Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(master): Release 0.26.1 #4964

Merged
merged 1 commit into from
Mar 6, 2024
Merged

Conversation

AztecBot
Copy link
Collaborator

@AztecBot AztecBot commented Mar 5, 2024

🤖 I have created a release beep boop

aztec-package: 0.26.1

0.26.1 (2024-03-06)

Miscellaneous

  • aztec-package: Synchronize aztec-packages versions
barretenberg.js: 0.26.1

0.26.1 (2024-03-06)

Miscellaneous

  • barretenberg.js: Synchronize aztec-packages versions
aztec-cli: 0.26.1

0.26.1 (2024-03-06)

Miscellaneous

  • aztec-cli: Synchronize aztec-packages versions
aztec-packages: 0.26.1

0.26.1 (2024-03-06)

Features

  • Adding fr compatibility to smt variables api (#4884) (c085cbb)
  • avm-simulator: Implement EMITUNENCRYPTEDLOG (#4926) (5f3304e)
  • Choose constructor method in Contract.deploy (#4939) (e899e56)
  • Indirect mem flag deserialisation (#4877) (4c6820f)

Miscellaneous

barretenberg: 0.26.1

0.26.1 (2024-03-06)

Features

Miscellaneous

  • Remove commitment key copy out of instance (#4893) (6eb6778)

This PR was generated with Release Please. See documentation.

@AztecBot
Copy link
Collaborator Author

AztecBot commented Mar 5, 2024

Benchmark results

Metrics with a significant change:

  • note_trial_decrypting_time_in_ms (8): 12.8 (-88%)
Detailed results

All benchmarks are run on txs on the Benchmarking contract on the repository. Each tx consists of a batch call to create_note and increment_balance, which guarantees that each tx has a private call, a nested private call, a public call, and a nested public call, as well as an emitted private note, an unencrypted log, and public storage read and write.

This benchmark source data is available in JSON format on S3 here.

Values are compared against data from master at commit 6eb6778c and shown if the difference exceeds 1%.

L2 block published to L1

Each column represents the number of txs on an L2 block published to L1.

Metric 8 txs 32 txs 64 txs
l1_rollup_calldata_size_in_bytes 5,700 18,884 36,452
l1_rollup_calldata_gas 66,096 238,964 469,940
l1_rollup_execution_gas 194,044 500,270 909,198
l2_block_processing_time_in_ms 1,184 4,491 8,952 (+1%)
note_successful_decrypting_time_in_ms 201 (+2%) 547 (+1%) 1,027 (+4%)
note_trial_decrypting_time_in_ms ⚠️ 12.8 (-88%) 63.8 (-4%) 57.2 (-55%)
l2_block_building_time_in_ms 16,446 (+1%) 65,754 (+2%) 131,357 (+1%)
l2_block_rollup_simulation_time_in_ms 12,501 (+1%) 49,753 (+1%) 99,961 (+1%)
l2_block_public_tx_process_time_in_ms 3,915 (+1%) 15,930 (+3%) 31,226 (+2%)

L2 chain processing

Each column represents the number of blocks on the L2 chain where each block has 16 txs.

Metric 5 blocks 10 blocks
node_history_sync_time_in_ms 14,125 (-2%) 27,547
note_history_successful_decrypting_time_in_ms 1,245 2,424
note_history_trial_decrypting_time_in_ms 103 (+7%) 147 (+4%)
node_database_size_in_bytes 18,759,760 35,471,440
pxe_database_size_in_bytes 29,923 59,478

Circuits stats

Stats on running time and I/O sizes collected for every circuit run across all benchmarks.

Circuit circuit_simulation_time_in_ms circuit_input_size_in_bytes circuit_output_size_in_bytes
private-kernel-init 251 44,736 28,001
private-kernel-ordering 193 (+1%) 52,625 14,627
base-rollup 1,320 177,932 933
root-rollup 70.0 (-1%) 4,192 825
private-kernel-inner 321 (+1%) 73,715 28,001
public-kernel-app-logic 197 (+1%) 32,254 25,379
merge-rollup 5.75 (+1%) 2,712 933

Tree insertion stats

The duration to insert a fixed batch of leaves into each tree type.

