[Snyk] Upgrade web3 from 1.6.1 to 1.8.1 #58
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade web3 from 1.6.1 to 1.8.1. See this package in npm: https://www.npmjs.com/package/web3 See this project in Snyk: https://app.snyk.io/org/langfordquarshie21/project/5b497a97-2cc6-4fd0-b9d4-9f7f43eaeed6?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade web3 from 1.6.1 to 1.8.1.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version fixes:
SNYK-JS-SIMPLEGET-2361683
Why? Proof of Concept exploit, CVSS 8.8
SNYK-JS-GOT-2932019
Why? Proof of Concept exploit, CVSS 8.8
SNYK-JS-GOT-2932019
Why? Proof of Concept exploit, CVSS 8.8
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: web3
-
1.8.1 - 2022-11-10
- Fixed types for getPastEvents (#4955) (#5260)
- Fix Log type by adding missing
- Updated dependencies (#5529)
-
1.8.1-rc.0 - 2022-10-28
- Fixed types for getPastEvents (#4955) (#5260)
- Fix Log type by adding missing
- Updated dependencies (#5529)
-
1.8.0 - 2022-09-14
- Updated
- Removing legacy field in lerna.json (#5403)
- Correct
- Browser builds support polyfills (#5031) (#5053) (#4659) (#4767)
- Update node version on actions to fix breaking mosaic test (#5354)
- Start incrementing jsonrpc.id from random number (#5327)
- Improvement using provided gas options in web3-eth-accounts for eip-1559 transactions (#5012)
- Add missing function type "receive" in
- Support of
-
1.8.0-rc.0 - 2022-09-08
- Updated
- Removing legacy field in lerna.json (#5403)
- Correct
- Browser builds support polyfills (#5031) (#5053) (#4659) (#4767)
- Update node version on actions to fix breaking mosaic test (#5354)
- Start incrementing jsonrpc.id from random number (#5327)
- Improvement using provided gas options in web3-eth-accounts for eip-1559 transactions (#5012)
- Add missing function type "receive" in
- Support of
-
1.7.5 - 2022-08-01
- Replace xhr2-cookies deps to cross-fetch for web3-providers-http (#5085)
- Documentation details about
- Added
- Improving
- Fix typos in web3-eth-accounts.rst & TESTING.md (#5047)
- Fix remove wallet using an index when an account address and address lowercase are equal (#5049)
- Improve README.md & Fix typos (#4848)
- Add optional hex formatting parameter for getTransactionrReceipt (#5153)
- Fix transactionRoot -> transactionsRoot in BlockHeader (#5083)
- Fix Promise in Accounts.signTransaction() throwing errors that cannot be caught (#4724)
- Fixed unit tests & removed dead code for web3-providers-http (#5228)
- Updated
-
1.7.5-rc.1 - 2022-07-19
- Fixed unit tests & removed dead code for web3-providers-http (#5228) It fixed (#5235) and (#5236) Issues.
-
1.7.5-rc.0 - 2022-07-15
-
1.7.4 - 2022-06-21
-
1.7.4-rc.2 - 2022-06-16
-
1.7.4-rc.1 - 2022-06-08
-
1.7.4-rc.0 - 2022-05-17
-
1.7.3 - 2022-04-08
-
1.7.3-rc.0 - 2022-04-07
-
1.7.2 - 2022-04-07
-
1.7.2-rc.0 - 2022-03-24
-
1.7.1 - 2022-03-03
-
1.7.1-rc.0 - 2022-02-10
-
1.7.0 - 2022-01-17
-
1.7.0-rc.0 - 2021-12-09
-
1.6.1 - 2021-11-15
from web3 GitHub release notesFixed
removedproperty (#4877)Changed
Fixed
removedproperty (#4877)Changed
Changed
sha3andsha3Rawtype definition to acceptBuffer(#5357)eth_sendSignedTransactioncode example (#5402)Fixed
web3-eth-contract'scallandsendmethods no longer mutateoptionsargument (#5394)Added
AbiType(#5165)safeandfinalizedblock tags added (#5410)Changed
sha3andsha3Rawtype definition to acceptBuffer(#5357)eth_sendSignedTransactioncode example (#5402)Fixed
web3-eth-contract'scallandsendmethods no longer mutateoptionsargument (#5394)Added
AbiType(#5165)safeandfinalizedblock tags added (#5410)1.7.5
Changed
Added
maxFeePerGasandmaxPriorityFeePerGas(#5121)createAccessListtypes in web3.eth (#5146)Fixed
AbstractProviderinterface (#5150)Security
gotlib version and fixed other libs using npm audit fix (#5178) (#5254)Fixed
Commit messages
Package name: web3
Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs