wevm · jxom · May 7, 2026 · May 7, 2026 · May 8, 2026 · May 8, 2026
diff --git a/.changeset/abi-anonymous-events.md b/.changeset/abi-anonymous-events.md
@@ -0,0 +1,5 @@
+---
+'ox': patch
+---
+
+Fixed `AbiEvent.encode` and `AbiEvent.decode` to honor the `anonymous` flag -- anonymous events no longer prepend or expect a selector topic.
diff --git a/.changeset/abi-constructor-bytecode-prefix.md b/.changeset/abi-constructor-bytecode-prefix.md
@@ -0,0 +1,5 @@
+---
+'ox': patch
+---
+
+Fixed `AbiConstructor.decode` to assert that `data` begins with the provided `bytecode` and allowed constructor encoding and decoding without an ABI constructor when no arguments are present.
diff --git a/.changeset/abi-decode-checksum-default.md b/.changeset/abi-decode-checksum-default.md
@@ -0,0 +1,10 @@
+---
+'ox': major
+---
+
+**Breaking:** Changed ABI decode helpers to checksum decoded addresses by default.
+
+```diff
+- AbiParameters.decode(parameters, data)
++ AbiParameters.decode(parameters, data, { checksumAddress: false })
+```
diff --git a/.changeset/abi-error-extract.md b/.changeset/abi-error-extract.md
@@ -0,0 +1,5 @@
+---
+'ox': patch
+---
+
+Added `AbiError.extract` for selecting and decoding ABI errors from revert data.
diff --git a/.changeset/abi-event-decode-log.md b/.changeset/abi-event-decode-log.md
@@ -0,0 +1,5 @@
+---
+'ox': patch
+---
+
+Added `AbiEvent.decodeLog` and `AbiEvent.extractLogs` for decoding and extracting event logs directly from an ABI.
diff --git a/.changeset/abi-event-hex-topic-normalization.md b/.changeset/abi-event-hex-topic-normalization.md
@@ -0,0 +1,5 @@
+---
+'ox': patch
+---
+
+Fixed `AbiEvent.assertArgs` and `AbiEvent.encode` to always hash `string`/`bytes` indexed inputs to hex via `Hash.keccak256(value, { as: 'Hex' })`, so topic comparisons and emitted topics are reliably hex regardless of whether the input is a `Hex.Hex` or a `Bytes.Bytes`.
diff --git a/.changeset/abi-function-decode-data-selector.md b/.changeset/abi-function-decode-data-selector.md
@@ -0,0 +1,5 @@
+---
+'ox': minor
+---
+
+Added an `AbiFunction.decodeData(abi, data)` overload that extracts the ABI function from the calldata selector.
diff --git a/.changeset/abi-function-selector-only-calldata.md b/.changeset/abi-function-selector-only-calldata.md
@@ -0,0 +1,5 @@
+---
+'ox': patch
+---
+
+Fixed `AbiFunction.decodeData` to throw `AbiParameters.DataSizeTooSmallError` when the calldata is exactly the 4-byte selector but the function declares inputs, instead of silently returning `undefined`.
diff --git a/.changeset/abi-parameters-data-size-bound.md b/.changeset/abi-parameters-data-size-bound.md
@@ -0,0 +1,5 @@
+---
+'ox': patch
+---
+
+Fixed `AbiParameters.decode` to surface a `DataSizeTooSmallError` (with parameter context) instead of leaking a `Cursor.PositionOutOfBoundsError` when the encoded payload is shorter than the parameter list requires.
diff --git a/.changeset/abi-parameters-encode-packed.md b/.changeset/abi-parameters-encode-packed.md
@@ -0,0 +1,5 @@
+---
+'ox': patch
+---
+
+Fixed `AbiParameters.encodePacked` to validate that fixed-array lengths match the supplied value, throwing `ArrayLengthMismatchError` (e.g. for `uint256[2]` with three elements) instead of silently encoding the wrong arity.
diff --git a/.changeset/account-proof-converters.md b/.changeset/account-proof-converters.md
@@ -0,0 +1,5 @@
+---
+'ox': minor
+---
+
+Added `AccountProof.fromRpc` and `AccountProof.toRpc` for converting between RPC and instantiated `AccountProof` shapes returned by `eth_getProof`.
diff --git a/.changeset/address-keys-keystore-async-pbkdf2.md b/.changeset/address-keys-keystore-async-pbkdf2.md
@@ -0,0 +1,5 @@
+---
+'ox': patch
+---
+
+Fixed `Keystore.toKeyAsync` to use the async PBKDF2 implementation -- previously it called the synchronous `pbkdf2` helper and blocked the main thread when decrypting PBKDF2-backed keystores.
diff --git a/.changeset/address-keys-keystore-kdf-validation.md b/.changeset/address-keys-keystore-kdf-validation.md
@@ -0,0 +1,5 @@
+---
+'ox': patch
+---
+
+Added validation of KDF parameters in `Keystore.pbkdf2`, `Keystore.pbkdf2Async`, `Keystore.scrypt`, and `Keystore.scryptAsync` -- PBKDF2 now requires `iterations` to be an integer `>= 1000`, and scrypt now requires `n` to be a power of two `>= 1024` with positive integer `r` and `p`, rejecting trivially weak parameters that previously produced formally valid but cryptographically insecure keystores.
diff --git a/.changeset/address-keys-keystore-scrypt-async-pr.md b/.changeset/address-keys-keystore-scrypt-async-pr.md
@@ -0,0 +1,5 @@
+---
+'ox': patch
+---
+
+Fixed `Keystore.scryptAsync` to honor caller-provided `p` and `r` options -- previously they were silently overridden with `p=8` and `r=1`, producing keystores that disagreed with the synchronous `Keystore.scrypt` for the same inputs.
diff --git a/.changeset/address-keys-mnemonic-default.md b/.changeset/address-keys-mnemonic-default.md
@@ -0,0 +1,5 @@
+---
+'ox': patch
+---
+
+Fixed `Mnemonic.toPrivateKey` to return `Bytes` by default to match its declared return type -- previously it returned a `Hex` string at runtime even though the default `as` was `'Bytes'`.
diff --git a/.changeset/anchor-crypto-webcrypto-verify-padding.md b/.changeset/anchor-crypto-webcrypto-verify-padding.md
@@ -0,0 +1,5 @@
+---
+'ox': patch
+---
+
+Fixed `WebCryptoP256.verify` rejecting valid signatures whose `r` or `s` value has a leading zero byte by padding both components to 32 bytes.
diff --git a/.changeset/anchor-publickey-assert-shape.md b/.changeset/anchor-publickey-assert-shape.md
@@ -0,0 +1,5 @@
+---
+'ox': patch
+---
+
+Fixed `PublicKey.assert` so it rejects objects missing `x`/`y` when the `compressed` option is set explicitly.
diff --git a/.changeset/anchor-publickey-fromhex-validate.md b/.changeset/anchor-publickey-fromhex-validate.md
@@ -0,0 +1,5 @@
+---
+'ox': patch
+---
+
+Fixed `PublicKey.fromHex` and `PublicKey.fromBytes` so they reject deserialized public keys with an invalid SEC1 prefix.
diff --git a/.changeset/block-state-block-fromrpc-required-fields.md b/.changeset/block-state-block-fromrpc-required-fields.md
@@ -0,0 +1,5 @@
+---
+'ox': patch
+---
+
+Preserved `Block.fromRpc().totalDifficulty` as `undefined` instead of silently coercing missing values to `0n`.
diff --git a/.changeset/block-state-bloom-contains-validate-length.md b/.changeset/block-state-bloom-contains-validate-length.md
@@ -0,0 +1,5 @@
+---
+'ox': patch
+---
+
+Made `Bloom.contains` validate the bloom argument length and throw `Bloom.InvalidBloomError` instead of silently returning `false` for malformed bloom inputs.
diff --git a/.changeset/block-state-filter-torpc-address-null.md b/.changeset/block-state-filter-torpc-address-null.md
@@ -0,0 +1,5 @@
+---
+'ox': patch
+---
+
+Made `Filter.toRpc` preserve explicit `address: null` (and `topics: null`) instead of stripping it via truthy checks.
diff --git a/.changeset/block-state-log-block-timestamp.md b/.changeset/block-state-log-block-timestamp.md
@@ -0,0 +1,5 @@
+---
+'ox': patch
+---
+
+Added `Log.fromRpc` and `Log.toRpc` support for optional `blockTimestamp` fields.
diff --git a/.changeset/block-state-quantity-converters.md b/.changeset/block-state-quantity-converters.md
@@ -0,0 +1,5 @@
+---
+'ox': patch
+---
+
+Unified the RPC-quantity conversion blocks across `Block`, `BlockOverrides`, and `StateOverrides` behind an internal helper so optional bigint fields with explicit `'0x0'` (e.g. `baseFeePerGas: '0x0'` on a post-merge block) round-trip as `0n` instead of being silently dropped by the previous truthy checks.
diff --git a/.changeset/block-state-typed-data-array-validation.md b/.changeset/block-state-typed-data-array-validation.md
@@ -0,0 +1,5 @@
+---
+'ox': patch
+---
+
+Validated array element types and fixed-array lengths in `TypedData.assert` and `TypedData.encodeField`, throwing `InvalidArrayError`/`InvalidArrayLengthError` instead of silently passing malformed input through to the encoder.
diff --git a/.changeset/block-state-validator-data-validate-address.md b/.changeset/block-state-validator-data-validate-address.md
@@ -0,0 +1,5 @@
+---
+'ox': patch
+---
+
+Made `ValidatorData.encode` call `Address.assert` on the validator argument so malformed validator addresses are rejected instead of producing invalid ERC-191 payloads.
diff --git a/.changeset/block-state-value-validation.md b/.changeset/block-state-value-validation.md
@@ -0,0 +1,5 @@
+---
+'ox': patch
+---
+
+Tightened `Value.from` input validation to reject malformed numeric strings (`''`, `'.'`, `'-'`, `'-.'`) and to reject non-integer or negative `decimals`, and replaced `Number`/`Math.round` rounding with string-carry rounding so very long fractions no longer lose precision.
diff --git a/.changeset/bloom-prepared.md b/.changeset/bloom-prepared.md
@@ -0,0 +1,5 @@
+---
+'ox': minor
+---
+
+Added `Bloom.prepare`, `Bloom.containsPrepared`, and `Bloom.containsHash` for membership checks against a precomputed bloom filter. Use `Bloom.prepare(bloom)` once and `Bloom.containsPrepared(prepared, input)` (or `Bloom.containsHash(prepared, hash)` when the caller already has the keccak hash) inside hot loops to avoid the per-call `Bytes.fromHex` allocation that `Bloom.contains` pays.
diff --git a/.changeset/bytes-rlp-odd-length-pad.md b/.changeset/bytes-rlp-odd-length-pad.md
@@ -0,0 +1,5 @@
+---
+'ox': patch
+---
+
+Fixed `Bytes.fromNumber` and `Rlp.fromHex` rejecting valid odd-nibble hex output produced by `Hex.fromNumber` (e.g. `0x7`, `0x311`); both now even-pad before handing the value to the strict `Bytes.fromHex` parser.
diff --git a/.changeset/config.json b/.changeset/config.json
@@ -5,7 +5,10 @@
   "changelog": ["@changesets/changelog-github", { "repo": "wevm/ox" }],
   "commit": false,
   "fixed": [],
-  "ignore": ["webauthn-p256"],
   "linked": [],
+  "privatePackages": {
+    "version": true,
+    "tag": true
+  },
   "updateInternalDependencies": "patch"
 }
diff --git a/.changeset/cosekey-topublickey-bytes-options.md b/.changeset/cosekey-topublickey-bytes-options.md
@@ -0,0 +1,5 @@
+---
+'ox': minor
+---
+
+Added `returnByteLength` and `returnDecoded` options to `CoseKey.toPublicKey` and accepted `Uint8Array` input in addition to `Hex`.
diff --git a/.changeset/crypto-bls-aggregate-validate.md b/.changeset/crypto-bls-aggregate-validate.md
@@ -0,0 +1,5 @@
+---
+'ox': patch
+---
+
+Fixed `Bls.aggregate` to reject empty arrays and mixed G1/G2 input, and added a fast path that returns the input directly when only one point is supplied.
diff --git a/.changeset/crypto-blspoint-frombytes-group.md b/.changeset/crypto-blspoint-frombytes-group.md
@@ -0,0 +1,5 @@
+---
+'ox': patch
+---
+
+Fixed `BlsPoint.fromBytes` to honor its declared `group` argument and assert the input length matches the requested G1 (48 bytes) or G2 (96 bytes) shape.
diff --git a/.changeset/crypto-cosekey-validate-header.md b/.changeset/crypto-cosekey-validate-header.md
@@ -0,0 +1,5 @@
+---
+'ox': patch
+---
+
+Hardened `CoseKey.toPublicKey` to reject COSE_Key inputs with a non-P-256 `kty`, `alg`, or `crv` header, or with `x`/`y` byte arrays that are not exactly 32 bytes long.
diff --git a/.changeset/crypto-extra-entropy-default-doc.md b/.changeset/crypto-extra-entropy-default-doc.md
@@ -0,0 +1,5 @@
+---
+'ox': patch
+---
+
+Documented `extraEntropy` on `Secp256k1.sign` and `P256.sign` correctly as `@default false` so the JSDoc matches the runtime default.
diff --git a/.changeset/crypto-kzg-from-receiver.md b/.changeset/crypto-kzg-from-receiver.md
@@ -0,0 +1,5 @@
+---
+'ox': patch
+---
+
+Fixed `Kzg.from` to preserve `this` binding by wrapping method calls instead of destructuring, so class instances or method-style implementations work correctly.
diff --git a/.changeset/crypto-serialized-inputs-and-as-option.md b/.changeset/crypto-serialized-inputs-and-as-option.md
@@ -0,0 +1,5 @@
+---
+'ox': minor
+---
+
+Added `as: 'Hex' | 'Bytes' | 'Object'` option to `Secp256k1.sign` / `getPublicKey` / `recoverPublicKey`, `P256.sign` / `getPublicKey` / `recoverPublicKey`, `WebCryptoP256.sign`, and `Bls.sign` / `getPublicKey` (default `'Object'` keeps existing behavior); plus accept `Hex.Hex | Bytes.Bytes | Signature.Signature` for `signature` params and `Hex.Hex | Bytes.Bytes | PublicKey.PublicKey` for `publicKey` params on `verify`, `recoverAddress`, `recoverPublicKey`, `getSharedSecret` across the same modules.
diff --git a/.changeset/crypto-webcrypto-doc-corrections.md b/.changeset/crypto-webcrypto-doc-corrections.md
@@ -0,0 +1,5 @@
+---
+'ox': patch
+---
+
+Documented `WebCryptoP256.sign` low-S normalization as always-on and corrected the `WebCryptoP256.createKeyPair` / `createKeyPairECDH` JSDoc to describe `publicKey` as a `PublicKey.PublicKey`.
diff --git a/.changeset/crypto-webcrypto-shared-secret-typed-error.md b/.changeset/crypto-webcrypto-shared-secret-typed-error.md
@@ -0,0 +1,5 @@
+---
+'ox': patch
+---
+
+Replaced the plain `Error` thrown by `WebCryptoP256.getSharedSecret` when given an ECDSA private key with a typed `WebCryptoP256.InvalidPrivateKeyAlgorithmError`.
diff --git a/.changeset/ens-to-coin-type.md b/.changeset/ens-to-coin-type.md
@@ -0,0 +1,5 @@
+---
+'ox': patch
+---
+
+Added `Ens.toCoinType` for converting chain IDs to ENS coin types.
diff --git a/.changeset/erc4337-user-operation-from-packed-typing.md b/.changeset/erc4337-user-operation-from-packed-typing.md
@@ -0,0 +1,5 @@
+---
+'ox': patch
+---
+
+Narrowed `UserOperation.fromPacked` return type to `UserOperation<'0.7', true>` to reflect that the packed format does not carry v0.8 `authorization`.
diff --git a/.changeset/erc4337-user-operation-gas-v08.md b/.changeset/erc4337-user-operation-gas-v08.md
@@ -0,0 +1,5 @@
+---
+'ox': patch
+---
+
+Added v0.8 EntryPoint support to `UserOperationGas` (and `RpcSchema.Bundler` via inheritance) by introducing `V08` and `RpcV08` aliases over the v0.7 gas shape.
diff --git a/.changeset/erc4337-user-operation-v08-authorization.md b/.changeset/erc4337-user-operation-v08-authorization.md
@@ -0,0 +1,5 @@
+---
+'ox': patch
+---
+
+Fixed `UserOperation.fromRpc` and `UserOperation.toRpc` to parse and serialize the v0.8 `authorization` field instead of dropping it.
diff --git a/.changeset/erc6492-strip-magic-and-validate.md b/.changeset/erc6492-strip-magic-and-validate.md
@@ -0,0 +1,5 @@
+---
+'ox': patch
+---
+
+Fixed `SignatureErc6492.unwrap` to strip the trailing magic bytes before ABI-decoding, and made `SignatureErc6492.from` and `assert` validate object inputs by throwing the new `InvalidUnwrappedSignatureError` on malformed values.
diff --git a/.changeset/erc7821-execute-structural-detection.md b/.changeset/erc7821-execute-structural-detection.md
@@ -0,0 +1,5 @@
+---
+'ox': patch
+---
+
+Replaced the exception-driven opData fallback in `Execute.decodeBatchOfBatchesData` with structural detection of the ABI head word, so malformed inputs surface as decode errors instead of being masked by the catch.
diff --git a/.changeset/erc8010-assert-suffix-and-recovery.md b/.changeset/erc8010-assert-suffix-and-recovery.md
@@ -0,0 +1,5 @@
+---
+'ox': patch
+---
+
+Hardened ERC-8010 by validating the full unwrapped object in `SignatureErc8010.assert`, capping the suffix length parsed by `unwrap` against the wrapped size to reject overflowing inputs, and skipping `Secp256k1.recoverAddress` in `wrap` when `to` is already provided.
diff --git a/.changeset/fee-helpers.md b/.changeset/fee-helpers.md
@@ -0,0 +1,5 @@
+---
+'ox': minor
+---
+
+Added `Fee.fromHistoryRpc`, `Fee.toHistoryRpc`, `Fee.estimateMaxFeePerGas`, and `Fee.effectiveGasPrice` for converting between RPC/instantiated `FeeHistory` shapes and computing common EIP-1559 fee values.
diff --git a/.changeset/filter-blockhash-branch.md b/.changeset/filter-blockhash-branch.md
@@ -0,0 +1,5 @@
+---
+'ox': minor
+---
+
+Added the EIP-234 `blockHash` branch to `Filter.Filter` (and `Filter.Rpc`) so log filters can be discriminated against `fromBlock`/`toBlock` and `blockHash`, matching the execution-apis `filter.yaml` `oneOf` schema. `Filter.toRpc` now forwards `blockHash` when present.
diff --git a/.changeset/hex-tobytes-buffer-pool-fix.md b/.changeset/hex-tobytes-buffer-pool-fix.md
@@ -0,0 +1,5 @@
+---
+'ox': patch
+---
+
+Fixed `Hex.toBytes` and `Bytes.fromHex` returning a `Uint8Array` view that aliased Node's shared `Buffer` pool memory, which broke callers that read `.buffer` (e.g. WebAuthn `attestationObject` round-trips).
diff --git a/.changeset/pre.json b/.changeset/pre.json
@@ -0,0 +1,98 @@
+{
+  "mode": "pre",
+  "tag": "beta",
+  "initialVersions": {
+    "ox": "0.14.22"
+  },
+  "changesets": [
+    "abi-anonymous-events",
+    "abi-constructor-bytecode-prefix",
+    "abi-decode-checksum-default",
+    "abi-error-extract",
+    "abi-event-decode-log",
+    "abi-event-hex-topic-normalization",
+    "abi-function-decode-data-selector",
+    "abi-function-selector-only-calldata",
+    "abi-parameters-data-size-bound",
+    "abi-parameters-encode-packed",
+    "account-proof-converters",
+    "address-keys-keystore-async-pbkdf2",
+    "address-keys-keystore-kdf-validation",
+    "address-keys-keystore-scrypt-async-pr",
+    "address-keys-mnemonic-default",
+    "anchor-crypto-webcrypto-verify-padding",
+    "anchor-publickey-assert-shape",
+    "anchor-publickey-fromhex-validate",
+    "block-state-block-fromrpc-required-fields",
+    "block-state-bloom-contains-validate-length",
+    "block-state-filter-torpc-address-null",
+    "block-state-log-block-timestamp",
+    "block-state-quantity-converters",
+    "block-state-typed-data-array-validation",
+    "block-state-validator-data-validate-address",
+    "block-state-value-validation",
+    "bloom-prepared",
+    "bytes-rlp-odd-length-pad",
+    "cosekey-topublickey-bytes-options",
+    "crypto-bls-aggregate-validate",
+    "crypto-blspoint-frombytes-group",
+    "crypto-cosekey-validate-header",
+    "crypto-extra-entropy-default-doc",
+    "crypto-kzg-from-receiver",
+    "crypto-serialized-inputs-and-as-option",
+    "crypto-webcrypto-doc-corrections",
+    "crypto-webcrypto-shared-secret-typed-error",
+    "ens-to-coin-type",
+    "erc4337-user-operation-from-packed-typing",
+    "erc4337-user-operation-gas-v08",
+    "erc4337-user-operation-v08-authorization",
+    "erc6492-strip-magic-and-validate",
+    "erc7821-execute-structural-detection",
+    "erc8010-assert-suffix-and-recovery",
+    "fee-helpers",
+    "filter-blockhash-branch",
+    "hex-tobytes-buffer-pool-fix",
+    "promise-with-timeout-single-reject",
+    "provider-from-prototype",
+    "provider-from-strict-eip1193",
+    "rpc-response-from-validation",
+    "rpc-response-parse-error-preserve",
+    "rpc-response-parse-validation",
+    "rpc-transport-empty-body",
+    "rpc-transport-http-error-details",
+    "rpc-transport-json-empty-error",
+    "rpc-transport-signal-compose",
+    "signature-byte-helpers",
+    "siwe-bigint-chain-id",
+    "solidity-helpers",
+    "tempo-authorization-signature-normalize",
+    "tempo-noncekey-random",
+    "tempo-poolid-canonical",
+    "tempo-transaction-request-envelope-conversion",
+    "tempo-txenvelope-validate-prefix",
+    "transaction-request-envelope-conversion",
+    "transactions-access-list-strict-storage-keys",
+    "transactions-authorization-fromtuplelist-return-type",
+    "transactions-eip4844-blob-validation",
+    "transactions-eip4844-deserialize-error-attributes",
+    "transactions-eip4844-input-alias",
+    "transactions-eip7702-torpc",
+    "transactions-legacy-v-fromrpc",
+    "transactions-legacy-v-torpc",
+    "transactions-transaction-request-fromrpc-no-mutate",
+    "transactions-transaction-rpc-transaction-index-zero",
+    "tx-envelope-router",
+    "typed-data-type-hashes-memo",
+    "upgrade-noble-v2",
+    "v1-blob-cells",
+    "v1-deprecate-4844-sidecar",
+    "v1-hex-coords",
+    "v1-remove-tempo-address",
+    "webauthn-authentication-getsignpayload-hash",
+    "webauthn-authentication-sign-utf8",
+    "webauthn-authentication-verify-at-ed-flags",
+    "webauthn-authenticator-bytes-first",
+    "webauthn-registration-verify-attestation-default-docs",
+    "zod-schema-entrypoint"
+  ]
+}