Skip to content

chore(deps-dev): bump @venusprotocol/venus-protocol from 10.2.0-slim-dev.2 to 10.3.0#5695

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/venusprotocol/venus-protocol-10.3.0
Open

chore(deps-dev): bump @venusprotocol/venus-protocol from 10.2.0-slim-dev.2 to 10.3.0#5695
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/venusprotocol/venus-protocol-10.3.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 16, 2026

Copy link
Copy Markdown
Contributor

Bumps @venusprotocol/venus-protocol from 10.2.0-slim-dev.2 to 10.3.0.

Changelog

Sourced from @​venusprotocol/venus-protocol's changelog.

10.3.0-dev.3 (2026-07-15)

  • Merge pull request #698 from VenusProtocol/fix/slim-publish-npm-engine (0d21b55), closes #698
  • Merge pull request #699 from VenusProtocol/feat/slim-tokens (b9366bb), closes #699
  • feat: generate tokens.json in the slim package (b46d51a)
  • ci: pin slim-publish npm to v11 to fix EBADENGINE (2fe54b8)

10.3.0-dev.2 (2026-07-14)

  • Merge pull request #697 from VenusProtocol/bot/VDB-23-list-skhyb-on-platform (004d3b3), closes #697
  • feat: register SKHYB underlying + vSKHYB market config (bsctestnet + bscmainnet) (e248358)
  • feat: updating deployment files (932d14d)
  • chore: deploy artifacts (bscmainnet) (9ca1961)
  • chore: deploy artifacts (bsctestnet) (721ec17)
  • chore: deploy artifacts (bsctestnet) (e01e2bd)

10.3.0-dev.1 (2026-07-08)

  • Merge branch 'fix/vpd-1241-certik-audit' into feat/vpd-1241-deployments (062cbf7)
  • Merge branch 'main' into develop (eadae38)
  • Merge pull request #673 from VenusProtocol/fix/vpd-1241-certik-audit (0084639), closes #673
  • Merge pull request #684 from VenusProtocol/feat/vpd-1241-deployments (ab5c38d), closes #684
  • Merge pull request #691 from VenusProtocol/chore/sync-main (e8e266f), closes #691
  • chore(release): 10.2.0-dev.11 [skip ci] (2f0836a)
  • feat: add comptroller, facets, lens and vbep20delegate deployment (6490286)
  • feat: update bscmainnet and bsctestnet core pool deployment artifacts (b5a290a)
  • feat: update bscmainnet deployment artifacts after core pool redeploy (e2bb703)
  • feat: updating deployment files (42db10c)
  • docs: add Certik core pool re-audit report (f03752c)
  • fix: [VLC-04] add a curated seizeVenus overload that filters out unlisted markets (1f46104)
  • fix: [VLC-04] add claimVenusAsCollateral with explicit vToken list and improve NatSpec (b3c21ae)
  • fix: [VLC-05] block claimVenusAsCollateral when the user hasn't entered the vXVS market (d687a0e)
  • fix: [VLC-06] let per-borrower force-liquidation flags bypass the VAI-first gate too (7a81bdb)
  • fix: [VLC-11] make maxAssets private and drop its storage-persistence test (f902429)
  • fix: [VLC-11] note that maxAssets is no longer used (0bb0f6d)
  • fix: [VLC-12] Rearrange skip-check logic to occur after struct filling (734cbd9)
  • fix: [VLC-12] skip zero-balance entered markets in ComptrollerLens solvency calc (4515723)
  • fix: [VLC-15] accrue VAI interest before force-VAI liquidation gate check (368ff7b)
  • fix: [VLC-22] correct exchangeRateStoredInternal comment (e290817)
  • fix: [VLC-23] document state-mutating lens helpers in VenusLens and SnapshotLens (843d2e4)
  • fix: [VLC-25] Legacy Code Artifacts In _addReservesFresh() (2f3c0cd)
  • fix: [VLC-26] standardise MathError local naming in VToken and fix srvTokensNew typo (ae47781)
  • fix: [VLC-27] remove redundant address cast in getCorePoolMarket (61ef0a6)
  • fix: [VLC-30] expand sweepTokenAndSync NatSpec to document internalCash resync role (f5059b0)
  • fix: [VLC-48] (f204df6)
  • fix: [VLC-48] Partial Flash Loan Repayment Clears Active Loan Accounting Before Debt Accrual (60e6c69)
  • fix: [VLC-50] claimVenus() ignores the liquidity-check error code and fails open (59091b5)
  • fix: [VLC-53] Missing on-chain liquidationThreshold × liquidationIncentive < 1 invariant (d574643)
  • fix: update tests to accommodate LI invariant checks (432e985)

... (truncated)

Commits
Install script changes

This version adds postinstall, prepare scripts that run during installation. Review the package contents before updating.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@venusprotocol/venus-protocol](https://github.com/VenusProtocol/venus-protocol) from 10.2.0-slim-dev.2 to 10.3.0.
- [Release notes](https://github.com/VenusProtocol/venus-protocol/releases)
- [Changelog](https://github.com/VenusProtocol/venus-protocol/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/VenusProtocol/venus-protocol/commits/v10.3.0)

---
updated-dependencies:
- dependency-name: "@venusprotocol/venus-protocol"
  dependency-version: 10.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 16, 2026
@greptile-apps

greptile-apps Bot commented Jul 16, 2026

Copy link
Copy Markdown

PR author is in the excluded authors list.

@changeset-bot

changeset-bot Bot commented Jul 16, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: fc2be26

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@vercel

vercel Bot commented Jul 16, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
dapp-preview Ready Ready Preview Jul 16, 2026 8:09pm
dapp-testnet Ready Ready Preview Jul 16, 2026 8:09pm
venus.io Ready Ready Preview Jul 16, 2026 8:09pm

Request Review

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants