chore(deps): bump the minor-updates group across 1 directory with 4 updates #956

dependabot · 2026-01-15T02:13:20Z

Bumps the minor-updates group with 4 updates in the / directory: framer-motion, viem, zod and vite.

Updates framer-motion from 12.23.25 to 12.26.2

Changelog

Sourced from framer-motion's changelog.

[12.26.2] 2026-01-13

Fixed

Internal refactor of projection system into motion-dom.

[12.26.1] 2026-01-12

Fixed

Improve overload selection for useTransform.

[12.26.0] 2026-01-12

Added

Support for multiple output value maps with useTransform.

[12.25.0] 2026-01-09

Added

Support for auto-scrolling when a Reorder.Item reaches the edges of its parent scrollable container.

[12.24.12] 2026-01-08

Fixed

Draggable elements now track pointer during page and element scroll.

[12.24.11] 2026-01-08

Fixed

Fixed time sampling of GPU animations under heavy CPU load.

[12.24.10] 2026-01-07

Fixed

Fixing missing import from motion-dom.

[12.24.9] 2026-01-07

Fixed

Fixing Radix Dialog with AnimatePresence.

Ensure drag constraints animation resumes after press interruption.

Prevent drag gesture from triggering when pressing focusable elements.

... (truncated)

Commits

8973490 v12.26.2
c512503 Updating changelog
9bab695 Merge pull request #3470 from motiondivision/refactor-visual-element
cd55787 Move projection node system to motion-dom
c4376e3 Remove duplicate code and use motion-dom directly
43d7588 Remove duplicate isAnimationControls from framer-motion
8ea3e4c Latest
cb08012 Latest
ea26667 Move animateVisualElement and dependencies to motion-dom
c8913c2 Latest
Additional commits viewable in compare view

Updates viem from 2.41.2 to 2.44.2

Release notes

Sourced from viem's releases.

viem@2.44.2

Patch Changes

#4229 ffdc0f11cf3d87c91288d5d6242687e20ae15b42 Thanks @frangio! - Fixed hexToNumber silent error when the value exceeds the safe range.

#4227 d235b894009c327145267a48c1739cd865ccf55b Thanks @tomiir! - Added support for ADI_Chain.

51b6bf6d452fbabf7516614e2f0ca976edd3f19a Thanks @jxom! - Added tempo chain mainnet placeholder.

#4211 e5050455f226de77587b0069532e886b520e46c2 Thanks @akitothemoon! - Added zkXPLA network.

#4234 4d6349593f21c37fa2e97945521efc011a1bb350 Thanks @jxom! - Added support for embeddable Basic authentication on http transport.

viem@2.44.1

Patch Changes

#4225 9d0a5a0b345d33c5ae396a81a3df87b66e4ee6b0 Thanks @jxom! - viem/tempo: Bumped gas for feePayer + keyAuthorization tempo transactions.

viem@2.44.0

Minor Changes

#4201 0268ca88c67c7851ae03d8d41508657f2b62729d Thanks @jxom! - ### viem/tempo Extension

Added support for Tempo Moderato testnet.

(Breaking): Renamed tempoTestnet → tempoModerato. The old export is deprecated but still available as an alias.

(Breaking): Renamed reward.start → reward.distribute: Renamed for distributing rewards (no longer supports streaming).

(Breaking): Renamed reward.getTotalPerSecond → reward.getGlobalRewardPerToken: Returns the global reward per token value instead of per-second rate.

(Breaking): Renamed reward.watchRewardScheduled → reward.watchRewardDistributed: Watches for reward distributed events.

(Breaking): Removed nonce.getNonceKeyCount.

(Breaking): Removed nonce.watchActiveKeyCountChanged.

(Breaking): Removed amm.watchFeeSwap (FeeSwap event no longer emitted by protocol).

(Breaking): OrderPlaced event now includes isFlipOrder and flipTick fields. The FlipOrderPlaced event has been removed and merged into OrderPlaced.

(Breaking): Renamed Address.stablecoinExchange → Address.stablecoinDex.

(Breaking): Renamed Abis.stablecoinExchange → Abis.stablecoinDex.

Added dex.cancelStale action to cancel stale orders from restricted makers.

Added salt parameter to token.create.

Patch Changes

e9967a932db94b62e9bb8fb309865a3104f59788 Thanks @tmm! - Exported missing types for inference.

295bd73bc620f57448d43bcb80acfae3e4562b99 Thanks @jxom! - Fixed sendTransactionSync timeout propagation.

viem@2.43.5

Patch Changes

#4203 d4875f4c0ffc191ddb1f11b7acae27e928329bff Thanks @o-az! - Updated Tempo Devnet chain id to 31318

viem@2.43.4

... (truncated)

Commits

e3ce639 chore: version package (#4233)
1c01cb7 chore: fmt
3ba9cd2 fix: url parsing
d235b89 feat: add support for ADI network (#4227)
e505045 feat: add zkXPLA network (#4211)
039968a docs: fix incorrect function references in writeContractSync documentation (#...
ffdc0f1 fix: error on hexToNumber if out of safe range (#4229)
4d63495 feat: add embeddable basic auth on http transport (#4234)
51b6bf6 chore: changeset
cedd5c5 feat: tempo chain placeholder (#4231)
Additional commits viewable in compare view

Updates zod from 4.1.13 to 4.3.5

Release notes

Sourced from zod's releases.

v4.3.5

Commits:

21afffdb42ccab554036312e33fed0ea3cb8f982 [Docs] Update migration guide docs for deprecation of message (#5595)

e36743e513aadb307b29949a80d6eb0dcc8fc278 Improve mini treeshaking

0cdc0b8597999fd9ca99767b912c1e82c1ff2d6c 4.3.5

v4.3.4

Commits:

1a8bea3b474eada6f219c163d0d3ad09fadabe72 Add integration tests

e01cd02b2f23d7e9078d3813830b146f8a2258b4 Support patternProperties for looserecord (#5592)

089e5fbb0f58ce96d2c4fb34cd91724c78df4af5 Improve looseRecord docs

decef9c418d9a598c3f1bada06891ba5d922c5cd Fix lint

9443aab00d44d5d5f4a7eada65fc0fc851781042 Drop iso time in fromJSONSchema

66bda7491a1b9eab83bdeec0c12f4efc7290bd48 Remove .refine() from ZodMiniType

b4ab94ca608cd5b581bfc12b20dd8d95b35b3009 4.3.4

v4.3.3

Commits:

f3b2151959d215d405f54dff3c7ab3bf1fd887ca v4.3.3

v4.3.2

Commits:

bf96635d243118de6e4f260077aa137453790bf6 Loosen strictObjectinside intersection (#5587)

f71dc0182ab0f0f9a6be6295b07faca269e10179 Remove Juno (#5590)

0f41e5a12a43e6913c9dcb501b2b5136ea86500d 4.3.2

v4.3.1

Commits:

0fe88407a4149c907929b757dc6618d8afe998fc allow non-overwriting extends with refinements. 4.3.1

v4.3.0

This is Zod's biggest release since 4.0. It addresses several of Zod's longest-standing feature requests.

z.fromJSONSchema()

Convert JSON Schema to Zod (#5534, #5586)

You can now convert JSON Schema definitions directly into Zod schemas. This function supports JSON Schema "draft-2020-12", "draft-7", "draft-4", and OpenAPI 3.0.
import * as z from "zod";
const schema = z.fromJSONSchema({
type: "object",
properties: {
</tr></table>

... (truncated)

Commits

0cdc0b8 4.3.5
e36743e Improve mini treeshaking
21afffd [Docs] Update migration guide docs for deprecation of message (#5595)
b4ab94c 4.3.4
66bda74 Remove .refine() from ZodMiniType
9443aab Drop iso time in fromJSONSchema
decef9c Fix lint
089e5fb Improve looseRecord docs
e01cd02 Support patternProperties for looserecord (#5592)
1a8bea3 Add integration tests
Additional commits viewable in compare view

Updates vite from 7.2.7 to 7.3.1

Release notes

Sourced from vite's releases.

v7.3.1

Please refer to CHANGELOG.md for details.

v7.3.0

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

7.3.1 (2026-01-07)

Features

add ignoreOutdatedRequests option to optimizeDeps (#21364) (9d39d37)

7.3.0 (2025-12-15)

Features

deps: update esbuild from ^0.25.0 to ^0.27.0 (#21183) (cff26ec)

Commits

95e8923 release: v7.3.1
9d39d37 feat: add ignoreOutdatedRequests option to optimizeDeps (#21364)
acf7e05 release: v7.3.0
cff26ec feat(deps): update esbuild from ^0.25.0 to ^0.27.0 (#21183)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…pdates Bumps the minor-updates group with 4 updates in the / directory: [framer-motion](https://github.com/motiondivision/motion), [viem](https://github.com/wevm/viem), [zod](https://github.com/colinhacks/zod) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite). Updates `framer-motion` from 12.23.25 to 12.26.2 - [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md) - [Commits](motiondivision/motion@v12.23.25...v12.26.2) Updates `viem` from 2.41.2 to 2.44.2 - [Release notes](https://github.com/wevm/viem/releases) - [Commits](https://github.com/wevm/viem/compare/viem@2.41.2...viem@2.44.2) Updates `zod` from 4.1.13 to 4.3.5 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.1.13...v4.3.5) Updates `vite` from 7.2.7 to 7.3.1 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v7.3.1/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v7.3.1/packages/vite) --- updated-dependencies: - dependency-name: framer-motion dependency-version: 12.26.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: viem dependency-version: 2.44.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: zod dependency-version: 4.3.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: vite dependency-version: 7.3.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-updates ... Signed-off-by: dependabot[bot] <support@github.com>

vercel · 2026-01-15T02:13:23Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Review	Updated (UTC)
yearnfi	Error		Jan 15, 2026 2:13am

github-actions · 2026-01-15T02:13:31Z

Dependency Review

The following issues were found:

✅ 0 vulnerable package(s)
✅ 0 package(s) with incompatible licenses
✅ 0 package(s) with invalid SPDX license definitions
⚠️ 1 package(s) with unknown licenses.

See the Details below.

License Issues

package.json

Package	Version	License	Issue Type
viem	2.44.2	Null	Unknown License

Allowed Licenses:
MIT, Apache-2.0, BSD-3-Clause, BSD-2-Clause, ISC, CC0-1.0, CC-BY-3.0, CC-BY-4.0, Unlicense

OpenSSF Scorecard

Package

Version

Score

Details

npm/framer-motion

12.26.2

Unknown

npm/viem

2.44.2

Unknown

npm/vite

7.3.1

🟢 6.7

Details

Check	Score	Reason
Code-Review	🟢 6	Found 16/24 approved changesets -- score normalized to 6
Packaging	⚠️ -1	packaging workflow not detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Maintained	🟢 10	30 commit(s) and 13 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	🟢 6	detected GitHub workflow tokens with excessive permissions
License	🟢 10	license file detected
Binary-Artifacts	🟢 7	binaries present in source code
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases	⚠️ -1	no releases found
Security-Policy	🟢 10	security policy file detected
Pinned-Dependencies	🟢 6	dependency not pinned by hash detected -- score normalized to 6
Fuzzing	⚠️ 0	project is not fuzzed
SAST	⚠️ 2	SAST tool is not run on all commits -- score normalized to 2
Vulnerabilities	🟢 7	3 existing vulnerabilities detected

npm/zod

4.3.5

🟢 3.9

Details

Check	Score	Reason
Code-Review	⚠️ 1	Found 3/29 approved changesets -- score normalized to 1
Maintained	🟢 10	30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Security-Policy	⚠️ 0	security policy file not detected
License	🟢 10	license file detected
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Signed-Releases	⚠️ -1	no releases found
Fuzzing	⚠️ 0	project is not fuzzed
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities	⚠️ 0	16 existing vulnerabilities detected

Scanned Files

package.json

socket-security · 2026-01-15T02:13:59Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
vite@7.2.7 ⏵ 7.3.1		⁺¹
zod@4.1.13 ⏵ 4.3.5		⁺¹
framer-motion@12.23.25 ⏵ 12.26.2	⁺²		⁺⁴
viem@2.41.2 ⏵ 2.44.2		⁺¹

View full report

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jan 15, 2026

vercel bot had a problem deploying to Preview January 15, 2026 02:13 Failure

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the minor-updates group across 1 directory with 4 updates #956

chore(deps): bump the minor-updates group across 1 directory with 4 updates #956

dependabot bot commented on behalf of github Jan 15, 2026 •

edited

Loading

Uh oh!

vercel bot commented Jan 15, 2026 •

edited

Loading

Uh oh!

github-actions bot commented Jan 15, 2026

Uh oh!

socket-security bot commented Jan 15, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

chore(deps): bump the minor-updates group across 1 directory with 4 updates #956

Are you sure you want to change the base?

chore(deps): bump the minor-updates group across 1 directory with 4 updates #956

Conversation

dependabot bot commented on behalf of github Jan 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

[12.26.2] 2026-01-13

Fixed

[12.26.1] 2026-01-12

Fixed

[12.26.0] 2026-01-12

Added

[12.25.0] 2026-01-09

Added

[12.24.12] 2026-01-08

Fixed

[12.24.11] 2026-01-08

Fixed

[12.24.10] 2026-01-07

Fixed

[12.24.9] 2026-01-07

Fixed

viem@2.44.2

Patch Changes

viem@2.44.1

Patch Changes

viem@2.44.0

Minor Changes

Patch Changes

viem@2.43.5

Patch Changes

viem@2.43.4

v4.3.5

Commits:

v4.3.4

Commits:

v4.3.3

Commits:

v4.3.2

Commits:

v4.3.1

Commits:

v4.3.0

z.fromJSONSchema()

v7.3.1

v7.3.0

7.3.1 (2026-01-07)

Features

7.3.0 (2025-12-15)

Features

Uh oh!

vercel bot commented Jan 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Jan 15, 2026

Dependency Review

License Issues

package.json

OpenSSF Scorecard

Scanned Files

Uh oh!

socket-security bot commented Jan 15, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Jan 15, 2026 •

edited

Loading

`z.fromJSONSchema()`

vercel bot commented Jan 15, 2026 •

edited

Loading