[dependabot]

Bumps ox from 0.14.45 to 1.8.8.

Release notes

Sourced from ox's releases.

[email protected]

Patch Changes

• #516 36dce4a Thanks @​jxom! - Fixed AbiItem.getSignature (and AbiFunction.getSelector, AbiEvent.getSelector) dropping the first parameter when a space directly follows an opening parenthesis.

[email protected]

Patch Changes

• #508 42a84e6 Thanks @​jxom! - Renamed the Tempo multisig account APIs to configurable accounts (TIP-1107), including the account_ relay RPC namespace, raised AccountConfig.maxThreshold to 255 per TIP-1114, and added AccountConfig.update for deriving the next config after an owner update.

  - import { MultisigConfig, MultisigOperation, MultisigSimulation } from 'ox/tempo'
  + import { AccountConfig, AccountOperation, AccountSimulation } from 'ox/tempo'
  
  const initialConfig = MultisigConfig.from({ owners, threshold: 2 })
  
  
  const initialConfig = AccountConfig.from({ owners, threshold: 2 })
  
  
  SignatureEnvelope.sortMultisigApprovals({ account, config, payload, signatures })
  
  
  SignatureEnvelope.sortApprovals({ account, config, payload, signatures })
  
  
  if (signature.type === 'multisig') signature satisfies SignatureEnvelope.Multisig
  
  
  if (signature.type === 'configurable') signature satisfies SignatureEnvelope.Configurable
  
  
  KeyAuthorization.from({ account, address, chainId, type: 'multisig' })
  
  
  KeyAuthorization.from({ account, address, chainId, type: 'configurable' })
  
  
  TransactionRequest.toRpc({ from, keyType: 'multisig', multisigSimulation })
  
  
  TransactionRequest.toRpc({ accountSimulation, from, keyType: 'configurable' })
  
  
  RpcSchema.from<RpcSchemaTempo.Multisig>() // multisig_getConfig, multisig_getOperation, ...
  
  
  RpcSchema.from<RpcSchemaTempo.Account>() // account_getConfig, account_getOperation, ...

[email protected]

Patch Changes

• #497 ee2bce9 Thanks @​decofe! - Added the TIP-1006 burnAt role (BURN_AT_ROLE) to TokenRole.

• #506 ce81454 Thanks @​jxom! - Fixed KeyAuthorization encoding to keep absent limits (unlimited) distinct from an empty limits list (deny-all), matching the Tempo node.

[email protected]

Patch Changes

• #493 7a7b37d Thanks @​jxom! - Added optional nonceKeys to eth_getTransactionCount requests.

  const nonce = await provider.request({
    method: "eth_getTransactionCount",
    params: [address, "pending", ["0x1", "0x2"]],
  });

... (truncated)

Changelog

Sourced from ox's changelog.

1.8.8

Patch Changes

• #516 36dce4a Thanks @​jxom! - Fixed AbiItem.getSignature (and AbiFunction.getSelector, AbiEvent.getSelector) dropping the first parameter when a space directly follows an opening parenthesis.

1.8.7

Patch Changes

• #508 42a84e6 Thanks @​jxom! - Renamed the Tempo multisig account APIs to configurable accounts (TIP-1107), including the account_ relay RPC namespace, raised AccountConfig.maxThreshold to 255 per TIP-1114, and added AccountConfig.update for deriving the next config after an owner update.

  - import { MultisigConfig, MultisigOperation, MultisigSimulation } from 'ox/tempo'
  + import { AccountConfig, AccountOperation, AccountSimulation } from 'ox/tempo'
  
  const initialConfig = MultisigConfig.from({ owners, threshold: 2 })
  
  
  const initialConfig = AccountConfig.from({ owners, threshold: 2 })
  
  
  SignatureEnvelope.sortMultisigApprovals({ account, config, payload, signatures })
  
  
  SignatureEnvelope.sortApprovals({ account, config, payload, signatures })
  
  
  if (signature.type === 'multisig') signature satisfies SignatureEnvelope.Multisig
  
  
  if (signature.type === 'configurable') signature satisfies SignatureEnvelope.Configurable
  
  
  KeyAuthorization.from({ account, address, chainId, type: 'multisig' })
  
  
  KeyAuthorization.from({ account, address, chainId, type: 'configurable' })
  
  
  TransactionRequest.toRpc({ from, keyType: 'multisig', multisigSimulation })
  
  
  TransactionRequest.toRpc({ accountSimulation, from, keyType: 'configurable' })
  
  
  RpcSchema.from<RpcSchemaTempo.Multisig>() // multisig_getConfig, multisig_getOperation, ...
  
  
  RpcSchema.from<RpcSchemaTempo.Account>() // account_getConfig, account_getOperation, ...

1.8.6

Patch Changes

• #497 ee2bce9 Thanks @​decofe! - Added the TIP-1006 burnAt role (BURN_AT_ROLE) to TokenRole.

• #506 ce81454 Thanks @​jxom! - Fixed KeyAuthorization encoding to keep absent limits (unlimited) distinct from an empty limits list (deny-all), matching the Tempo node.

1.8.5

Patch Changes

• #493 7a7b37d Thanks @​jxom! - Added optional nonceKeys to eth_getTransactionCount requests.

... (truncated)

Commits

• 99893c2 chore: version packages (#517)
• 36dce4a fix: keep first parameter after ( in normalizeSignature (#516)
• c3bdc0f chore: version packages (#515)
• 42a84e6 refactor: rename multisig APIs to configurable accounts (TIP-1107) (#508)
• d35eacc chore: version packages (#500)
• ce81454 fix(tempo): keep absent and empty KeyAuthorization limits distinct (#506)
• ee2bce9 feat(tempo): add burnAt token role (#497)
• 6e92b2b chore: version packages (#496)
• 7a7b37d feat: support keyed nonce rpc queries (#493)
• d1785bf chore: version packages (#492)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[justalab-agents]

This PR upgrades the ox dependency from v0.14.45 to v1.8.8, a major version bump. The lockfile reflects several transitive dependency updates, including newer versions of @noble/ciphers, @noble/curves, @noble/hashes, @scure/bip32, @scure/bip39, and abitype, as well as new additions like @noble/post-quantum and zod. Note that viem pins its own copy of the older [email protected], so both versions will coexist in the install.

Findings outside the diff

These sit on lines this PR did not change, but this PR is what makes them wrong. They cannot be posted as inline comments.

• [WARNING] package.json — package.json has dependency changes but no pnpm-lock.yaml update was found in this PR. Commit the lockfile together with manifest changes.

Reviewer callouts (1)

Non-blocking observations. Nothing here needs to change before merge.

• .github:1 — "The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see actions/runner-images#14748"

[dependabot]

Superseded by #56.