[Snyk] Upgrade @solana/web3.js from 1.31.0 to 1.59.1

[Balantion2020]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade @solana/web3.js from 1.31.0 to 1.59.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 63 versions ahead of your current version.
• The recommended version was released 21 days ago, on 2022-09-07.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-101-1292345	261/1000 Why? CVSS 5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @solana/web3.js

• 1.59.1 - 2022-09-07
  

  1.59.1 (2022-09-07)

  Bug Fixes

  • replace TransactionMessage accountKeys field with payerKey (#27653) (cd343f7)
• 1.59.0 - 2022-09-07
  

  1.59.0 (2022-09-07)

  Features

  • added authorizeWithSeed to the vote program in web3.js (#27627) (4d01c8a)

  Bug Fixes

  • recursively size variable size structs in your buffer layouts (#27624) (92ed6a7)
  • replace js-sha3 with @ noble/hashes/sha3 (#27630) (cb42bbe)
• 1.58.0 - 2022-09-07
  

  1.58.0 (2022-09-07)

  Features

  • add TransactionMessage class (#27526) (f255bc5)
  • support versioned txs in sendTransaction and simulateTransaction (#27528) (0ea74ce)
• 1.57.0 - 2022-09-07
  

  1.57.0 (2022-09-07)

  Features

  • implement message v0 compilation (#27524) (e7ceb19)
• 1.56.2 - 2022-09-01
  

  1.56.2 (2022-09-01)

  Bug Fixes

  • add compute units to jsonrpc parser (#27554) (ae708ce)
• 1.56.1 - 2022-09-01
  

  1.56.1 (2022-09-01)

  Bug Fixes

  • add compute units to jsonrpc parser (#27466) (4f9f1bc)

  Reverts

  • Revert "fix: add compute units to jsonrpc parser" (Revert "fix: add compute units to jsonrpc parser" solana-labs/solana#27553) (e71d0b4), closes #27553 #27466
• 1.56.0 - 2022-08-31
  

  1.56.0 (2022-08-31)

  Features

  • update Connection to support versioned transactions (#27068) (0f27496)
• 1.55.0 - 2022-08-29
  

  1.55.0 (2022-08-29)

  Features

  • add VersionedMessage.deserializeMessageVersion utility function (#27415) (0f013f0)
• 1.54.1 - 2022-08-28
  

  1.54.1 (2022-08-28)

  Bug Fixes

  • replace tweetnacl impl (7141986)
• 1.54.0 - 2022-08-25
  

  1.54.0 (2022-08-25)

  Features

  • add support for creating version 0 transactions (#27142) (8e30e66)
• 1.53.0 - 2022-08-14
• 1.52.0 - 2022-08-11
• 1.51.0 - 2022-08-10
• 1.50.1 - 2022-07-25
• 1.50.0 - 2022-07-22
• 1.49.0 - 2022-07-22
• 1.48.0 - 2022-07-13
• 1.47.4 - 2022-07-13
• 1.47.3 - 2022-07-02
• 1.47.2 - 2022-07-02
• 1.47.1 - 2022-07-01
• 1.47.0 - 2022-06-30
• 1.46.0 - 2022-06-29
• 1.45.0 - 2022-06-29
• 1.44.3 - 2022-06-27
• 1.44.2 - 2022-06-21
• 1.44.1 - 2022-06-17
• 1.44.0 - 2022-06-10
• 1.43.6 - 2022-06-07
• 1.43.5 - 2022-06-04
• 1.43.4 - 2022-05-30
• 1.43.3 - 2022-05-30
• 1.43.2 - 2022-05-26
• 1.43.1 - 2022-05-20
• 1.43.0 - 2022-05-20
• 1.42.0 - 2022-05-15
• 1.41.10 - 2022-05-14
• 1.41.9 - 2022-05-13
• 1.41.8 - 2022-05-13
• 1.41.7 - 2022-05-12
• 1.41.6 - 2022-05-12
• 1.41.5 - 2022-05-12
• 1.41.4 - 2022-05-05
• 1.41.3 - 2022-04-29
• 1.41.2 - 2022-04-28
• 1.41.1 - 2022-04-27
• 1.41.0 - 2022-04-26
• 1.40.1 - 2022-04-26
• 1.40.0 - 2022-04-26
• 1.39.1 - 2022-04-16
• 1.39.0 - 2022-04-16
• 1.38.0 - 2022-04-16
• 1.37.2 - 2022-04-13
• 1.37.1 - 2022-04-04
• 1.37.0 - 2022-03-28
• 1.36.0 - 2022-03-02
• 1.35.1 - 2022-02-21
• 1.35.0 - 2022-02-17
• 1.34.0 - 2022-02-09
• 1.33.0 - 2022-02-04
• 1.32.2 - 2022-02-04
• 1.32.1 - 2022-02-03
• 1.32.0 - 2022-01-21
• 1.31.0 - 2021-11-24

from @solana/web3.js GitHub release notes

Commit messages

Package name: @solana/web3.js

• cd343f7 fix: replace `TransactionMessage` `accountKeys` field with `payerKey` (fix: replace TransactionMessage accountKeys field with payerKey solana-labs/solana#27653)
• cb42bbe fix: replace js-sha3 with `@ noble/hashes/sha3` (fix: replace js-sha3 with @noble/hashes/sha3 solana-labs/solana#27630)
• 4d01c8a feat: added `authorizeWithSeed` to the vote program in web3.js (feat: added authorizeWithSeed to the vote program in web3.js solana-labs/solana#27627)
• 92ed6a7 fix: recursively size variable size structs in your buffer layouts (fix: recursively size variable size structs in your buffer layouts solana-labs/solana#27624)
• 0ea74ce feat: support versioned txs in `sendTransaction` and `simulateTransaction` (feat: support versioned txs in sendTransaction and simulateTransaction solana-labs/solana#27528)
• f255bc5 feat: add `TransactionMessage` class (feat: add TransactionMessage class solana-labs/solana#27526)
• e7ceb19 feat: implement message v0 compilation (feat: implement message v0 compilation solana-labs/solana#27524)
• ae708ce fix: add compute units to jsonrpc parser (fix: add compute units to jsonrpc parser solana-labs/solana#27554)
• e71d0b4 Revert "fix: add compute units to jsonrpc parser" (Revert "fix: add compute units to jsonrpc parser" solana-labs/solana#27553)
• 4f9f1bc fix: add compute units to jsonrpc parser (fix: add compute units to jsonrpc parser solana-labs/solana#27466)
• 0f27496 feat: update `Connection` to support versioned transactions (feat: update Connection to support versioned transactions solana-labs/solana#27068)
• 0f013f0 feat: add VersionedMessage.deserializeMessageVersion utility function (feat: add VersionedMessage.deserializeMessageVersion utility function solana-labs/solana#27415)
• 7141986 fix: replace tweetnacl impl
• ef5a6da Update rollup script to exclude new secp256k1 and hmac/sha256 dependencies (Update rollup script to exclude new secp256k1 and hmac/sha256 dependencies solana-labs/solana#27428)
• f8b5608 [web3.js] Replace sha256 and secp256k1 impls ([web3.js] Replace sha256 and secp256k1 impls solana-labs/solana#27390)
• 8e30e66 feat: add support for creating version 0 transactions (feat: add support for creating version 0 transactions solana-labs/solana#27142)
• 4f2d052 [web3.js] Eliminate dependency on `URL` class ([web3.js] Eliminate dependency on URL class solana-labs/solana#27349)
• 8d5e263 chore: bump eslint-plugin-mocha from 10.0.4 to 10.1.0 in /web3.js (chore: bump eslint-plugin-mocha from 10.0.4 to 10.1.0 in /web3.js solana-labs/solana#27332)
• 40022a3 chore: bump @ commitlint/travis-cli from 17.0.0 to 17.0.3 in /web3.js (chore: bump @commitlint/travis-cli from 17.0.0 to 17.0.3 in /web3.js solana-labs/solana#27331)
• eaa318d chore: bump @ babel/register from 7.17.7 to 7.18.9 in /web3.js (chore: bump @babel/register from 7.17.7 to 7.18.9 in /web3.js solana-labs/solana#27330)
• 9abf36c chore: bump @ babel/core from 7.18.0 to 7.18.13 in /web3.js (chore: bump @babel/core from 7.18.0 to 7.18.13 in /web3.js solana-labs/solana#27329)
• 2cc39ab VoteProgram.safeWithdraw function to safeguard against accidental vote account closures (VoteProgram.safeWithdraw function to safeguard against accidental vote account closures solana-labs/solana#26586)
• 55652a0 chore: bump @ babel/preset-env from 7.18.0 to 7.18.10 in /web3.js (chore: bump @babel/preset-env from 7.18.0 to 7.18.10 in /web3.js solana-labs/solana#27138)
• 659067b chore: add constant for pubkey byte length (chore: add constant for pubkey byte length solana-labs/solana#27134)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs