Skip to content

Bump the "dev-dependencies" group with 2 updates across multiple ecosystems#27

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/dev_dependencies-722dc2ab73
Closed

Bump the "dev-dependencies" group with 2 updates across multiple ecosystems#27
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/dev_dependencies-722dc2ab73

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 19, 2026

Bumps the dev-dependencies group in /dev with 4 updates: @foundry-rs/anvil, @foundry-rs/cast, @foundry-rs/chisel and @foundry-rs/forge.

Updates @foundry-rs/anvil from 1.7.0 to 1.7.1

Release notes

Sourced from @​foundry-rs/anvil's releases.

v1.7.1

Foundry v1.7.1

A patch release on top of v1.7.0 with cherry-picked correctness fixes for cheatcodes, EVM forking, CLI, forge, and cast, plus further release-pipeline hardening (updated release version string construction, signed archives & SBOMs).

Cheatcodes

Reverter-address enforcement for CREATE frames, value transfers for payable mock calls, preserved reverts under expectEmit, and a fix for the spurious solc 0.8.35 error keyword warning.

EVM

Correctness fixes for fork state-snapshot lookups and CREATE address preservation in isolation mode.

  • fix(evm): query state_snapshot.storage in ForkDbStateSnapshot::storage_ref (#14007) by @​gutonosa
  • fix(evm): preserve CREATE address on revert in isolation mode (#14637) by @​mablr

Forge

Tempo's forge init template now uses network = "tempo" with populated default rpc_endpoints, forge test ignores ETH_RPC_URL for forking, --fuzz-seed is finally honored by forge coverage, and Tempo creates are encoded as AA calls.

... (truncated)

Commits

Updates @foundry-rs/cast from 1.7.0 to 1.7.1

Release notes

Sourced from @​foundry-rs/cast's releases.

v1.7.1

Foundry v1.7.1

A patch release on top of v1.7.0 with cherry-picked correctness fixes for cheatcodes, EVM forking, CLI, forge, and cast, plus further release-pipeline hardening (updated release version string construction, signed archives & SBOMs).

Cheatcodes

Reverter-address enforcement for CREATE frames, value transfers for payable mock calls, preserved reverts under expectEmit, and a fix for the spurious solc 0.8.35 error keyword warning.

EVM

Correctness fixes for fork state-snapshot lookups and CREATE address preservation in isolation mode.

  • fix(evm): query state_snapshot.storage in ForkDbStateSnapshot::storage_ref (#14007) by @​gutonosa
  • fix(evm): preserve CREATE address on revert in isolation mode (#14637) by @​mablr

Forge

Tempo's forge init template now uses network = "tempo" with populated default rpc_endpoints, forge test ignores ETH_RPC_URL for forking, --fuzz-seed is finally honored by forge coverage, and Tempo creates are encoded as AA calls.

... (truncated)

Commits

Updates @foundry-rs/chisel from 1.7.0 to 1.7.1

Release notes

Sourced from @​foundry-rs/chisel's releases.

v1.7.1

Foundry v1.7.1

A patch release on top of v1.7.0 with cherry-picked correctness fixes for cheatcodes, EVM forking, CLI, forge, and cast, plus further release-pipeline hardening (updated release version string construction, signed archives & SBOMs).

Cheatcodes

Reverter-address enforcement for CREATE frames, value transfers for payable mock calls, preserved reverts under expectEmit, and a fix for the spurious solc 0.8.35 error keyword warning.

EVM

Correctness fixes for fork state-snapshot lookups and CREATE address preservation in isolation mode.

  • fix(evm): query state_snapshot.storage in ForkDbStateSnapshot::storage_ref (#14007) by @​gutonosa
  • fix(evm): preserve CREATE address on revert in isolation mode (#14637) by @​mablr

Forge

Tempo's forge init template now uses network = "tempo" with populated default rpc_endpoints, forge test ignores ETH_RPC_URL for forking, --fuzz-seed is finally honored by forge coverage, and Tempo creates are encoded as AA calls.

... (truncated)

Commits

Updates @foundry-rs/forge from 1.7.0 to 1.7.1

Release notes

Sourced from @​foundry-rs/forge's releases.

v1.7.1

Foundry v1.7.1

A patch release on top of v1.7.0 with cherry-picked correctness fixes for cheatcodes, EVM forking, CLI, forge, and cast, plus further release-pipeline hardening (updated release version string construction, signed archives & SBOMs).

Cheatcodes

Reverter-address enforcement for CREATE frames, value transfers for payable mock calls, preserved reverts under expectEmit, and a fix for the spurious solc 0.8.35 error keyword warning.

EVM

Correctness fixes for fork state-snapshot lookups and CREATE address preservation in isolation mode.

  • fix(evm): query state_snapshot.storage in ForkDbStateSnapshot::storage_ref (#14007) by @​gutonosa
  • fix(evm): preserve CREATE address on revert in isolation mode (#14637) by @​mablr

Forge

Tempo's forge init template now uses network = "tempo" with populated default rpc_endpoints, forge test ignores ETH_RPC_URL for forking, --fuzz-seed is finally honored by forge coverage, and Tempo creates are encoded as AA calls.

... (truncated)

Commits

Bumps the dev-dependencies group in /dev with 1 update: pre-commit.

Updates pre-commit from 4.3.0 to 4.6.0

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.0

Features

  • pre-commit hook-impl: allow --hook-dir to be missing to enable easier usage with git 2.54+ git hooks.

Fixes

pre-commit v4.5.1

Fixes

  • Fix language: python with repo: local without additional_dependencies.

pre-commit v4.5.0

Features

pre-commit v4.4.0

Features

Fixes

Changelog

Sourced from pre-commit's changelog.

4.6.0 - 2026-04-21

Features

  • pre-commit hook-impl: allow --hook-dir to be missing to enable easier usage with git 2.54+ git hooks.

Fixes

4.5.1 - 2025-12-16

Fixes

  • Fix language: python with repo: local without additional_dependencies.

4.5.0 - 2025-11-22

Features

4.4.0 - 2025-11-08

Features

Fixes

Commits
  • f35134b v4.6.0
  • 2a51ffc Merge pull request #3662 from pre-commit/hook-impl-optional-hook-dir
  • d7dee32 make --hook-dir optional for hook-impl
  • 965aeb1 Merge pull request #3661 from pre-commit/hook-impl-required
  • 2eacc06 --hook-type is required for hook-impl
  • f5678bf Merge pull request #3657 from pre-commit/pre-commit-ci-update-config
  • 054cc5b [pre-commit.ci] pre-commit autoupdate
  • 5c0f302 Merge pull request #3652 from pre-commit/pre-commit-ci-update-config
  • a5d9114 [pre-commit.ci] pre-commit autoupdate
  • 129a1f5 Merge pull request #3641 from pre-commit/mxr-patch-1
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps-dev): bump the dev-dependencies group in /dev with 4 updates
c9aa87d 
Bumps the dev-dependencies group in /dev with 4 updates: [@foundry-rs/anvil](https://github.com/foundry-rs/foundry/tree/HEAD/npm), [@foundry-rs/cast](https://github.com/foundry-rs/foundry/tree/HEAD/npm), [@foundry-rs/chisel](https://github.com/foundry-rs/foundry/tree/HEAD/npm) and [@foundry-rs/forge](https://github.com/foundry-rs/foundry/tree/HEAD/npm).


Updates `@foundry-rs/anvil` from 1.7.0 to 1.7.1
- [Release notes](https://github.com/foundry-rs/foundry/releases)
- [Commits](https://github.com/foundry-rs/foundry/commits/v1.7.1/npm)

Updates `@foundry-rs/cast` from 1.7.0 to 1.7.1
- [Release notes](https://github.com/foundry-rs/foundry/releases)
- [Commits](https://github.com/foundry-rs/foundry/commits/v1.7.1/npm)

Updates `@foundry-rs/chisel` from 1.7.0 to 1.7.1
- [Release notes](https://github.com/foundry-rs/foundry/releases)
- [Commits](https://github.com/foundry-rs/foundry/commits/v1.7.1/npm)

Updates `@foundry-rs/forge` from 1.7.0 to 1.7.1
- [Release notes](https://github.com/foundry-rs/foundry/releases)
- [Commits](https://github.com/foundry-rs/foundry/commits/v1.7.1/npm)
chore(deps): bump pre-commit in /dev in the dev-dependencies group

Bumps the dev-dependencies group in /dev with 1 update: [pre-commit](https://github.com/pre-commit/pre-commit).


Updates `pre-commit` from 4.3.0 to 4.6.0
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.3.0...v4.6.0)

---
updated-dependencies:
- dependency-name: "@foundry-rs/anvil"
  dependency-version: 1.7.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@foundry-rs/cast"
  dependency-version: 1.7.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@foundry-rs/chisel"
  dependency-version: 1.7.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@foundry-rs/forge"
  dependency-version: 1.7.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: pre-commit
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 19, 2026
@dependabot dependabot Bot requested a review from a team as a code owner May 19, 2026 08:37
@socket-security
Copy link
Copy Markdown

socket-security Bot commented May 19, 2026

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Addednpm/​@​foundry-rs/​anvil@​1.7.1691008699100
Addednpm/​@​foundry-rs/​chisel@​1.7.1691008599100
Addednpm/​@​foundry-rs/​forge@​1.7.1701008699100
Addedpypi/​slither-analyzer@​0.11.59410010010070
Addednpm/​@​foundry-rs/​cast@​1.7.1761008699100
Addedpypi/​pre-commit@​4.6.093100100100100

View full report

@igorroncevic
Copy link
Copy Markdown
Contributor

igorroncevic commented May 19, 2026

We are removing Foundry as an NPM package

@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github May 19, 2026

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot Bot deleted the dependabot/dev_dependencies-722dc2ab73 branch May 19, 2026 09:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@igorroncevic