[Snyk] Upgrade @solana/web3.js from 1.31.0 to 1.73.0

[Balantion2020]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade @solana/web3.js from 1.31.0 to 1.73.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 98 versions ahead of your current version.
• The recommended version was released 2 months ago, on 2022-12-30.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-101-1292345	261/1000 Why? CVSS 5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @solana/web3.js

• 1.73.0 - 2022-12-30
  

  1.73.0 (2022-12-30)

  Features

  • add commission fields matching RPC spec to web3.js client (#29435) (cfdf3f3)
• 1.72.0 - 2022-12-24
  

  1.72.0 (2022-12-24)

  Features

  • add getInflationRate RPC call to web3.js (#29377) (18cbcbb)
• 1.71.0 - 2022-12-24
  

  1.71.0 (2022-12-24)

  Features

  • Allow for verifying the sigs of partially signed txs in web3.js (#29249) (5cd70d6)
• 1.70.3 - 2022-12-20
  

  1.70.3 (2022-12-20)

  Bug Fixes

  • make toBytes actually return the type it's typehint claims (#29313) (4ebe08e)
• 1.70.2 - 2022-12-19
  

  1.70.2 (2022-12-19)

  Bug Fixes

  • reduce Connection keep-alive timeout to 1 second fewer than the Solana RPC's keep-alive timeout (#29130) (6478d7d)
• 1.70.1 - 2022-12-09
  

  1.70.1 (2022-12-09)

  Bug Fixes

  • pretty print PublicKey objects in node and in the browser (#29062) (3801514)
• 1.70.1-pr-29195.5 - 2022-12-10
• 1.70.1-pr-29195.4 - 2022-12-10
• 1.70.1-pr-29195.3 - 2022-12-10
• 1.70.1-pr-29195.2 - 2022-12-10
• 1.70.1-pr-29195 - 2022-12-10
• 1.70.0 - 2022-12-06
  

  1.70.0 (2022-12-06)

  Features

  • you can now supply your own HTTP agent to a web3.js Connection (#29125) (2f3622b)
• 1.70.0-pr-29130-2 - 2022-12-07
• 1.70.0-pr-29130 - 2022-12-07
• 1.69.0 - 2022-12-03
  

  1.69.0 (2022-12-03)

  Features

  • you can now abort transaction confirmations in web3.js (#29057) (4679a23)
• 1.68.1 - 2022-12-02
• 1.68.0 - 2022-12-02
• 1.67.2 - 2022-11-30
• 1.67.1 - 2022-11-30
• 1.67.0 - 2022-11-29
• 1.66.5 - 2022-11-29
• 1.66.4 - 2022-11-29
• 1.66.3 - 2022-11-28
• 1.66.2 - 2022-10-21
• 1.66.1 - 2022-10-17
• 1.66.0 - 2022-10-16
• 1.65.0 - 2022-10-14
• 1.64.0 - 2022-10-11
• 1.63.1 - 2022-09-24
• 1.63.0 - 2022-09-22
• 1.62.1 - 2022-09-20
• 1.62.0 - 2022-09-15
• 1.61.1 - 2022-09-13
• 1.61.0 - 2022-09-13
• 1.60.0 - 2022-09-09
• 1.59.1 - 2022-09-07
• 1.59.0 - 2022-09-07
• 1.58.0 - 2022-09-07
• 1.57.0 - 2022-09-07
• 1.56.2 - 2022-09-01
• 1.56.1 - 2022-09-01
• 1.56.0 - 2022-08-31
• 1.55.0 - 2022-08-29
• 1.54.1 - 2022-08-28
• 1.54.0 - 2022-08-25
• 1.53.0 - 2022-08-14
• 1.52.0 - 2022-08-11
• 1.51.0 - 2022-08-10
• 1.50.1 - 2022-07-25
• 1.50.0 - 2022-07-22
• 1.49.0 - 2022-07-22
• 1.48.0 - 2022-07-13
• 1.47.4 - 2022-07-13
• 1.47.3 - 2022-07-02
• 1.47.2 - 2022-07-02
• 1.47.1 - 2022-07-01
• 1.47.0 - 2022-06-30
• 1.46.0 - 2022-06-29
• 1.45.0 - 2022-06-29
• 1.44.3 - 2022-06-27
• 1.44.2 - 2022-06-21
• 1.44.1 - 2022-06-17
• 1.44.0 - 2022-06-10
• 1.43.6 - 2022-06-07
• 1.43.5 - 2022-06-04
• 1.43.4 - 2022-05-30
• 1.43.3 - 2022-05-30
• 1.43.2 - 2022-05-26
• 1.43.1 - 2022-05-20
• 1.43.0 - 2022-05-20
• 1.42.0 - 2022-05-15
• 1.41.10 - 2022-05-14
• 1.41.9 - 2022-05-13
• 1.41.8 - 2022-05-13
• 1.41.7 - 2022-05-12
• 1.41.6 - 2022-05-12
• 1.41.5 - 2022-05-12
• 1.41.4 - 2022-05-05
• 1.41.3 - 2022-04-29
• 1.41.2 - 2022-04-28
• 1.41.1 - 2022-04-27
• 1.41.0 - 2022-04-26
• 1.40.1 - 2022-04-26
• 1.40.0 - 2022-04-26
• 1.39.1 - 2022-04-16
• 1.39.0 - 2022-04-16
• 1.38.0 - 2022-04-16
• 1.37.2 - 2022-04-13
• 1.37.1 - 2022-04-04
• 1.37.0 - 2022-03-28
• 1.36.0 - 2022-03-02
• 1.35.1 - 2022-02-21
• 1.35.0 - 2022-02-17
• 1.34.0 - 2022-02-09
• 1.33.0 - 2022-02-04
• 1.32.2 - 2022-02-04
• 1.32.1 - 2022-02-03
• 1.32.0 - 2022-01-21
• 1.31.0 - 2021-11-24

