Skip to content

Bump yauzl and web3-bzz in /packages/funding#25

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/packages/funding/multi-dc13cef5b0
Open

Bump yauzl and web3-bzz in /packages/funding#25
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/packages/funding/multi-dc13cef5b0

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Mar 14, 2026

Removes yauzl. It's no longer used after updating ancestor dependency web3-bzz. These dependencies need to be updated together.

Removes yauzl

Updates web3-bzz from 1.0.0-beta.34 to 1.10.3

Release notes

Sourced from web3-bzz's releases.

v1.10.3

Security

  • web3-eth-accounts: Bumped @ethereumjs dependencies (#6457)

  • Updated dependencies (#6491)

v1.10.3-dev.0

Security

  • web3-eth-accounts: Bumped @ethereumjs dependencies (#6457)

  • Updated dependencies (#6491)


( Considering discussion about release tags , v1 will follow tags:

  • legacy ( for v1 releases )
  • legacy-dev ( for v1 test/RC releases, this will replace rc tag)

v1.10.2

Fixed

  • Fixed broken fetch for Node.js > 18.x and fixed double callback (#6381)

v1.10.1

Fixed

  • Builds fixed by updating all typescript versions to 4.9.5 (#6238)
  • ABI encoding for large negative ints (#6239)
  • Updated type file for submitWork parameters, accepts 3 parameters instead of an array (#5200)

Changed

  • Replace ethereumjs-util with @​ethereumjs/util (#6283)

v1.10.1-rc.0

Fixed

  • Builds fixed by updating all typescript versions to 4.9.5 (#6238)
  • ABI encoding for large negative ints (#6239)
  • Updated type file for submitWork parameters, accepts 3 parameters instead of an array (#5200)

Changed

  • Replace ethereumjs-util with @​ethereumjs/util (#6283)

v1.10.0

Fixed

  • Improved the error propagation in web3-providers-http package to effectively propagate useful error infomation about failed HTTP connections (#5955)
  • Fixed "Uncaught TypeError" calling a contract function that revert using MetaMask (#4454) and related "n.data.substring is not a function", that is raised when there is a revert and web.eth.handleRevert = true (#6000)

Changed

... (truncated)

Changelog

Sourced from web3-bzz's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[1.2.0]

Released with 1.0.0-beta.37 code base.

[1.2.1]

Fixed

  • websocket dependency fixed (#2971, #2976)
  • requestOptions added to WebsocketProvider (#2979)
  • Node >= v8.0.0 support (#2938)

[1.2.2]

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by jdevcs, a new releaser for web3-bzz since your current version.

Install script changes

This version adds postinstall script that runs during installation. Review the package contents before updating.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Removes [yauzl](https://github.com/thejoshwolfe/yauzl). It's no longer used after updating ancestor dependency [web3-bzz](https://github.com/ethereum/web3.js). These dependencies need to be updated together.


Removes `yauzl`

Updates `web3-bzz` from 1.0.0-beta.34 to 1.10.3
- [Release notes](https://github.com/ethereum/web3.js/releases)
- [Changelog](https://github.com/web3/web3.js/blob/4.x/CHANGELOG.md)
- [Commits](web3/web3.js@v1.0.0-beta.34...v1.10.3)

---
updated-dependencies:
- dependency-name: yauzl
  dependency-version: 
  dependency-type: indirect
- dependency-name: web3-bzz
  dependency-version: 1.10.3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 14, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants