Skip to content

build(deps): bump adm-zip, @openzeppelin/hardhat-upgrades, @nomicfoundation/hardhat-ethers, @nomicfoundation/hardhat-toolbox, @nomicfoundation/hardhat-verify, @nomiclabs/hardhat-solhint and hardhat - #153

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-e5933bb621
Open

build(deps): bump adm-zip, @openzeppelin/hardhat-upgrades, @nomicfoundation/hardhat-ethers, @nomicfoundation/hardhat-toolbox, @nomicfoundation/hardhat-verify, @nomiclabs/hardhat-solhint and hardhat#153
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-e5933bb621

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 3, 2026

Copy link
Copy Markdown

Bumps adm-zip to 0.6.0 and updates ancestor dependencies adm-zip, @openzeppelin/hardhat-upgrades, @nomicfoundation/hardhat-ethers, @nomicfoundation/hardhat-toolbox, @nomicfoundation/hardhat-verify, @nomiclabs/hardhat-solhint and hardhat. These dependencies need to be updated together.

Updates adm-zip from 0.4.16 to 0.6.0

Release notes

Sourced from adm-zip's releases.

v0.6.0

Full Changelog: cthackers/adm-zip@v0.5.18...v0.6.0

This release fixes a security vulnerability (CVE-2026-39244), resolves several long-standing bugs, ships built-in TypeScript types, and includes two behavior changes worth reading before you upgrade.

  • extractEntryTo(dirEntry, target, maintainEntryPath = false) now preserves subdirectories instead of flattening files into the target folder by basename (which also silently overwrote same-named files). (#306)
  • Extraction no longer fails when the modification time can't be set — utimes is now best-effort. (#379)
  • Minimum Node.js is now 14 (the code already required it; engines was incorrectly >=12).
  • CVE-2026-39244 — a crafted archive declaring a huge uncompressed size could force an unbounded Buffer.alloc and OOM the process; allocation is now bounded by the data actually present. Reported by Daniel Púa (devploit), Anh Hong, and José Antonio Zamudio Amaya. (#568)
  • Hardened entry-name lookup against object injection (proto names). Prototype-less table.
  • Data-descriptor regression rejecting valid archives (#548, #533, #554)
  • Directory permissions not restored on extract (#530)
  • Infinite recursion on symlink loops in addLocalFolder (#541)
  • Uncaught process crash in writeFileToAsync on write failure (#470, #459, #402)
  • Empty name on directory entries (#466)
  • test() always returned false for archives with files
  • ~6× faster entry sorting for large archives
  • Built-in TypeScript definitions (types.d.ts) — you can drop @​types/adm-zip

v0.5.18

What's Changed

New Contributors

Full Changelog: cthackers/adm-zip@v0.5.17...v0.5.18

v0.5.17

What's Changed

New Contributors

Full Changelog: cthackers/adm-zip@v0.5.16...v0.5.17

v0.5.16

... (truncated)

Changelog

Sourced from adm-zip's changelog.

0.6.0 / 2026-07-10

Security

  • Fixed CVE-2026-39244: a crafted archive declaring a huge uncompressed size could force an unbounded Buffer.alloc (memory exhaustion / DoS) before any validation. Allocation is now bounded by the data actually present — STORED output is sized from the real bytes, DEFLATED output is grown by the inflater and capped at the declared size (#568)
  • Hardened the internal entry-name lookup table against object injection: entry names come from untrusted archives, and a name such as __proto__ previously resolved to Object.prototype, crashing addFile and hiding the entry from getEntry/readFile. The table is now prototype-less

Bug fixes

  • Fixed a regression (0.5.15) that rejected valid archives using a data descriptor (general-purpose bit 3). The payload is now validated against the authoritative central-directory CRC instead of requiring/parsing the trailing descriptor (#548, #533, #554)
  • Fixed extractAllTo/extractAllToAsync not restoring directory permissions with keepOriginalPermission; directory modes are applied after their contents are written, deepest path first, and no longer lock the extractor out of a restrictive directory (#530)
  • Fixed infinite recursion in addLocalFolder when a folder contains a symlink pointing back to an ancestor (e.g. workspace node_modules); the walk now tracks resolved real paths and skips already-visited directories (#541)
  • Fixed an uncaught exception (ERR_INVALID_ARG_TYPE) that crashed the process when writeFileToAsync could not open the target file (bad permissions, invalid filename, exhausted file descriptors); write failures are now reported through the callback and write errors are no longer silently swallowed (#470, #459, #402)
  • Fixed directory entries reporting an empty name (e.g. a/b/c/ now returns c) (#466)
  • Fixed extractEntryTo flattening subdirectories when maintainEntryPath is false; the structure below the extracted directory is now preserved instead of collapsing (and overwriting) files by basename (#306)
  • Fixed a failed utimes aborting extraction; setting the modification time is now best-effort and never fails extraction of already-written content (#379)
  • Fixed test() always returning false for any archive containing a file (it indexed the entries array with an entry object instead of reading the entry); it now correctly verifies each entry's CRC

Performance

  • Faster entry sorting when writing archives with many entries: names are decoded once instead of on every comparison (about 6× faster sort for large archives)

Added

  • Bundled TypeScript type definitions (types.d.ts), so @types/adm-zip is no longer required

Notes

  • Behavior change: extractEntryTo(dir, target, /* maintainEntryPath */ false) now preserves subdirectories beneath the extracted directory rather than flattening them
  • Behavior change: extraction no longer fails when the modification time cannot be set

0.5.4 / 2021-03-08

  • Fixed relative paths
  • Added zipcrypto encryption
  • Lower verMade for macOS when generating zip file

0.5.3 / 2021-02-07

  • Fixed filemode when unzipping

0.5.2 / 2021-01-27

  • Fixed path traversal issue (GHSL-2020-198)

0.5.1 / 2020-11-27

  • Incremented version (cthackers)
  • Fixed outFileName (cthackers)

0.5.0 / 2020-11-19

  • Added extra parameter to extractEntryTo so target filename can be renamed (cthackers)

... (truncated)

Commits
  • 2b4d840 updated minimum node engine version to >= 14
  • dc57f0f Hardened entry-name lookup, fixed test(), and sped up entry sorting
  • f81806a Made utimes best-effort so it can't abort extraction (#379)
  • ab04324 Fixed extractEntryTo flattening subdirectories (#306)
  • 8a5d9ba Fixed empty name for directory entries (#466)
  • 3e72790 Fixed uncaught crash in writeFileToAsync on write failure (#470, #459, #402)
  • 651ae4c Added typescript types
  • e72021d Fixed infinite recursion on symlink loops in addLocalFolder (#541)
  • 8f3176b Fixed directory permissions on linux
  • 4d2c8f9 Fixed error introduced with zip descriptor checks
  • Additional commits viewable in compare view

Updates @openzeppelin/hardhat-upgrades from 3.2.0 to 4.1.0

Release notes

Sourced from @​openzeppelin/hardhat-upgrades's releases.

@​openzeppelin/hardhat-upgrades@​4.1.0

  • Add a viem-based API at @openzeppelin/hardhat-upgrades/viem, following @nomicfoundation/hardhat-viem conventions: contracts are identified by name, addresses are typed as `0x${string}`, and the returned contract instances are viem contract instances. (#1279)
    • To use the viem-based API, install viem and @nomicfoundation/hardhat-viem, then import both the plugin (for your Hardhat config's plugins array) and the API (for your scripts) from @openzeppelin/hardhat-upgrades/viem. It supports wallet clients backed by local accounts, such as viem's privateKeyToAccount. The proxyFilesToBuild helper for Solidity tests is also exported from this entry point, so viem-only projects can configure npmFilesToBuild without importing the ethers-typed root entry.
    • The ethers-based API is unchanged. Import its plugin and API from @openzeppelin/hardhat-upgrades as before, or from the new @openzeppelin/hardhat-upgrades/ethers alias.
    • Potentially breaking changes: ethers and @nomicfoundation/hardhat-ethers are now optional peer dependencies, required only by the ethers-based API; viem-only projects no longer need them. If you use the ethers-based API, install them explicitly with npm install --save-dev @nomicfoundation/hardhat-ethers ethers. Previously they were required peer dependencies that package managers installed automatically.

@​openzeppelin/hardhat-upgrades@​4.0.2

  • Re-export @nomicfoundation/hardhat-ethers types so that TypeScript recognizes connection.ethers when only this plugin is registered. (#1275)

@​openzeppelin/hardhat-upgrades@​4.0.1

  • Update dependencies. (#1255)

@​openzeppelin/hardhat-upgrades@​4.0.0

  • Migrate to Hardhat 3 with ESM module structure and plugin hooks architecture. (#1241)

    Breaking Changes

    • Requires Hardhat 3: minimum hardhat@^3.6.0 required.
    • ESM-only: package converted to ESM; CommonJS is no longer supported.
    • API Changes:
      • No automatic hre.upgrades — call the upgrades(hre, connection) factory explicitly.
      • Factory functions (upgrades, defender) are async and require a network connection.
      • Network connection must be explicitly created: const connection = await hre.network.create(). Share one connection across operations.
      • ethers now comes from the connection (const { ethers } = connection), not hre.ethers.
    • Import Changes: import factory functions instead of a side-effect import.
      • Before: import '@openzeppelin/hardhat-upgrades'
      • After: import { upgrades, defender } from '@openzeppelin/hardhat-upgrades'

    Usage and Migration

    See the README for Hardhat 3 usage, the examples directory for sample projects, and the Migration Guide for Hardhat 2 to 3 migration steps.

    Changes

    • Migrated from extendEnvironment to Hardhat 3's HardhatPlugin with hookHandlers.
    • Converted package to ESM.
    • Etherscan verification requires @nomicfoundation/hardhat-verify@^3.0.10 (optional peer dependency).
    • Support Solidity tests in Hardhat 3 with @openzeppelin/foundry-upgrades.
    • Added example projects for Hardhat 3 (Transparent, UUPS, and Solidity-test scaffolds under packages/plugin-hardhat/examples/).

  • Updated dependencies [7f3e4c6, 668f70c]:

    • @​openzeppelin/upgrades-core@​1.45.0

@​openzeppelin/hardhat-upgrades@​4.0.0-alpha.0

Note ⚠️ This version is still in testing. Do not use it to deploy or upgrade production deployments.

  • Migrate to Hardhat 3 with ESM module structure and plugin hooks architecture. (#1194)

    Breaking Changes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​openzeppelin/hardhat-upgrades since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates @nomicfoundation/hardhat-ethers from 3.0.6 to 4.0.15

Release notes

Sourced from @​nomicfoundation/hardhat-ethers's releases.

@​nomicfoundation/hardhat-ethers@​4.0.15

Changes

  • #8443 b7389c2 Thanks @​Kropiunig! - Fixed the HD wallet derivation-path validator so malformed paths containing stray colons (e.g. m:/44'/60'/0'/0) are rejected with the INVALID_HD_PATH error.

  • Updated dependencies:

    • @​nomicfoundation/hardhat-utils@​4.1.5
    • @​nomicfoundation/hardhat-errors@​3.0.17

💡 The Nomic Foundation is hiring! Check our open positions.

@​nomicfoundation/hardhat-ethers@​4.0.14

Changes

  • #8249 8acc2cf Thanks @​mmv08! - Add a per-network ethers.waitForTransactionReceipt option that makes HardhatEthersSigner.sendTransaction wait until the transaction receipt is available before resolving.

  • Updated dependencies:

    • @​nomicfoundation/hardhat-errors@​3.0.16
    • @​nomicfoundation/hardhat-utils@​4.1.4

💡 The Nomic Foundation is hiring! Check our open positions.

@​nomicfoundation/hardhat-ethers@​4.0.13

Changes

  • #8339 00720e8 Thanks @​alcuadrado! - The plugin now uses definePlugin from hardhat/plugins in its index.ts, so it participates in Hardhat's new "imported but unused plugin" warning when omitted from a project's plugins array.

  • Updated dependencies:

    • hardhat@3.8.0
    • @​nomicfoundation/hardhat-errors@​3.0.15

💡 The Nomic Foundation is hiring! Check our open positions.

@​nomicfoundation/hardhat-ethers@​4.0.12

Changes

  • #8264 8452f97 Thanks @​alcuadrado! - Export ./package.json so consumers can import the package's manifest.

  • Updated dependencies:

    • @​nomicfoundation/hardhat-errors@​3.0.13
    • @​nomicfoundation/hardhat-utils@​4.1.2

💡 The Nomic Foundation is hiring! Check our open positions.

... (truncated)

Changelog

Sourced from @​nomicfoundation/hardhat-ethers's changelog.

4.0.15

Patch Changes

  • #8443 b7389c2 Thanks @​Kropiunig! - Fixed the HD wallet derivation-path validator so malformed paths containing stray colons (e.g. m:/44'/60'/0'/0) are rejected with the INVALID_HD_PATH error.

  • Updated dependencies:

    • @​nomicfoundation/hardhat-utils@​4.1.5
    • @​nomicfoundation/hardhat-errors@​3.0.17

4.0.14

Patch Changes

  • #8249 8acc2cf Thanks @​mmv08! - Add a per-network ethers.waitForTransactionReceipt option that makes HardhatEthersSigner.sendTransaction wait until the transaction receipt is available before resolving.

  • Updated dependencies:

    • @​nomicfoundation/hardhat-errors@​3.0.16
    • @​nomicfoundation/hardhat-utils@​4.1.4

4.0.13

Patch Changes

  • #8339 00720e8 Thanks @​alcuadrado! - The plugin now uses definePlugin from hardhat/plugins in its index.ts, so it participates in Hardhat's new "imported but unused plugin" warning when omitted from a project's plugins array.

  • Updated dependencies:

    • hardhat@3.8.0
    • @​nomicfoundation/hardhat-errors@​3.0.15

4.0.12

Patch Changes

  • #8264 8452f97 Thanks @​alcuadrado! - Export ./package.json so consumers can import the package's manifest.

  • Updated dependencies:

    • @​nomicfoundation/hardhat-errors@​3.0.13
    • @​nomicfoundation/hardhat-utils@​4.1.2

4.0.11

Patch Changes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​nomicfoundation/hardhat-ethers since your current version.


Updates @nomicfoundation/hardhat-toolbox from 5.0.0 to 7.0.0

Release notes

Sourced from @​nomicfoundation/hardhat-toolbox's releases.

@​nomicfoundation/hardhat-toolbox-viem@​5.0.7

Changes

  • #8339 00720e8 Thanks @​alcuadrado! - The plugin now uses definePlugin from hardhat/plugins in its index.ts, so it participates in Hardhat's new "imported but unused plugin" warning when omitted from a project's plugins array.

  • Updated dependencies:

    • hardhat@3.8.0

💡 The Nomic Foundation is hiring! Check our open positions.

@​nomicfoundation/hardhat-toolbox-viem@​5.0.6

Changes

💡 The Nomic Foundation is hiring! Check our open positions.

Changelog

Sourced from @​nomicfoundation/hardhat-toolbox's changelog.

7.0.0

Major Changes

  • 09ae6db: Deprecate the latest npm tag and redirect users to migrate to Hardhat 3 or to the hh2 tag.
Commits
  • 6372d08 Version Packages
  • a26e822 Remove the npm tags from the README.md files
  • 18bef56 Quote the package in the installation instructions of the readmes
  • e5025ae Update the formatting and quote the package in the installation instructions ...
  • ee34347 Update hardhat-toolbox
  • 7ade974 Version Packages
  • a7e4215 feat: bump minimum version of solidity-coverage to Osaka
  • e4ad0ad chore: update package metadata for provenance
  • f65ee74 Version Packages
  • a4f1e27 Hardhat 2 documentation links updated to reflect the domain change to v2.hard...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​nomicfoundation/hardhat-toolbox since your current version.


Updates @nomicfoundation/hardhat-verify from 2.0.8 to 3.1.0

Release notes

Sourced from @​nomicfoundation/hardhat-verify's releases.

@​nomicfoundation/hardhat-verify@​3.1.0

Changes

  • #8510 7c85703 Thanks @​nikitosing! - Added support for an optional apiKey in the verify.blockscout config. This is required by Blockscout instances that don't expose a keyless API, like the Pro API.
  • #8577 27a145d Thanks @​kanej! - Report a directory with no importable entry point as a module-not-found error, instead of the generic "importing the module failed".

💡 The Nomic Foundation is hiring! Check our open positions.

@​nomicfoundation/hardhat-verify@​3.0.22

Changes

💡 The Nomic Foundation is hiring! Check our open positions.

@​nomicfoundation/hardhat-verify@​3.0.21

Changes

  • #8367 82d00fc Thanks @​alcuadrado! - Lazy load dependencies to optimize bootstrap time

  • Updated dependencies:

    • @​nomicfoundation/hardhat-errors@​3.0.16
    • @​nomicfoundation/hardhat-utils@​4.1.4

💡 The Nomic Foundation is hiring! Check our open positions.

@​nomicfoundation/hardhat-verify@​3.0.20

Changes

  • #8374 c67a5bb Thanks @​gultekinmakif! - Running verify against local development networks (chain IDs 31337 and 1337) now fails with a clear NETWORK_NOT_SUPPORTED error.

💡 The Nomic Foundation is hiring! Check our open positions.

@​nomicfoundation/hardhat-verify@​3.0.19

Changes

  • #8339 00720e8 Thanks @​alcuadrado! - The plugin now uses definePlugin from hardhat/plugins in its index.ts, so it participates in Hardhat's new "imported but unused plugin" warning when omitted from a project's plugins array.

  • #8349 af31a41 Thanks @​schaable! - Improved hardhat verify to fail faster when the block explorer reports that the constructor arguments are incorrect.

    Thanks to @​gultekinmakif for the original idea and implementation in #8333.

... (truncated)

Changelog

Sourced from @​nomicfoundation/hardhat-verify's changelog.

3.1.0

Minor Changes

  • #8510 7c85703 Thanks @​nikitosing! - Added support for an optional apiKey in the verify.blockscout config. This is required by Blockscout instances that don't expose a keyless API, like the Pro API.

Patch Changes

  • #8577 27a145d Thanks @​kanej! - Report a directory with no importable entry point as a module-not-found error, instead of the generic "importing the module failed".

3.0.22

Patch Changes

3.0.21

Patch Changes

  • #8367 82d00fc Thanks @​alcuadrado! - Lazy load dependencies to optimize bootstrap time

  • Updated dependencies:

    • @​nomicfoundation/hardhat-errors@​3.0.16
    • @​nomicfoundation/hardhat-utils@​4.1.4

3.0.20

Patch Changes

  • #8374 c67a5bb Thanks @​gultekinmakif! - Running verify against local development networks (chain IDs 31337 and 1337) now fails with a clear NETWORK_NOT_SUPPORTED error.

3.0.19

Patch Changes

  • #8339 00720e8 Thanks @​alcuadrado! - The plugin now uses definePlugin from hardhat/plugins in its index.ts, so it participates in Hardhat's new "imported but unused plugin" warning when omitted from a project's plugins array.

  • #8349 af31a41 Thanks @​schaable! - Improved hardhat verify to fail faster when the block explorer reports that the constructor arguments are incorrect.

    Thanks to @​gultekinmakif for the original idea and implementation in #8333.

  • Updated dependencies:

    • hardhat@3.8.0
    • @​nomicfoundation/hardhat-errors@​3.0.15

3.0.18

Patch Changes

... (truncated)

Commits
  • 25c1aef Version Packages
  • 27a145d fix(hardhat-verify): treat a directory import as module not found
  • 0c1c607 Merge pull request #8510 from nikitosing/claude/blockscout-apikey-support-s609wm
  • a619567 remove implementation details from docs and changeset
  • d84ce51 chore: bump eslint 9.25.1 → 9.39.5
  • 7c85703 feat(hardhat-verify): support an optional apiKey for Blockscout
  • 9106af0 refactor: move error-handler to cli/error-handling/
  • 7cf7797 Version Packages
  • 6e1818e chore: bump cbor2 1 → 2 in hardhat-verify and ignition-core
  • ff73c0a chore: reformat repo with prettier 3.9.6
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​nomicfoundation/hardhat-verify since your current version.


Updates @nomiclabs/hardhat-solhint from 4.0.1 to 5.0.0

Release notes

Sourced from @​nomiclabs/hardhat-solhint's releases.

@​nomicfoundation/hardhat-utils@​4.1.9

Changes

💡 The Nomic Foundation is hiring! Check our open positions.

@​nomicfoundation/hardhat-utils@​4.1.8

Changes

  • #8533 cbe361a Thanks @​kanej! - Update the fast-equals runtime dependency to its latest major version.

💡 The Nomic Foundation is hiring! Check our open positions.

@​nomicfoundation/hardhat-utils@​4.1.7

Changes

💡 The Nomic Foundation is hiring! Check our open positions.

@​nomicfoundation/hardhat-utils@​4.1.6

Changes

💡 The Nomic Foundation is hiring! Check our open positions.

@​nomicfoundation/hardhat-utils@​4.1.5

Changes

💡 The Nomic Foundation is hiring! Check our open positions.

@​nomicfoundation/hardhat-utils@​4.1.4

Changes

... (truncated)

Changelog

Sourced from @​nomiclabs/hardhat-solhint's changelog.

5.0.0

Major Changes

  • 09ae6db: Deprecate the latest npm tag and redirect users to migrate to Hardhat 3 or to the hh2 tag.
Commits
  • 6372d08 Version Packages
  • a26e822 Remove the npm tags from the README.md files
  • 18bef56 Quote the package in the installation instructions of the readmes
  • e5025ae Update the formatting and quote the package in the installation instructions ...
  • 668847b Update hardhat-solhint
  • 81dd4ec Version Packages
  • 8da8c38 chore: update readme instructions instructions to use hh2 tag
  • e4ad0ad chore: update package metadata for provenance
  • f65ee74 Version Packages
  • a4f1e27 Hardhat 2 documentation links updated to reflect the domain change to v2.hard...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​nomiclabs/hardhat-solhint since your current version.


Updates hardhat from 2.22.6 to 3.15.0

Release notes

Sourced from hardhat's releases.

Hardhat v3.15.0

This release includes two highlights: improved Solidity Test compilation speed through a porting of our inline configuration parsing to Rust, and bumps of our default templates to Solidity 0.8.34.

Changes

💡 The Nomic Foundation is hiring! Check our open positions.

Hardhat v3.14.0

This is a small bug fix release, but includes a reworking of our EDR dependencies to be platform specific, reducing the install size of a Hardhat project's node_modules.

Changes

  • #8540 99306ea Thanks @​kanej! - EDR now uses platform specific optionalDependencies, reducing Hardhat's install size.

  • #8514 f7c6228 Thanks @​questfever! - Fixed Solidity resolver containment checks for paths whose names share a prefix with the project root, a package source-name root, or node_modules.

  • #8540 99306ea Thanks @​kanej! - Fixed missing Solidity test stack trace when setUp() fails and stack traces are collected with CollectStackTraces::Always.

  • #8500 54973b2 Thanks @​SnowingFox! - Fixed the format of fuzz test counterexamples: byte array values such as calldata, sender and address are now printed as hexadecimal strings (e.g. 0x3e2033b3...) instead of comma-separated byte lists.

  • #8522 8640b4b Thanks @​JasonColapietro! - Remove Holesky testnet (chain id 17000) as a supported chain as it has been shut down.

  • #8488 edd1069 Thanks @​ChristopherDedominici! - Stores gas snapshot cheatcode values as raw strings and calculates diffs using BigInt.

💡 The Nomic Foundation is hiring! Check our open positions.

Hardhat v3.13.0

This release adds two new features: a --tolerance option for --snapshot-check to allow for a small amount of drift between gas snapshots as you develop and default values for config variables in hardhat.config.ts, see the

@dependabot
build(deps): bump adm-zip, @openzeppelin/hardhat-upgrades, @nomicfoun…
cb44377 
…dation/hardhat-ethers, @nomicfoundation/hardhat-toolbox, @nomicfoundation/hardhat-verify, @nomiclabs/hardhat-solhint and hardhat

Bumps [adm-zip](https://github.com/cthackers/adm-zip) to 0.6.0 and updates ancestor dependencies [adm-zip](https://github.com/cthackers/adm-zip), [@openzeppelin/hardhat-upgrades](https://github.com/OpenZeppelin/openzeppelin-upgrades), [@nomicfoundation/hardhat-ethers](https://github.com/NomicFoundation/hardhat/tree/HEAD/packages/hardhat-ethers), [@nomicfoundation/hardhat-toolbox](https://github.com/NomicFoundation/hardhat/tree/HEAD/packages/hardhat-toolbox), [@nomicfoundation/hardhat-verify](https://github.com/NomicFoundation/hardhat/tree/HEAD/packages/hardhat-verify), [@nomiclabs/hardhat-solhint](https://github.com/NomicFoundation/hardhat/tree/HEAD/packages/hardhat-solhint) and [hardhat](https://github.com/NomicFoundation/hardhat/tree/HEAD/packages/hardhat). These dependencies need to be updated together.


Updates `adm-zip` from 0.4.16 to 0.6.0
- [Release notes](https://github.com/cthackers/adm-zip/releases)
- [Changelog](https://github.com/cthackers/adm-zip/blob/master/history.md)
- [Commits](cthackers/adm-zip@v0.4.16...v0.6.0)

Updates `@openzeppelin/hardhat-upgrades` from 3.2.0 to 4.1.0
- [Release notes](https://github.com/OpenZeppelin/openzeppelin-upgrades/releases)
- [Commits](https://github.com/OpenZeppelin/openzeppelin-upgrades/compare/@openzeppelin/hardhat-upgrades@3.2.0...@openzeppelin/hardhat-upgrades@4.1.0)

Updates `@nomicfoundation/hardhat-ethers` from 3.0.6 to 4.0.15
- [Release notes](https://github.com/NomicFoundation/hardhat/releases)
- [Changelog](https://github.com/NomicFoundation/hardhat/blob/main/packages/hardhat-ethers/CHANGELOG.md)
- [Commits](https://github.com/NomicFoundation/hardhat/commits/@nomicfoundation/hardhat-ethers@4.0.15/packages/hardhat-ethers)

Updates `@nomicfoundation/hardhat-toolbox` from 5.0.0 to 7.0.0
- [Release notes](https://github.com/NomicFoundation/hardhat/releases)
- [Changelog](https://github.com/NomicFoundation/hardhat/blob/@nomicfoundation/hardhat-toolbox@7.0.0/packages/hardhat-toolbox/CHANGELOG.md)
- [Commits](https://github.com/NomicFoundation/hardhat/commits/@nomicfoundation/hardhat-toolbox@7.0.0/packages/hardhat-toolbox)

Updates `@nomicfoundation/hardhat-verify` from 2.0.8 to 3.1.0
- [Release notes](https://github.com/NomicFoundation/hardhat/releases)
- [Changelog](https://github.com/NomicFoundation/hardhat/blob/main/packages/hardhat-verify/CHANGELOG.md)
- [Commits](https://github.com/NomicFoundation/hardhat/commits/@nomicfoundation/hardhat-verify@3.1.0/packages/hardhat-verify)

Updates `@nomiclabs/hardhat-solhint` from 4.0.1 to 5.0.0
- [Release notes](https://github.com/NomicFoundation/hardhat/releases)
- [Changelog](https://github.com/NomicFoundation/hardhat/blob/@nomiclabs/hardhat-solhint@5.0.0/packages/hardhat-solhint/CHANGELOG.md)
- [Commits](https://github.com/NomicFoundation/hardhat/commits/@nomiclabs/hardhat-solhint@5.0.0/packages/hardhat-solhint)

Updates `hardhat` from 2.22.6 to 3.15.0
- [Release notes](https://github.com/NomicFoundation/hardhat/releases)
- [Changelog](https://github.com/NomicFoundation/hardhat/blob/main/packages/hardhat/CHANGELOG.md)
- [Commits](https://github.com/NomicFoundation/hardhat/commits/hardhat@3.15.0/packages/hardhat)

---
updated-dependencies:
- dependency-name: adm-zip
  dependency-version: 0.6.0
  dependency-type: indirect
- dependency-name: "@openzeppelin/hardhat-upgrades"
  dependency-version: 4.1.0
  dependency-type: direct:production
- dependency-name: "@nomicfoundation/hardhat-ethers"
  dependency-version: 4.0.15
  dependency-type: direct:development
- dependency-name: "@nomicfoundation/hardhat-toolbox"
  dependency-version: 7.0.0
  dependency-type: direct:development
- dependency-name: "@nomicfoundation/hardhat-verify"
  dependency-version: 3.1.0
  dependency-type: direct:development
- dependency-name: "@nomiclabs/hardhat-solhint"
  dependency-version: 5.0.0
  dependency-type: direct:development
- dependency-name: hardhat
  dependency-version: 3.15.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Used by dependabot for dependency updates javascript Pull requests that update javascript code labels Sep 3, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner September 3, 2026 10:44
@dependabot dependabot Bot added the javascript Pull requests that update javascript code label Sep 3, 2026
@dependabot dependabot Bot added the dependencies Used by dependabot for dependency updates label Sep 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@zeeshanamjad-eng zeeshanamjad-eng Awaiting requested review from zeeshanamjad-eng zeeshanamjad-eng is a code owner automatically assigned from BitGo/stablecoins
@harshchawla812 harshchawla812 Awaiting requested review from harshchawla812 harshchawla812 is a code owner automatically assigned from BitGo/stablecoins

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Used by dependabot for dependency updates javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants