[dependabot]

Bumps @polymarket/clob-client-v2 from 1.0.8 to 1.2.0.

Release notes

Sourced from @​polymarket/clob-client-v2's releases.

v1.2.0

Changes

• Support PolyV2 position orders through positionID, which selects Exchange V3 signing for limit and market orders (#104).
• Validate that orders specify exactly one of tokenID or positionID as a non-empty string (#110).
• Warm up order metadata through getVersion() and getClobMarketInfo(), share in-flight requests, and avoid redundant fee lookups (#107).
• Retry create-and-post once when the server rejects an order for a version mismatch, including with throwOnError enabled (#107).

Install

npm install @polymarket/clob-client-v2@1.2.0

Source: main commit 8046a89ee9ba75676e31a11830785c046ccee167, with only the package version bumped to 1.2.0.

Full changelog: Polymarket/clob-client-v2@v1.1.0...v1.2.0

v1.2.0-canary.1

Adding automatic routing support for V2 markets using V3 exchange

v1.2.0-canary.0

Canary release for PR #104: PolyV2 position ID order placement support. Install with @​polymarket/clob-client-v2@​canary.

v1.1.1-canary.0

Canary release based on main commit 801696edfe0a5661f325ed8f0e1be3ad47e0ea3f, with only the package version changed to 1.1.1-canary.0.

Changes

• Warm up order metadata through getVersion() and getClobMarketInfo() before placing orders (#107).
• Share in-flight version and market metadata requests and avoid redundant fee lookups.
• Retry create-and-post once when the server rejects an order for a version mismatch, including with throwOnError enabled.

Install

npm install @polymarket/clob-client-v2@1.1.1-canary.0

Full changelog: Polymarket/clob-client-v2@v1.1.0...v1.1.1-canary.0

v1.1.0

Async execution support

The CLOB is rolling out an async execution pipeline: POST /order and POST /orders responses will no longer include transactionsHashes directly and instead return tradeIDs for matched orders. This release makes the client handle that change transparently. Upgrade to >=1.1.0 before the server rollout; no code changes are required.

Changed

• postOrder, postOrders, createAndPostOrder, and createAndPostMarketOrder now return a typed OrderResponse instead of any (#89)
• When a matched order response carries tradeIDs without transactionsHashes, the client resolves the hashes internally before returning, so response.transactionsHashes keeps working as it does today. Resolution is best-effort: it never throws after a successful placement, and on timeout the response is returned with tradeIDs so the trades can be followed via getTrades or the user websocket channel (#89)

... (truncated)

Commits

• e7c3e4a chore: release v1.2.0
• 8046a89 fix: validate order identifiers and cover public position flows (#110)
• 28a303e feat(client): support PolyV2 position orders (#104)
• 801696e feat: prime order metadata caches through the public getters (#107)
• 1210b46 Revert automatic V3 routing (#105) (#108)
• 9cfb25f feat: route Protocol V2 markets to V3 exchange automatically (#105)
• 49083a6 chore: restore package version on main
• 39d8c12 chore: release v1.2.0-canary.0
• f3e1a05 chore: release v1.1.0
• 5b28ba0 refactor: resolve transaction hashes internally for matched orders (#89)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Repository: BlockRunAI/ClawRouter/.coderabbit.yaml
• Review profile: CHILL
• Plan: Advanced
• Run ID: 7c4d7768-26a4-463a-9cb1-e39775b6439d

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[VickyXAI]

I compared the published 1.0.8 and 1.2.0 packages. For orders placed by tokenID, which is all we send, they build and sign the same order. The rest is additive: positionID/v3 routing, sharing of duplicate in-flight requests, and stricter input checks. Note that the package is deprecated at every version in favour of the unified Polymarket SDK, so migrating off it is a separate follow-up.