chore(deps): update hardhat packages (major) by renovate[bot] · Pull Request #176 · settlemint/solidity-token-erc721

renovate · 2025-11-04T09:17:47Z

This PR contains the following updates:

Package	Type	Update	Change
@nomicfoundation/hardhat-foundry (source)	dependencies	major	`1.2.0` → `3.0.0`
@nomicfoundation/hardhat-ignition-viem (source)	dependencies	major	`0.15.16` → `3.1.1`
@nomicfoundation/hardhat-toolbox-viem (source)	dependencies	major	`4.1.1` → `5.0.3`
@nomiclabs/hardhat-solhint (source)	dependencies	major	`4.1.0` → `5.0.0`
hardhat (source)	dependencies	major	`2.27.1` → `3.3.0`

Release Notes

NomicFoundation/hardhat (@nomicfoundation/hardhat-foundry)

`v3.0.0`

Compare Source

Major Changes

4cd63e9: Introduce the @nomicfoundation/hardhat-foundry plugin for Hardhat 3

`v1.2.1`

Compare Source

NomicFoundation/hardhat (@nomicfoundation/hardhat-ignition-viem)

`v3.1.1`

Compare Source

Changes

#8088 23c0d36 Thanks @alcuadrado! - Optimize imports.
Updated dependencies:
- @nomicfoundation/hardhat-errors@3.0.10

💡 The Nomic Foundation is hiring! Check our open positions.

`v3.1.0`

Compare Source

Minor Changes

#7967 481b221 Thanks @manuelwedler! - Added support for verifying on all enabled verification services (e.g. Sourcify) (#7538).

Patch Changes

Updated dependencies:
- @nomicfoundation/hardhat-errors@3.0.9

`v3.0.9`

Compare Source

Patch Changes

2cbf218: Fix an issue that prevented the verification of contracts using FQNs (#8014)
13918b4: Add support for custom chains not in viem's built-in chain list, thanks @daanporon! (#7763)

`v3.0.8`

Compare Source

Patch Changes

6674b00: Bump hardhat-utils major

`v3.0.7`

Compare Source

Patch Changes

2bc18b2: Bumped viem version across all packages 7861.

`v3.0.6`

Compare Source

Patch Changes

dac916b: Expose ignition retry loop variables in user config (Hardhat v3) (#7303)

`v3.0.5`

Compare Source

Patch Changes

d1c1803: Make @nomicfoundation/hardhat-ignition's UI work well with other plugins, like Ledger's.

`v3.0.4`

Compare Source

Patch Changes

843c1ae: Fixed a bug preventing Ignition from using the hre.config.ignition settings when deploying via script (#7641)
558ac5b: Update installation and config instructions

`v3.0.3`

Compare Source

Patch Changes

bebf87c: Added support for Linea network verification, thanks @kyzooghost (#7357)

`v3.0.2`

Compare Source

Patch Changes

ddefbff: Added guard to stop multiple simultaneous calls to ignition.deploy(...) at once (#6440)

`v3.0.1`

Compare Source

Patch Changes

86cecc7: Fix the type guard to include m.encodeFunctionCall in those that do not submit transactions, thanks @radik878 (#7264)

`v3.0.0`

Compare Source

Major Changes

29cc141: First release of Hardhat 3!

NomicFoundation/hardhat (@nomicfoundation/hardhat-toolbox-viem)

`v5.0.3`

Compare Source

Patch Changes

13918b4: Add support for custom chains not in viem's built-in chain list, thanks @daanporon! (#7763)

`v5.0.2`

Compare Source

Patch Changes

2bc18b2: Bumped viem version across all packages 7861.

`v5.0.1`

Compare Source

Patch Changes

558ac5b: Update installation and config instructions

`v5.0.0`

Compare Source

Major Changes

29cc141: First release of Hardhat 3!

`v4.1.2`

Compare Source

This release is a small bump to the version of solidity-coverage to include changes for the Osaka transaction gas limit.

Changes

a7e4215: Update solidity-coverage minimum version to include Osaka changes

💡 The Nomic Foundation is hiring! Check our open positions.

NomicFoundation/hardhat (@nomiclabs/hardhat-solhint)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

package.json

    "@graphprotocol/graph-ts": "0.38.0",
    "@nomicfoundation/hardhat-foundry": "1.2.0",
-    "@nomicfoundation/hardhat-ignition-viem": "0.15.15",
-    "@nomicfoundation/hardhat-toolbox-viem": "4.1.1",
+    "@nomicfoundation/hardhat-ignition-viem": "3.0.4",
+    "@nomicfoundation/hardhat-toolbox-viem": "5.0.1",
    "@nomiclabs/hardhat-solhint": "4.1.0",
    "@openzeppelin/contracts": "5.4.0",
    "@openzeppelin/subgraphs": "0.1.8-5",
-    "hardhat": "2.26.5",
+    "hardhat": "3.0.11",
    "solhint": "6.0.1"
  },
  "overrides": {


cubic-dev-ai

No issues found across 2 files

sentry · 2025-12-11T03:14:24Z

package.json

@@ -38,12 +38,12 @@
    "@graphprotocol/graph-cli": "0.96.0",
    "@graphprotocol/graph-ts": "0.38.0",


Bug: The upgrade to Hardhat v3 is missing the required ESM configuration ("type": "module" in package.json or renaming config to .mts), which will break all Hardhat commands.
_{Severity: CRITICAL | Confidence: High}

🔍 Detailed Analysis

The project's dependencies are upgraded to Hardhat v3, which is an ESM-first framework. However, the project's configuration is not updated to be ESM-compatible. The package.json file lacks the required "type": "module" field, and the configuration file hardhat.config.ts has not been renamed to hardhat.config.mts. The tsconfig.json further specifies "module": "commonjs". This mismatch will cause Hardhat 3 to fail when it tries to load the configuration file, as it will be processed as CommonJS instead of the required ESM. This failure will prevent all Hardhat commands, such as deployments and tests, from running.

💡 Suggested Fix

To make the project compatible with Hardhat v3, either add "type": "module" to the package.json file or rename the Hardhat configuration file from hardhat.config.ts to hardhat.config.mts.

🤖 Prompt for AI Agent

Review the code at the location below. A potential bug has been identified by an AI agent. Verify if this is a real issue. If it is, propose a fix; if not, explain why it's not valid. Location: package.json#L39 Potential issue: The project's dependencies are upgraded to Hardhat v3, which is an ESM-first framework. However, the project's configuration is not updated to be ESM-compatible. The `package.json` file lacks the required `"type": "module"` field, and the configuration file `hardhat.config.ts` has not been renamed to `hardhat.config.mts`. The `tsconfig.json` further specifies `"module": "commonjs"`. This mismatch will cause Hardhat 3 to fail when it tries to load the configuration file, as it will be processed as CommonJS instead of the required ESM. This failure will prevent all Hardhat commands, such as deployments and tests, from running.

_{Did we get this right? 👍 / 👎 to inform future reviews.}
_{Reference ID: 6983881}

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

socket-security · 2026-03-31T16:17:28Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance	License
@nomiclabs/hardhat-solhint@4.1.0 ⏵ 5.0.0		^-13	⁺⁶
@nomicfoundation/hardhat-foundry@1.2.0 ⏵ 3.0.0	⁺¹	⁺⁴	⁺⁷
hardhat@2.27.1 ⏵ 3.3.0	⁺⁶	^-9	^-1	⁺²⁰
@nomicfoundation/hardhat-ignition-viem@0.15.16 ⏵ 3.1.1	⁺²	^-2	⁺⁴
@nomicfoundation/hardhat-toolbox-viem@4.1.1 ⏵ 5.0.3	^-6	⁺¹⁴	⁺¹

View full report

socket-security · 2026-03-31T16:17:29Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		License policy violation: npm `typescript` License: LicenseRef-W3C-Community-Final-Specification-Agreement - the applicable license policy does not allow this license (4) (package/ThirdPartyNoticeText.txt) From: `?` → `npm/@nomicfoundation/hardhat-toolbox-viem@5.0.3` → `npm/@nomicfoundation/hardhat-ignition-viem@3.1.1` → `npm/@graphprotocol/graph-cli@0.96.0` → `npm/solhint@6.0.1` → `npm/typescript@6.0.2` ℹ Read more on: This package \| This alert \| What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/typescript@6.0.2`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

renovate bot added the dependencies label Nov 4, 2025

sentry bot reviewed Nov 4, 2025

View reviewed changes

cubic-dev-ai bot reviewed Nov 4, 2025

View reviewed changes

renovate bot force-pushed the renovate/major-hardhat-packages branch 5 times, most recently from 9a280ba to 99c752e Compare November 13, 2025 01:58

renovate bot force-pushed the renovate/major-hardhat-packages branch from 99c752e to 7a60260 Compare November 16, 2025 03:44

renovate bot force-pushed the renovate/major-hardhat-packages branch 3 times, most recently from 70d8dae to efdbe69 Compare December 3, 2025 22:15

renovate bot force-pushed the renovate/major-hardhat-packages branch from efdbe69 to 62f7eff Compare December 11, 2025 03:11

sentry bot reviewed Dec 11, 2025

View reviewed changes

renovate bot force-pushed the renovate/major-hardhat-packages branch 2 times, most recently from b4a0036 to bff257d Compare December 30, 2025 15:33

renovate bot force-pushed the renovate/major-hardhat-packages branch 2 times, most recently from 6b091e7 to 62a1162 Compare January 14, 2026 19:10

renovate bot force-pushed the renovate/major-hardhat-packages branch from 62a1162 to 64bdc74 Compare January 19, 2026 22:43

renovate bot force-pushed the renovate/major-hardhat-packages branch 2 times, most recently from c17357a to dc7f474 Compare February 5, 2026 19:46

renovate bot force-pushed the renovate/major-hardhat-packages branch from dc7f474 to 6d89665 Compare February 12, 2026 12:32

renovate bot force-pushed the renovate/major-hardhat-packages branch 3 times, most recently from e3ea95d to 0ce49bf Compare February 26, 2026 19:37

renovate bot force-pushed the renovate/major-hardhat-packages branch 2 times, most recently from 9815b40 to b4677ee Compare March 11, 2026 16:04

renovate bot force-pushed the renovate/major-hardhat-packages branch 2 times, most recently from d76e0c3 to 625651f Compare March 19, 2026 22:35

renovate bot force-pushed the renovate/major-hardhat-packages branch from 625651f to ddfada7 Compare March 26, 2026 20:16

chore(deps): update hardhat packages

fbd5e64

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate bot force-pushed the renovate/major-hardhat-packages branch from ddfada7 to fbd5e64 Compare March 31, 2026 15:52

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update hardhat packages (major)#176

chore(deps): update hardhat packages (major)#176
renovate[bot] wants to merge 1 commit intomainfrom
renovate/major-hardhat-packages

renovate bot commented Nov 4, 2025 •

edited

Loading

Uh oh!

This comment was marked as outdated.

Uh oh!

cubic-dev-ai bot left a comment

Uh oh!

sentry bot Dec 11, 2025

Uh oh!

socket-security bot commented Mar 31, 2026

Uh oh!

socket-security bot commented Mar 31, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

		@@ -38,12 +38,12 @@
		"@graphprotocol/graph-cli": "0.96.0",
		"@graphprotocol/graph-ts": "0.38.0",

Conversation

renovate bot commented Nov 4, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Major Changes

Changes

Minor Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Major Changes

Patch Changes

Patch Changes

Patch Changes

Major Changes

Changes

Configuration

Uh oh!

This comment was marked as outdated.

Uh oh!

cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

Uh oh!

sentry bot Dec 11, 2025

Choose a reason for hiding this comment

Uh oh!

socket-security bot commented Mar 31, 2026

Uh oh!

socket-security bot commented Mar 31, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate bot commented Nov 4, 2025 •

edited

Loading