[metamask-ci]

This PR contains the following updates:

Package	Change	Age	Confidence
bignumber.js	^9.1.2 → ^11.1.5

---

Release Notes

MikeMcl/bignumber.js (bignumber.js)

v11.1.5

Compare Source

• 05/07/26
• #​409 toFraction returning a sub-optimal rational approximation.

v11.1.4

Compare Source

• 16/06/26
• [BUGFIX] #​407 Fix toFormat duplicating the fraction when groupSize is 0.

v11.1.3

Compare Source

• 05/06/26
• #​406 Fix EXPONENTIAL_AT default value documentation.

v11.1.2

Compare Source

• 30/05/26
• [BUGFIX] #​405 Fix invalid toFormat output for -0.

v11.1.1

Compare Source

• 02/05/26
• Docs: fix version number and decimalPlaces API description.

v11.1.0

Compare Source

• 30/04/26
• #​401 BigNumber.sum: return zero if there are no arguments.
• #​352 Add toBigInt method.
• #​286 Add fromFormat method.
• #​262 decimalPlaces, toFixed and toFormat: support negative decimal places.
• #​260 toFormat: support minimum/maximum decimal places.
• toFormat: fallback to FORMAT for each property not in options.
• [BUGFIX] #​342 Large DECIMAL_PLACES causing slow hex integer base conversion.
• Typescript: add test_api.ts to improved typed API test coverage.

v11.0.0

Compare Source

• 14/04/26
• Add STRICT configuration option:
  if true (default), throw an exception on invalid input.
  if false, return NaN on invalid input.
• toFraction: return [1, 0] for Infinity and [0, 0] for NaN.
• Support underscores as separators.
• If a base is supplied, reject non-finite values and base prefixes.

v10.0.2

Compare Source

• 24/02/26
• Reinstate README.md links.

v10.0.1

Compare Source

• 24/02/26
• Commit dist folder.

v10.0.0

Compare Source

• 23/02/26
• Implement targeted builds for ES modules, CommonJS, and browser (global assignment).
• Add CI workflow.
• Add type declaration import tests.
• Remove BigNumber.DEBUG, so the behaviour is now always as if it was true:
  throw on invalid input instead of returning NaN, and
  always validate the c, e, and s properties of objects passed to isBigNumber
• Don't call toString on any arbitrary object passed to the constructor.
• Require a BigNumber value to be a string if a base is also passed.
• Add toObject prototype method which returns a plain object with c, e, and s properties.
• Remove .npmignore, as files in package.json is used. Add .gitignore.
• Normalise line endings and add .gitattributes.
• Add typescript to devDependencies.

v9.3.1

Compare Source

• 11/07/25
• [BUGFIX] #​388 toPrecision fix.

v9.3.0

Compare Source

• 19/04/25
• Refactor type declarations:
• Rename bignumber.d.ts to types.d.ts.
• Rename bignumber.d.cts to bignumber.d.ts.
• Add export as namespace to bignumber.d.ts.
• Remove subpath exports from package.json.
• Refactor named export from bignumber.d.mts.
• #​383 Remove ? from static BigNumber and default properties.
• Add blank lines after titles in CHANGELOG.md.

v9.2.1

Compare Source

• 08/04/25
• #​371 #​382 Add BigNumber as named export.

v9.2.0

Compare Source

• 03/04/25
• #​355 Support BigInt argument.
• #​371 Provide separate type definitions for CommonJS and ES modules.
• #​374 Correct comparedTo return type.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

---

Note

Medium Risk
A two-major-version library jump affects balance, gas, bridge, and perps math across many controllers; upstream v10/v11 tightened constructor and validation behavior, so regressions would show up in numeric formatting or parsing rather than compile time.

Overview
Upgrades bignumber.js from ^9.1.2 to ^11.1.5 in twelve workspace packages (assets-controller, bridge-controller, bridge-status-controller, controller-utils, notification-services-controller, perps-controller, ramps-controller, smart-transactions-controller, subscription-controller, transaction-controller, transaction-pay-controller, transaction-pay-middleware) and refreshes yarn.lock so the monorepo resolves 11.1.5.

Each touched package records the bump under [Unreleased] in its changelog. No application source changes are included—only dependency and lockfile updates.

^{Reviewed by Cursor Bugbot for commit 12a4b84. Bugbot is set up for automated code reviews on this repo. Configure here.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	bignumber.js@​11.1.5

View full report