[Snyk] Upgrade @solana/web3.js from 1.31.0 to 1.69.0

[Balantion2020]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade @solana/web3.js from 1.31.0 to 1.69.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 84 versions ahead of your current version.
• The recommended version was released 21 days ago, on 2022-12-03.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-101-1292345	261/1000 Why? CVSS 5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @solana/web3.js

• 1.69.0 - 2022-12-03
  

  1.69.0 (2022-12-03)

  Features

  • you can now abort transaction confirmations in web3.js (#29057) (4679a23)
• 1.68.1 - 2022-12-02
  

  1.68.1 (2022-12-02)

  Bug Fixes

  • prevent the first-ever signature subscription from leaking (#29056) (f599765)
• 1.68.0 - 2022-12-02
  

  1.68.0 (2022-12-02)

  Features

  • the web3.js getBlock APIs now accept rewards and transactionDetails config (#29000) (570fa1d)
• 1.67.2 - 2022-11-30
  

  1.67.2 (2022-11-30)

  Bug Fixes

  • support VersionedMessage in getFeeForMessage (#28996) (a731d2d)
• 1.67.1 - 2022-11-30
  

  1.67.1 (2022-11-30)

  Bug Fixes

  • TransactionMessage.decompile() now counts the correct number of unsigned, writable accounts (#28990) (4724539)
• 1.67.0 - 2022-11-29
  

  1.67.0 (2022-11-29)

  Features

  • a nonce-based transaction confirmation strategy for web3.js (#25839) (7906c9f)
• 1.66.5 - 2022-11-29
  

  1.66.5 (2022-11-29)

  Bug Fixes

  • verify commitment level when confirming transactions with one-shot fetch (#28969) (a206ab6)
• 1.66.4 - 2022-11-29
  

  1.66.4 (2022-11-29)

  Bug Fixes

  • remove Buffer from transaction signature verification (#27868) (7498c1a)
• 1.66.3 - 2022-11-28
  

  1.66.3 (2022-11-28)

  Bug Fixes

  • add confirmation status to ConfirmedSignatureInfo web3.js response (#28555) (f6fd2cf)
  • web3.js transaction confirmation now double-checks for already-confirmed txs (#28290) (772c788)
• 1.66.2 - 2022-10-21
  

  1.66.2 (2022-10-21)

  Bug Fixes

  • incorrect error message for getFeeForMessage (#28529) (eaafcf0)
• 1.66.1 - 2022-10-17
• 1.66.0 - 2022-10-16
• 1.65.0 - 2022-10-14
• 1.64.0 - 2022-10-11
• 1.63.1 - 2022-09-24
• 1.63.0 - 2022-09-22
• 1.62.1 - 2022-09-20
• 1.62.0 - 2022-09-15
• 1.61.1 - 2022-09-13
• 1.61.0 - 2022-09-13
• 1.60.0 - 2022-09-09
• 1.59.1 - 2022-09-07
• 1.59.0 - 2022-09-07
• 1.58.0 - 2022-09-07
• 1.57.0 - 2022-09-07
• 1.56.2 - 2022-09-01
• 1.56.1 - 2022-09-01
• 1.56.0 - 2022-08-31
• 1.55.0 - 2022-08-29
• 1.54.1 - 2022-08-28
• 1.54.0 - 2022-08-25
• 1.53.0 - 2022-08-14
• 1.52.0 - 2022-08-11
• 1.51.0 - 2022-08-10
• 1.50.1 - 2022-07-25
• 1.50.0 - 2022-07-22
• 1.49.0 - 2022-07-22
• 1.48.0 - 2022-07-13
• 1.47.4 - 2022-07-13
• 1.47.3 - 2022-07-02
• 1.47.2 - 2022-07-02
• 1.47.1 - 2022-07-01
• 1.47.0 - 2022-06-30
• 1.46.0 - 2022-06-29
• 1.45.0 - 2022-06-29
• 1.44.3 - 2022-06-27
• 1.44.2 - 2022-06-21
• 1.44.1 - 2022-06-17
• 1.44.0 - 2022-06-10
• 1.43.6 - 2022-06-07
• 1.43.5 - 2022-06-04
• 1.43.4 - 2022-05-30
• 1.43.3 - 2022-05-30
• 1.43.2 - 2022-05-26
• 1.43.1 - 2022-05-20
• 1.43.0 - 2022-05-20
• 1.42.0 - 2022-05-15
• 1.41.10 - 2022-05-14
• 1.41.9 - 2022-05-13
• 1.41.8 - 2022-05-13
• 1.41.7 - 2022-05-12
• 1.41.6 - 2022-05-12
• 1.41.5 - 2022-05-12
• 1.41.4 - 2022-05-05
• 1.41.3 - 2022-04-29
• 1.41.2 - 2022-04-28
• 1.41.1 - 2022-04-27
• 1.41.0 - 2022-04-26
• 1.40.1 - 2022-04-26
• 1.40.0 - 2022-04-26
• 1.39.1 - 2022-04-16
• 1.39.0 - 2022-04-16
• 1.38.0 - 2022-04-16
• 1.37.2 - 2022-04-13
• 1.37.1 - 2022-04-04
• 1.37.0 - 2022-03-28
• 1.36.0 - 2022-03-02
• 1.35.1 - 2022-02-21
• 1.35.0 - 2022-02-17
• 1.34.0 - 2022-02-09
• 1.33.0 - 2022-02-04
• 1.32.2 - 2022-02-04
• 1.32.1 - 2022-02-03
• 1.32.0 - 2022-01-21
• 1.31.0 - 2021-11-24

from @solana/web3.js GitHub release notes

Commit messages

Package name: @solana/web3.js

• 4679a23 feat: you can now abort transaction confirmations in web3.js (feat: you can now abort transaction confirmations in web3.js solana-labs/solana#29057)
• f599765 fix: prevent the first-ever signature subscription from leaking (fix: prevent the first-ever signature subscription from leaking solana-labs/solana#29056)
• 570fa1d feat: the web3.js getBlock APIs now accept `rewards` and `transactionDetails` config (feat: the web3.js getBlock APIs now accept rewards and transactionDetails config solana-labs/solana#29000)
• a731d2d fix: support `VersionedMessage` in `getFeeForMessage` (fix: support VersionedMessage in getFeeForMessage solana-labs/solana#28996)
• 4724539 fix: TransactionMessage.decompile() now counts the correct number of unsigned, writable accounts (fix: TransactionMessage.decompile() now counts the correct number of unsigned, writable accounts solana-labs/solana#28990)
• c0a35b6 chore: remove @ babel/register dependency from web3.js
• dff827b chore: remove unused http-server dependency from web3.js
• 6c7eeb0 chore: bump http-server from 14.1.0 to 14.1.1 in /web3.js (chore: bump http-server from 14.1.0 to 14.1.1 in /web3.js solana-labs/solana#27333)
• 7bbded0 chore: remove redundant 'Buffer' from 'Account' class (web3.js: remove redundant 'Buffer' from 'Account' class solana-labs/solana#27865)
• 7a858b9 chore: use constant for PUBLIC_KEY_LENGTH for checking length of input (web3.js: use constant for PUBLIC_KEY_LENGTH for checking length of input solana-labs/solana#27876)
• 65cac92 chore: add deprecation notice for createProgramAddress (web3.js: add deprecation notice for createProgramAddress solana-labs/solana#27879)
• f155373 chore: deprecate PublicKey.findProgramAddress (web3.js: deprecate PublicKey.findProgramAddress solana-labs/solana#27882)
• 612f948 chore: replace casts with not-null assertions (web3.js: replace casts with not-null assertions solana-labs/solana#27883)
• 436fe3e chore: fix typo in PublicKey.unique (web3.js: fix typo in PublicKey.unique solana-labs/solana#27884)
• 7906c9f feat: a nonce-based transaction confirmation strategy for web3.js (feat: a nonce-based transaction confirmation strategy for web3.js solana-labs/solana#25839)
• a206ab6 fix: verify commitment level when confirming transactions with one-shot fetch (fix: verify commitment level when confirming transactions with one-shot fetch solana-labs/solana#28969)
• 7498c1a fix: remove Buffer from transaction signature verification (web3.js: remove Buffer from signature verification solana-labs/solana#27868)
• f6fd2cf fix: add confirmation status to ConfirmedSignatureInfo web3.js response (Add confirmation status to ConfirmedSignatureInfo web3 response solana-labs/solana#28555)
• 772c788 fix: web3.js transaction confirmation now double-checks for already-confirmed txs (web3.js: add getSignatureStatuses to confirm transaction solana-labs/solana#28290)
• ed1fe6d ci: fix wrong path (ci: fix wrong path solana-labs/solana#28700)
• 62a4be4 chore: web3js get rid of Travis (chore: web3js get rid of Travis solana-labs/solana#28695)
• a69efa4 chore: bump node version to 16 (chore: bump node version to 16 solana-labs/solana#28693)
• dac470c chore: update Solana docs and code comments that specify "BPF" to "SBF"
• eaafcf0 fix: incorrect error message for getFeeForMessage (fix: incorrect error message for getFeeForMessage solana-labs/solana#28529)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs