Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade rlp from 2.2.7 to 3.0.0 #2

Open
wants to merge 1 commit into
base: develop
Choose a base branch
from

Conversation

OKEAMAH
Copy link
Member

@OKEAMAH OKEAMAH commented Aug 17, 2024

snyk-top-banner

Snyk has created this PR to upgrade rlp from 2.2.7 to 3.0.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

  • The recommended version is 1 version ahead of your current version.

  • The recommended version was released on 3 years ago.

Release notes
Package name: rlp
  • 3.0.0 - 2022-01-25

    This release comes with a modernized ES6-class structured code base, some
    significant local refactoring work regarding how Stack and Memory
    are organized within the VM and it finalizes a first round of module structuring
    now having separate folders for bloom, evm and state related code. The
    release also removes some rarely used parts of the API (hookedVM, VM.deps).

    All this is to a large extend preparatory work for a v4.0.0 release which will
    follow in the next months with TypeScript support and more system-wide
    refactoring work leading to a more modular and expandable VM and providing the
    ground for future eWASM integration. If you are interested in the release
    process and want to take part in the refactoring discussion see the associated
    issue #455.

    VM Refactoring/Breaking Changes

    • New Memory class for evm memory manipulation, PR #442
    • Refactored Stack manipulation in evm, PR #460
    • Dropped createHookedVm (BREAKING), being made obsolete by the new StateManager API, PR #451
    • Dropped VM.deps attribute (please require dependencies yourself if you used this), PR #478
    • Removed fakeBlockchain class and associated tests, PR #466
    • The petersburg hardfork rules are now run as default (before: byzantium), PR #485

    Modularization

    • Renamed vm module to evm, move precompiles to evm module, PR #481
    • Moved stateManager, storageReader and cache to state module, PR #443
    • Replaced static VM logTable with dynamic inline version in EXP opcode, PR #450

    Code Modernization/ES6

    • Converted VM to ES6 class, PR #478
    • Migrated stateManager and storageReader to ES6 class syntax, PR #452

    Bug Fixes

    • Fixed a bug where stateManager.setStateRoot() didn't clear the _storageTries cache, PR #445
    • Fixed longer output than return length in CALL opcode, PR #454
    • Use BN.toArrayLike() instead of BN.toBuffer() (browser compatibility), PR #458
    • Fixed tx value overflow 256 bits, PR #471

    Maintenance/Optimization

    • Use BN reduction context in MODEXP precompile, PR #463

    Documentation

    • Fixed API doc types for Bloom filter methods, PR #439

    Testing

    • New Karma browser testing for the API tests, PRs #461, PR #468
    • Removed unused parts and tests within the test setup, PR #437
    • Fixed a bug using --json trace flag in the tests, PR #438
    • Complete switch to Petersburg on tests, fix coverage, PR #448
    • Added test for StateManager.dumpStorage(), PR #462
    • Fixed ecmul_0-3_5616_28000_96 (by test setup adoption), PR #473
  • 2.2.7 - 2021-10-06
from rlp GitHub release notes

Important

  • Warning: This PR contains a major version upgrade, and may be a breaking change.
  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade rlp from 2.2.7 to 3.0.0.

See this package in npm:
rlp

See this project in Snyk:
https://app.snyk.io/org/okeamah/project/804235dc-04b0-4a14-b807-3e4fe5740ccb?utm_source=github&utm_medium=referral&page=upgrade-pr
Copy link

@sourcery-ai sourcery-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We have skipped reviewing this pull request. Here's why:

  • It seems to have been created by a bot ('[Snyk]' found in title). We assume it knows what it's doing!
  • We don't review packaging changes - Let us know if you'd like us to change this.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants