Skip to content

chore(deps): bump @metamask/utils from 11.11.0 to 12.0.0 - #650

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/metamask/utils-12.0.0
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/metamask/utils-12.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 6, 2026 •

Copy link
Copy Markdown
Contributor

Bumps @metamask/utils from 11.11.0 to 12.0.0.

Release notes

Sourced from @​metamask/utils's releases.

12.0.0

Changed

  • BREAKING: Bump TypeScript target to ES2022 (#333)
    • This package now ships ES2022 code, requiring a compatible modern environment or bundler configuration to consume.
  • BREAKING: Drop support for Node 18 and 20 (#328)
  • BREAKING: Drop CommonJS support (#9536)
    • This package is now ESM-only, but can still be used in CommonJS projects via require(esm) in modern Node.js versions (22+), or dynamic imports in older Node.js versions.
  • Bump @ethereumjs/tx from ^4.2.0 to ^5.4.0 (#321)
    • The deprecated Keyring.signTransaction now returns LegacyTxData rather than TxData. These describe the same shape: @ethereumjs/tx@5 repurposed the name TxData for a map keyed by transaction type and renamed the old meaning to LegacyTxData. Implementations do not need changing.
  • Bump @metamask/scure-bip39 from ^2.0.3 to ^2.1.1 (#311)
  • Bump @metamask/superstruct from ^3.1.0 to ^3.4.1 (#311)
  • Bump @noble/hashes from ^1.3.1 to ^1.8.0 (#311)
  • Bump @scure/base from ^1.1.3 to ^1.2.6 (#311)
  • Bump semver from ^7.5.4 to ^7.6.3 (#311)

11.12.1

Fixed

  • Fix ESM compatibility for the BIP-39 mnemonic utilities (#309)

11.12.0

Added

  • Add uint8ArrayToMnemonic and convertMnemonicToWordlistIndices utilities (#300)
    • uint8ArrayToMnemonic converts little-endian Uint16 English BIP-39 wordlist indices into a mnemonic string.
    • convertMnemonicToWordlistIndices converts a mnemonic string into little-endian Uint16 wordlist indices encoded as a Uint8Array.
  • Add @metamask/scure-bip39 as a dependency (#300)
  • Add optimized sha512 and sha384 utility functions (#305)
Changelog

Sourced from @​metamask/utils's changelog.

[12.0.0]

Changed

  • BREAKING: Bump TypeScript target to ES2022 (#333)
    • This package now ships ES2022 code, requiring a compatible modern environment or bundler configuration to consume.
  • BREAKING: Drop support for Node 18 and 20 (#328)
  • BREAKING: Drop CommonJS support (#9536)
    • This package is now ESM-only, but can still be used in CommonJS projects via require(esm) in modern Node.js versions (22+), or dynamic imports in older Node.js versions.
  • Bump @ethereumjs/tx from ^4.2.0 to ^5.4.0 (#321)
    • The deprecated Keyring.signTransaction now returns LegacyTxData rather than TxData. These describe the same shape: @ethereumjs/tx@5 repurposed the name TxData for a map keyed by transaction type and renamed the old meaning to LegacyTxData. Implementations do not need changing.
  • Bump @metamask/scure-bip39 from ^2.0.3 to ^2.1.1 (#311)
  • Bump @metamask/superstruct from ^3.1.0 to ^3.4.1 (#311)
  • Bump @noble/hashes from ^1.3.1 to ^1.8.0 (#311)
  • Bump @scure/base from ^1.1.3 to ^1.2.6 (#311)
  • Bump semver from ^7.5.4 to ^7.6.3 (#311)

[11.12.1]

Fixed

  • Fix ESM compatibility for the BIP-39 mnemonic utilities (#309)

[11.12.0]

Added

  • Add uint8ArrayToMnemonic and convertMnemonicToWordlistIndices utilities (#300)
    • uint8ArrayToMnemonic converts little-endian Uint16 English BIP-39 wordlist indices into a mnemonic string.
    • convertMnemonicToWordlistIndices converts a mnemonic string into little-endian Uint16 wordlist indices encoded as a Uint8Array.
  • Add @metamask/scure-bip39 as a dependency (#300)
  • Add optimized sha512 and sha384 utility functions (#305)
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​metamask/utils since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 6, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner October 6, 2026 12:24
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 6, 2026
@socket-security

socket-security Bot commented Oct 6, 2026 •

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Added@​metamask/​utils@​12.0.09910010096100

View full report

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/metamask/utils-12.0.0 branch 10 times, most recently from 5438d2a to a744d66 Compare October 12, 2026 10:43
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/metamask/utils-12.0.0 branch 2 times, most recently from 8a92ca7 to d101110 Compare October 14, 2026 12:44
Bumps [@metamask/utils](https://github.com/MetaMask/utils) from 11.11.0 to 12.0.0.
- [Release notes](https://github.com/MetaMask/utils/releases)
- [Changelog](https://github.com/MetaMask/utils/blob/main/CHANGELOG.md)
- [Commits](MetaMask/utils@v11.11.0...v12.0.0)

---
updated-dependencies:
- dependency-name: "@metamask/utils"
  dependency-version: 12.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/metamask/utils-12.0.0 branch from d101110 to f7dfaa5 Compare October 14, 2026 14:25

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants