Skip to content

deps(deps): bump @scure/base from 1.2.6 to 2.2.0#740

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/scure/base-2.2.0
Open

deps(deps): bump @scure/base from 1.2.6 to 2.2.0#740
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/scure/base-2.2.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 5, 2026

Bumps @scure/base from 1.2.6 to 2.2.0.

Release notes

Sourced from @​scure/base's releases.

2.2.0

  • April 2026 self-audit (all files): no major issues found
    • Audited for spec compliance and security
  • Fix all Byte Array types, to ensure proper work in both TypeScript 5.6 & TypeScript 5.9+
    • TS 5.6 has Uint8Array, while TS 5.9+ made it generic Uint8Array<ArrayBuffer>
    • This creates incompatibility of code between versions
    • Previously, it was hard to use and constantly emitted errors similar to TS2345
    • See typescript#62240 for more context
  • Fix compilation issues on TypeScript v6
  • Improve tree-shaking, reduce bundle sizes
  • utf8: make decoder strict, use isWellFormed (polyfilled in some envs)
  • Add strict ascii decoder (char range 0..127)
  • Bech32 examples in the docs by @​davay42 in paulmillr/scure-base#44
  • Add overload to Bech32.decode to handle arbitrary string input by @​webmaster128 in paulmillr/scure-base#45
  • perf: trust Uint8Array.fromBase64 to check non-whitespace chars by @​ChALkeR in paulmillr/scure-base#47

New Contributors

(We're skipping v2.1, to align with other noble / scure packages)

Full Changelog: paulmillr/scure-base@2.0.0...2.2.0

2.0.0

  • The package is now ESM-only. ESM can finally be loaded from common.js on node v20.19+
    • Node v20.19 is now the minimum required version
    • Package imports now work correctly in bundler-less environments, such as browsers
    • Reduces npm package size (traffic consumed): 26.1KB => 24.5KB
    • Reduces unpacked npm size (on-disk space): 165KB => 102KB
  • Make bundle sizes smaller, compared to v1.x
  • Upgrade typescript compilation env to ts5.9 and es2022

Full Changelog: paulmillr/scure-base@1.2.6...2.0.0

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​scure/base since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@scure/base](https://github.com/paulmillr/scure-base) from 1.2.6 to 2.2.0.
- [Release notes](https://github.com/paulmillr/scure-base/releases)
- [Commits](paulmillr/scure-base@1.2.6...2.2.0)

---
updated-dependencies:
- dependency-name: "@scure/base"
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label May 5, 2026
@pkg-pr-new
Copy link
Copy Markdown

pkg-pr-new Bot commented May 5, 2026

Open in StackBlitz

npm i https://pkg.pr.new/gridplus-sdk@740

commit: 7f9d1ed

Copy link
Copy Markdown

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 7f9d1ed0da

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

"dependencies": {
"@gridplus/chain-core": "workspace:*",
"@scure/base": "^1.2.6"
"@scure/base": "^2.2.0"
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Raise Node floor before adopting @scure/base v2

Updating to @scure/base v2 here can break consumers on Node 20.0–20.18: these chain packages still publish a CommonJS entry ("require": "./dist/index.cjs"), and their tsup config externalizes dependencies, so the CJS build will resolve @scure/base at runtime instead of bundling it. Since v2 is ESM-only, require() from those Node versions throws at runtime, even though this package currently advertises "engines": {"node": ">=20"}. Please either pin to v1, bump the engine floor to the actual required Node patch level, or stop exposing a CJS entry for this dependency path.

Useful? React with 👍 / 👎.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants