[dependabot]

Bumps stellar/stellar-cli from 27.1.0 to 30.0.1.

Release notes

Sourced from stellar/stellar-cli's releases.

30.0.1

What's New

Token admin commands

stellar token now covers the common admin operations for Stellar Asset Contracts:

• stellar token mint: mint new tokens to an address (#2716)
• stellar token clawback: claw back tokens from an address (#2717)
• stellar token set-admin: transfer the admin role to another address (#2718)
• stellar token set-authorized: authorize or deauthorize an address to hold the token (#2719)

Muxed contract addresses

The CLI now accepts muxed contract (W...) addresses wherever addresses are accepted. (#2873)

Fully qualified type names

Contract specs that use fully qualified type names (introduced in v30) are now supported in invoking, inspecting, and generating bindings for contracts. (#2798)

Improvements

• Token write commands now use the configured inclusion fee instead of the default. (#2786)
• stellar token mint rejects muxed accounts as the recipient, with a clear error. (#2783)
• Bindings languages that need an external plugin now say so in the help output. (#2766)

Security

• Message verification now uses strict Ed25519 verification (verify_strict). (#2767)
• If a secret key or seed phrase is typed where an alias, address, contract id, or account is expected, the error message no longer echoes it back. (#2763, #2785, #2795, #2807)
• stellar contract invoke usage output no longer prints secrets. (#2810)
• Help output hides the values of sensitive environment variables. (#2764)
• stellar env conceals the values of account-related environment variables. (#2812)

Full Changelog: stellar/stellar-cli@v28.1.0...v30.0.1

28.1.0

🪙 Token commands

The stellar token <subcommand> implements SEP-41, so you can inspect and manage tokens without dropping down to raw contract invocations:

• stellar token name, stellar token symbol, and stellar token decimals to read a token's metadata.
• stellar token approve and stellar token allowance to manage and check spending allowances.
• stellar token transfer-from to move tokens on behalf of another account.
• stellar token burn and stellar token burn-from to destroy tokens.

📦 Contract build & bindings

• New stellar contract build archive command.
• Container builds now stream image-pull progress, so you can see what's happening during long pulls.

... (truncated)

Commits

• f2a7b74 Bump version to 30.0.1 (#2884)
• 27a949e Support muxed contract (W) addresses in the CLI. (#2873)
• b9b1741 Bump dependencies to clear new security advisories (#2882)
• 90a3d42 Conceal account env vars in stellar env output (#2812)
• 0c905da Support fully qualified type names for v30 (#2798)
• 1481d60 Bump webpki crates to drop distrusted emSign roots (#2814)
• 0500f16 Stop echoing secrets in contract invoke usage output (#2810)
• eb5de06 Stop echoing mistyped secrets in account lookups (#2807)
• 3783c3b Add Socket Basics security scanning workflow (#2729)
• 94b86ff Isolate cargo target dir in auto build tests (#2803)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
commitlabs_frontend	Ready	Preview	Nov 9, 2026 6:20am UTC

[dependabot]

Labels

The following labels could not be found: ci, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.