Metric 1 leaves 2 leaves 8 leaves 16 leaves 32 leaves 64 leaves 128 leaves 512 leaves 1024 leaves 2048 leaves 4096 leaves
batch_insert_into_append_only_tree_16_depth_ms 9.86 10.2 14.1 (-6%) 16.5 (+3%) 21.9 (-2%) 35.5 (+1%) N/A N/A N/A N/A N/A
batch_insert_into_append_only_tree_16_depth_hash_count 16.9 17.5 23.0 31.6 47.0 79.0 N/A N/A N/A N/A N/A
batch_insert_into_append_only_tree_16_depth_hash_ms 0.571 0.567 0.597 (-7%) 0.512 (+3%) 0.460 (-1%) 0.441 N/A N/A N/A N/A N/A
batch_insert_into_append_only_tree_32_depth_ms N/A N/A N/A N/A N/A 45.9 72.1 230 446 866 1,727
batch_insert_into_append_only_tree_32_depth_hash_count N/A N/A N/A N/A N/A 96.0 159 543 1,055 2,079 4,127
batch_insert_into_append_only_tree_32_depth_hash_ms N/A N/A N/A N/A N/A 0.470 0.444 0.420 0.418 (+1%) 0.413 0.413
batch_insert_into_indexed_tree_20_depth_ms N/A N/A N/A N/A N/A 53.9 107 (-1%) 338 660 1,307 2,620
batch_insert_into_indexed_tree_20_depth_hash_count N/A N/A N/A N/A N/A 104 207 691 1,363 2,707 5,395
batch_insert_into_indexed_tree_20_depth_hash_ms N/A N/A N/A N/A N/A 0.479 0.482 (-1%) 0.456 0.454 0.454 0.454
batch_insert_into_indexed_tree_40_depth_ms N/A N/A N/A N/A 61.2 N/A N/A N/A N/A N/A N/A
batch_insert_into_indexed_tree_40_depth_hash_count N/A N/A N/A N/A 109 N/A N/A N/A N/A N/A N/A
batch_insert_into_indexed_tree_40_depth_hash_ms N/A N/A N/A N/A 0.534 N/A N/A N/A N/A N/A N/A

Miscellaneous

Transaction sizes based on how many contracts are deployed in the tx.

Metric 0 deployed contracts
tx_size_in_bytes 19,179

Transaction processing duration by data writes.

Metric 0 new note hashes 1 new note hashes
tx_pxe_processing_time_ms 2,602 (-1%) 1,378
Metric 0 public data writes 1 public data writes
tx_sequencer_processing_time_ms 0.0314 (+5%) 481 (+1%)

@AztecBot AztecBot force-pushed the release-please--branches--master branch 3 times, most recently from ea030e2 to f9b89d0 Compare March 5, 2024 20:44
Copy link

socket-security bot commented Mar 5, 2024

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@tsconfig/docusaurus@1.0.7 None 0 2.82 kB typescript-deploys
npm/@types/express-serve-static-core@4.17.41 None +5 4.05 MB types
npm/@types/react-router-config@5.0.11 None +6 1.66 MB types
npm/@types/react-router@5.1.20 None +5 1.66 MB types
npm/@types/unist@2.0.10 None 0 8.56 kB types
npm/address@1.2.2 environment, filesystem, shell 0 13 kB fengmk2
npm/algoliasearch@4.22.1 Transitive: network +14 516 kB shortcuts
npm/ansi-align@3.0.1 None +3 66.1 kB nexdrew
npm/autoprefixer@10.4.17 environment Transitive: filesystem +10 2.88 MB ai
npm/axios@1.6.5 network Transitive: environment, filesystem +8 2.18 MB jasonsaayman
npm/browserslist@4.22.2 environment, filesystem +3 2.33 MB ai
npm/call-bind@1.0.5 Transitive: eval +5 131 kB ljharb
npm/caniuse-lite@1.0.30001579 None 0 1.96 MB caniuse-lite
npm/chokidar@3.5.3 environment, filesystem +12 499 kB paulmillr
npm/clsx@1.2.1 None 0 5.67 kB lukeed
npm/concurrently@8.2.2 environment, filesystem +11 8.6 MB gustavohenke
npm/core-js-compat@3.35.0 Transitive: environment, filesystem +4 3.03 MB zloirock
npm/css-tree@1.1.3 None +1 1.55 MB lahmatiy
npm/cssnano@5.1.15 Transitive: environment, filesystem +46 3.68 MB ludovicofischer
npm/d3-array@3.2.4 None +1 174 kB mbostock
npm/d3-color@3.1.0 None 0 61.2 kB mbostock
npm/d3-dispatch@3.0.1 None 0 15.6 kB mbostock
npm/d3-drag@3.0.0 None +2 193 kB mbostock
npm/d3-dsv@3.0.1 Transitive: filesystem, shell +2 544 kB mbostock
npm/d3-ease@3.0.1 None 0 34.6 kB mbostock
npm/d3-format@3.1.0 None 0 57.8 kB mbostock
npm/d3-interpolate@3.0.1 None +1 131 kB mbostock
npm/d3-path@3.1.0 None 0 20.9 kB mbostock
npm/d3-quadtree@3.0.1 None 0 43.4 kB mbostock
npm/d3-selection@3.0.0 None 0 135 kB mbostock
npm/d3-time-format@4.1.0 None +3 324 kB mbostock
npm/d3-time@3.1.0 None +2 239 kB mbostock
npm/d3-timer@3.0.1 None 0 18.4 kB mbostock
npm/d3-transition@3.0.1 None +6 445 kB mbostock
npm/d3@7.8.5 Transitive: filesystem, network, shell +34 3.89 MB mbostock
npm/define-data-property@1.1.1 Transitive: eval +7 157 kB ljharb
npm/detect-libc@2.0.2 filesystem, shell 0 23.7 kB lovell
npm/docusaurus-plugin-typedoc@0.20.2 filesystem 0 30.8 kB tgreyuk
npm/domhandler@5.0.3 None +1 86.7 kB feedic
npm/domutils@3.1.0 network +4 690 kB feedic
npm/dotenv@16.3.1 environment, filesystem 0 71.6 kB motdotla
npm/end-of-stream@1.4.4 None +1 10.3 kB mafintosh
npm/entities@4.5.0 None 0 413 kB feedic
npm/fbjs@3.0.5 Transitive: environment, eval, network +8 834 kB bigfootjon
npm/get-intrinsic@1.2.2 eval +4 110 kB ljharb
npm/has-property-descriptors@1.0.1 Transitive: eval +5 121 kB ljharb
npm/hast-util-is-element@1.1.0 None 0 12.1 kB wooorm
npm/icss-utils@5.1.0 Transitive: environment, filesystem +3 237 kB evilebottnawi
npm/ignore@5.3.0 None 0 51.2 kB kael
npm/ini@1.3.8 None 0 9.3 kB isaacs
npm/is-alphabetical@1.0.4 None 0 5.01 kB wooorm
npm/lodash.uniq@4.5.0 None 0 25 kB jdalton
npm/loose-envify@1.4.0 environment +1 20.9 kB zertosh
npm/lowercase-keys@1.0.1 None 0 2.46 kB sindresorhus
npm/make-dir@3.1.0 filesystem 0 10 kB sindresorhus
npm/minimist@1.2.8 None 0 54.5 kB ljharb
npm/mkdirp-classic@0.5.3 filesystem 0 4.5 kB mafintosh
npm/nodemon@3.0.3 environment, filesystem, shell +21 839 kB remy
npm/object-assign@4.1.1 None 0 5.49 kB sindresorhus
npm/postcss-selector-parser@6.0.15 None +1 203 kB evilebottnawi
npm/postcss-value-parser@4.2.0 None 0 27.2 kB evilebottnawi
npm/postcss@8.4.33 environment, filesystem +2 227 kB ai
npm/prism-react-renderer@1.3.5 Transitive: environment +4 688 kB gksander
npm/prop-types@15.8.1 environment +4 145 kB ljharb
npm/property-information@5.6.0 None 0 96.3 kB wooorm
npm/rc@1.2.8 environment, filesystem +4 95.3 kB dominictarr
npm/react-dom@17.0.2 environment +4 3.31 MB gaearon
npm/react-fast-compare@3.2.2 None 0 16.2 kB formidablelabs
npm/react-helmet-async@1.3.0 Transitive: environment +11 4.05 MB wonderboymusic
npm/react-is@16.13.1 environment 0 24 kB acdlite
npm/react-player@2.14.1 Transitive: environment +10 1.95 MB cookpete
npm/react-router@5.3.4 environment +12 1.62 MB mjackson
npm/react@17.0.2 environment +3 318 kB gaearon
npm/rehype-katex@5.0.0 None +13 4.18 MB wooorm
npm/remark-math@3.0.1 None 0 19.1 kB wooorm

🚮 Removed packages: npm/@aashutoshrathi/word-wrap@1.2.6, npm/@ampproject/remapping@2.3.0, npm/@babel/core@7.24.0, npm/@babel/helper-plugin-utils@7.24.0, npm/@babel/helpers@7.24.0, npm/@babel/parser@7.24.0, npm/@babel/plugin-syntax-bigint@7.8.3, npm/@babel/template@7.24.0, npm/@babel/traverse@7.24.0, npm/@babel/types@7.24.0, npm/@bcoe/v8-coverage@0.2.3, npm/@cspotcode/source-map-support@0.8.1, npm/@eslint-community/eslint-utils@4.4.0, npm/@eslint-community/regexpp@4.10.0, npm/@eslint/eslintrc@2.1.4, npm/@eslint/js@8.57.0, npm/@humanwhocodes/config-array@0.11.14, npm/@humanwhocodes/module-importer@1.0.1, npm/@humanwhocodes/object-schema@2.0.2, npm/@isaacs/cliui@8.0.2, npm/@istanbuljs/load-nyc-config@1.1.0, npm/@istanbuljs/schema@0.1.3, npm/@jest/console@29.7.0, npm/@jest/core@29.7.0, npm/@jest/environment@29.7.0, npm/@jest/expect-utils@29.7.0, npm/@jest/expect@29.7.0, npm/@jest/fake-timers@29.7.0, npm/@jest/globals@29.7.0, npm/@jest/reporters@29.7.0, npm/@jest/source-map@29.6.3, npm/@jest/test-result@29.7.0, npm/@jest/test-sequencer@29.7.0, npm/@jest/transform@29.7.0, npm/@jridgewell/gen-mapping@0.3.5, npm/@jridgewell/resolve-uri@3.1.2, npm/@jridgewell/set-array@1.2.1, npm/@jridgewell/trace-mapping@0.3.25, npm/@npmcli/agent@2.2.0, npm/@npmcli/fs@3.1.0, npm/@pkgjs/parseargs@0.11.0, npm/@sinonjs/commons@3.0.1, npm/@sinonjs/fake-timers@10.3.0, npm/@tsconfig/node10@1.0.9, npm/@tsconfig/node12@1.0.11, npm/@tsconfig/node14@1.0.3, npm/@tsconfig/node16@1.0.4, npm/@types/babel__core@7.20.5, npm/@types/babel__generator@7.6.8, npm/@types/babel__template@7.4.4, npm/@types/babel__traverse@7.20.5, npm/@types/debug@4.1.12, npm/@types/detect-node@2.0.2, npm/@types/eslint@8.56.5, npm/@types/express-serve-static-core@4.17.43, npm/@types/graceful-fs@4.1.9, npm/@types/jest@29.5.12, npm/@types/ms@0.7.34, npm/@types/node@18.19.21, npm/@types/qs@6.9.12, npm/@types/semver@7.5.8, npm/@types/source-map-support@0.5.10, npm/@types/stack-utils@2.0.3, npm/@typescript-eslint/eslint-plugin@5.62.0, npm/@typescript-eslint/parser@5.62.0, npm/@typescript-eslint/scope-manager@5.62.0, npm/@typescript-eslint/type-utils@5.62.0, npm/@typescript-eslint/types@5.62.0, npm/@typescript-eslint/typescript-estree@5.62.0, npm/@typescript-eslint/utils@5.62.0, npm/@typescript-eslint/visitor-keys@5.62.0, npm/@ungap/structured-clone@1.2.0, npm/@webpack-cli/configtest@2.1.1, npm/@webpack-cli/info@2.0.2, npm/@webpack-cli/serve@2.0.5, npm/abbrev@2.0.0, npm/acorn-jsx@5.3.2, npm/agent-base@7.1.0, npm/ansi-escapes@4.3.2, npm/ansi-regex@5.0.1, npm/arg@4.1.3, npm/babel-jest@29.7.0, npm/babel-plugin-istanbul@6.1.1, npm/babel-plugin-jest-hoist@29.6.3, npm/babel-preset-current-node-syntax@1.0.1, npm/babel-preset-jest@29.6.3, npm/body-parser@1.20.2, npm/browserslist@4.23.0, npm/bs-logger@0.2.6, npm/bser@2.1.1, npm/buffer@6.0.3, npm/cacache@18.0.1, npm/call-bind@1.0.7, npm/camelcase@5.3.1, npm/caniuse-lite@1.0.30001594, npm/char-regex@1.0.2, npm/chokidar@3.6.0, npm/chownr@2.0.0, npm/cjs-module-lexer@1.2.3, npm/co@4.6.0, npm/collect-v8-coverage@1.0.2, npm/comlink@4.4.1, npm/commander@10.0.1, npm/create-jest@29.7.0, npm/create-require@1.1.1, npm/css-select@4.3.0, npm/dedent@1.5.1, npm/deep-is@0.1.4, npm/define-data-property@1.1.4, npm/detect-newline@3.1.0, npm/diff-sequences@29.6.3, npm/diff@4.0.2, npm/dns-equal@1.0.0, npm/doctrine@3.0.0, npm/dom-serializer@1.4.1, npm/domhandler@4.3.1, npm/domutils@2.8.0, npm/electron-to-chromium@1.4.692, npm/emittery@0.13.1, npm/encoding@0.1.13, npm/enhanced-resolve@5.15.1, npm/entities@2.2.0, npm/env-paths@2.2.1, npm/envinfo@7.11.1, npm/err-code@2.0.3, npm/escalade@3.1.2, npm/eslint-config-prettier@8.10.0, npm/eslint-visitor-keys@3.4.3, npm/eslint@8.57.0, npm/espree@9.6.1, npm/esquery@1.5.0, npm/exit@0.1.2, npm/expect@29.7.0, npm/exponential-backoff@3.1.1, npm/express@4.18.3, npm/fast-levenshtein@2.0.6, npm/fastest-levenshtein@1.0.16, npm/fastq@1.17.1, npm/fb-watchman@2.0.2, npm/file-entry-cache@6.0.1, npm/flat-cache@3.2.0, npm/flatted@3.3.1, npm/foreground-child@3.1.1, npm/fs-minipass@3.0.3, npm/get-intrinsic@1.2.4, npm/get-package-type@0.1.0, npm/globals@13.24.0, npm/graphemer@1.4.0, npm/has-flag@3.0.0, npm/has-property-descriptors@1.0.2, npm/has-proto@1.0.3, npm/hasown@2.0.1, npm/html-entities@2.5.2, npm/htmlparser2@6.1.0, npm/http-proxy-agent@7.0.2, npm/https-proxy-agent@7.0.4, npm/idb-keyval@6.2.1, npm/ignore@5.3.1, npm/import-local@3.1.0, npm/interpret@3.1.1, npm/ip@2.0.0, npm/is-generator-fn@2.1.0, npm/is-lambda@1.0.1, npm/istanbul-lib-coverage@3.2.2, npm/istanbul-lib-instrument@6.0.2, npm/istanbul-lib-report@3.0.1, npm/istanbul-lib-source-maps@4.0.1, npm/istanbul-reports@3.1.7, npm/jackspeak@2.3.6, npm/jest-changed-files@29.7.0, npm/jest-circus@29.7.0, npm/jest-cli@29.7.0, npm/jest-config@29.7.0, npm/jest-diff@29.7.0, npm/jest-docblock@29.7.0, npm/jest-each@29.7.0, npm/jest-environment-node@29.7.0, npm/jest-get-type@29.6.3, npm/jest-haste-map@29.7.0, npm/jest-leak-detector@29.7.0, npm/jest-matcher-utils@29.7.0, npm/jest-message-util@29.7.0, npm/jest-mock@29.7.0, npm/jest-pnp-resolver@1.2.3, npm/jest-regex-util@29.6.3, npm/jest-resolve-dependencies@29.7.0, npm/jest-resolve@29.7.0, npm/jest-runner@29.7.0, npm/jest-runtime@29.7.0, npm/jest-snapshot@29.7.0, npm/jest-validate@29.7.0, npm/jest-watcher@29.7.0, npm/jest@29.7.0, npm/json-buffer@3.0.1, npm/json-stable-stringify-without-jsonify@1.0.1, npm/keyv@4.5.4, npm/levn@0.4.1, npm/lodash.merge@4.6.2, npm/make-dir@4.0.0, npm/make-error@1.3.6, npm/make-fetch-happen@13.0.0, npm/makeerror@1.0.12, npm/minipass-collect@2.0.1, npm/minipass-fetch@3.0.4, npm/minipass-flush@1.0.5, npm/minipass-pipeline@1.2.4, npm/minipass-sized@1.0.3, npm/minipass@7.0.4, npm/minizlib@2.1.2, npm/mkdirp@1.0.4, npm/natural-compare-lite@1.4.0, npm/natural-compare@1.4.0, npm/node-gyp@10.0.1, npm/node-int64@0.4.0, npm/nopt@7.2.0, npm/optionator@0.9.3, npm/path-scurry@1.10.1, npm/pirates@4.0.6, npm/prelude-ls@1.2.1, npm/prettier@2.8.8, npm/pretty-format@29.7.0, npm/proc-log@3.0.0, npm/promise-retry@2.0.1, npm/punycode@2.3.1, npm/pure-rand@6.0.4, npm/raw-body@2.5.2, npm/rechoir@0.8.0, npm/require-directory@2.1.1, npm/require-from-string@2.0.2, npm/requires-port@1.0.0, npm/resolve-cwd@3.0.0, npm/resolve-from@4.0.0, npm/resolve-typescript-plugin@2.0.1, npm/resolve.exports@2.0.2, npm/resolve@1.22.8, npm/retry@0.13.1, npm/reusify@1.0.4, npm/rimraf@3.0.2, npm/run-parallel@1.2.0, npm/safe-buffer@5.2.1, npm/safer-buffer@2.1.2, npm/select-hose@2.0.0, npm/selfsigned@2.4.1, npm/semver@7.6.0, npm/send@0.18.0, npm/serialize-javascript@6.0.2, npm/serve-index@1.9.1, npm/serve-static@1.15.0, npm/set-function-length@1.2.1, npm/setprototypeof@1.2.0, npm/shallow-clone@3.0.1, npm/shebang-command@2.0.0, npm/shebang-regex@3.0.0, npm/shell-quote@1.8.1, npm/side-channel@1.0.6, npm/signal-exit@3.0.7, npm/sisteransi@1.0.5, npm/slash@4.0.0, npm/smart-buffer@4.2.0, npm/sockjs@0.3.24, npm/socks-proxy-agent@8.0.2, npm/socks@2.8.1, npm/source-map-support@0.5.13, npm/spdy-transport@3.0.0, npm/spdy@4.0.2, npm/sprintf-js@1.0.3, npm/ssri@10.0.5, npm/stack-utils@2.0.6, npm/statuses@2.0.1, npm/string-length@4.0.2, npm/strip-ansi@6.0.1, npm/strip-bom@4.0.0, npm/strip-final-newline@2.0.0, npm/strip-json-comments@3.1.1, npm/supports-preserve-symlinks-flag@1.0.0, npm/tapable@2.2.1, npm/tar@6.2.0, npm/terser-webpack-plugin@5.3.10, npm/terser@5.28.1, npm/test-exclude@6.0.0, npm/text-table@0.2.0, npm/thunky@1.1.0, npm/tmpl@1.0.5, npm/to-fast-properties@2.0.0, npm/to-regex-range@5.0.1, npm/toidentifier@1.0.1, npm/ts-jest@29.1.2, npm/ts-loader@9.5.1, npm/ts-node@10.9.2, npm/tslib@2.6.2, npm/tsutils@3.21.0, npm/type-check@0.4.0, npm/type-detect@4.0.8, npm/type-fest@0.20.2, npm/type-is@1.6.18, npm/typescript@5.3.3, npm/undici-types@5.26.5, npm/unique-filename@3.0.0, npm/unique-slug@4.0.0, npm/unpipe@1.0.0, npm/update-browserslist-db@1.0.13, npm/uri-js@4.4.1, npm/util-deprecate@1.0.2, npm/utila@0.4.0, npm/utils-merge@1.0.1, npm/uuid@8.3.2, npm/v8-compile-cache-lib@3.0.1, npm/v8-to-istanbul@9.2.0, npm/vary@1.1.2, npm/walker@1.0.8, npm/watchpack@2.4.0, npm/wbuf@1.7.3, npm/webpack-cli@5.1.4, npm/webpack-dev-middleware@5.3.3, npm/webpack-dev-server@4.15.1, npm/webpack-merge@5.10.0, npm/webpack-sources@3.2.3, npm/webpack@5.90.3, npm/websocket-driver@0.7.4, npm/websocket-extensions@0.1.4, npm/which@2.0.2, npm/wildcard@2.0.1, npm/worker-loader@3.0.8, npm/wrappy@1.0.2, npm/write-file-atomic@4.0.2, npm/ws@8.16.0, npm/y18n@5.0.8, npm/yallist@3.1.1, npm/yargs-parser@21.1.1, npm/yargs@17.7.2, npm/yn@3.1.1

View full report↗︎

@AztecBot AztecBot force-pushed the release-please--branches--master branch from f9b89d0 to 1b91798 Compare March 5, 2024 21:01
Copy link

socket-security bot commented Mar 5, 2024

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package NoteSource
Install scripts npm/core-js@3.35.0
  • Install script: postinstall
  • Source: node -e "try{require('./postinstall')}catch(e){}"
Install scripts npm/core-js-pure@3.35.0
  • Install script: postinstall
  • Source: node -e "try{require('./postinstall')}catch(e){}"

View full report↗︎

Next steps

What is an install script?

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/foo@1.0.0 or ignore all packages with @SocketSecurity ignore-all

  • @SocketSecurity ignore npm/core-js@3.35.0
  • @SocketSecurity ignore npm/core-js-pure@3.35.0

@AztecBot AztecBot force-pushed the release-please--branches--master branch 5 times, most recently from f5fb9df to 64e7ce5 Compare March 6, 2024 10:37
@AztecBot AztecBot force-pushed the release-please--branches--master branch from 64e7ce5 to 287c8b2 Compare March 6, 2024 11:03
@PhilWindle PhilWindle merged commit d0cbd10 into master Mar 6, 2024
10 of 11 checks passed
@PhilWindle PhilWindle deleted the release-please--branches--master branch March 6, 2024 11:06
@AztecBot
Copy link
Collaborator Author

AztecBot commented Mar 6, 2024

@AztecBot
Copy link
Collaborator Author

AztecBot commented Mar 6, 2024

@AztecBot
Copy link
Collaborator Author

AztecBot commented Mar 6, 2024

@AztecBot
Copy link
Collaborator Author

AztecBot commented Mar 6, 2024

@AztecBot
Copy link
Collaborator Author

AztecBot commented Mar 6, 2024

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants