[Snyk] Upgrade: , #674
Open
[Snyk] Upgrade: , #674
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade:
- @ethereumjs/util from 8.0.5 to 8.1.0.
See this package in npm: https://www.npmjs.com/package/@ethereumjs/util
- @ganache/utils from 0.8.0 to 0.9.2.
See this package in npm: https://www.npmjs.com/package/@ganache/utils
See this project in Snyk:
https://app.snyk.io/org/sammyfilly/project/d7ed5c2b-4d6f-49eb-82ed-18060656fe78?utm_source=github&utm_medium=referral&page=upgrade-pr
|
|
|
![sourcery-ai[bot]](https://avatars.githubusercontent.com/in/48477?s=60&v=4){kind=small}
There was a problem hiding this comment.
We have skipped reviewing this pull request. Here's why:
- It seems to have been created by a bot ('[Snyk]' found in title). We assume it knows what it's doing!
- We don't review packaging changes - Let us know if you'd like us to change this.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯♂ The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
@ethereumjs/util
from 8.0.5 to 8.1.0 | 2 versions ahead of your current version | a year ago
on 2023-06-20
@ganache/utils
from 0.8.0 to 0.9.2 | 3 versions ahead of your current version | 9 months ago
on 2023-12-21
Release notes
Package name: @ethereumjs/util
-
8.1.0 - 2023-06-20
- Fixes for Kaustinen4 support, PR #3269
- Kaustinen5 related fixes, PR #3343
- Kaustinen6 adjustments,
- Missing beaconroot account verkle fix, PR #3421
- Remove the hacks to prevent account cleanups of system contracts, PR #3418
- Updates EIP-2935 tests with the new proposed bytecode and corresponding config, PR #3438
- Fix EIP-2935 address conversion issues, PR #3447
- Remove backfill of block hashes on EIP-2935 activation, PR #3478
- Add
- Stricter prefixed hex typing, PRs #3348, #3427 and #3357 (some changes removed in PR #3382 for backwards compatibility reasons, will be reintroduced along upcoming breaking releases)
- Removes support for EIP-2315 simple subroutines for EVM (deprecated with an alternative version integrated into EOF), PR #3342
- Small clean-up to
- Update
- Fix block building with blocks including CL requests, PR #3413
- Ensure system address is not created if it is empty, PR #3400
-
8.0.6 - 2023-04-24
-
8.0.5 - 2023-02-27
from @ethereumjs/util GitHub release notesEIP-7685 Requests: EIP-6110 (Deposits) / EIP-7002 (Withdrawals) / EIP-7251 (Consolidations)
This library now supports
EIP-6110deposit requests, see PR #3390,EIP-7002withdrawal requests, see PR #3385 andEIP-7251consolidation requests, see PR #3477 as well as the underlying generic execution layer request logic introduced withEIP-7685(PR #3372).These new request types will be activated with the
Praguehardfork, see @ ethereumjs/block README for detailed documentation.EIP-2935 Serve Historical Block Hashes from State (Prague)
Starting with this release the VM supports EIP-2935 which stores the latest 256 block hashes in the storage of a system contract, see PR #3475 as the major integrational PR (while work on this has already been done in previous PRs).
This EIP will be activated along the Prague hardfork. Note that this EIP has no effect on the resolution of the
BLOCKHASHopcode, which will be a separate activation taking place by the integration of EIP-7709 in the following Osaka hardfork.Verkle Dependency Decoupling
We have relatively light-heartedly added a new
@ ethereumjs/verklemain dependency to the VM/EVM stack in thev7.2.1release, which added an additional burden to the bundle size by several hundred KB and additionally draws in unnecessary WASM code. Coupling with Verkle has been refactored in PR #3462 and the direct dependency has been removed again.An update to this release is therefore strongly recommended even if other fixes or features are not that relevant for you right now.
Verkle Updates
verkle-cryptography-wasmmigration, PRs #3355 and #3356Other Features
evmOptsto the VM opts to allow for options chaining to the underlying EVM, PR #3481Other Changes
VM._emit(), PR #3396mcl-wasmDependency (Esbuild Issue), PR #3461Bugfixes
Package name: @ganache/utils
-
0.9.2 - 2023-12-21
-
0.9.1 - 2023-08-22
-
0.9.0 - 2023-07-05
-
0.8.0 - 2023-04-13
from @ganache/utils GitHub release notesImportant
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: