[dependabot]

Updates the requirements on anchor-lang to permit the latest version.

Release notes

Sourced from anchor-lang's releases.

v1.2.1

The v1.2.1 release is here.

Check out the release notes from Anchor website or GitHub.

For a list of notable changes with their associated PRs, see the CHANGELOG.

Changelog

Sourced from anchor-lang's changelog.

[1.2.1] - 2026-10-05

Features

• lang: Add support for Solana v4 crates using the solana-v4 feature (#5081).

Fixes

Breaking

[1.2.0] - 2026-09-04

Features

• avm: Allow resolving Solana/platform-tools versions from an explicit Anchor version. (#4799).
• cli: Add --arch and --tools-version flags to select the SBPF architecture and platform-tools version used by anchor build. (#4684).
• cli: Generate a TypeScript error constants file from the IDL during anchor build (#3827).
• lang: Always derive Clone and Debug for generated types in declare_program! (#4723).
• spl: Add pausable mint extension support (#4092).
• spl: Add create_native_mint and initialize_non_transferable_mint helpers (#3512).
• spl: Add reallocate and withdraw_excess_lamports helpers (#3516).
• spl: Added token_metadata_remove_key to support removing keys from token metadata extension (#3717).
• lang: Add AccountLoader::new_unchecked for constructing an AccountLoader without performing owner or discriminator checks (#4162).
• lang: Provide better error messages for token constraints (#4698).
• ts: Improve account resolution error of self-referencing PDAs (#4711).
• cli: Warn unused Anchor.toml fields (#4749).
• cli: Generate a security.json template on anchor init (skip with --no-security-metadata) and upload it on-chain through program-metadata with anchor deploy --security-metadata / anchor program deploy --security-metadata (#4177).

Fixes

• lang, ts: Improve error message wording, and sync messages between TS and Rust (#4772).
• spl: Fix anchor-spl failing to build with only the metadata feature (#4742).
• lang: Honor is_signer in generated client and CPI account metas, enabling PDA signer usage (#3322).
• lang: Report invalid instruction arguments instead of silently omitting their instructions during parsing (#4008).
• syn: Correct bytemuck serialization detection to avoid false positives from unrelated derives (#4215).
• lang: Return an error instead of panicking when zero-copy account data is undersized (#4555).
• lang: Handle numeric instruction suffixes in declare_program! generated account-module re-exports (#4568).
• lang: Reject all-zero account discriminators (#4645).
• lang: Preserve IDL namespace boundaries in declare_program! to prevent foreign-IDL name collisions with Anchor prelude items (#4776).
• lang: Re-run ownership and discriminator checks when unloading LazyAccount after a CPI (#4784).
• client: Fix ignored commitment level (#4666).
• lang: Remove cloning AccountInfo to read lamports in init_if_needed codegen (#4675).
• lang: Guard AccountLoader<T>::exit against zero-copy buffer truncation and bail with AccountDidNotDeserialize instead of rewriting the discriminator over an undersized buffer (#4633).
• lang: Shorten invariant lifetimes during Context creation (#4363).
• lang: Qualify bare error! calls in require macros so they don't depend on global prelude imports (#4639).
• ts: Guard recursive IDL layouts against stack overflows while preserving supported recursive types (#4604).
• lang: Fix missing error messages of the generated errors in declare_program! (#4652).
• spl: Fix wrong owner pubkey in CPI Guard enable/disable (#4322).
• spl: Add missing auth account to group_pointer_update (#4324).
• spl: Deprecate broken cpi_guard_enable/disable functions (#4465).

... (truncated)

Commits

• f1d20a9 Release 1.2.1 (#5144)
• 1bbd901 Compare 1.2.1 benchmarks against a matched SBPFv3 baseline
• 44570f4 Handle untagged release candidates in CI
• f336ddd Prepare 1.2.1 release and benchmark snapshot
• 071d311 Enable system instruction serialization for the v4 backport
• 6b57bd8 Bump solana/agave deps from 3.x to 4.3 (#5081)
• 84a63f9 Release 1.2.0 (#4992)
• 2154907 fix(bench): use instrumented test for lockfile bootstrap (#4991)
• bf82948 Docs: non-functional docs/spell fixes (#4986)
• 87ddd0f ci: pin rust-toolchain action (#4984)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
mappers	Building	Preview, v0	Oct 12, 2026 1:28pm UTC