10.0.10

Commits

Updates typechain from 8.1.1 to 8.3.2

Release notes

Sourced from typechain's releases.

typechain@8.3.2

Patch Changes

  • 3469800: Escape dirs starting with digits

typechain@8.3.1

Patch Changes

  • 9107713: Fix the detection of inputs root in some specific scenarios

typechain@8.3.0

Minor Changes

  • c4720b9: fix tuples in event signatures and also arrays of tuples in functions

typechain@8.2.1

Patch Changes

  • cd4bb0f: Add the node16 moduleSuffix also to directories (including the index filename) as in ESM directory root files have to be explicitly stated (including their file extension).

typechain@8.2.0

Minor Changes

  • 15541e4: Support for nodenext style import paths with new CLI flag: --node16-modules
Commits

@dependabot
dependabot Bot requested a review from rickstaa as a code owner October 19, 2026 03:22
Copilot AI balanced review requested due to automatic review settings October 19, 2026 03:22
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 19, 2026
Copilot AI reviewed Oct 19, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

The Graph CLI upgrade requires schema immutability declarations to prevent code generation and installation failures.

1 open issue
What changed in this PR

Updates nine dependencies used by the subgraph and its development tooling.

Changes:

  • Upgrades Graph CLI and Graph TypeScript libraries.
  • Updates filesystem, templating, TypeScript, and contract-testing tools.
File Description
package.json Updates nine dependency version requirements.

Review effort: Balanced

Comment thread package.json
"@graphprotocol/graph-cli": "^0.69.1",
"@nomiclabs/hardhat-ethers": "^2.2.2",
"@nomiclabs/hardhat-waffle": "^2.0.5",
"@graphprotocol/graph-cli": "^0.98.1",
@dependabot
chore(deps): bump the minor-and-patch group across 1 directory with 9…
f9daf18 
… updates

Bumps the minor-and-patch group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@graphprotocol/graph-ts](https://github.com/graphprotocol/graph-tooling/tree/HEAD/packages/ts) | `0.29.3` | `0.38.2` |
| [fs-extra](https://github.com/jprichardson/node-fs-extra) | `11.3.3` | `11.4.1` |
| [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.7.9` | `4.7.10` |
| [ts-node](https://github.com/TypeStrong/ts-node) | `10.9.1` | `10.9.2` |
| [@graphprotocol/graph-cli](https://github.com/graphprotocol/graph-tooling/tree/HEAD/packages/cli) | `0.69.2` | `0.98.1` |
| [@nomiclabs/hardhat-ethers](https://github.com/nomiclabs/hardhat) | `2.2.2` | `2.2.3` |
| [@nomiclabs/hardhat-waffle](https://github.com/NomicFoundation/hardhat-waffle) | `2.0.5` | `2.0.6` |
| [@types/mocha](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/mocha) | `10.0.1` | `10.0.10` |
| [typechain](https://github.com/ethereum-ts/Typechain) | `8.1.1` | `8.3.2` |



Updates `@graphprotocol/graph-ts` from 0.29.3 to 0.38.2
- [Release notes](https://github.com/graphprotocol/graph-tooling/releases)
- [Changelog](https://github.com/graphprotocol/graph-tooling/blob/main/packages/ts/CHANGELOG.md)
- [Commits](https://github.com/graphprotocol/graph-tooling/commits/@graphprotocol/graph-ts@0.38.2/packages/ts)

Updates `fs-extra` from 11.3.3 to 11.4.1
- [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md)
- [Commits](jprichardson/node-fs-extra@11.3.3...11.4.1)

Updates `handlebars` from 4.7.9 to 4.7.10
- [Release notes](https://github.com/handlebars-lang/handlebars.js/releases)
- [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.10/release-notes.md)
- [Commits](handlebars-lang/handlebars.js@v4.7.9...v4.7.10)

Updates `ts-node` from 10.9.1 to 10.9.2
- [Release notes](https://github.com/TypeStrong/ts-node/releases)
- [Changelog](https://github.com/TypeStrong/ts-node/blob/main/development-docs/release-template.md)
- [Commits](TypeStrong/ts-node@v10.9.1...v10.9.2)

Updates `@graphprotocol/graph-cli` from 0.69.2 to 0.98.1
- [Release notes](https://github.com/graphprotocol/graph-tooling/releases)
- [Changelog](https://github.com/graphprotocol/graph-tooling/blob/main/packages/cli/CHANGELOG.md)
- [Commits](https://github.com/graphprotocol/graph-tooling/commits/@graphprotocol/graph-cli@0.98.1/packages/cli)

Updates `@nomiclabs/hardhat-ethers` from 2.2.2 to 2.2.3
- [Release notes](https://github.com/nomiclabs/hardhat/releases)
- [Commits](https://github.com/nomiclabs/hardhat/compare/@nomiclabs/hardhat-ethers@2.2.2...@nomiclabs/hardhat-ethers@2.2.3)

Updates `@nomiclabs/hardhat-waffle` from 2.0.5 to 2.0.6
- [Release notes](https://github.com/NomicFoundation/hardhat-waffle/releases)
- [Changelog](https://github.com/NomicFoundation/hardhat-waffle/blob/main/CHANGELOG.md)
- [Commits](https://github.com/NomicFoundation/hardhat-waffle/commits)

Updates `@types/mocha` from 10.0.1 to 10.0.10
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/mocha)

Updates `typechain` from 8.1.1 to 8.3.2
- [Release notes](https://github.com/ethereum-ts/Typechain/releases)
- [Commits](https://github.com/ethereum-ts/Typechain/compare/typechain@8.1.1...typechain@8.3.2)

---
updated-dependencies:
- dependency-name: "@graphprotocol/graph-cli"
  dependency-version: 0.98.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@graphprotocol/graph-ts"
  dependency-version: 0.38.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@nomiclabs/hardhat-ethers"
  dependency-version: 2.2.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@nomiclabs/hardhat-waffle"
  dependency-version: 2.0.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@types/mocha"
  dependency-version: 10.0.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: fs-extra
  dependency-version: 11.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: handlebars
  dependency-version: 4.7.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: ts-node
  dependency-version: 10.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: typechain
  dependency-version: 8.3.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/minor-and-patch-5f52caae59 branch from 13714bd to f9daf18 Compare October 26, 2026 20:01
Copilot AI balanced review requested due to automatic review settings October 26, 2026 20:01
Copilot AI reviewed Oct 26, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

Existing deployment commands use a flag removed by the upgraded Graph CLI and must be updated before merging.

2 open issues

Review effort: Balanced

Comment thread package.json
"@graphprotocol/graph-cli": "^0.69.1",
"@nomiclabs/hardhat-ethers": "^2.2.2",
"@nomiclabs/hardhat-waffle": "^2.0.5",
"@graphprotocol/graph-cli": "^0.98.1",
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments
@rickstaa rickstaa Awaiting requested review from rickstaa rickstaa is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant