chore: update dependencies and make Osaka default

.github/workflows/release-wasm.yaml

@@ -9,6 +9,9 @@ jobs:
   release-npm:
     name: Release NPM
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write  # Required for OIDC
 
     steps:
       - uses: actions/checkout@v4
@@ -17,6 +20,11 @@ jobs:
           ref: ${{ github.event.pull_request.head.sha || github.ref }}
       - uses: dtolnay/rust-toolchain@stable
 
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+          registry-url: 'https://registry.npmjs.org'
+
       - name: Get version tag
         id: vars
         run: |
@@ -31,11 +39,6 @@ jobs:
           PACKAGE_VERSION: ${{ steps.vars.outputs.tag }}
         run: .github/scripts/make_package.sh
 
-      - name: Authenticate with NPM
-        run: echo "//registry.npmjs.org/:_authToken=${{ secrets.NPM_TOKEN }}" > ~/.npmrc
-
       - name: Publish to NPM
-        run: npm publish
-        working-directory: ./crates/js/pkg
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: npm publish --provenance --access public
+        working-directory: ./crates/js/pkg

CHANGELOG.md

@@ -3,10 +3,14 @@
 # Huff Neo Compiler changelog
 
 ## Unreleased
+
+## [1.5.9] - 2025-12-24
 - Add support to pass builtin functions to `__VERBATIM`.
   - `__VERBATIM` can now wrap builtins that generate PUSH + value, stripping the PUSH opcode.
   - Supported: `__FUNC_SIG`, `__EVENT_HASH`, `__BYTES`, `__ERROR`, `__RIGHTPAD`, `__LEFTPAD`.
   - Example: `__VERBATIM(__FUNC_SIG("withdraw(uint256)"))` emits raw 4-byte selector without PUSH4.
+- EVM version `Osaka` is now the default.
+- Update to foundry v1.5.1.
 
 ## [1.5.8] - 2025-11-29
 - Fix `__RIGHTPAD()` incorrectly padding odd-length hex values.