Skip to content

chore(deps): bump @walletconnect/utils from 2.17.1 to 2.23.10 in /frontend/wallet - #568

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/wallet/walletconnect/utils-2.23.10
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/wallet/walletconnect/utils-2.23.10

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 29, 2026

Copy link
Copy Markdown
Contributor

Bumps @walletconnect/utils from 2.17.1 to 2.23.10.

Release notes

Sourced from @​walletconnect/utils's releases.

@​walletconnect/utils@​2.23.10

Patch Changes

  • #7252 cd32ff1 Thanks @​ganchoradkov! - Add TVF extraction for Canton's canton_prepareSignExecute.

  • #7247 3ea740e Thanks @​ganchoradkov! - Reject SIWE/CAIP-122 statements containing line breaks in formatMessage. Per EIP-4361 the statement is a single line, and embedded \r/\n (from a caller-supplied statement or untrusted recap-derived text) could forge other fields (URI, Nonce, etc.) in the signed message. The check runs on the final statement after recap formatting, and validateSignedCacao now returns false for such malformed payloads instead of throwing.

  • Updated dependencies [63ff999]:

    • @​walletconnect/types@​2.23.10

@​walletconnect/utils@​2.23.9

Patch Changes

  • #7205 bb4869f Thanks @​ganchoradkov! - fix: replace Node.js Buffer with browser-safe alternatives to fix "Buffer is not defined" in browser environments

    • Replace Buffer.from/Buffer.concat with Uint8Array, btoa/atob, TextEncoder/TextDecoder, and uint8arrays helpers across misc.ts, crypto.ts, cacao.ts, signatures.ts, and polkadot.ts
    • Add scripts/verify-no-buffer.mjs to verify UMD bundles contain no unguarded Buffer usage
  • Updated dependencies []:

    • @​walletconnect/types@​2.23.9

@​walletconnect/utils@​2.23.8

Patch Changes

  • Updated dependencies []:
    • @​walletconnect/types@​2.23.8

@​walletconnect/utils@​2.23.7

Patch Changes

  • #7175 0b699db Thanks @​ganchoradkov! - Updated createDelayedPromise expiry rejection to also contain a proper error code from getInternalError("EXPIRED") with a value of 6

  • Updated dependencies []:

    • @​walletconnect/types@​2.23.7

@​walletconnect/utils@​2.23.6

Patch Changes

  • Updated dependencies []:
    • @​walletconnect/types@​2.23.6

@​walletconnect/utils@​2.23.5

Patch Changes

  • #7147 737c6d4 Thanks @​ganchoradkov! - Replaced bs58 dependency with @​scure/base for base58 encoding/decoding

  • Updated dependencies []:

    • @​walletconnect/types@​2.23.5

@​walletconnect/utils@​2.23.4

Patch Changes

... (truncated)

Changelog

Sourced from @​walletconnect/utils's changelog.

2.23.10

Patch Changes

  • #7252 cd32ff1 Thanks @​ganchoradkov! - Add TVF extraction for Canton's canton_prepareSignExecute.

  • #7247 3ea740e Thanks @​ganchoradkov! - Reject SIWE/CAIP-122 statements containing line breaks in formatMessage. Per EIP-4361 the statement is a single line, and embedded \r/\n (from a caller-supplied statement or untrusted recap-derived text) could forge other fields (URI, Nonce, etc.) in the signed message. The check runs on the final statement after recap formatting, and validateSignedCacao now returns false for such malformed payloads instead of throwing.

  • Updated dependencies [63ff999]:

    • @​walletconnect/types@​2.23.10

2.23.9

Patch Changes

  • #7205 bb4869f Thanks @​ganchoradkov! - fix: replace Node.js Buffer with browser-safe alternatives to fix "Buffer is not defined" in browser environments

    • Replace Buffer.from/Buffer.concat with Uint8Array, btoa/atob, TextEncoder/TextDecoder, and uint8arrays helpers across misc.ts, crypto.ts, cacao.ts, signatures.ts, and polkadot.ts
    • Add scripts/verify-no-buffer.mjs to verify UMD bundles contain no unguarded Buffer usage
  • Updated dependencies []:

    • @​walletconnect/types@​2.23.9

2.23.8

Patch Changes

  • Updated dependencies []:
    • @​walletconnect/types@​2.23.8

2.23.7

Patch Changes

  • #7175 0b699db Thanks @​ganchoradkov! - Updated createDelayedPromise expiry rejection to also contain a proper error code from getInternalError("EXPIRED") with a value of 6

  • Updated dependencies []:

    • @​walletconnect/types@​2.23.7

2.23.6

Patch Changes

  • Updated dependencies []:
    • @​walletconnect/types@​2.23.6

2.23.5

Patch Changes

... (truncated)

Commits
  • 3ef9f3e chore: update versions and lerna.json
  • cd32ff1 feat: add TVF extraction for Canton canton_prepareSignExecute
  • 8857209 fix: validate statement after recap formatting; soften validateSignedCacao
  • 3ea740e fix: reject SIWE statements containing line breaks per EIP-4361
  • 8ccd9aa chore: update versions and lerna.json
  • 7f08fb3 fix: add base64 padding in base64ToBytes for consistency with fromBase64/base...
  • a4ec8f9 style: apply prettier formatting
  • 9829ffd fix: add base64 padding before atob() to handle unpadded input
  • a9d2cfe fix: address PR review feedback
  • 827b192 style: apply prettier formatting
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by reown-npm-org, a new releaser for @​walletconnect/utils since your current version.


Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [@walletconnect/utils](https://github.com/WalletConnect/walletconnect-monorepo/tree/HEAD/packages/utils) from 2.17.1 to 2.23.10.
- [Release notes](https://github.com/WalletConnect/walletconnect-monorepo/releases)
- [Changelog](https://github.com/WalletConnect/walletconnect-monorepo/blob/v2.0/packages/utils/CHANGELOG.md)
- [Commits](https://github.com/WalletConnect/walletconnect-monorepo/commits/@walletconnect/utils@2.23.10/packages/utils)

---
updated-dependencies:
- dependency-name: "@walletconnect/utils"
  dependency-version: 2.23.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from Miracle656 as a code owner July 29, 2026 14:14
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 29, 2026
@vercel

vercel Bot commented Jul 29, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
veil Ready Ready Preview, Comment Jul 29, 2026 2:43pm
veil-2ap8 Ready Ready Preview, Comment Jul 29, 2026 2:43pm
veil-ezry Ready Ready Preview, Comment Jul 29, 2026 2:43pm

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant