deps(web): bump ox from 0.14.31 to 1.0.3 in /apps/web

[dependabot]

Bumps ox from 0.14.31 to 1.0.3.

Release notes

Sourced from ox's releases.

ox@1.0.3

Patch Changes

• #305 7355d1d Thanks @​jxom! - viem/tempo: Updated multisig implementation.

ox@1.0.2

Patch Changes

• #303 34b28be Thanks @​tmm! - Bumped ABIType version.

ox@1.0.1

Patch Changes

• #301 1815469 Thanks @​jxom! - Preserved leading NUL bytes when decoding ABI string values.

• #300 1074bb3 Thanks @​jxom! - Restored number-valued SIWE chain IDs for message creation and parsing.

ox@1.0.0

Major Changes

• #231 40d9408 Thanks @​jxom! - Breaking: Changed ABI decode helpers to checksum decoded addresses by default.

  - AbiParameters.decode(parameters, data)
  + AbiParameters.decode(parameters, data, { checksumAddress: false })

• #231 40d9408 Thanks @​jxom! - Removed the Tempo TokenId module and narrowed Tempo token inputs (feeToken, Channel.token, PoolId.from tokens) to Address.Address; also removed the now-redundant Channel.Resolved type.

    TxEnvelopeTempo.from({
      // ...
  -   feeToken: 1n,
  +   feeToken: '0x20c0000000000000000000000000000000000001',
    })

• #231 40d9408 Thanks @​jxom! - Upgraded @noble/ciphers, @noble/curves, @noble/hashes, @scure/bip32, and @scure/bip39 to v2.

  Notable behavioral changes inherited from noble v2:

  • ECDSA signatures now default to lowS: true for both Secp256k1 and P256. Previously P256 signatures could have high-S values.
  • The noble re-exports on Secp256k1, P256, Ed25519, X25519, and Bls now reference the v2 APIs (e.g. randomSecretKey() instead of randomPrivateKey(), Point instead of ProjectivePoint/ExtendedPoint, bls.longSignatures.* instead of top-level bls.sign/verify). If you depended on the v1 shape via Module.noble, refer to the noble v2 changelog.

• #231 40d9408 Thanks @​jxom! - Breaking: Removed the 4844-only blob-sidecar surface in favor of PeerDAS (EIP-7594).

  • Kzg.Kzg no longer includes computeBlobKzgProof. Bring a PeerDAS-capable backend (e.g. c-kzg ≥ v1.5, micro-eth-signer/advanced/kzg.js ≥ v0.18, or equivalent). The backend must implement computeCells,

... (truncated)

Changelog

Sourced from ox's changelog.

1.0.3

Patch Changes

• #305 7355d1d Thanks @​jxom! - viem/tempo: Updated multisig implementation.

1.0.2

Patch Changes

• #303 34b28be Thanks @​tmm! - Bumped ABIType version.

1.0.1

Patch Changes

• #301 1815469 Thanks @​jxom! - Preserved leading NUL bytes when decoding ABI string values.

• #300 1074bb3 Thanks @​jxom! - Restored number-valued SIWE chain IDs for message creation and parsing.

1.0.0

Major Changes

• #231 40d9408 Thanks @​jxom! - Breaking: Changed ABI decode helpers to checksum decoded addresses by default.

  - AbiParameters.decode(parameters, data)
  + AbiParameters.decode(parameters, data, { checksumAddress: false })

• #231 40d9408 Thanks @​jxom! - Removed the Tempo TokenId module and narrowed Tempo token inputs (feeToken, Channel.token, PoolId.from tokens) to Address.Address; also removed the now-redundant Channel.Resolved type.

    TxEnvelopeTempo.from({
      // ...
  -   feeToken: 1n,
  +   feeToken: '0x20c0000000000000000000000000000000000001',
    })

• #231 40d9408 Thanks @​jxom! - Upgraded @noble/ciphers, @noble/curves, @noble/hashes, @scure/bip32, and @scure/bip39 to v2.

  Notable behavioral changes inherited from noble v2:

  • ECDSA signatures now default to lowS: true for both Secp256k1 and P256. Previously P256 signatures could have high-S values.
  • The noble re-exports on Secp256k1, P256, Ed25519, X25519, and Bls now reference the v2 APIs (e.g. randomSecretKey() instead of randomPrivateKey(), Point instead of ProjectivePoint/ExtendedPoint, bls.longSignatures.* instead of top-level bls.sign/verify). If you depended on the v1 shape via Module.noble, refer to the noble v2 changelog.

• #231 40d9408 Thanks @​jxom! - Breaking: Removed the 4844-only blob-sidecar surface in favor of PeerDAS (EIP-7594).

... (truncated)

Commits

• 025873d chore: version packages (#307)
• 7355d1d feat(tempo): update native multisig (#305)
• 5df5dd3 chore: version packages (#304)
• 34b28be chore: bump abitype to 1.3.0 (#303)
• 438d16e chore: version packages (#302)
• 1815469 fix(abi): preserve leading NUL bytes in strings (#301)
• 1074bb3 docs: add v0 migration guide and restore Siwe.Message.chainId (#300)
• 778a484 docs(tempo): add protocol guides (#299)
• 0624a5e fix(site): refine mobile module showcase (#298)
• 3976952 fix(site): contain mobile module showcase (#297)
• Additional commits viewable in compare view

Attestation changes

This version has no provenance attestation, while the previous version (0.14.31) was attested. Review the package versions before updating.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	mkit-web	434c543	Commit Preview URL Branch Preview URL	Jul 20 2026, 01:34 PM