chore(deps): bump the production-dependencies group with 2 updates by dependabot[bot] · Pull Request #164 · tempoxyz/wallet-cli

dependabot · 2026-10-05T10:09:25Z

Bumps the production-dependencies group with 2 updates: incur and undici.

Updates incur from 0.4.20 to 0.5.1

Release notes

incur@0.5.1

Patch Changes
00767da: Changed zero-argument cli.fs() to infer commands from sibling files and folders beside the entrypoint.
import { Cli } from "incur";
await Cli.create("my-cli").fs().serve();
incur@0.5.0

Minor Changes
f28d63f: Added filesystem command routing through Cli.command() and cli.fs().
await Cli.create("my-cli").fs().serve();
Read more.
incur@0.4.26

Patch Changes

0b4df91: Added GitHub action tag.

incur@0.4.25

Patch Changes

8e9dd67: Appended standalone binary assets to the latest matching GitHub release, including Changesets workspace releases.

incur@0.4.24

Patch Changes

6ff275f: Published completed standalone binary releases by default and added a publish input for draft-first workflows.

incur@0.4.23

Patch Changes

32c2fdf: Fixed Alpine smoke tests for Bun musl binaries.

incur@0.4.22

Patch Changes

5b5103d: Made the binary release action create missing drafts and upload to existing published releases.

incur@0.4.21

Patch Changes

... (truncated)

Changelog

Sourced from incur's changelog.

0.5.1

Patch Changes
00767da: Changed zero-argument cli.fs() to infer commands from sibling files and folders beside the entrypoint.
import { Cli } from "incur";
await Cli.create("my-cli").fs().serve();
0.5.0

Minor Changes
f28d63f: Added filesystem command routing through Cli.command() and cli.fs().
await Cli.create("my-cli").fs().serve();
Read more.
0.4.26

Patch Changes

0b4df91: Added GitHub action tag.

0.4.25

Patch Changes

8e9dd67: Appended standalone binary assets to the latest matching GitHub release, including Changesets workspace releases.

0.4.24

Patch Changes

6ff275f: Published completed standalone binary releases by default and added a publish input for draft-first workflows.

0.4.23

Patch Changes

32c2fdf: Fixed Alpine smoke tests for Bun musl binaries.

0.4.22

... (truncated)

Commits

2a1a520 chore: version packages (#228)
00767da feat: infer sibling file commands
71c0b7c chore: version packages (#227)
a30eb6a docs: highlight file-based commands
f28d63f feat: add filesystem command routing (#226)
abd9af3 chore: up readme
06fe2de chore: version packages (#223)
0b4df91 chore: add action tag changeset (#222)
311eefe ci: update action tag on release (#221)
7a4c5a7 chore: version packages (#219)
Additional commits viewable in compare view

Updates undici from 8.10.2 to 8.11.2

Release notes

Sourced from undici's releases.

v8.11.2

What's Changed

fix: close rejected HTTP/2 WebSocket handshake streams by @mcollina in nodejs/undici#5873

fix: avoid reconnecting aborted requests by @Junaid-PK in nodejs/undici#5846

New Contributors

@Junaid-PK made their first contribution in nodejs/undici#5846

Full Changelog: nodejs/undici@v8.11.1...v8.11.2

v8.11.1

What's Changed

deslopify websocket test by @KhafraDev in nodejs/undici#5851

Revert "fix: preserve HTTP/2 for legacy fetch consumers" by @mcollina in nodejs/undici#5860

fix websocketstream bugs by @KhafraDev in nodejs/undici#5863

fix hang on 3xx response with large body by @KhafraDev in nodejs/undici#5850

docs: warn about buffering response bodies by @mcollina in nodejs/undici#5872

test: cover native fetch gzip decoding through the legacy bridge by @mcollina in nodejs/undici#5874

Full Changelog: nodejs/undici@v8.11.0...v8.11.1

v8.11.0

What's Changed

fix: complete upgrade diagnostics lifecycle by @BridgeAR in nodejs/undici#5761

build(deps): bump step-security/harden-runner from 2.19.4 to 2.21.0 by @dependabot[bot] in nodejs/undici#5753

fix(decompress): join a repeated content-encoding header by @luantaraschi in nodejs/undici#5664

fix(cookies): keep a cookie named proto in getCookies by @luantaraschi in nodejs/undici#5663

build(deps-dev): bump jest from 30.5.0 to 30.5.1 by @dependabot[bot] in nodejs/undici#5784

build(deps): bump got from 15.1.0 to 16.0.0 in /benchmarks by @dependabot[bot] in nodejs/undici#5785

fix: selectively re-enable SIMD for ppc64 by @richardlau in nodejs/undici#5776

use private fields for brand checks by @KhafraDev in nodejs/undici#5792

fix(h2): do not unref a session with open streams by @kjsik11 in nodejs/undici#5782

fix(h2): avoid pool fan-out during ALPN negotiation by @mcollina in nodejs/undici#5799

fix issue #5715 by @KhafraDev in nodejs/undici#5805

ci: extend macOS Node.js workflow timeout by @mcollina in nodejs/undici#5775

fix(env-http-proxy-agent): NO_PROXY wildcard semantics by @mcollina in nodejs/undici#5777

fix(h2): do not replay a request whose response already started after GOAWAY by @kjsik11 in nodejs/undici#5788

test: skip HTTP/2 churn test on Node.js 25 on all platforms by @kjsik11 in nodejs/undici#5790

fix(proxy-agent): preserve repeated iterable headers by @GiHoon1123 in nodejs/undici#5779

docs(errors): document ProxyConnectionError (UND_ERR_PRX_CONN) by @kilisamemarisaaa in nodejs/undici#5781

dataurl parsing improvements + update WPT by @KhafraDev in nodejs/undici#5812

fix(decompress): treat inherited Object.prototype names as unsupported encodings by @NgoQuocViet2001 in nodejs/undici#5807

test(h2): stabilize http2-connection by @ViniciusDev26 in nodejs/undici#5801

fix: preserve HTTP/2 for non-upgrade legacy requests by @mcollina in nodejs/undici#5811

fix: skip drain dispatch for clientTtl-evicted clients in PoolBase by @vwong in nodejs/undici#5677

chore: update tests blocking release by @vwong in nodejs/undici#5828

build(deps): bump uWebSockets.js from v20.68.0 to v20.70.0 in /benchmarks by @dependabot[bot] in nodejs/undici#5824

fix(deduplicate): settle requests when composed with retry by @mcollina in nodejs/undici#5817

fix(cache): do not report aborted on successful cache hits by @Yahiro025 in nodejs/undici#5819

... (truncated)

Commits

7e016ad Bumped v8.11.2 (#5886)
fcdd5a6 fix: skip reconnecting for aborted requests (#5846)
dd28c5c fix: close rejected HTTP/2 WebSocket handshake streams (#5873)
5e0a2f8 Bumped v8.11.1 (#5871)
2b72898 test: cover native fetch gzip decoding through the legacy bridge (#5874)
636bf51 docs: warn about buffering response bodies (#5872)
8145595 fix hang on 3xx response with large body (#5850)
f3cbe48 fix websocketstream bugs (#5863)
1d4ea0a Revert "fix: preserve HTTP/2 for legacy fetch consumers" (#5860)
77d7b3f deslopify websocket test (#5851)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production-dependencies group with 2 updates: [incur](https://github.com/wevm/incur) and [undici](https://github.com/nodejs/undici). Updates `incur` from 0.4.20 to 0.5.1 - [Release notes](https://github.com/wevm/incur/releases) - [Changelog](https://github.com/wevm/incur/blob/main/CHANGELOG.md) - [Commits](https://github.com/wevm/incur/compare/incur@0.4.20...incur@0.5.1) Updates `undici` from 8.10.2 to 8.11.2 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v8.10.2...v8.11.2) --- updated-dependencies: - dependency-name: incur dependency-version: 0.5.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: undici dependency-version: 8.11.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

socket-security · 2026-10-05T10:09:46Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	incur@0.4.20 ⏵ 0.5.1	^-4		⁺¹
	undici@8.10.2 ⏵ 8.11.2			⁺¹

View full report

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 5, 2026

Navigation Menu

chore(deps): bump the production-dependencies group with 2 updates - #164

chore(deps): bump the production-dependencies group with 2 updates#164
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-6d2127a206

dependabot Bot commented on behalf of github Oct 5, 2026

Uh oh!

socket-security Bot commented Oct 5, 2026

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 5, 2026

incur@0.5.1

Patch Changes

incur@0.5.0

Minor Changes

incur@0.4.26

Patch Changes

incur@0.4.25

Patch Changes

incur@0.4.24

Patch Changes

incur@0.4.23

Patch Changes

incur@0.4.22

Patch Changes

incur@0.4.21

Patch Changes

0.5.1

Patch Changes

0.5.0

Minor Changes

0.4.26

Patch Changes

0.4.25

Patch Changes

0.4.24

Patch Changes

0.4.23

Patch Changes

0.4.22

v8.11.2

What's Changed

New Contributors

v8.11.1

What's Changed

v8.11.0

What's Changed

Uh oh!

socket-security Bot commented Oct 5, 2026

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants