fix(deps): update dependency bignumber.js to v11

[metamask-ci]

This PR contains the following updates:

Package	Change	Age	Confidence
bignumber.js	^9.1.2 → ^11.1.5

---

Release Notes

MikeMcl/bignumber.js (bignumber.js)

v11.1.5

Compare Source

• 05/07/26
• #​409 toFraction returning a sub-optimal rational approximation.

v11.1.4

Compare Source

• 16/06/26
• [BUGFIX] #​407 Fix toFormat duplicating the fraction when groupSize is 0.

v11.1.3

Compare Source

• 05/06/26
• #​406 Fix EXPONENTIAL_AT default value documentation.

v11.1.2

Compare Source

• 30/05/26
• [BUGFIX] #​405 Fix invalid toFormat output for -0.

v11.1.1

Compare Source

• 02/05/26
• Docs: fix version number and decimalPlaces API description.

v11.1.0

Compare Source

• 30/04/26
• #​401 BigNumber.sum: return zero if there are no arguments.
• #​352 Add toBigInt method.
• #​286 Add fromFormat method.
• #​262 decimalPlaces, toFixed and toFormat: support negative decimal places.
• #​260 toFormat: support minimum/maximum decimal places.
• toFormat: fallback to FORMAT for each property not in options.
• [BUGFIX] #​342 Large DECIMAL_PLACES causing slow hex integer base conversion.
• Typescript: add test_api.ts to improved typed API test coverage.

v11.0.0

Compare Source

• 14/04/26
• Add STRICT configuration option:
  if true (default), throw an exception on invalid input.
  if false, return NaN on invalid input.
• toFraction: return [1, 0] for Infinity and [0, 0] for NaN.
• Support underscores as separators.
• If a base is supplied, reject non-finite values and base prefixes.

v10.0.2

Compare Source

• 24/02/26
• Reinstate README.md links.

v10.0.1

Compare Source

• 24/02/26
• Commit dist folder.

v10.0.0

Compare Source

• 23/02/26
• Implement targeted builds for ES modules, CommonJS, and browser (global assignment).
• Add CI workflow.
• Add type declaration import tests.
• Remove BigNumber.DEBUG, so the behaviour is now always as if it was true:
  throw on invalid input instead of returning NaN, and
  always validate the c, e, and s properties of objects passed to isBigNumber
• Don't call toString on any arbitrary object passed to the constructor.
• Require a BigNumber value to be a string if a base is also passed.
• Add toObject prototype method which returns a plain object with c, e, and s properties.
• Remove .npmignore, as files in package.json is used. Add .gitignore.
• Normalise line endings and add .gitattributes.
• Add typescript to devDependencies.

v9.3.1

Compare Source

• 11/07/25
• [BUGFIX] #​388 toPrecision fix.

v9.3.0

Compare Source

• 19/04/25
• Refactor type declarations:
• Rename bignumber.d.ts to types.d.ts.
• Rename bignumber.d.cts to bignumber.d.ts.
• Add export as namespace to bignumber.d.ts.
• Remove subpath exports from package.json.
• Refactor named export from bignumber.d.mts.
• #​383 Remove ? from static BigNumber and default properties.
• Add blank lines after titles in CHANGELOG.md.

v9.2.1

Compare Source

• 08/04/25
• #​371 #​382 Add BigNumber as named export.

v9.2.0

Compare Source

• 03/04/25
• #​355 Support BigInt argument.
• #​371 Provide separate type definitions for CommonJS and ES modules.
• #​374 Correct comparedTo return type.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

---

Note

Medium Risk
The jump spans major bignumber.js releases (v10/v11) with stricter parsing and constructor behavior, and the library is used for balances, gas, bridge, and pay flows—regression risk is behavioral rather than from new core code in this PR.

Overview
Upgrades bignumber.js from ^9.1.2 to ^11.1.5 in eleven workspace packages (assets-controller, bridge-controller, bridge-status-controller, controller-utils, notification-services-controller, perps-controller, ramps-controller, smart-transactions-controller, subscription-controller, transaction-controller, transaction-pay-controller) and refreshes yarn.lock to resolve bignumber.js@11.1.5.

Each affected package’s [Unreleased] changelog now records the dependency bump (#10380); there are no application source changes in this diff—only manifests, changelogs, and the lockfile.

^{Reviewed by Cursor Bugbot for commit daf55d2. Bugbot is set up for automated code reviews on this repo. Configure here.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	bignumber.js@​11.1.5

View full report

[metamask-ci]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.