chore(deps): bump the npm-weekly group with 3 updates

[dependabot]

Bumps the npm-weekly group with 3 updates: accounts, viem and @types/node.

Updates accounts from 0.14.9 to 0.14.11

Release notes

Sourced from accounts's releases.

accounts@0.14.11

Patch Changes

• 3610539: Added adapter-supplied default access-key keystores via Adapter.Instance.accessKey.keystores, replacing the removed generateAccessKey.
• a94dcff: Bumped hono to 4.12.25 (catalog + override for transitive @modelcontextprotocol/sdk paths) to clear the remaining pnpm audit advisories: CORS middleware origin reflection (high), serve-static path traversal, and the AWS Lambda Set-Cookie/body-limit/header issues.
• 0406c1c: Upgraded vulnerable transitive dependencies to patched versions to clear pnpm audit (vite-plus, vite, ws, tmp, form-data, protobufjs, tar, js-yaml, launch-editor, @​babel/core, dompurify).
• a65930b: Bumped the mppx dependency to ^0.7.0.
• 9aa1ed4: Fixed eth_fillTransaction to estimate gas for the signing key's signature size instead of always assuming secp256k1.
• 3610539: Added an accessKey option group to Provider.create — accessKey.keystores for pluggable per-key-type access-key keystores and accessKey.authorize superseding the now-deprecated top-level authorizeAccessKey.
• 0b960e2: Restored popup treatment in Safari for wallet_connect in the postMessage adapter.
• b588aa8: Upgraded the wata dependency to 0.2.0 and migrated the postMessage and mobileWebAuth adapters to its async wata.start() session API.

Changelog

Sourced from accounts's changelog.

0.14.11

Patch Changes

• 3610539: Added adapter-supplied default access-key keystores via Adapter.Instance.accessKey.keystores, replacing the removed generateAccessKey.
• a94dcff: Bumped hono to 4.12.25 (catalog + override for transitive @modelcontextprotocol/sdk paths) to clear the remaining pnpm audit advisories: CORS middleware origin reflection (high), serve-static path traversal, and the AWS Lambda Set-Cookie/body-limit/header issues.
• 0406c1c: Upgraded vulnerable transitive dependencies to patched versions to clear pnpm audit (vite-plus, vite, ws, tmp, form-data, protobufjs, tar, js-yaml, launch-editor, @​babel/core, dompurify).
• a65930b: Bumped the mppx dependency to ^0.7.0.
• 9aa1ed4: Fixed eth_fillTransaction to estimate gas for the signing key's signature size instead of always assuming secp256k1.
• 3610539: Added an accessKey option group to Provider.create — accessKey.keystores for pluggable per-key-type access-key keystores and accessKey.authorize superseding the now-deprecated top-level authorizeAccessKey.
• 0b960e2: Restored popup treatment in Safari for wallet_connect in the postMessage adapter.
• b588aa8: Upgraded the wata dependency to 0.2.0 and migrated the postMessage and mobileWebAuth adapters to its async wata.start() session API.

0.14.10

Patch Changes

• fa0434f: Added wallet_updateAccessKey to update an access key's spending limits in place.

• c5bbc8d: Added multisig approval collection to Handler.relay.

• ab78127: Fixed raw sponsored transaction signing to restore the configured fee token when the serialized transaction omits it.

• a993dff: Remove the accounts/react-native subpath; import asyncStorage from accounts/react-native/async-storage instead.

• 05d5458: Removed the T5 hardfork gate so TIP-1053 witness binding always collapses access-key authorization and the auth proof into a single passkey ceremony.

• 8203e44: Add encrypted MMKV-backed React Native storage that manages its SecureStore encryption key internally.

  Remove secureStorage from accounts/react-native/expo-secure-store; use secureMmkv from accounts/react-native/secure-mmkv instead.

• a188f7e: Introduced postMessage adapter built on the Wata transport of the same name.

  Updated the tempoWallet adapter to use postMessage.

  Deprecated dialog adapter in favor of postMessage.

Commits

• b5545f5 chore: version packages (#663)
• e1d6ddf fix: refresh single-exchange Wata sessions (#679)
• 99928e8 test: expect eager postMessage target acquisition (#678)
• 0fcb27a feat: update wata (#676)
• b588aa8 feat(adapters): upgrade wata to 0.2.0 (#677)
• e6439b4 Remove wallet_authorizeChallenge (#675)
• 7a4910a Revert "feat(adapters): upgrade wata to 0.2.0" (#674)
• 953f8f6 feat(adapters): upgrade wata to 0.2.0 (#673)
• ab9d370 fix(popup): center wallet popup (#672)
• 4e9ff4f fix: patch audit transitive dependencies (#671)
• Additional commits viewable in compare view

Updates viem from 2.52.2 to 2.53.1

Release notes

Sourced from viem's releases.

viem@2.53.1

Patch Changes

• #4748 ed55a13fbf8af9c587d94a3363f507e642236e93 Thanks @​jxom! - viem/tempo: Added createClient to viem/tempo with a default chain, transport, and actions.

Commits

• 006c801 chore: version package (#4749)
• 7e42156 fix: stabilize post-merge ci (#4750)
• ed55a13 feat(tempo): add createClient factory to viem/tempo (#4748)
• 6d7ecb5 revert: "feat(tempo): attach default chain via tempoActions()" (#4747)
• 21bcc49 chore: version package (#4730)
• a609e6e fix: keep changesets compatible with js-yaml override (#4746)
• 60e388b docs: add Deno to install instructions (#4744)
• f603eb5 feat(tempo): attach default chain via tempoActions() (#4745)
• 4003721 docs: add Arc to chain examples (#4735)
• 753b75b chore: update dependency audit overrides (#4736)
• Additional commits viewable in compare view

Updates @types/node from 25.9.3 to 26.0.0

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions