[Snyk] Upgrade web3 from 4.3.0 to 4.8.0 #1

snyk-io · 2024-05-21T11:47:39Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade web3 from 4.3.0 to 4.8.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 102 versions ahead of your current version.
The recommended version was released a month ago, on 2024-04-18.

Release notes

Package name: web3

4.8.0 - 2024-04-18
[4.8.0]

Changed

web3-eth-abi
- Dependencies updated
web3-eth-accounts
- Dependencies updated
Fixed

web3-eth-contract
- Fix an issue with smart contract function overloading (#6922)
web3-utils
- fixed toHex incorrectly hexing Uint8Arrays and Buffer (#6957)
- fixed isUint8Array not returning true for Buffer (#6957)
Added

web3-eth-contract
- Added a console warning in case of an ambiguous call to a solidity method with parameter overloading (#6942)
- Added contract.deploy(...).decodeData(...) and contract.decodeMethodData(...) that decode data based on the ABI (#6950)
web3-eth
- method getBlock now includes properties of eip 4844, 4895, 4788 when returning block (#6933)
- update type withdrawalsSchema, blockSchema and blockHeaderSchema schemas to include properties of eip 4844, 4895, 4788 (#6933)
web3-types
- Added signature to type AbiFunctionFragment (#6922)
- update type Withdrawals, block and BlockHeaderOutput to include properties of eip 4844, 4895, 4788 (#6933)
New Contributors
- @ ymonye made their first contribution in #6937
4.7.1-dev.ce59737.0 - 2024-04-07
4.7.1-dev.bfb4f6f.0 - 2024-04-08
4.7.1-dev.a173a8f.0 - 2024-03-26
4.7.1-dev.67d8a74.0 - 2024-04-04
4.7.1-dev.5a579fa.0 - 2024-04-05
4.7.1-dev.578ebb6.0 - 2024-04-15
4.7.1-dev.5341c3a.0 - 2024-03-29
4.7.1-dev.526c6f5.0 - 2024-03-27
4.7.1-dev.1c03666.0 - 2024-04-15
4.7.0 - 2024-03-26
[4.7.0]

added

web3-eth-contract
- Types ContractDeploySend, ContractMethodSend, Web3PromiEvent was exported (#6883)
web3-eth-ens
- Added function getText and getName in ENS and resolver classes (#6914)
fixed

web3-validator
- Multi-dimensional arrays(with a fix length) are now handled properly when parsing ABIs (#6798)
web3-utils
- fixed erroneous parsing of big numbers in the toNumber(...) function (#6880)
Contributors

Thank you to the community who have contributed to this release 😄:
@ sgerodes #6882
@ EtlesL #6836
@ Jouzep #6853
@ sarthak1dev #6867
@ edison1105 #6885
@ gucovip #6886
@ testwill #6889
@ pengqiseven #6878
4.6.1-dev.f943944.0 - 2024-03-20
4.6.1-dev.e383ae3.0 - 2024-03-08
4.6.1-dev.d254316.0 - 2024-03-11
4.6.1-dev.c4e039a.0 - 2024-03-25
4.6.1-dev.a83e9d5.0 - 2024-03-25
4.6.1-dev.a1f9dc4.0 - 2024-03-12
4.6.1-dev.9657b86.0 - 2024-03-12
4.6.1-dev.6d0a0ae.0 - 2024-03-12
4.6.1-dev.6187f30.0 - 2024-03-12
4.6.1-dev.43e70c1.0 - 2024-03-12
4.6.1-dev.383af39.0 - 2024-03-12
4.6.1-dev.2373e94.0 - 2024-03-15
4.6.1-dev.1f81ff0.0 - 2024-03-20
4.6.1-dev.16a2c27.0 - 2024-03-14
4.6.0 - 2024-03-08
[4.6.0]

Added

web3
- Added EIP-6963 utility function requestEIP6963Providers for multi provider discovery
web3-eth
- Added eth.getMaxPriorityFeePerGas method (#6748)
web3-eth-ens
- Added function setAddress in ENS and Resolver classes (#5956)
web3-rpc-methods
- Added getMaxPriorityFeePerGas method (#6748)
web3-types
- Type FeeData to be filled by await web3.eth.calculateFeeData() to be used with EIP-1559 transactions (#6795)
Fixed

web3-utils
- replaced our eventEmitter to EventEmitter3 to support react native builds (#6253)
New Contributors

Thanks for contributions in web3.js lib:
- @ Deepak2030 made their first contribution in #6804
- @ bobeu made their first contribution in #6806
- @ 0xthorazine made their first contribution in #6818
- @ destinyae made their first contribution in #6838
- @ teslaedison made their first contribution in #6863
4.5.1-dev.f696e47.0 - 2024-02-15
4.5.1-dev.edf3164.0 - 2024-03-07
4.5.1-dev.ec65468.0 - 2024-02-16
4.5.1-dev.e774646.0 - 2024-02-14
4.5.1-dev.cf60f71.0 - 2024-03-07
4.5.1-dev.cf4b93f.0 - 2024-02-27
4.5.1-dev.ca31f6a.0 - 2024-03-05
4.5.1-dev.c5cecaf.0 - 2024-02-19
4.5.1-dev.bd6cc71.0 - 2024-03-01
4.5.1-dev.b4c92e1.0 - 2024-02-27
4.5.1-dev.b25b883.0 - 2024-02-28
4.5.1-dev.afece40.0 - 2024-02-27
4.5.1-dev.ab1b250.0 - 2024-02-28
4.5.1-dev.a2d9cb4.0 - 2024-02-19
4.5.1-dev.a0d4d2e.0 - 2024-02-12
4.5.1-dev.9d65c38.0 - 2024-02-12
4.5.1-dev.95807a6.0 - 2024-02-19
4.5.1-dev.8ed041c.0 - 2024-03-05
4.5.1-dev.86447cd.0 - 2024-02-27
4.5.1-dev.35cb1b8.0 - 2024-02-28
4.5.1-dev.0e59f28.0 - 2024-02-29
4.5.1-dev.040d3a3.0 - 2024-03-06
4.5.1-dev.9023511.0 - 2024-02-12
4.5.0 - 2024-02-12
[4.5.0]

Added

web3-utils
- Adds missing exported type AbiItem from 1.x to v4 for compatabiltiy (#6678)
web3-types
- Adds missing exported type AbiItem from 1.x to v4 for compatabiltiy (#6678)
Changed

web3
- Dependencies updated
New Contributors

Thanks for contributions in web3.js lib:
- @ vuittont60 made their first contribution in #6704
- @ jasonaw98 made their first contribution in #6783
4.4.1-dev.ed1460c.0 - 2024-02-06
4.4.1-dev.e5673ca.0 - 2024-02-05
4.4.1-dev.d8b64a8.0 - 2024-02-09
4.4.1-dev.b49094b.0 - 2024-01-23
4.4.1-dev.aac2420.0 - 2024-01-24
4.4.1-dev.a72e99a.0 - 2024-01-29
4.4.1-dev.a6b685e.0 - 2024-02-05
4.4.1-dev.9f31612.0 - 2024-02-08
4.4.1-dev.998954f.0 - 2024-02-07
4.4.1-dev.95b37d8.0 - 2024-02-01
4.4.1-dev.7d7a9ea.0 - 2024-01-29
4.4.1-dev.7b97011.0 - 2024-01-17
4.4.1-dev.727c9fc.0 - 2024-01-23
4.4.1-dev.6da7379.0 - 2024-02-09
4.4.1-dev.42ec398.0 - 2024-02-01
4.4.1-dev.0a8f9e4.0 - 2024-02-08
4.4.1-dev.0881fe1.0 - 2024-02-08
4.4.1-dev.028dc20.0 - 2024-01-23
4.4.0 - 2024-01-17
[4.4.0]

Added

web3-eth
- Catch TransactionPollingTimeoutError was added to send transaction events (#6623)
Changed

web3-eth-abi
- Use AbiError instead of Error for errors at web3-eth-abi (#6641).
web3-eth-contract
- Allow the deploy function to accept parameters, even when no ABI was provided to the Contract(#6635)
web3
- Dependencies updated
Fixed

web3-eth-abi
- Fixed an issue with detecting Uint8Array (#6486)
web3-eth-accounts
- Send Transaction config used to be ignored if the passed common did not have a copy() and the chainId was not provided (#6663)
- Fixed an issue with detecting Uint8Array (#6486)
web3-eth-contract
- Fix and error that happen when trying to get past events by calling contract.getPastEvents or contract.events.allEvents(), if there is no matching events. (#6647)
- Fixed: The Contract is not using the context wallet passed if context was passed at constructor. (#6661)
web3-utils
- Fixed an issue with detecting Uint8Array (#6486)
web3-validator
- Fixed an issue with detecting Uint8Array (#6486)
4.3.1-dev.fa4c72b.0 - 2023-12-15
4.3.1-dev.f9468a8.0 - 2024-01-04
4.3.1-dev.f7d9349.0 - 2023-12-14
4.3.1-dev.f1c6916.0 - 2023-12-05
4.3.1-dev.e442fd2.0 - 2023-12-14
4.3.1-dev.e1080d9.0 - 2023-12-13
4.3.1-dev.df594c9.0 - 2024-01-05
4.3.1-dev.cdd99e7.0 - 2023-12-05
4.3.1-dev.cc7ff1f.0 - 2024-01-08
4.3.1-dev.c858390.0 - 2023-12-12
4.3.1-dev.c097b9a.0 - 2023-12-15
4.3.1-dev.b819ee4.0 - 2023-12-05
4.3.1-dev.b35eca1.0 - 2023-12-12
4.3.1-dev.b188714.0 - 2024-01-08
4.3.1-dev.a4f2f8c.0 - 2023-12-12
4.3.1-dev.a3fe342.0 - 2024-01-15
4.3.1-dev.882631c.0 - 2024-01-15
4.3.1-dev.80c2e1d.0 - 2023-12-12
4.3.1-dev.7c33cc0.0 - 2024-01-08
4.3.1-dev.762c298.0 - 2024-01-09
4.3.1-dev.6c075db.0 - 2024-01-03
4.3.1-dev.6b2dbe3.0 - 2023-12-16
4.3.1-dev.65a9862.0 - 2024-01-07
4.3.1-dev.5afcb54.0 - 2023-12-05
4.3.1-dev.5aa8b7f.0 - 2023-12-04
4.3.1-dev.59fc438.0 - 2023-12-13
4.3.1-dev.43b11b8.0 - 2023-12-11
4.3.1-dev.3cfe56f.0 - 2024-01-09
4.3.1-dev.2a40b66.0 - 2024-01-08
4.3.1-dev.23d69ba.0 - 2024-01-05
4.3.1-dev.1eb07d1.0 - 2024-01-09
4.3.1-dev.0c67cc6.0 - 2024-01-04
4.3.1-dev.5161642.0 - 2024-01-15
4.3.0 - 2023-12-04
[4.3.0]

Changed

web3-core
- Web3config contractDataInputFill has been defaulted to data, istead of input. (#6622)
web3-eth-contracts
- By default, contracts will fill data instead of input within method calls (#6622)
Added

web3-utils
- SocketProvider now contains public function getPendingRequestQueueSize, getSentRequestsQueueSize and clearQueues (#6479)
- Added safeDisconnect as a SocketProvider method to disconnect only when request queue size and send request queue size is 0 (#6479)
- Add isContractInitOptions method (#6555)
web3
- Added methods (privateKeyToAddress, parseAndValidatePrivateKey, and privateKeyToPublicKey) to web3.eth.accounts (#6620)
Fixed

web3-rpc-methods
- Fix web3-types import #6590 (#6589)
web3-utils
- Fix unecessary array copy when pack encoding (#6553)

from web3 GitHub release notes

Commit messages

Package name: web3

93eeccb revert
ce510b5 update
bf06f69 update
6cd8b70 update e2e tests
a4f492f update version to 4.8.0
0b9cf2c update changelog
578ebb6 Added EIP-4844 Headers for BlockHeaderOutput. Issue: 6933 (#6937)
1c03666 fix: toHex not supporting Uint8Array (#6958)
bfb4f6f fixed typos (#6962)
ce59737 Add `contract.decodeMethodData(...)` method to decode contract methods and to `contract.deploy(...).decodeData(...)` decode constructor parameters (#6950)
5a579fa Typos, issue 6940 (#6959)
67d8a74 web3 v4 playground (#6945)
5341c3a Show warning for ambiguous Solidity method call (#6942)
526c6f5 Fix an issue with smart contract function overloading (#6922)
a173a8f v4.7.0 #6934)
c4e039a web3-eth-ens add gettext and getname (#6914)
a83e9d5 fix: fromWei() parsing of large numbers > 10^20 (#6882)
1f81ff0 fix 2d array bug of abiSchemaToJsonSchema in web3-validator (#6836)
f943944 Bump follow-redirects from 1.15.4 to 1.15.6 in /docs (#6907)
2373e94 Result of contract method .send is hard to type (#6883)
16a2c27 added live code editor to mastering smart contracts with contract sample (#6893)
383af39 docs(): How to install Yarn for https://docs.web3js.org/ setup (#6853)
6d0a0ae interactive code moved to the top (#6867)
43e70c1 chore: fix typos (#6885)

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Note: This is a default PR template raised by Snyk. Find out more about how you can customise Snyk PRs in our documentation.

Snyk has created this PR to upgrade web3 from 4.3.0 to 4.8.0. See this package in npm: web3 See this project in Snyk: https://app.snyk.io/org/hawthorne001/project/47004a20-b825-4860-876e-c7bacbc642f0?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

socket-security · 2024-05-21T11:48:01Z

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/web3@4.8.0	Transitive: environment, eval, filesystem, network	`+68`	54.5 MB	luu-alex

🚮 Removed packages: npm/web3@4.3.0

View full report↗︎

[Snyk] Upgrade web3 from 4.3.0 to 4.8.0 #1

Are you sure you want to change the base?

[Snyk] Upgrade web3 from 4.3.0 to 4.8.0 #1

Conversation

snyk-io bot commented May 21, 2024

Snyk has created this PR to upgrade web3 from 4.3.0 to 4.8.0.

[4.8.0]

Changed

web3-eth-abi

web3-eth-accounts

Fixed

web3-eth-contract

web3-utils

Added

web3-eth-contract

web3-eth

web3-types

New Contributors

[4.7.0]

added

web3-eth-contract

web3-eth-ens

fixed

web3-validator

web3-utils

Contributors

[4.6.0]

Added

web3

web3-eth

web3-eth-ens

web3-rpc-methods

web3-types

Fixed

web3-utils

New Contributors

[4.5.0]

Added

web3-utils

web3-types

Changed

web3

New Contributors

[4.4.0]

Added

web3-eth

Changed

web3-eth-abi

web3-eth-contract

web3

Fixed

web3-eth-abi

web3-eth-accounts

web3-eth-contract

web3-utils

web3-validator

[4.3.0]

Changed

web3-core

web3-eth-contracts

Added

web3-utils

web3

Fixed

web3-rpc-methods

web3-utils

socket-security bot commented May 21, 2024