from @solana/web3.js GitHub release notes

Commit messages

Package name: @solana/web3.js

• cfdf3f3 feat: add commission fields matching RPC spec to web3.js client (feat: add commission fields matching RPC spec solana-labs/solana#29435)
• 6364ee0 chore: typecheck web3.js tests (Fix: web3.js test typescript errors solana-labs/solana#29422)
• 07fa944 ci: fix web3-commit-lint (ci: fix web3-commit-lint solana-labs/solana#29414)
• 1bcb7cc test: fix get inflation rate test failed at test:live (test: fix get inflation rate failed at test:live solana-labs/solana#29413)
• 18cbcbb feat: add getInflationRate RPC call to web3.js (Add getInflationRate RPC call to web3.js solana-labs/solana#29377)
• 5cd70d6 feat: Allow for verifying the sigs of partially signed txs in web3.js (feat: Allow for verifying the sigs of partially signed txs in web3.js solana-labs/solana#29249)
• 4ebe08e fix: make toBytes actually return the type it's typehint claims (fix: make toBytes actually return the type it's typehint claims solana-labs/solana#29313)
• 48a5026 docs: make the comments on using the new confirmTransaction clearer (docs: make the comments on using the new confirmTransaction clearer solana-labs/solana#29251)
• 6478d7d fix: reduce Connection keep-alive timeout to 1 second fewer than the Solana RPC's keep-alive timeout (fix: reduce Connection keep-alive timeout to 1 second fewer than the Solana RPC's keep-alive timeout solana-labs/solana#29130)
• d14dcf6 docs: add endianess for pubkey byte/buffer functions (docs: add endianess for pubkey byte/buffer functions solana-labs/solana#29079)
• 3801514 fix: pretty print PublicKey objects in node and in the browser (fix: pretty print PublicKey objects in node and in the browser solana-labs/solana#29062)
• 2f3622b feat: you can now supply your own HTTP agent to a web3.js Connection (feat: you can now supply your own HTTP agent to a web3.js Connection solana-labs/solana#29125)
• 34b1076 chore: remove last references to Flow types in web3.js (chore: remove last references to Flow types in web3.js solana-labs/solana#29061)
• 4679a23 feat: you can now abort transaction confirmations in web3.js (feat: you can now abort transaction confirmations in web3.js solana-labs/solana#29057)
• f599765 fix: prevent the first-ever signature subscription from leaking (fix: prevent the first-ever signature subscription from leaking solana-labs/solana#29056)
• 570fa1d feat: the web3.js getBlock APIs now accept `rewards` and `transactionDetails` config (feat: the web3.js getBlock APIs now accept rewards and transactionDetails config solana-labs/solana#29000)
• a731d2d fix: support `VersionedMessage` in `getFeeForMessage` (fix: support VersionedMessage in getFeeForMessage solana-labs/solana#28996)
• 4724539 fix: TransactionMessage.decompile() now counts the correct number of unsigned, writable accounts (fix: TransactionMessage.decompile() now counts the correct number of unsigned, writable accounts solana-labs/solana#28990)
• c0a35b6 chore: remove @ babel/register dependency from web3.js
• dff827b chore: remove unused http-server dependency from web3.js
• 6c7eeb0 chore: bump http-server from 14.1.0 to 14.1.1 in /web3.js (chore: bump http-server from 14.1.0 to 14.1.1 in /web3.js solana-labs/solana#27333)
• 7bbded0 chore: remove redundant 'Buffer' from 'Account' class (web3.js: remove redundant 'Buffer' from 'Account' class solana-labs/solana#27865)
• 7a858b9 chore: use constant for PUBLIC_KEY_LENGTH for checking length of input (web3.js: use constant for PUBLIC_KEY_LENGTH for checking length of input solana-labs/solana#27876)
• 65cac92 chore: add deprecation notice for createProgramAddress (web3.js: add deprecation notice for createProgramAddress solana-labs/solana#27879)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs