[Snyk] Upgrade web3 from 1.2.4 to 1.7.5 #35
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade web3 from 1.2.4 to 1.7.5. See this package in npm: https://www.npmjs.com/package/web3 See this project in Snyk: https://app.snyk.io/org/smart-contracts/project/f9303c98-50e2-429b-888e-7aa1d6faf2b7?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade web3 from 1.2.4 to 1.7.5.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version fixes:
SNYK-JS-SIMPLEGET-2361683
Why? Proof of Concept exploit, CVSS 8.8
SNYK-JS-NORMALIZEURL-1296539
Why? Proof of Concept exploit, CVSS 8.8
SNYK-JS-JSONSCHEMA-1920922
Why? Proof of Concept exploit, CVSS 8.8
SNYK-JS-FILETYPE-2958042
Why? Proof of Concept exploit, CVSS 8.8
SNYK-JS-FILETYPE-2958042
Why? Proof of Concept exploit, CVSS 8.8
SNYK-JS-FILETYPE-2958042
Why? Proof of Concept exploit, CVSS 8.8
SNYK-JS-BL-608877
Why? Proof of Concept exploit, CVSS 8.8
SNYK-JS-AJV-584908
Why? Proof of Concept exploit, CVSS 8.8
SNYK-JS-UNDERSCORE-1080984
Why? Proof of Concept exploit, CVSS 8.8
SNYK-JS-DECOMPRESSTAR-559095
Why? Proof of Concept exploit, CVSS 8.8
SNYK-JS-DECOMPRESS-557358
Why? Proof of Concept exploit, CVSS 8.8
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: web3
-
1.7.5 - 2022-08-01
- Replace xhr2-cookies deps to cross-fetch for web3-providers-http (#5085)
- Documentation details about
- Added
- Improving
- Fix typos in web3-eth-accounts.rst & TESTING.md (#5047)
- Fix remove wallet using an index when an account address and address lowercase are equal (#5049)
- Improve README.md & Fix typos (#4848)
- Add optional hex formatting parameter for getTransactionrReceipt (#5153)
- Fix transactionRoot -> transactionsRoot in BlockHeader (#5083)
- Fix Promise in Accounts.signTransaction() throwing errors that cannot be caught (#4724)
- Fixed unit tests & removed dead code for web3-providers-http (#5228)
- Updated
-
1.7.5-rc.1 - 2022-07-19
- Fixed unit tests & removed dead code for web3-providers-http (#5228) It fixed (#5235) and (#5236) Issues.
-
1.7.5-rc.0 - 2022-07-15
- Replace xhr2-cookies deps to cross-fetch for web3-providers-http (#5085)
- Documentation details about
- Added
- Improving
- Fix typos in web3-eth-accounts.rst & TESTING.md (#5047)
- Fix remove wallet using an index when an account address and address lowercase are equal (#5049)
- Improve README.md & Fix typos (#4848)
- Add optional hex formatting parameter for getTransactionrReceipt (#5153)
- Fix transactionRoot -> transactionsRoot in BlockHeader (#5083)
- Fix Promise in Accounts.signTransaction() throwing errors that cannot be caught (#4724)
- Updated
- @ cyborgRen made their first contribution in #5145
- @ sangwon0001 made their first contribution in #5142
- @ superMDguy made their first contribution in #5116
- @ Neurone made their first contribution in #5121
- @ MujeebullahKalwar made their first contribution in #5115
-
1.7.4 - 2022-06-21
- Fix dead link in web3-eth.rst (#4916)
- Fix web3-core-method throws on
- Fix static tuple encoding (#4673) (#4884)
- Fix bug in handleRevert logic for eth_sendRawTransaction (#4902)
- Fix resolve type of getBlock function (#4911)
- Web3-utils BN fix (#5132)
- Replace deprecated String.prototype.substr() (#4855)
- Exporting AbiCoder as coder (#4937)
- Github build workflow updated min build for node.js 12 and tests for 12, 14 and 16 (#5014)
- Updated libraries using BN and the BN library (#5072)
- Exposing
- Improve npm script commands for development purposes (#4848)
-
1.7.4-rc.2 - 2022-06-16
- Web3-utils BN fix (#5132)
-
1.7.4-rc.1 - 2022-06-08
- Updated libraries using BN and the BN library (#5072)
-
1.7.4-rc.0 - 2022-05-17
-
1.7.3 - 2022-04-08
- Fixing build issue of 1.7.2
-
1.7.3-rc.0 - 2022-04-07
- Fixing build issue of 1.7.2
-
1.7.2 - 2022-04-07
-
1.7.2-rc.0 - 2022-03-24
-
1.7.1 - 2022-03-03
-
1.7.1-rc.0 - 2022-02-10
-
1.7.0 - 2022-01-17
-
1.7.0-rc.0 - 2021-12-09
-
1.6.1 - 2021-11-15
-
1.6.1-rc.3 - 2021-11-10
-
1.6.1-rc.2 - 2021-10-27
-
1.6.1-rc.0 - 2021-10-09
-
1.6.0 - 2021-09-30
-
1.6.0-rc.0 - 2021-09-26
-
1.5.3 - 2021-09-22
-
1.5.3-rc.0 - 2021-09-10
-
1.5.2 - 2021-08-15
-
1.5.2-rc.0 - 2021-08-15
-
1.5.1 - 2021-08-05
-
1.5.1-rc.1 - 2021-08-05
-
1.5.1-rc.0 - 2021-07-31
-
1.5.0 - 2021-07-28
-
1.5.0-rc.1 - 2021-07-24
-
1.5.0-rc.0 - 2021-07-21
-
1.4.0 - 2021-06-30
-
1.4.0-rc.0 - 2021-06-25
-
1.3.6 - 2021-05-14
-
1.3.6-rc.2 - 2021-05-13
-
1.3.6-rc.1 - 2021-05-09
-
1.3.5 - 2021-04-05
-
1.3.5-rc.0 - 2021-03-24
-
1.3.4 - 2021-02-03
-
1.3.4-rc.2 - 2021-01-28
-
1.3.4-rc.1 - 2021-01-26
-
1.3.3 - 2021-01-22
-
1.3.2 - 2021-01-21
-
1.3.2-rc.2 - 2021-01-21
-
1.3.1 - 2020-12-17
-
1.3.0 - 2020-09-15
-
1.3.0-rc.0 - 2020-09-02
-
1.2.11 - 2020-07-18
-
1.2.10 - 2020-07-17
-
1.2.10-rc.0 - 2020-07-09
-
1.2.9 - 2020-06-09
-
1.2.9-rc.0 - 2020-06-02
-
1.2.8 - 2020-05-20
-
1.2.8-rc.1 - 2020-05-18
-
1.2.8-rc.0 - 2020-05-08
-
1.2.7 - 2020-04-24
-
1.2.7-rc.0 - 2020-04-15
-
1.2.6 - 2020-02-02
-
1.2.5 - 2020-01-27
-
1.2.5-rc.0 - 2020-01-16
-
1.2.4 - 2019-11-15
from web3 GitHub release notes1.7.5
Changed
Added
maxFeePerGasandmaxPriorityFeePerGas(#5121)createAccessListtypes in web3.eth (#5146)Fixed
AbstractProviderinterface (#5150)Security
gotlib version and fixed other libs using npm audit fix (#5178) (#5254)Fixed
1.7.5-rc.0
Changed
Added
maxFeePerGasandmaxPriorityFeePerGas(#5121)createAccessListtypes in web3.eth (#5146)Fixed
AbstractProviderinterface (#5150)Security
gotlib version and fixed other libs using npm audit fix (#5178) (#5254)New Contributors
Fixed
f.call = this.callwhen intrinsic is frozen (#4918) (#4938)Changed
Added
web3.eth.Contract.setProvider()as per public documentation (#4822) (#5001)Security
npm audit fixto address vulnerabilities and update libraries (#5014)Changed
Read more
Fixed
Fixed
Read more
Commit messages
Package name: web3
Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs