From 8ec837ed39fbd89ca6c3c0e2710f0a227ce4456e Mon Sep 17 00:00:00 2001 From: Atsushi Neki Date: Sat, 5 Jun 2021 11:43:46 +0900 Subject: [PATCH] BE-872 Release v1.1.6 Signed-off-by: Atsushi Neki --- CHANGELOG.md | 16 ++++++++++++++++ README.md | 2 +- client/package.json | 2 +- package.json | 2 +- release_notes/v1.1.6.md | 35 +++++++++++++++++++++++++++++++++++ 5 files changed, 54 insertions(+), 3 deletions(-) create mode 100644 release_notes/v1.1.6.md diff --git a/CHANGELOG.md b/CHANGELOG.md index ffa9c028f..65f1d3bb6 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,19 @@ +## v1.1.6 + +* [ffb7916](https://github.com/hyperledger/blockchain-explorer/commit/ffb7916) [BE-871](https://jira.hyperledger.org/browse/BE-871) Introduce dropdown to put together icons (#247) +* [973904e](https://github.com/hyperledger/blockchain-explorer/commit/973904e) Update fabric-sdk-node to v2.2.6 (#246) +* [44ae9ee](https://github.com/hyperledger/blockchain-explorer/commit/44ae9ee) [BE-855](https://jira.hyperledger.org/browse/BE-855) Stop unnecessary sync process triggered by FabricEvent (#240) +* [7e3f1b6](https://github.com/hyperledger/blockchain-explorer/commit/7e3f1b6) Bump ws from 7.4.1 to 7.4.6 in /client/e2e-test (#245) +* [a11b16a](https://github.com/hyperledger/blockchain-explorer/commit/a11b16a) Bump ws from 5.2.2 to 7.4.6 (#244) +* [68db6aa](https://github.com/hyperledger/blockchain-explorer/commit/68db6aa) Bump browserslist from 4.16.3 to 4.16.6 (#242) +* [cbced97](https://github.com/hyperledger/blockchain-explorer/commit/cbced97) Bump dns-packet from 1.3.1 to 1.3.4 in /client (#241) +* [3cf27da](https://github.com/hyperledger/blockchain-explorer/commit/3cf27da) [BE-855](https://jira.hyperledger.org/browse/BE-855) Add try catch block to handle block in-process exception (#239) +* [a8869bc](https://github.com/hyperledger/blockchain-explorer/commit/a8869bc) Be 870 display direct trans link (#237) +* [9443432](https://github.com/hyperledger/blockchain-explorer/commit/9443432) [BE-868](https://jira.hyperledger.org/browse/BE-868) Fixed jsrsasign security vulnerabilities (#236) +* [21477e3](https://github.com/hyperledger/blockchain-explorer/commit/21477e3) add typescript compilation on main.sh install (#234) +* [d8a7bd6](https://github.com/hyperledger/blockchain-explorer/commit/d8a7bd6) Added new maintainer name (#232) +* [2ae596e](https://github.com/hyperledger/blockchain-explorer/commit/2ae596e) Be 865 repolinter codeofconduct (#231) + ## v1.1.5 * [5ce121a](https://github.com/hyperledger/blockchain-explorer/commit/5ce121a) Be 862 Fix sync error (#228) diff --git a/README.md b/README.md index 2e3a22e80..0f906acc3 100644 --- a/README.md +++ b/README.md @@ -27,13 +27,13 @@ Hyperledger Explorer is a simple, powerful, easy-to-use, well maintained, open s | Hyperledger Explorer Version | Fabric Version Supported | NodeJS Version Supported | | -- | -- | -- | +| [v1.1.6](release_notes/v1.1.6.md) (Jun 06, 2021) | [v1.4 to v2.3](https://hyperledger-fabric.readthedocs.io/en/release-2.3) | [^12.13.1, ^14.13.1](https://nodejs.org/en/download/releases) | | [v1.1.5](release_notes/v1.1.5.md) (Apr 20, 2021) | [v1.4 to v2.3](https://hyperledger-fabric.readthedocs.io/en/release-2.3) | [^12.13.1, ^14.13.1](https://nodejs.org/en/download/releases) | | [v1.1.4](release_notes/v1.1.4.md) (Jan 29, 2021) | [v1.4 to v2.2](https://hyperledger-fabric.readthedocs.io/en/release-2.2) | [^12.13.1, ^14.13.1](https://nodejs.org/en/download/releases) | | [v1.1.3](release_notes/v1.1.3.md) (Sep 28, 2020) | [v1.4.0 to v2.2.0](https://hyperledger-fabric.readthedocs.io/en/release-2.2) | [12.16.x](https://nodejs.org/en/download/releases) | | [v1.1.2](release_notes/v1.1.2.md) (Aug 12, 2020) | [v1.4.0 to v2.2.0](https://hyperledger-fabric.readthedocs.io/en/release-2.2) | [12.16.x](https://nodejs.org/en/download/releases) | | [v1.1.1](release_notes/v1.1.1.md) (Jul 17, 2020) | [v1.4.0 to v2.1.1](https://hyperledger-fabric.readthedocs.io/en/release-2.1) | [12.16.x](https://nodejs.org/en/download/releases) | | [v1.1.0](release_notes/v1.1.0.md) (Jul 01, 2020) | [v1.4.0 to v2.1.1](https://hyperledger-fabric.readthedocs.io/en/release-2.1) | [12.16.x](https://nodejs.org/en/download/releases) | -| [v1.0.0](release_notes/v1.0.0.md) (Apr 09, 2020) | [v1.4.0 to v1.4.8](https://hyperledger-fabric.readthedocs.io/en/release-1.4) | [10.19.x](https://nodejs.org/en/download/releases) | --- diff --git a/client/package.json b/client/package.json index ac34a7743..739235bc7 100644 --- a/client/package.json +++ b/client/package.json @@ -1,6 +1,6 @@ { "name": "hyperledger-explorer-client", - "version": "1.1.5", + "version": "1.1.6", "private": true, "license": "Apache-2.0", "dependencies": { diff --git a/package.json b/package.json index 0b789d93f..7cf012ff1 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "hyperledger-explorer", - "version": "1.1.5", + "version": "1.1.6", "description": "hyperledger-explorer", "private": true, "main": "main.js", diff --git a/release_notes/v1.1.6.md b/release_notes/v1.1.6.md new file mode 100644 index 000000000..a7a333a7f --- /dev/null +++ b/release_notes/v1.1.6.md @@ -0,0 +1,35 @@ + + +## New Features +* [BE-871](https://jira.hyperledger.org/browse/BE-871) Introduce dropdown to put together icons (#247) +* [BE-870](https://jira.hyperledger.org/browse/BE-870) display direct trans link (#237) +* Add typescript compilation on main.sh install (#234) +* [BE-865](https://jira.hyperledger.org/browse/BE-865) repolinter codeofconduct (#231) + +## Bug Fixes and Updates + +* [BE-855](https://jira.hyperledger.org/browse/BE-855) Stop unnecessary sync process triggered by FabricEvent (#240) +* [BE-855](https://jira.hyperledger.org/browse/BE-855) Add try catch block to handle block in-process exception (#239) + +## Known Vulnerabilities + +``` +jsrsasign <10.2.0 +Severity: critical +RSA signature validation vulnerability - https://npmjs.com/advisories/1672 +fix available via `npm audit fix --force` +Will install fabric-network@1.4.1, which is a breaking change +node_modules/jsrsasign + fabric-ca-client * + Depends on vulnerable versions of fabric-common + Depends on vulnerable versions of jsrsasign + node_modules/fabric-ca-client + fabric-common >=2.1.1-snapshot.390 + Depends on vulnerable versions of jsrsasign + node_modules/fabric-common + fabric-network >=1.4.19-snapshot.1 + Depends on vulnerable versions of fabric-common + node_modules/fabric-network + +4 critical severity vulnerabilities +```