chore(deps): update hardhat packages (major) by renovate[bot] · Pull Request #149 · settlemint/solidity-token-erc1155

renovate · 2025-11-04T09:15:54Z

This PR contains the following updates:

Package	Type	Update	Change
@nomicfoundation/hardhat-foundry (source)	dependencies	major	`1.2.0` → `3.0.0`
@nomicfoundation/hardhat-ignition-viem (source)	dependencies	major	`0.15.16` → `3.1.1`
@nomicfoundation/hardhat-toolbox-viem (source)	dependencies	major	`4.1.1` → `5.0.3`
@nomiclabs/hardhat-solhint (source)	dependencies	major	`4.1.0` → `5.0.0`
hardhat (source)	dependencies	major	`2.27.1` → `3.3.0`

Release Notes

NomicFoundation/hardhat (@nomicfoundation/hardhat-foundry)

`v3.0.0`

Compare Source

Major Changes

4cd63e9: Introduce the @nomicfoundation/hardhat-foundry plugin for Hardhat 3

`v1.2.1`

Compare Source

NomicFoundation/hardhat (@nomicfoundation/hardhat-ignition-viem)

`v3.1.1`

Compare Source

Changes

#8088 23c0d36 Thanks @alcuadrado! - Optimize imports.
Updated dependencies:
- @nomicfoundation/hardhat-errors@3.0.10

💡 The Nomic Foundation is hiring! Check our open positions.

`v3.1.0`

Compare Source

Minor Changes

#7967 481b221 Thanks @manuelwedler! - Added support for verifying on all enabled verification services (e.g. Sourcify) (#7538).

Patch Changes

Updated dependencies:
- @nomicfoundation/hardhat-errors@3.0.9

`v3.0.9`

Compare Source

Patch Changes

2cbf218: Fix an issue that prevented the verification of contracts using FQNs (#8014)
13918b4: Add support for custom chains not in viem's built-in chain list, thanks @daanporon! (#7763)

`v3.0.8`

Compare Source

Patch Changes

6674b00: Bump hardhat-utils major

`v3.0.7`

Compare Source

Patch Changes

2bc18b2: Bumped viem version across all packages 7861.

`v3.0.6`

Compare Source

Patch Changes

dac916b: Expose ignition retry loop variables in user config (Hardhat v3) (#7303)

`v3.0.5`

Compare Source

Patch Changes

d1c1803: Make @nomicfoundation/hardhat-ignition's UI work well with other plugins, like Ledger's.

`v3.0.4`

Compare Source

Patch Changes

843c1ae: Fixed a bug preventing Ignition from using the hre.config.ignition settings when deploying via script (#7641)
558ac5b: Update installation and config instructions

`v3.0.3`

Compare Source

Patch Changes

bebf87c: Added support for Linea network verification, thanks @kyzooghost (#7357)

`v3.0.2`

Compare Source

Patch Changes

ddefbff: Added guard to stop multiple simultaneous calls to ignition.deploy(...) at once (#6440)

`v3.0.1`

Compare Source

Patch Changes

86cecc7: Fix the type guard to include m.encodeFunctionCall in those that do not submit transactions, thanks @radik878 (#7264)

`v3.0.0`

Compare Source

Major Changes

29cc141: First release of Hardhat 3!

NomicFoundation/hardhat (@nomicfoundation/hardhat-toolbox-viem)

`v5.0.3`

Compare Source

Patch Changes

13918b4: Add support for custom chains not in viem's built-in chain list, thanks @daanporon! (#7763)

`v5.0.2`

Compare Source

Patch Changes

2bc18b2: Bumped viem version across all packages 7861.

`v5.0.1`

Compare Source

Patch Changes

558ac5b: Update installation and config instructions

`v5.0.0`

Compare Source

Major Changes

29cc141: First release of Hardhat 3!

`v4.1.2`

Compare Source

This release is a small bump to the version of solidity-coverage to include changes for the Osaka transaction gas limit.

Changes

a7e4215: Update solidity-coverage minimum version to include Osaka changes

💡 The Nomic Foundation is hiring! Check our open positions.

NomicFoundation/hardhat (@nomiclabs/hardhat-solhint)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

package.json

    "@graphprotocol/graph-ts": "0.38.0",
    "@nomicfoundation/hardhat-foundry": "1.2.0",
-    "@nomicfoundation/hardhat-ignition-viem": "0.15.15",
-    "@nomicfoundation/hardhat-toolbox-viem": "4.1.1",
+    "@nomicfoundation/hardhat-ignition-viem": "3.0.4",
+    "@nomicfoundation/hardhat-toolbox-viem": "5.0.1",


cubic-dev-ai

No issues found across 2 files

sentry · 2025-12-11T03:10:49Z

package.json

@@ -38,12 +38,12 @@
    "@graphprotocol/graph-cli": "0.96.0",
    "@graphprotocol/graph-ts": "0.38.0",
    "@nomicfoundation/hardhat-foundry": "1.2.0",


Bug: Upgrading @nomicfoundation/hardhat-ignition-viem introduces an unmet peer dependency on @nomicfoundation/hardhat-ignition, causing an older, incompatible version to be used, which will lead to an import failure.
_{Severity: CRITICAL | Confidence: High}

🔍 Detailed Analysis

The update of @nomicfoundation/hardhat-ignition-viem to version 3.0.6 changes its peer dependency requirement to @nomicfoundation/hardhat-ignition@^3.0.6. However, the project's package.json does not explicitly list @nomicfoundation/hardhat-ignition as a dependency, and the bun.lock file indicates that an incompatible version, 0.15.15, remains installed. This major version mismatch will cause the import of buildModule from @nomicfoundation/hardhat-ignition/modules in ignition/modules/main.ts to fail at runtime, as the module structure and API are likely different, leading to a crash when ignition scripts are executed.

💡 Suggested Fix

Add @nomicfoundation/hardhat-ignition@^3.0.6 as an explicit dependency to package.json to satisfy the peer dependency requirement of @nomicfoundation/hardhat-ignition-viem@3.0.6. Then, run the package manager to update the lockfile and install the correct version.

🤖 Prompt for AI Agent

Review the code at the location below. A potential bug has been identified by an AI agent. Verify if this is a real issue. If it is, propose a fix; if not, explain why it's not valid. Location: package.json#L40 Potential issue: The update of `@nomicfoundation/hardhat-ignition-viem` to version `3.0.6` changes its peer dependency requirement to `@nomicfoundation/hardhat-ignition@^3.0.6`. However, the project's `package.json` does not explicitly list `@nomicfoundation/hardhat-ignition` as a dependency, and the `bun.lock` file indicates that an incompatible version, `0.15.15`, remains installed. This major version mismatch will cause the import of `buildModule` from `@nomicfoundation/hardhat-ignition/modules` in `ignition/modules/main.ts` to fail at runtime, as the module structure and API are likely different, leading to a crash when ignition scripts are executed.

_{Did we get this right? 👍 / 👎 to inform future reviews.}
_{Reference ID: 6983593}

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

socket-security · 2026-03-31T16:20:28Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance	License
@nomiclabs/hardhat-solhint@4.1.0 ⏵ 5.0.0		^-13	⁺⁶
@nomicfoundation/hardhat-foundry@1.2.0 ⏵ 3.0.0	⁺¹	⁺⁴	⁺⁷
hardhat@2.27.1 ⏵ 3.3.0	⁺⁶	^-9	^-1	⁺²⁰
@nomicfoundation/hardhat-ignition-viem@0.15.16 ⏵ 3.1.1	⁺²	^-2	⁺⁴
@nomicfoundation/hardhat-toolbox-viem@4.1.1 ⏵ 5.0.3	^-6	⁺¹⁴	⁺¹

View full report

socket-security · 2026-03-31T16:20:30Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		License policy violation: npm `typescript` License: LicenseRef-W3C-Community-Final-Specification-Agreement - the applicable license policy does not allow this license (4) (package/ThirdPartyNoticeText.txt) From: `?` → `npm/@nomicfoundation/hardhat-toolbox-viem@5.0.3` → `npm/@nomicfoundation/hardhat-ignition-viem@3.1.1` → `npm/@graphprotocol/graph-cli@0.96.0` → `npm/solhint@6.0.1` → `npm/typescript@6.0.2` ℹ Read more on: This package \| This alert \| What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/typescript@6.0.2`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

renovate bot added the dependencies label Nov 4, 2025

sentry bot reviewed Nov 4, 2025

View reviewed changes

cubic-dev-ai bot reviewed Nov 4, 2025

View reviewed changes

renovate bot force-pushed the renovate/major-hardhat-packages branch 5 times, most recently from 3f85a37 to 15d263c Compare November 12, 2025 23:00

renovate bot force-pushed the renovate/major-hardhat-packages branch from 15d263c to ba9fafb Compare November 16, 2025 03:38

renovate bot force-pushed the renovate/major-hardhat-packages branch 4 times, most recently from b9ecefd to 9355f7b Compare December 3, 2025 22:26

renovate bot force-pushed the renovate/major-hardhat-packages branch from 9355f7b to 27f8aaa Compare December 11, 2025 03:09

sentry bot reviewed Dec 11, 2025

View reviewed changes

renovate bot force-pushed the renovate/major-hardhat-packages branch 2 times, most recently from 9f887c0 to 0918c9d Compare December 30, 2025 15:50

renovate bot force-pushed the renovate/major-hardhat-packages branch 2 times, most recently from f81a7ff to a788b51 Compare January 14, 2026 19:39

renovate bot force-pushed the renovate/major-hardhat-packages branch from a788b51 to 94f0d41 Compare January 19, 2026 22:50

renovate bot force-pushed the renovate/major-hardhat-packages branch 2 times, most recently from 49fff90 to 9a3ac9f Compare February 5, 2026 19:43

renovate bot force-pushed the renovate/major-hardhat-packages branch from 9a3ac9f to 54e1096 Compare February 12, 2026 13:09

renovate bot force-pushed the renovate/major-hardhat-packages branch 3 times, most recently from 5f4669b to 2df0c41 Compare February 26, 2026 19:08

renovate bot force-pushed the renovate/major-hardhat-packages branch 2 times, most recently from 219eccb to 1c25015 Compare March 11, 2026 15:46

renovate bot force-pushed the renovate/major-hardhat-packages branch 2 times, most recently from 9bbaf0e to e3ed722 Compare March 19, 2026 22:10

renovate bot force-pushed the renovate/major-hardhat-packages branch from e3ed722 to 50020ec Compare March 26, 2026 20:07

chore(deps): update hardhat packages

d53ba58

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate bot force-pushed the renovate/major-hardhat-packages branch from 50020ec to d53ba58 Compare March 31, 2026 15:54

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update hardhat packages (major)#149

chore(deps): update hardhat packages (major)#149
renovate[bot] wants to merge 1 commit intomainfrom
renovate/major-hardhat-packages

renovate bot commented Nov 4, 2025 •

edited

Loading

Uh oh!

This comment was marked as outdated.

Uh oh!

cubic-dev-ai bot left a comment

Uh oh!

sentry bot Dec 11, 2025

Uh oh!

socket-security bot commented Mar 31, 2026

Uh oh!

socket-security bot commented Mar 31, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate bot commented Nov 4, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Major Changes

Changes

Minor Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Major Changes

Patch Changes

Patch Changes

Patch Changes

Major Changes

Changes

Configuration

Uh oh!

This comment was marked as outdated.

Uh oh!

cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

Uh oh!

sentry bot Dec 11, 2025

Choose a reason for hiding this comment

Uh oh!

socket-security bot commented Mar 31, 2026

Uh oh!

socket-security bot commented Mar 31, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate bot commented Nov 4, 2025 •

edited

Loading