[Snyk] Upgrade @solana/web3.js from 1.31.0 to 1.90.0

[Balantion2020]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade @solana/web3.js from 1.31.0 to 1.90.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 137 versions ahead of your current version.
• The recommended version was released 25 days ago, on 2024-02-07.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-101-1292345	475/1000 Why? Has a fix available, CVSS 5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @solana/web3.js

• 1.90.0 - 2024-02-07
  

  1.90.0 (2024-02-07)

  Features

  • deprecate BpfLoader class (#2101) (1a0940d)
• 1.89.1 - 2024-01-15
  

  1.89.1 (2024-01-15)

  Bug Fixes

  • change request retry output log to an error log (#2038) (5e43617)
• 1.89.0 - 2024-01-11
  

  1.89.0 (2024-01-11)

  Features

  • Remove bailout behavior from missing sig func (#2006) (6b33c7e)
• 1.88.0 - 2024-01-05
  

  1.88.0 (2024-01-05)

  Features

  • specify which account is missing/has an invalid signature on signature verification failure (#2002) (109615d)
• 1.87.6 - 2023-11-11
  

  1.87.6 (2023-11-11)

  Bug Fixes

  • update @ babel/plugin-transform-runtime & @ babel/preset-env (#1826) (b7ead05)
• 1.87.5 - 2023-11-07
  

  1.87.5 (2023-11-07)

  Bug Fixes

  • legacy: declare transaction meta as nullable (#1812) (ffeddf6)
• 1.87.4 - 2023-11-06
  

  1.87.4 (2023-11-06)

  Bug Fixes

  • parameter names in GetTokenAccountsByOwnerApi (#1809) (d575f09)
• 1.87.3 - 2023-10-26
  

  1.87.3 (2023-10-26)

  Bug Fixes

  • temporarily lock to Node 18.x for CI/CD workflow (#1785) (6910664)
• 1.87.2 - 2023-10-19
• 1.87.1 - 2023-10-09
• 1.87.0 - 2023-10-06
• 1.86.0 - 2023-10-06
• 1.85.0 - 2023-10-06
• 1.84.0 - 2023-10-06
• 1.83.0 - 2023-10-06
• 1.82.0 - 2023-10-06
• 1.81.0 - 2023-10-06
• 1.80.0 - 2023-10-06
• 1.79.0 - 2023-10-06
• 1.78.7 - 2023-10-04
• 1.78.6 - 2023-10-04
• 1.78.5 - 2023-09-12
• 1.78.4 - 2023-08-10
• 1.78.3 - 2023-08-04
• 1.78.2 - 2023-07-31
• 1.78.1 - 2023-07-28
• 1.78.0 - 2023-07-07
• 1.77.3 - 2023-05-31
• 1.77.2 - 2023-05-28
• 1.77.1 - 2023-05-25
• 1.77.0 - 2023-05-24
• 1.76.0 - 2023-05-09
• 1.75.0 - 2023-04-04
• 1.74.0 - 2023-03-17
• 1.73.4 - 2023-03-16
• 1.73.3 - 2023-02-23
• 1.73.2 - 2023-01-31
• 1.73.1 - 2023-01-31
• 1.73.1-pr-29195.6 - 2023-01-31
• 1.73.0 - 2022-12-30
• 1.72.0 - 2022-12-24
• 1.71.0 - 2022-12-24
• 1.70.3 - 2022-12-20
• 1.70.2 - 2022-12-19
• 1.70.1 - 2022-12-09
• 1.70.1-pr-29195.5 - 2022-12-10
• 1.70.1-pr-29195.4 - 2022-12-10
• 1.70.1-pr-29195.3 - 2022-12-10
• 1.70.1-pr-29195.2 - 2022-12-10
• 1.70.1-pr-29195 - 2022-12-10
• 1.70.0 - 2022-12-06
• 1.70.0-pr-29130-2 - 2022-12-07
• 1.70.0-pr-29130 - 2022-12-07
• 1.69.0 - 2022-12-03
• 1.68.1 - 2022-12-02
• 1.68.0 - 2022-12-02
• 1.67.2 - 2022-11-30
• 1.67.1 - 2022-11-30
• 1.67.0 - 2022-11-29
• 1.66.5 - 2022-11-29
• 1.66.4 - 2022-11-29
• 1.66.3 - 2022-11-28
• 1.66.2 - 2022-10-21
• 1.66.1 - 2022-10-17
• 1.66.0 - 2022-10-16
• 1.65.0 - 2022-10-14
• 1.64.0 - 2022-10-11
• 1.63.1 - 2022-09-24
• 1.63.0 - 2022-09-22
• 1.62.1 - 2022-09-20
• 1.62.0 - 2022-09-15
• 1.61.1 - 2022-09-13
• 1.61.0 - 2022-09-13
• 1.60.0 - 2022-09-09
• 1.59.1 - 2022-09-07
• 1.59.0 - 2022-09-07
• 1.58.0 - 2022-09-07
• 1.57.0 - 2022-09-07
• 1.56.2 - 2022-09-01
• 1.56.1 - 2022-09-01
• 1.56.0 - 2022-08-31
• 1.55.0 - 2022-08-29
• 1.54.1 - 2022-08-28
• 1.54.0 - 2022-08-25
• 1.53.0 - 2022-08-14
• 1.52.0 - 2022-08-11
• 1.51.0 - 2022-08-10
• 1.50.1 - 2022-07-25
• 1.50.0 - 2022-07-22
• 1.49.0 - 2022-07-22
• 1.48.0 - 2022-07-13
• 1.47.4 - 2022-07-13
• 1.47.3 - 2022-07-02
• 1.47.2 - 2022-07-02
• 1.47.1 - 2022-07-01
• 1.47.0 - 2022-06-30
• 1.46.0 - 2022-06-29
• 1.45.0 - 2022-06-29
• 1.44.3 - 2022-06-27
• 1.44.2 - 2022-06-21
• 1.44.1 - 2022-06-17
• 1.44.0 - 2022-06-10
• 1.43.6 - 2022-06-07
• 1.43.5 - 2022-06-04
• 1.43.4 - 2022-05-30
• 1.43.3 - 2022-05-30
• 1.43.2 - 2022-05-26
• 1.43.1 - 2022-05-20
• 1.43.0 - 2022-05-20
• 1.42.0 - 2022-05-15
• 1.41.10 - 2022-05-14
• 1.41.9 - 2022-05-13
• 1.41.8 - 2022-05-13
• 1.41.7 - 2022-05-12
• 1.41.6 - 2022-05-12
• 1.41.5 - 2022-05-12
• 1.41.4 - 2022-05-05
• 1.41.3 - 2022-04-29
• 1.41.2 - 2022-04-28
• 1.41.1 - 2022-04-27
• 1.41.0 - 2022-04-26
• 1.40.1 - 2022-04-26
• 1.40.0 - 2022-04-26
• 1.39.1 - 2022-04-16
• 1.39.0 - 2022-04-16
• 1.38.0 - 2022-04-16
• 1.37.2 - 2022-04-13
• 1.37.1 - 2022-04-04
• 1.37.0 - 2022-03-28
• 1.36.0 - 2022-03-02
• 1.35.1 - 2022-02-21
• 1.35.0 - 2022-02-17
• 1.34.0 - 2022-02-09
• 1.33.0 - 2022-02-04
• 1.32.2 - 2022-02-04
• 1.32.1 - 2022-02-03
• 1.32.0 - 2022-01-21
• 1.31.0 - 2021-11-24

from @solana/web3.js GitHub release notes

Commit messages

Package name: @solana/web3.js

• 1a0940d feat: deprecate `BpfLoader` class ([Snyk] Upgrade @docusaurus/preset-classic from 2.0.0-beta.0 to 2.4.3 #2101)
• dd2096e Convert `SolanaRpcIntegerOverflowError` to a coded error ([Snyk] Upgrade @docusaurus/theme-search-algolia from 2.0.0-beta.0 to 2.4.3 #2090)
• 64d583b Update Readme broken link to rpc docs ([Snyk] Upgrade @babel/runtime from 7.16.3 to 7.23.8 #2092)
• 1e328b9 chore: bump @ solana/spl-token from 0.3.8 to 0.4.0 ([Snyk] Upgrade @docusaurus/preset-classic from 2.0.0-beta.0 to 2.4.3 #2078)
• 48a6c9f chore: bump @ jest/types from 29.6.1 to 29.6.3 ([Snyk] Upgrade @solana/web3.js from 1.31.0 to 1.87.6 #2079)
• 0e03ca9 refactor(experimental): add cluster level subscriptions API for library
• cbf8f38 refactor(experimental): add cluster level subscriptions API for transports
• 5a6335d refactor(experimental): add cluster level API for library
• 5175d8a refactor(experimental): add cluster level API for rpc-core
• e58bb22 refactor(experimental): add cluster level API for transports
• 61f7ba0 refactor(experimental): add `ClusterUrl` types
• e9c1b10 Ask Turborepo and others not to collect telemetry in CI ([Snyk] Upgrade @docusaurus/preset-classic from 2.0.0-beta.0 to 2.4.3 #2089)
• 11dd48f Actually fix the `@ solana/errors` CLI
• fd64233 Update Turborepo to `1.1.2`
• 6725a9f Try to correct the path for the `@ solana/errors` CLI
• b93299a chore: format all code ([Snyk] Upgrade @docusaurus/theme-search-algolia from 2.0.0-beta.0 to 2.4.3 #2066)
• 8e39a42 A typetest for coded errors ([Snyk] Upgrade @docusaurus/theme-search-algolia from 2.0.0-beta.0 to 2.4.3 #2077)
• 6deb2bc An error decoder for production Solana coded errors ([Snyk] Upgrade @docusaurus/core from 2.0.0-beta.0 to 2.4.3 #2076)
• c34bab9 Convert two errors in `@ solana/transactions` to the new coded error system ([Snyk] Upgrade sass from 1.45.0 to 1.69.7 #2075)
• af9f012 A coded error class for all Solana modules ([Snyk] Upgrade @docusaurus/preset-classic from 2.0.0-beta.0 to 2.4.3 #2074)
• 71dcc4e export the async decodeTransaction function from library ([Snyk] Upgrade @docusaurus/core from 2.0.0-beta.0 to 2.4.3 #2082)
• 495a9b1 refactor(experimental): add `info` field to JSON parsed types ([Snyk] Upgrade @docusaurus/core from 2.0.0-beta.0 to 2.4.3 #2072)
• 76ad167 refactor(experimental): graphql: drop straggler file
• f025b33 refactor(experimental): graphql: refactor entrypoint to fix caching

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs