[Snyk] Upgrade @ethersproject/providers from 5.0.12 to 5.6.1

[snyk-bot]

Snyk has created this PR to upgrade @ethersproject/providers from 5.0.12 to 5.6.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 30 versions ahead of your current version.
• The recommended version was released a month ago, on 2022-03-16.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @ethersproject/providers

• 5.6.1 - 2022-03-16
  
  • Fix issue with CCIP Read using wrong sender. (#2478; 5998fea, 905e98a)

  ---

  Embedding UMD with SRI:

  <script type="text/javascript"
          integrity="sha384-gpTMxPzzvJTTqvtQYTKNpUG2OF+R5E8zdloHZvHIh+fw0lwlsStx33A86eG4WKve"
          crossorigin="anonymous"
          src="https://cdn-cors.ethers.io/lib/ethers-5.6.1.umd.min.js">
  </script>

• 5.6.0 - 2022-03-10
  
  • Tweaked test case to re-order transaction after event listeners added. (fa4a290)
  • Ignore errors when resolving ENS resolver properties. (d160bac)
  • Enable CCIP Read for ENS resolvers. (#2478; be518c3)
  • Fix missing events on certain network conditions. (#1798, #1814, #1830, #2274, #2652; f67a9a8, f46aa75)
  • Added defaultProvider option to omit specific Providers. (bae215e)
  • Add support for pending blocks. (#2225; 54e6e57)
  • Help URLs for errors. (#2489; 38e825c, c562150)
  • Added CCIP support to provider.call. (#2478; ae23bb7)
  • Adjust default maxPriorityFeePerGas to 1.5 gwei. (33a029e)
  • Fix contracts when name resolution fails without any checks. (#2737; c2a6a01)
  • Preserve explicit chainId in JsonRpcProvider during transaction serialization. (#2691; 6807a76)
  • Fixed eth_chainId response for Eip1193Bridge. (#2711; 5f26fd5)
  • Remove spurious console.log from Interface. (#2714; 4e8f004)
  • Allow raw WebSocket to be passed into WebSocketProvider. (#2562, #2644; 9aac785)
  • Added Cloudflare Worker support. (#1886; 2d98b4f, 1651389)
  • Add support for EIP-2098 compact signatures. (#2246; f26074b)
  • Add EIP-2544 Wildcard support. (#2477, #2582, #2583; 83891f9)

  ---

  Embedding UMD with SRI:

  <script type="text/javascript"
          integrity="sha384-9yTnv56yzVfnTq5ivTdc/x0dgp+W1JPRborbGbrr8lAvXBP/W83A08rvYb2hIs6O"
          crossorigin="anonymous"
          src="https://cdn-cors.ethers.io/lib/ethers-5.6.0.umd.min.js">
  </script>

• 5.5.3 - 2022-01-31
  
  • Fixed case-folding in schemes for ENS avatars. (#2500; 3f5bc6d)
  • Added Kintsugi network. (#2434; ab13887)
  • Fix browser random in WebWorkers. (#2405; 4ba63ac)
  • Add support for IPFS metadata imageUrl in getAvatar. (#2426; 3d6a7ec)
  • Do not swallow ENS not supported errors. (#2387; 2f57c6a)

  ---

  Embedding UMD with SRI:

  <script type="text/javascript"
          integrity="sha384-9YjKsdXMXrDGpJr2BHBh4/Ho+T0N760c/6CNf9rTk8PVPu51rpSgiQONc8II24HF"
          crossorigin="anonymous"
          src="https://cdn-cors.ethers.io/lib/ethers-5.5.3.umd.min.js">
  </script>

• 5.5.2 - 2022-01-07
  
  • Fixed test case for getAvatar; url has moved (617714d)
  • Added basic redirect support. (42784b8)
  • Added arbitrum and optimism to networks and providers. (#2335; 0844de4)
  • Added support for data URLs for avatar metadata. (b8391b0)
  • Fixed getAvatar for unconfigured ENS names. (1e1c93e)

  ---

  Embedding UMD with SRI:

  <script type="text/javascript"
          integrity="sha384-nSPKJoI2xuw1LI9bDU45beoc7mnZtae7zmXYuchecL92MMNqHsTzQAX/xSVP6YMV"
          crossorigin="anonymous"
          src="https://cdn-cors.ethers.io/lib/ethers-5.5.2.umd.min.js">
  </script>

• 5.5.1 - 2021-12-01
  
  • Fixed abstract Provider signature issue. (#2190; 1bd9161)

  ---

  Embedding UMD with SRI:

  <script type="text/javascript"
          integrity="sha384-TOrQOibRJLhwxzAdxn9pLj7Kx8mTIBrNfq6jSOiHrB519TUbe3z/d79TTvE0Pv6d"
          crossorigin="anonymous"
          src="https://cdn-cors.ethers.io/lib/ethers-5.5.1.umd.min.js">
  </script>

• 5.5.0 - 2021-10-20
  
  • Added ENS avatar support to provider. (#2185; ecce861)
  • Fixed splitSignature logic for verifying EIP-2930 and EIP-1559 v. (#2084; 3de1b81)
  • Include events on ContractFactory deployment transactions. (#1334; ab319f2)
  • admin: fixed alias script. (#1494; 8f3d71d)
  • Better errors when non-string address or ENS name is passed into Contracts or provider methods. (#1051; a5c6a46)
  • Use personal_sign instead of eth_sign for message signing with JsonRpcSigner; added _legacySignMessage for legacy support. (#1542, #1840; 8947fd4)
  • Removed extra wordlists from the dist files. (#2058, #2077; cb43a99)
  • Fix issue when Solidity method collises with JavaScript prototype. (#1432, #2054, #2120; 0a8be37)
  • Add support for Cloudflare Workers. (#1886; 6582ede)
  • Added more information to some invalid argument errors. (#1130; f3c6d81)
  • Fix compile-time error in new TypeScript version. (bee76a4)
  • Adding customData support to transactions to assist L2 chains. (#1761; 68095a4)
  • Added some explicit null results to previously implicit null results for ENS. (#1850; 0e5419e)
  • Added BigNumber _difficulty to Block results. (#2001, #2036; a48552a)
  • Removed redundant call to normalizing blockTag (1838). (d5b41ce)
  • Fixed isBytes check for invalid length or elements. (#1964; 7a404fb)
  • Fixed randomBytes not rejecting NaN as a length. (#1977; f8adf82)
  • Allow any Networkish for getDefaultProvider. (#2031; cc250b2)
  • Stop allowing commas in fixed numbers; left over from legacy comma support. (#2083; 45f3675)
  • Export FallbackProviderConfig. (#2121; 48c9e0b)

  ---

  Embedding UMD with SRI:

  <script type="text/javascript"
          integrity="sha384-B0/+vAZvVIFYnN5Jy/sN0OJZd7ai9oCi69Xw8kjMkRDDHPoQpGMYOwcN+fp8OLSw"
          crossorigin="anonymous"
          src="https://cdn-cors.ethers.io/lib/ethers-5.5.0.umd.min.js">
  </script>

• 5.4.5 - 2021-08-27
  Read more
• 5.4.4 - 2021-08-18
• 5.4.3 - 2021-07-30
• 5.4.2 - 2021-07-23
• 5.4.1 - 2021-07-03
• 5.4.0 - 2021-06-26
• 5.3.1 - 2021-06-11
• 5.3.0 - 2021-06-01
• 5.2.0 - 2021-05-20
• 5.1.2 - 2021-04-20
• 5.1.1 - 2021-04-18
• 5.1.0 - 2021-03-30
• 5.0.24 - 2021-03-08
• 5.0.23 - 2021-02-13
• 5.0.22 - 2021-02-09
• 5.0.21 - 2021-02-03
• 5.0.20 - 2021-02-01
• 5.0.19 - 2021-01-14
• 5.0.18 - 2021-01-08
• 5.0.17 - 2020-11-26
• 5.0.16 - 2020-11-24
• 5.0.15 - 2020-11-18
• 5.0.14 - 2020-10-23
• 5.0.13 - 2020-10-19
• 5.0.12 - 2020-10-08

from @ethersproject/providers GitHub release notes

Commit messages

Package name: @ethersproject/providers

• dca0d14 admin: updated dist files
• 5998fea Fix issue with CCIP Read using wrong sender (Add Durin support ethers-io/ethers.js#2478).
• dfaa8ee admin: updated dist files
• fa4a290 Tweaked test case to re-order transaction after event listeners added.
• f46aa75 Fix events getting blocked from fix for missed events (What conditions would cause getLogs requests to be "too broad" and "may get dropped"? ethers-io/ethers.js#1798, ethers.js misses events when Infura is a provider because of a race condition ethers-io/ethers.js#1814, Add Filter Support with Infura provider implementation for fetching events ethers-io/ethers.js#1830, Avoid skipping of events ethers-io/ethers.js#2274, Contract event listener not firing sometimes ethers-io/ethers.js#2652).
• d160bac Ignore errors when resolving ENS resolver properties.
• be518c3 Enable CCIP Read for ENS resolvers (Add Durin support ethers-io/ethers.js#2478).
• 26cdbab admin: Updated spell check file
• b8cda5d admin: updated dist files
• f67a9a8 Fix missing events on certain network conditions (What conditions would cause getLogs requests to be "too broad" and "may get dropped"? ethers-io/ethers.js#1798, ethers.js misses events when Infura is a provider because of a race condition ethers-io/ethers.js#1814, Add Filter Support with Infura provider implementation for fetching events ethers-io/ethers.js#1830, Avoid skipping of events ethers-io/ethers.js#2274, Contract event listener not firing sometimes ethers-io/ethers.js#2652).
• bae215e Added defaultProvider option to omit specific Providers.
• 54e6e57 Add support for pending blocks (provider.getBlock('pending') throws error 'invalid hash' ethers-io/ethers.js#2225).
• 38e825c Updated help for errors (Include URLs in errors to more details ethers-io/ethers.js#2489).
• 16007d4 Fixed typo in testcase string.
• cf47ec5 docs: fixed typo (docs: fix typo in getting-started.wrm ethers-io/ethers.js#2760).
• ae23bb7 Added CCIP support to provider.call (Add Durin support ethers-io/ethers.js#2478).
• 33a029e Adjust default maxPriorityFeePerGas to 1.5 gwei.
• c2a6a01 Fix contracts when name resolution fails without any checks (Fix UnhandledPromiseRejectionWarning in contracts with bad name resolution ethers-io/ethers.js#2737).
• 6807a76 Preserve explicit chainId in JsonRpcProvider during transaction serialization (JsonRpcProvider.hexlifyTransaction removes chainId which leads to EIP-155 error ethers-io/ethers.js#2691).
• 5f26fd5 Fixed eth_chainId response for Eip1193Bridge (fix: return eth_chainId as hexadecimal ethers-io/ethers.js#2711).
• c562150 Tweaked error URLs (Include URLs in errors to more details ethers-io/ethers.js#2489).
• 4e8f004 Remove spurious console.log from Interface (Errant console.log call ethers-io/ethers.js#2714).
• 9aac785 Allow raw WebSocket to be passed into WebSocketProvider (WebSocketProvider - full control over the socket ethers-io/ethers.js#2562, Allow Provider to acces headers ethers-io/ethers.js#2644).
• 1651389 docs: added skipFetchSetup to ConnectionInfo (cloudflare worker fails with some parameters that ethers.js harcode ethers-io/ethers.js#1886).

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs