Skip to content

build(deps): bump undici and hardhat#36

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-52ec51aea7
Open

build(deps): bump undici and hardhat#36
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-52ec51aea7

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 6, 2026

Bumps undici to 6.25.0 and updates ancestor dependency hardhat. These dependencies need to be updated together.

Updates undici from 5.14.0 to 6.25.0

Release notes

Sourced from undici's releases.

v6.25.0

What's Changed

Full Changelog: nodejs/undici@v6.24.1...v6.25.0

v6.24.1

Full Changelog: nodejs/undici@v6.24.0...v6.24.1

v6.24.0

Undici v6.24.0 Security Release Notes (LTS)

This release backports fixes for security vulnerabilities affecting the v6 line.

Upgrade guidance

All users on v6 should upgrade to v6.24.0 or later.

Fixed advisories

Not applicable to v6

Affected and patched ranges (v6)

References

... (truncated)

Commits
  • 3420499 Bumped v6.25.0 (#5029)
  • d7a1e55 feat: add configurable maxPayloadSize for WebSocket (#4955)
  • a9d1848 Do not mark v6.x releases as latest
  • 0126586 Ignore local agent configuration files
  • c0cf656 Bumped v6.24.1
  • f5a9f0c Fix v6 release workflow branch targeting
  • af2cb8f wqremove maxDecompressedMessageSize (#4891)
  • 8873c94 Bumped v6.24.0
  • 411bd01 test(websocket): use node:assert for Node 18 compatibility
  • 844bf59 test: fix http2 lint regressions in backport
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for undici since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates hardhat from 2.12.5 to 3.4.4

Release notes

Sourced from hardhat's releases.

Hardhat v3.4.4

This release is a small bug fix release to improve memory usage while running tests with coverage.

Changes


💡 The Nomic Foundation is hiring! Check our open positions.


Hardhat v3.4.3

This is a small release focusing on performance improvements.

Changes


💡 The Nomic Foundation is hiring! Check our open positions.


Hardhat v3.4.2

This release includes a set of small performance improvements targeted at Hardhat's bootstrap time.

... (truncated)

Changelog

Sourced from hardhat's changelog.

3.4.4

Patch Changes

3.4.3

Patch Changes

3.4.2

Patch Changes

... (truncated)

Commits
  • 82bf1ee Version Packages
  • f435b04 Merge pull request #8213 from NomicFoundation/fix/reduce-retained-coverage-me...
  • 0ca507e Merge pull request #8217 from Zhen-in-progress/test/implement-solidity-config...
  • 448da88 fix: update memory usage when passing coverage
  • a6310ad Merge pull request #8197 from NomicFoundation/error-classifier-and-filter
  • 505c3b6 Fix linter errors
  • a3931e1 Use lowercaseMessageByError map for case-insensitive matching
  • 21d6e31 Break cycles and bound depth in getNodeErrorCode
  • 50329e9 Assert isUnknownEdrError input is in the error chain
  • 04d70b3 Document that the migration matcher is temporary
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for hardhat since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [undici](https://github.com/nodejs/undici) to 6.25.0 and updates ancestor dependency [hardhat](https://github.com/NomicFoundation/hardhat/tree/HEAD/packages/hardhat). These dependencies need to be updated together.


Updates `undici` from 5.14.0 to 6.25.0
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v5.14.0...v6.25.0)

Updates `hardhat` from 2.12.5 to 3.4.4
- [Release notes](https://github.com/NomicFoundation/hardhat/releases)
- [Changelog](https://github.com/NomicFoundation/hardhat/blob/main/packages/hardhat/CHANGELOG.md)
- [Commits](https://github.com/NomicFoundation/hardhat/commits/hardhat@3.4.4/packages/hardhat)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 6.25.0
  dependency-type: indirect
- dependency-name: hardhat
  dependency-version: 3.4.4
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 6, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants