Skip to content

chore(deps): bump the routine-runtime-dependencies group across 1 directory with 7 updates - #689

Closed
dependabot[bot] wants to merge 1 commit into
stagingfrom
dependabot/npm_and_yarn/staging/routine-runtime-dependencies-b1fe1070c4
Closed

dependabot[bot] wants to merge 1 commit into
stagingfrom
dependabot/npm_and_yarn/staging/routine-runtime-dependencies-b1fe1070c4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 29, 2026

Copy link
Copy Markdown
Contributor

Bumps the routine-runtime-dependencies group with 7 updates in the / directory:

Package From To
@bufbuild/protobuf 2.10.2 2.13.0
@keplr-wallet/types 0.13.40 0.13.41
@ledgerhq/hw-transport 6.28.8 6.35.6
@ledgerhq/hw-transport-webhid 6.24.1 6.36.0
@ledgerhq/hw-transport-webusb 6.24.1 6.35.0
bip39 3.0.4 3.1.0
dayjs 1.11.10 1.11.21

Updates @bufbuild/protobuf from 2.10.2 to 2.13.0

Release notes

Sourced from @​bufbuild/protobuf's releases.

v2.13.0

What's Changed

Full Changelog: bufbuild/protobuf-es@v2.12.1...v2.13.0

v2.12.1

What's Changed

New Contributors

Full Changelog: bufbuild/protobuf-es@v2.12.0...v2.12.1

v2.12.0

What's Changed

New Contributors

Full Changelog: bufbuild/protobuf-es@v2.11.0...v2.12.0

v2.11.0

What's Changed

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​bufbuild/protobuf since your current version.


Updates @keplr-wallet/types from 0.13.40 to 0.13.41

Commits

Updates @ledgerhq/hw-transport from 6.28.8 to 6.35.6

Commits
  • 264cacb Merge branch 'hotfix'
  • 3a8e0f8 chore(hotfix): 🔥 hotfix release [skip ci]
  • 74765a7 chore(hotfix): 🔥 hotfix prerelease [LLD(2.77.2-hotfix.1), LLM(3.40.1-hot...
  • 9816b1c Merge pull request #6284 from LedgerHQ/support/lowercase-identifiers-support
  • 38963d5 add fixme
  • ced0d1f update sortByMarketcap snapshot and fix linter
  • f82613b update integration test snapshots
  • e0e1ea9 fix integration tests
  • cf85b86 fix crash on token account frame
  • 884cfd6 lowercase identifier fixes
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by ldg-github-ci, a new releaser for @​ledgerhq/hw-transport since your current version.


Updates @ledgerhq/hw-transport-webhid from 6.24.1 to 6.36.0

Commits
  • 782f01b Merge release into main
  • e60462f chore(release): 🚀 prepare release [skip ci]
  • bbdd288 Merge pull request #19127 from LedgerHQ/lwd_410_release_notes
  • 5c97666 LWD 4.10 release notes
  • bace3e1 Merge pull request #19109 from LedgerHQ/support/qaa_release_fix_settings
  • 9b71dcf Merge pull request #19106 from LedgerHQ/support/qaa_fix_my_wallet_setting
  • 4e38e75 chore(prerelease): 🚀 release prerelease [LLD(4.10.0-next.6), LLM(4.10....
  • eec1dad Merge pull request #19098 from LedgerHQ/support/cherry-pick-ff-env-resolve-at...
  • 6a0d89f Merge pull request #19097 from LedgerHQ/support/release_fix_q1_w40
  • 98eb6d6 Merge pull request #19073 from LedgerHQ/fix/ff-env-flags-base-resolved
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by ldg-github-ci, a new releaser for @​ledgerhq/hw-transport-webhid since your current version.


Updates @ledgerhq/hw-transport-webusb from 6.24.1 to 6.35.0

Commits
  • 782f01b Merge release into main
  • e60462f chore(release): 🚀 prepare release [skip ci]
  • bbdd288 Merge pull request #19127 from LedgerHQ/lwd_410_release_notes
  • 5c97666 LWD 4.10 release notes
  • bace3e1 Merge pull request #19109 from LedgerHQ/support/qaa_release_fix_settings
  • 9b71dcf Merge pull request #19106 from LedgerHQ/support/qaa_fix_my_wallet_setting
  • 4e38e75 chore(prerelease): 🚀 release prerelease [LLD(4.10.0-next.6), LLM(4.10....
  • eec1dad Merge pull request #19098 from LedgerHQ/support/cherry-pick-ff-env-resolve-at...
  • 6a0d89f Merge pull request #19097 from LedgerHQ/support/release_fix_q1_w40
  • 98eb6d6 Merge pull request #19073 from LedgerHQ/fix/ff-env-flags-base-resolved
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by ldg-github-ci, a new releaser for @​ledgerhq/hw-transport-webusb since your current version.


Updates bip39 from 3.0.4 to 3.1.0

Commits

Updates dayjs from 1.11.10 to 1.11.21

Release notes

Sourced from dayjs's releases.

v1.11.21

1.11.21 (2026-05-26)

Bug Fixes

v1.11.20

1.11.20 (2026-03-12)

Bug Fixes

  • Update locale km.js to support meridiem (#3017) (9d2b6a1)
  • update updateLocale plugin to merge nested object properties instead of replacing (#3012) (99691c5), closes #1118

v1.11.19

1.11.19 (2025-10-31)

Bug Fixes

  • added usage warnings for diff + updated unit tests (#2948) (269a7a9)
  • dont instantiate regexes within ar locale functions to avoid performance overhead (#2898) (af5e9f0)
  • replace italian locale "un' ora fa" with "un'ora fa", add tests for it (#2930) (9e9f76c)
  • Updated Belarusian locale with relative time (#2656) (1d8746c)

v1.11.18

1.11.18 (2025-08-30)

Bug Fixes

  • error semantic-release dependency (8cfb313)

v1.11.17

1.11.17 (2025-08-29)

Bug Fixes

  • [en-AU] locale use the same ordinal as moment (#2878) (1b95ecd)

v1.11.16

1.11.16 (2025-08-29)

Bug Fixes

... (truncated)

Changelog

Sourced from dayjs's changelog.

1.11.21 (2026-05-26)

Bug Fixes

1.11.20 (2026-03-12)

Bug Fixes

  • Update locale km.js to support meridiem (#3017) (9d2b6a1)
  • update updateLocale plugin to merge nested object properties instead of replacing (#3012) (99691c5), closes #1118

1.11.19 (2025-10-31)

Bug Fixes

  • added usage warnings for diff + updated unit tests (#2948) (269a7a9)
  • dont instantiate regexes within ar locale functions to avoid performance overhead (#2898) (af5e9f0)
  • replace italian locale "un' ora fa" with "un'ora fa", add tests for it (#2930) (9e9f76c)
  • Updated Belarusian locale with relative time (#2656) (1d8746c)

1.11.18 (2025-08-30)

Bug Fixes

  • error semantic-release dependency (8cfb313)

1.11.17 (2025-08-29)

Bug Fixes

  • [en-AU] locale use the same ordinal as moment (#2878) (1b95ecd)

1.11.16 (2025-08-29)

Bug Fixes

  • test release workflow (no code changes) (c38c428)

1.11.15 (2025-08-28)

Bug Fixes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for dayjs since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ectory with 7 updates

Bumps the routine-runtime-dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@bufbuild/protobuf](https://github.com/bufbuild/protobuf-es/tree/HEAD/packages/protobuf) | `2.10.2` | `2.13.0` |
| [@keplr-wallet/types](https://github.com/chainapsis/keplr-wallet) | `0.13.40` | `0.13.41` |
| [@ledgerhq/hw-transport](https://github.com/LedgerHQ/ledger-live) | `6.28.8` | `6.35.6` |
| [@ledgerhq/hw-transport-webhid](https://github.com/LedgerHQ/ledger-live) | `6.24.1` | `6.36.0` |
| [@ledgerhq/hw-transport-webusb](https://github.com/LedgerHQ/ledger-live) | `6.24.1` | `6.35.0` |
| [bip39](https://github.com/bitcoinjs/bip39) | `3.0.4` | `3.1.0` |
| [dayjs](https://github.com/iamkun/dayjs) | `1.11.10` | `1.11.21` |



Updates `@bufbuild/protobuf` from 2.10.2 to 2.13.0
- [Release notes](https://github.com/bufbuild/protobuf-es/releases)
- [Commits](https://github.com/bufbuild/protobuf-es/commits/v2.13.0/packages/protobuf)

Updates `@keplr-wallet/types` from 0.13.40 to 0.13.41
- [Release notes](https://github.com/chainapsis/keplr-wallet/releases)
- [Commits](https://github.com/chainapsis/keplr-wallet/compare/v0.13.40...v0.13.41)

Updates `@ledgerhq/hw-transport` from 6.28.8 to 6.35.6
- [Release notes](https://github.com/LedgerHQ/ledger-live/releases)
- [Commits](https://github.com/LedgerHQ/ledger-live/compare/@ledgerhq/hw-transport@6.28.8...@ledgerhq/hw-app-eth@6.35.6)

Updates `@ledgerhq/hw-transport-webhid` from 6.24.1 to 6.36.0
- [Release notes](https://github.com/LedgerHQ/ledger-live/releases)
- [Commits](https://github.com/LedgerHQ/ledger-live/compare/v6.24.1...@ledgerhq/hw-transport-webhid@6.36.0)

Updates `@ledgerhq/hw-transport-webusb` from 6.24.1 to 6.35.0
- [Release notes](https://github.com/LedgerHQ/ledger-live/releases)
- [Commits](https://github.com/LedgerHQ/ledger-live/compare/v6.24.1...@ledgerhq/hw-transport-webusb@6.35.0)

Updates `bip39` from 3.0.4 to 3.1.0
- [Changelog](https://github.com/bitcoinjs/bip39/blob/master/CHANGELOG.md)
- [Commits](bitcoinjs/bip39@v3.0.4...v3.1.0)

Updates `dayjs` from 1.11.10 to 1.11.21
- [Release notes](https://github.com/iamkun/dayjs/releases)
- [Changelog](https://github.com/iamkun/dayjs/blob/dev/CHANGELOG.md)
- [Commits](iamkun/dayjs@v1.11.10...v1.11.21)

---
updated-dependencies:
- dependency-name: "@bufbuild/protobuf"
  dependency-version: 2.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine-runtime-dependencies
- dependency-name: "@keplr-wallet/types"
  dependency-version: 0.13.41
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-runtime-dependencies
- dependency-name: "@ledgerhq/hw-transport"
  dependency-version: 6.35.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine-runtime-dependencies
- dependency-name: "@ledgerhq/hw-transport-webhid"
  dependency-version: 6.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine-runtime-dependencies
- dependency-name: "@ledgerhq/hw-transport-webusb"
  dependency-version: 6.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine-runtime-dependencies
- dependency-name: bip39
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine-runtime-dependencies
- dependency-name: dayjs
  dependency-version: 1.11.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-runtime-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript JavaScript and TypeScript dependency updates labels Jul 29, 2026
@daedaluscoder

Copy link
Copy Markdown
Collaborator

Superseded by the independently audited consolidation in #690, which was squash-merged as 8336978 with the required dependency-contract test updates.

@dependabot @github

dependabot Bot commented on behalf of github Jul 29, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/staging/routine-runtime-dependencies-b1fe1070c4 branch July 29, 2026 08:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript JavaScript and TypeScript dependency updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant