[Snyk] Upgrade: , ganache #14
Open
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade:
- @ganache/ethereum-options from 0.8.0 to 0.9.2.
See this package in npm: https://www.npmjs.com/package/@ganache/ethereum-options
- ganache from 7.4.3 to 7.9.2.
See this package in npm: https://www.npmjs.com/package/ganache
See this project in Snyk:
https://app.snyk.io/org/okeamah/project/561831e6-bbe0-4e3b-be0e-aaece94b3935?utm_source=github&utm_medium=referral&page=upgrade-pr
|
![sourcery-ai[bot]](https://avatars.githubusercontent.com/in/48477?s=60&v=4){kind=small}
There was a problem hiding this comment.
We have skipped reviewing this pull request. Here's why:
- It seems to have been created by a bot ('[Snyk]' found in title). We assume it knows what it's doing!
- We don't review packaging changes - Let us know if you'd like us to change this.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯 The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
@ganache/ethereum-options
from 0.8.0 to 0.9.2 | 3 versions ahead of your current version | 9 months ago
on 2023-12-21
ganache
from 7.4.3 to 7.9.2 | 17 versions ahead of your current version | 9 months ago
on 2023-12-21
Release notes
Package name: @ganache/ethereum-options
-
0.9.2 - 2023-12-21
-
0.9.1 - 2023-08-22
-
0.9.0 - 2023-07-05
-
0.8.0 - 2023-04-13
from @ganache/ethereum-options GitHub release notesPackage name: ganache
v7.9.2
v7.9.1
New FeaturesFixesMiscellaneousChangelogKnown IssuesFuture PlansPresenting the latest version of Ganache! This release brings a couple of important bug fixes and one new feature: the ability to specify a file path for Ganache to write logs to – handy when using detach mode, where the logs are not (yet) available.
If you have some time, we encourage you to browse our issues to find anything you'd like implemented/fixed sooner. Give them a +1 and we'll use this community feedback to help prioritize what we work on! Or better yet, open a new issue or open a PR to fix an existing issue.
We've changed 59 files across 14 merged pull requests, tallying 2485 additions and 563 deletions, since our last release.
--logging.fileargument (#4195)feat: add hardfork to cli output (#4343)
Ganache now outputs the hardfork to the console along with the rest of the startup information:
back to new features
feat: allow logs to be written to a file by providing the
--logging.fileargument (#4195)Introducing the ability to specify a log file for Ganache to write its logs to. No more sifting through endless terminal output to find that one critical message you need. Just provide a path to your desired log file with
ganache --logging.file <path-to-log-file>, and you're all set! Now you can sit back, relax, and let Ganache do the heavy lifting while you focus on building awesome applications.back to new features
back to top
ganache instancesis executed without a subcommand (#4368)mergeForkIdTransition(#4463)fix: show a helpful message when
ganache instancesis executed without a subcommand (#4368)When
ganache instancesis executed, a subcommand must be provided.Previously an unhelpful error was thrown, with this fix we output a simple error message, followed by the the help text for
ganache instances.$ ganache instancesganache instances requires a subcommand:
ganache instances
Manage instances of Ganache running in detached mode.
(Ganache can be run in detached mode by providing the --detach flag)
Commands:
ganache instances list List instances running in detached mode
ganache instances stop <name> Stop the instance specified by <name>
Options:
-?, --help Show help [boolean]
fixes: #4360
back to fixes
fix: resolve hardfork for blocks by blocknumber and timestamp (#4455)
Starting with Shanghai, hardforks are determined by timestamp, rather than block number. When resolving the hardfork to use for a given block, we now consider the blocknumber and the timestamp.
fixes: #4450 (in that the correct hardfork is now resolved, which is not
mergeForkIdTransition)See #4463
back to fixes
fix: add support for
mergeForkIdTransition(#4463)Add internal support for
mergeForkIdTransition"hardfork", which is presently live only on Sepolia, but assumedly will eventually happen on other networks.This doesn't add any functionality, but fixes: #4450 for transactions happening on
mergeForkIdTransitionhardfork.See #4455
back to fixes
fix: ensure clique-signer for PoA networks (#4465)
Fixes #4359
back to fixes
back to top
localhostas hostname fordocs.previewdev command (#4357)docs: update contributing guide for linux (#4358)
Python 2.7 is no longer a requirement to build ganache, but
makeis.back to miscellaneous
chore: use
localhostas hostname fordocs.previewdev command (#4357)This is just to make ganache development from WSL easier.
back to miscellaneous
test: ensure tests that are skipped in development are run in CI (#4353)
Previously, tests that depend on an INFURA_KEY would be skipped if it were not provided. After this change these tests will fail in CI if no INFURA_KEY is provided.
Additionally, a test which was previously skipped is now run on Windows and Linux agents in Github Actions only. (
> server > listens on given interface only)back to miscellaneous
docs: complete macOS node-gyp troubleshooting steps in CONTRIBUTING.md (#4036)
Does what it says on the tin.
back to miscellaneous
perf: optimize account init logging (#4318)
Minor performance improvement on startup.
back to miscellaneous
docs: make light-mode links slightly darker to meet WCAG 2 Level AA contrast goals (#4383)
Changes the contrast on links on ganache.dev in light mode.
back to miscellaneous
perf: optimize options normalization (#4317)
Minor performance improvement on start up.
back to miscellaneous
docs: preloads docs assets (#4384)
Reduces page load time on ganache.dev by initiating downloads of assets that will get loaded from other CSS and JS files later.
back to miscellaneous
back to top
localhostas hostname fordocs.previewdev command (@ davidmurdoch)ganache instancesis executed without a subcommand (@ jeffsmale90)--logging.fileargument (@ jeffsmale90)mergeForkIdTransition(@ jeffsmale90)back to top
Top Priority:
debug_storageRangeAtdoesn't work (#3203)eth_createAccessListRPC method (#1056)Coming Soon™:
evm_mineandminer_startdon't respect --mode.instamine=eager (#2029)evm_setAccount*is race-conditiony (#1646)@ ganache/filecoin@alphadoesn't work withganache@alpha(#1150)evm_mine,eth_getLogsreturns same logs for all blocks (#533)back to top
Top Priority:
Coming Soon™:
back to top
Open new issues to influence what we gets implemented and prioritized.
💖 The Truffle Team
New FeaturesChangelogKnown IssuesFuture PlansIntroducing the newest addition to our lineup - Ganache v7.8.0! This release comes with support for the highly anticipated Shanghai hardfork.
If you have some time, we encourage you to browse our issues to find anything you'd like implemented/fixed sooner. Give them a +1 and we'll use this community feedback to help prioritize what we work on! Or better yet, open a new issue, or open a PR to fix an existing issue.
We've changed 84 files across 1 merged pull requests, tallying 6,243 additions and 4,642 deletions, since our last release.
feat: add support for the
shanghaihardfork (#4272)We've added a new option
allowUnlimitedInitCodeSizeto disable EIP-3860 (Limit and meter initcode) to continue to allow for uploading very large contracts. In most cases it will need to be combined with theallowUnlimitedContractSizeoption.This also fixes two bugs:
sizewas not computed correctly (persisted databases will be updated and migrated automatically)--database.dbPath). This should be insignificant for the majority of cases. The migration was benchmarked with 180,000 blocks, and completed in 6.4 seconds.accessListfees, if there are any.shanghaihardfork (@ davidmurdoch)back to top
Top Priority:
debug_storageRangeAtdoesn't work (#3203)eth_createAccessListRPC method (#1056)Coming Soon™:
evm_mineandminer_startdon't respect --mode.instamine=eager (#2029)evm_setAccount*is race-conditiony (#1646)@ ganache/filecoin@alphadoesn't work withganache@alpha(#1150)evm_mine,eth_getLogsreturns same logs for all blocks (#533)back to top
Top Priority:
Coming Soon™:
back to top
Open new issues to influence what gets implemented and prioritized.
💖 The Truffle Team
HighlightsFixesChangelogKnown IssuesFuture PlansA huge thanks to @ MicaiahReid for all of his hard work making this release possible. We've had a vision to create "Interactive Documentation" for JSON-RPC since we started the Ganache rewrite back in April of 2019. This documentation had been 80% complete for well over a year, and as most of us know, it's the last 20% that is always the hardest. Micaiah revived this stalled docs initiative and took on the challenge of finishing up that last 20%; he decreased the "time to interactive" from dozens of seconds down to under 3 seconds, fixed tons of bugs, and polished up the interface (with the help of @ OnlyOneJMJQ) for a much more usable and consistent look and feel.
We consider this a "first-pass" at interactive documentation, and we have big (top secret!) plans for this platform we hope to bring to life in the future. If you discover any issues, or have ideas on how we can improve the user experience let us know by opening a new issue.
Scroll down to the Highlights section to learn more!
If you have some time, we encourage you to browse our issues to find anything you'd like implemented/fixed sooner. Give them a +1 and we'll use this community feedback to help prioritize what we work on! Or better yet, open a new issue, or open a PR to fix an existing issue if you really want to get involved.
We've changed 29 files across 1 merged pull request, tallying 18716 additions and 4094 deletions, since our last release.
We are beyond thrilled to announce the official launch of our new interactive documentation site, ganache.dev!
ganache.dev will be the new home of Ganache's documentation. We're starting with interactive JSON-RPC documentation, but we will be building on this platform to provide 100%-in-browser tutorials, examples, and how-to guides, in addition to this reference documentation.
We designed ganache.dev to be useful for advanced users, but also (hopefully) easy for those new to the JSON-RPC layer of Ethereum. If you want to help improve this new "education" initiative there are a few ways you can help:
evm_setAccountNonce@ EIPtags to RPC methods, e.g.EIP-155And if you really want to help, get the word out! Here's a handy link that will draft a tweet for you:
Happy hacking!
back to top
fix: improve styling and performance for interactive docs (#4033)
This PR:
Known Issues:
Transaction,DATA,QUANTITY, etc aren't documentedconsoleandasserthelpers in the editors are incomplete implementations (and lack types)back to top
back to top
Top Priority:
eth_createAccessListRPC method (#1056)Coming Soon™:
evm_mineandminer_startdon't respect --mode.instamine=eager (#2029)evm_setAccount*is race-conditiony (#1646)@ ganache/filecoin@alphadoesn't work withganache@alpha(#1150)evm_mine,eth_getLogsreturns same logs for all blocks (#533)back to top
Top Priority:
Coming Soon™:
back to top