[Snyk] Upgrade @solana/web3.js from 1.31.0 to 1.48.0

[snyk-bot]

Snyk has created this PR to upgrade @solana/web3.js from 1.31.0 to 1.48.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 47 versions ahead of your current version.
• The recommended version was released a month ago, on 2022-07-13.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-101-1292345	261/1000 Why? CVSS 5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @solana/web3.js

• 1.48.0 - 2022-07-13
  

  1.48.0 (2022-07-13)

  Features

  • added web3 bindings for Address Lookup Table Program instructions (#26469) (e1567ab)
• 1.47.4 - 2022-07-13
  

  1.47.4 (2022-07-13)

  Bug Fixes

  • fork URL and fetch for React Native in web3.js (#26604) (d217b6b)
• 1.47.3 - 2022-07-02
  

  1.47.3 (2022-07-02)

  Bug Fixes

  • ingest only the relevant properties when constructing Transactions (88a5d74)
• 1.47.2 - 2022-07-02
  

  1.47.2 (2022-07-02)

  Bug Fixes

  • getPerformanceSamples no longer breaks when the connection has a default commitment (2f33b79)
  • a much simpler way to prevent getRecentPerformanceSamples from sending a commitment (c660a91)
• 1.47.1 - 2022-07-01
  

  1.47.1 (2022-07-01)

  Bug Fixes

  • web3.js; maxRetries no longer stripped when zero (#26345) (ea9dffa)
• 1.47.0 - 2022-06-30
  

  1.47.0 (2022-06-30)

  Features

  • web3.js RPC errors now hold the error code and data on the error object (#26318) (f4d9f51)
• 1.46.0 - 2022-06-29
  

  1.46.0 (2022-06-29)

  Features

  • add minContextSlot configuration to (almost) all web3.js methods (#26296) (6482d0d)
• 1.45.0 - 2022-06-29
  

  1.45.0 (2022-06-29)

  Features

  • add custom version HTTP header string to RPC requests (6e009d8)
• 1.44.3 - 2022-06-27
  

  1.44.3 (2022-06-27)

  Bug Fixes

  • always use the nonce as the recent blockhash; never overwrite it (#25829) (2f80949)
• 1.44.2 - 2022-06-21
  

  1.44.2 (2022-06-21)

  Bug Fixes

  • getTransactions() now returns the expected datatype (#26099) (af0d949)
• 1.44.1 - 2022-06-17
• 1.44.0 - 2022-06-10
• 1.43.6 - 2022-06-07
• 1.43.5 - 2022-06-04
• 1.43.4 - 2022-05-30
• 1.43.3 - 2022-05-30
• 1.43.2 - 2022-05-26
• 1.43.1 - 2022-05-20
• 1.43.0 - 2022-05-20
• 1.42.0 - 2022-05-15
• 1.41.10 - 2022-05-14
• 1.41.9 - 2022-05-13
• 1.41.8 - 2022-05-13
• 1.41.7 - 2022-05-12
• 1.41.6 - 2022-05-12
• 1.41.5 - 2022-05-12
• 1.41.4 - 2022-05-05
• 1.41.3 - 2022-04-29
• 1.41.2 - 2022-04-28
• 1.41.1 - 2022-04-27
• 1.41.0 - 2022-04-26
• 1.40.1 - 2022-04-26
• 1.40.0 - 2022-04-26
• 1.39.1 - 2022-04-16
• 1.39.0 - 2022-04-16
• 1.38.0 - 2022-04-16
• 1.37.2 - 2022-04-13
• 1.37.1 - 2022-04-04
• 1.37.0 - 2022-03-28
• 1.36.0 - 2022-03-02
• 1.35.1 - 2022-02-21
• 1.35.0 - 2022-02-17
• 1.34.0 - 2022-02-09
• 1.33.0 - 2022-02-04
• 1.32.2 - 2022-02-04
• 1.32.1 - 2022-02-03
• 1.32.0 - 2022-01-21
• 1.31.0 - 2021-11-24

from @solana/web3.js GitHub release notes

Commit messages

Package name: @solana/web3.js

• e1567ab feat: added web3 bindings for Address Lookup Table Program instructions (Address Lookup Table Program Instruction Web3 Bindings solana-labs/solana#26469)
• d217b6b fix: fork `URL` and `fetch` for React Native in web3.js (fix: fork URL and fetch for React Native in web3.js solana-labs/solana#26604)
• e8390c6 Support for returnData in simulate transaction (Support for returnData in simulate transaction solana-labs/solana#26499)
• e3dc440 chore: remove web3 examples (chore: remove web3 examples solana-labs/solana#26515)
• 5c6b178 chore: make documentation and examples more prominent in README (Make documentation and examples more prominent in README solana-labs/solana#26498)
• 0d598b7 chore: move `checkBlockHeight` into block where it's used
• 88a5d74 fix: ingest only the relevant properties when constructing `Transactions`
• c660a91 fix: a much simpler way to prevent getRecentPerformanceSamples from sending a commitment
• 798cd3b test: maybe don't disable all the web3.js tests
• 2f33b79 fix: `getPerformanceSamples` no longer breaks when the connection has a default commitment
• ea9dffa fix: web3.js; maxRetries no longer stripped when zero (Update connection.ts, maxRetries no longer strips solana-labs/solana#26345)
• f4d9f51 feat: web3.js RPC errors now hold the error `code` and `data` on the error object (feat: web3.js RPC errors now hold the error code and data on the error object solana-labs/solana#26318)
• 6482d0d feat: add `minContextSlot` configuration to (almost) all web3.js methods (feat: add minContextSlot configuration to (almost) all web3.js methods solana-labs/solana#26296)
• 6e009d8 feat: add custom version HTTP header string to RPC requests
• 5790271 test: compile web3.js tests in such a way that you can use es2020+ syntax without crashing Mocha
• 5a8625a chore: upgrade `rpc-websockets` to eliminate bad `circular-json` dependency
• 2f80949 fix: always use the nonce as the recent blockhash; never overwrite it (fix: nonce-based Transactions no longer mutate the transaction in place when you compileMessage solana-labs/solana#25829)
• 0b3de2b chore: fix types of `RpcRequest` and `RpcBatchRequest` (chore: correct the types of Rpc{Batch}Request to prevent type errors in Connection.ts solana-labs/solana#26102)
• af0d949 fix: `getTransactions()` now returns the expected datatype (Fix getTransactions web3.js method solana-labs/solana#26099)
• fb2aeaa fix: export custom transaction confirmation error classes
• 5047369 feat(nonce): adds system instruction to upgrade legacy nonce versions (adds system instruction to upgrade legacy nonce versions solana-labs/solana#25789)
• e8b1cea chore: bump semantic-release from 18.0.1 to 19.0.3 in /web3.js (chore: bump semantic-release from 18.0.1 to 19.0.3 in /web3.js solana-labs/solana#25864)
• ca780d8 fix: alias `TransactionCtorFields_DEPRECATED` back to the way it was for back-compat
• 6b105ee fix: repair sort order of pubkeys when compiling messages

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs