Release develop docs updates to main

[ihsraham]

Promotes the reviewed changes currently merged into develop: ERC-4337 gas-option documentation, Candide/Pimlico quick starts, and dependency security fixes.

Deliverables

• #260: move ERC-4337 gas and fee overrides onto the transfer(), quoteTransfer(), and approve() options, with updated examples and generated documentation.
• #287: add Candide/Pimlico selection to the ERC-4337 and EIP-7702 quick starts. Candide remains the default; both complete provider variants are preserved in exported Markdown and the LLM feed, with regression coverage.
• Security dependency updates included in Update ERC-4337 gas options and dependency security fixes #260: AI SDK 7, React adapter 4, compatible provider 3, undici 7, DOMPurify 3.4.16, and patched brace-expansion versions.

Validation: Docs Quality Gates passed on current develop at da62995. The promotion diff passes git diff --check, and git merge-tree reports no conflicts.

Provider selection screenshots

ERC-4337: Pimlico selected on desktop.

EIP-7702: Candide selected at 375px.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​ai-sdk/​react@​2.0.256 ⏵ 4.0.109	+1		+3
	@​ai-sdk/​openai-compatible@​1.0.53 ⏵ 3.0.52	+9
	ai@​5.0.253 ⏵ 7.0.106	+1

View full report

[AlonzoRicardo]

Checked the promotion against the latest published packages. The content is accurate:

• Gas options: the ERC-4337 gas-option signatures and EvmErc4337TransferOptions/EvmErc4337ApproveOptions match @tetherto/wdk-wallet-evm-erc-4337@1.0.0-beta.21, the current latest.
• Candide paymasters: the v0.7 (0x8b1f…75ba) and v0.8 (0xa815…86ed) pins match what Candide's mainnet pm_supportedERC20Tokens returns, with USD₮ listed.
• Pimlico paymasters: the v0.7 (0x7777…834C) and v0.8 (0x8888…2402) pins match Pimlico's published ERC-20 paymaster table.
• Endpoints: both endpoint formats are detected correctly by the pinned abstractionkit (0.4.0 for 4337, 0.3.8 for 7702), and 4337 token mode does prepend the paymaster approve the guide mentions.
• No drift: the merged trees for Update ERC-4337 gas options and dependency security fixes #260 and Add provider selection to ERC-4337 and EIP-7702 quick starts #287 are identical to their approved heads.

Non-blocking follow-ups:

1. Dependabot: this supersedes build(deps): bump undici, @ai-sdk/openai-compatible, @ai-sdk/react and ai #263, build(deps): bump dompurify from 3.4.13 to 3.4.16 #284 and build(deps): bump brace-expansion #285 with the exact same versions. They're still open against main, so close them once this lands.
2. AI SDK: nothing in the repo imports ai, @ai-sdk/react or @ai-sdk/openai-compatible. Removing them would be simpler than tracking their majors, and it drops undici from the tree too.
3. Next.js: npm audit goes from 23 to 14 with this PR. next@16.3.4 still carries GHSA-vcvr-r3jv-pc5j (critical, next/og) and the image-optimization SSRF, both fixed in 16.3.8. The static export limits the exposure, but it's worth a bump, along with js-yaml, source-map-js and sharp.
4. Back-merge: main has chore: add the WDK PR template with a closing keyword #268 and test: PR to issue link through the template #270, which develop doesn't. This merge keeps them, but a back-merge of main into develop keeps the next promotion diff clean.