Skip to content

chore: pin example deps, fix charge-wagmi for wagmi 3.6.2#362

Merged
brendanjryan merged 1 commit intomainfrom
chore/pin-example-deps
Apr 17, 2026
Merged

chore: pin example deps, fix charge-wagmi for wagmi 3.6.2#362
brendanjryan merged 1 commit intomainfrom
chore/pin-example-deps

Conversation

@brendanjryan
Copy link
Copy Markdown
Collaborator

Problem

All three example packages (charge, charge-wagmi, stripe) used "latest" specifiers for most dependencies. This causes dependabot PRs to fail with ERR_PNPM_OUTDATED_LOCKFILE because dependabot can't properly regenerate the pnpm lockfile for workspace packages with floating specifiers.

Additionally, wagmi@3.6.2 / accounts@0.6 removed KeyManager from the wagmi/tempo export and changed the webAuthn connector API.

Changes

  • Pin versions: Replace "latest" with ^ ranges in all three example package.json files (mppx stays as latest since it resolves to the workspace link)
  • Fix charge-wagmi: Remove KeyManager import, simplify webAuthn() call, remove capabilities.type from connect calls

@socket-security
Copy link
Copy Markdown

socket-security Bot commented Apr 17, 2026

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Added@​typescript/​native-preview@​7.0.0-dev.20260416.110010072100100
Updatedwagmi@​3.6.1 ⏵ 3.6.280 +110079 +198 +1100
Updatedbun@​1.3.11 ⏵ 1.3.12911008097100
Addedvite@​8.0.8941008298100
Updated@​tanstack/​react-query@​5.96.2 ⏵ 5.99.09910088100 +1100
Updated@​stripe/​stripe-js@​8.7.0 ⏵ 9.2.0100100100100 +1100

View full report

@pkg-pr-new
Copy link
Copy Markdown

pkg-pr-new Bot commented Apr 17, 2026

Open in StackBlitz

npm i https://pkg.pr.new/mppx@362

commit: 1dcbdc5

- Replace "latest" specifiers with pinned ^versions in charge, charge-wagmi,
  and stripe examples so dependabot can properly update the lockfile
- Update charge-wagmi for accounts@0.6 API: remove KeyManager (removed from
  wagmi/tempo exports), simplify webAuthn() connector, remove connect
  capabilities.type (no longer in API)
@brendanjryan brendanjryan force-pushed the chore/pin-example-deps branch from b80f86e to 1dcbdc5 Compare April 17, 2026 17:44
@brendanjryan brendanjryan merged commit 638e114 into main Apr 17, 2026
8 checks passed
@brendanjryan brendanjryan deleted the chore/pin-example-deps branch April 17, 2026 17:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant