[dependabot]

Bumps ox from 0.14.45 to 1.8.6.

Release notes

Sourced from ox's releases.

[email protected]

Patch Changes

• #497 ee2bce9 Thanks @​decofe! - Added the TIP-1006 burnAt role (BURN_AT_ROLE) to TokenRole.

• #506 ce81454 Thanks @​jxom! - Fixed KeyAuthorization encoding to keep absent limits (unlimited) distinct from an empty limits list (deny-all), matching the Tempo node.

[email protected]

Patch Changes

• #493 7a7b37d Thanks @​jxom! - Added optional nonceKeys to eth_getTransactionCount requests.

  const nonce = await provider.request({
    method: "eth_getTransactionCount",
    params: [address, "pending", ["0x1", "0x2"]],
  });

[email protected]

Patch Changes

• #489 277594a Thanks @​jxom! - Added EIP-8250 keyed frame nonces with shared nonce sequences while preserving the original EIP-8141 encoding when nonceKeys is omitted.

  import { TxEnvelopeEip8141 } from "ox";
  const envelope = TxEnvelopeEip8141.from({
  chainId: 1,
  sender: "0x1111111111111111111111111111111111111111",
  frames: [{ mode: "sender", executionGas: 50_000n }],
  nonceKeys: [1n, 2n],
  nonce: 0n,
  });

[email protected]

Patch Changes

• #482 9d2ab90 Thanks @​jxom! - Fixed empty protocol signature placeholders in frame signature validation, encoding, and transaction signing payloads.

[email protected]

Patch Changes

• #462 16c3378 Thanks @​jxom! - Renamed the decoded frame destination from target to to.

  Frame.from({ to: recipient });

... (truncated)

Changelog

Sourced from ox's changelog.

1.8.6

Patch Changes

• #497 ee2bce9 Thanks @​decofe! - Added the TIP-1006 burnAt role (BURN_AT_ROLE) to TokenRole.

• #506 ce81454 Thanks @​jxom! - Fixed KeyAuthorization encoding to keep absent limits (unlimited) distinct from an empty limits list (deny-all), matching the Tempo node.

1.8.5

Patch Changes

• #493 7a7b37d Thanks @​jxom! - Added optional nonceKeys to eth_getTransactionCount requests.

  const nonce = await provider.request({
    method: "eth_getTransactionCount",
    params: [address, "pending", ["0x1", "0x2"]],
  });

1.8.4

Patch Changes

• #489 277594a Thanks @​jxom! - Added EIP-8250 keyed frame nonces with shared nonce sequences while preserving the original EIP-8141 encoding when nonceKeys is omitted.

  import { TxEnvelopeEip8141 } from "ox";
  const envelope = TxEnvelopeEip8141.from({
  chainId: 1,
  sender: "0x1111111111111111111111111111111111111111",
  frames: [{ mode: "sender", executionGas: 50_000n }],
  nonceKeys: [1n, 2n],
  nonce: 0n,
  });

1.8.3

Patch Changes

• #482 9d2ab90 Thanks @​jxom! - Fixed empty protocol signature placeholders in frame signature validation, encoding, and transaction signing payloads.

1.8.2

Patch Changes

• 03eb47a Thanks @​jxom! - Renamed Frame.gas to Frame.executionGas.

... (truncated)

Commits

• d35eacc chore: version packages (#500)
• ce81454 fix(tempo): keep absent and empty KeyAuthorization limits distinct (#506)
• ee2bce9 feat(tempo): add burnAt token role (#497)
• 6e92b2b chore: version packages (#496)
• 7a7b37d feat: support keyed nonce rpc queries (#493)
• d1785bf chore: version packages (#492)
• 277594a feat: add keyed frame nonces (#489)
• 85878a0 chore: version packages (#485)
• 9d2ab90 fix(frame-signature): accept empty unsigned placeholders (#482)
• 8bc1e51 fix: update frame request export snapshot and examples (#484)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[justalab-agents]

This PR upgrades the ox dependency from ^0.14.45 to ^1.8.6, a major version bump. The lockfile reflects the cascading dependency updates this brings, including newer versions of @noble/ciphers, @noble/curves, @noble/hashes, @scure/bip32, @scure/bip39, and abitype, as well as two new transitive dependencies: @noble/post-quantum and zod. Note that viem still pins to the older [email protected] internally, so both versions of ox (and their differing crypto sub-dependencies) will coexist in the lockfile.

Findings outside the diff

These sit on lines this PR did not change, but this PR is what makes them wrong. They cannot be posted as inline comments.

• [WARNING] package.json — package.json has dependency changes but no pnpm-lock.yaml update was found in this PR. Commit the lockfile together with manifest changes.

Reviewer callouts (1)

Non-blocking observations. Nothing here needs to change before merge.

• .github:1 — "The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see actions/runner-images#14748"

[dependabot]

Superseded by #54.