[Snyk] Upgrade @solana/web3.js from 1.31.0 to 1.62.1

[snyk-bot]

Snyk has created this PR to upgrade @solana/web3.js from 1.31.0 to 1.62.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 68 versions ahead of your current version.
• The recommended version was released 21 days ago, on 2022-09-20.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-101-1292345	261/1000 Why? CVSS 5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @solana/web3.js

• 1.62.1 - 2022-09-20
  

  1.62.1 (2022-09-20)

  Bug Fixes

  • replace bigint literals with BigInt constructors (#27930) (41e5eab)
• 1.62.0 - 2022-09-15
  

  1.62.0 (2022-09-15)

  Features

  • add isAccountWritable and isAccountSigner to MessageV0 (#27808) (4816908)
• 1.61.1 - 2022-09-13
  

  1.61.1 (2022-09-13)

  Bug Fixes

  • replace computed max u64 constant with literal (#27765) (fd25f3e)
• 1.61.0 - 2022-09-13
  

  1.61.0 (2022-09-13)

  Features

  • add version getter to VersionedTransaction class (#27734) (7004e15)
• 1.60.0 - 2022-09-09
  

  1.60.0 (2022-09-09)

  Features

  • add source field to parsed account key responses (#27702) (08b0a20)

  Bug Fixes

  • ensure that Keypair.secretKey is a Uint8Array (#27700) (c876761)
• 1.59.1 - 2022-09-07
  

  1.59.1 (2022-09-07)

  Bug Fixes

  • replace TransactionMessage accountKeys field with payerKey (#27653) (cd343f7)
• 1.59.0 - 2022-09-07
  

  1.59.0 (2022-09-07)

  Features

  • added authorizeWithSeed to the vote program in web3.js (#27627) (4d01c8a)

  Bug Fixes

  • recursively size variable size structs in your buffer layouts (#27624) (92ed6a7)
  • replace js-sha3 with @ noble/hashes/sha3 (#27630) (cb42bbe)
• 1.58.0 - 2022-09-07
  

  1.58.0 (2022-09-07)

  Features

  • add TransactionMessage class (#27526) (f255bc5)
  • support versioned txs in sendTransaction and simulateTransaction (#27528) (0ea74ce)
• 1.57.0 - 2022-09-07
  

  1.57.0 (2022-09-07)

  Features

  • implement message v0 compilation (#27524) (e7ceb19)
• 1.56.2 - 2022-09-01
  

  1.56.2 (2022-09-01)

  Bug Fixes

  • add compute units to jsonrpc parser (#27554) (ae708ce)
• 1.56.1 - 2022-09-01
• 1.56.0 - 2022-08-31
• 1.55.0 - 2022-08-29
• 1.54.1 - 2022-08-28
• 1.54.0 - 2022-08-25
• 1.53.0 - 2022-08-14
• 1.52.0 - 2022-08-11
• 1.51.0 - 2022-08-10
• 1.50.1 - 2022-07-25
• 1.50.0 - 2022-07-22
• 1.49.0 - 2022-07-22
• 1.48.0 - 2022-07-13
• 1.47.4 - 2022-07-13
• 1.47.3 - 2022-07-02
• 1.47.2 - 2022-07-02
• 1.47.1 - 2022-07-01
• 1.47.0 - 2022-06-30
• 1.46.0 - 2022-06-29
• 1.45.0 - 2022-06-29
• 1.44.3 - 2022-06-27
• 1.44.2 - 2022-06-21
• 1.44.1 - 2022-06-17
• 1.44.0 - 2022-06-10
• 1.43.6 - 2022-06-07
• 1.43.5 - 2022-06-04
• 1.43.4 - 2022-05-30
• 1.43.3 - 2022-05-30
• 1.43.2 - 2022-05-26
• 1.43.1 - 2022-05-20
• 1.43.0 - 2022-05-20
• 1.42.0 - 2022-05-15
• 1.41.10 - 2022-05-14
• 1.41.9 - 2022-05-13
• 1.41.8 - 2022-05-13
• 1.41.7 - 2022-05-12
• 1.41.6 - 2022-05-12
• 1.41.5 - 2022-05-12
• 1.41.4 - 2022-05-05
• 1.41.3 - 2022-04-29
• 1.41.2 - 2022-04-28
• 1.41.1 - 2022-04-27
• 1.41.0 - 2022-04-26
• 1.40.1 - 2022-04-26
• 1.40.0 - 2022-04-26
• 1.39.1 - 2022-04-16
• 1.39.0 - 2022-04-16
• 1.38.0 - 2022-04-16
• 1.37.2 - 2022-04-13
• 1.37.1 - 2022-04-04
• 1.37.0 - 2022-03-28
• 1.36.0 - 2022-03-02
• 1.35.1 - 2022-02-21
• 1.35.0 - 2022-02-17
• 1.34.0 - 2022-02-09
• 1.33.0 - 2022-02-04
• 1.32.2 - 2022-02-04
• 1.32.1 - 2022-02-03
• 1.32.0 - 2022-01-21
• 1.31.0 - 2021-11-24

from @solana/web3.js GitHub release notes

Commit messages

Package name: @solana/web3.js

• 41e5eab fix: replace bigint literals with `BigInt` constructors (fix: replace bigint literals with BigInt constructors solana-labs/solana#27930)
• ddb5d7b chore: remove Buffer from PublicKeyInitData (web3.js: remove Buffer from PublicKeyInitData solana-labs/solana#27888)
• 4816908 feat: add isAccountWritable and isAccountSigner to MessageV0 (feat: add isAccountWritable and isAccountSigner to MessageV0 solana-labs/solana#27808)
• c169edb chore: fix flakey partialSign test (chore: fix flakey partialSign test solana-labs/solana#27770)
• fd25f3e fix: replace computed max u64 constant with literal (fix: replace computed max u64 constant with literal solana-labs/solana#27765)
• 7004e15 feat: add version getter to VersionedTransaction class (feat: add version getter to VersionedTransaction class solana-labs/solana#27734)
• a11b02d chore: remove failing request units test (chore: remove failing request units test solana-labs/solana#27735)
• fb6b079 chore: update the README for web3.js with compatibility notes (chore: update the README for web3.js with compatibility notes solana-labs/solana#27706)
• 08b0a20 feat: add source field to parsed account key responses (feat: add source field to parsed account key responses solana-labs/solana#27702)
• c876761 fix: ensure that Keypair.secretKey is a Uint8Array (fix: ensure that Keypair.secretKey is a Uint8Array solana-labs/solana#27700)
• cd343f7 fix: replace `TransactionMessage` `accountKeys` field with `payerKey` (fix: replace TransactionMessage accountKeys field with payerKey solana-labs/solana#27653)
• cb42bbe fix: replace js-sha3 with `@ noble/hashes/sha3` (fix: replace js-sha3 with @noble/hashes/sha3 solana-labs/solana#27630)
• 4d01c8a feat: added `authorizeWithSeed` to the vote program in web3.js (feat: added authorizeWithSeed to the vote program in web3.js solana-labs/solana#27627)
• 92ed6a7 fix: recursively size variable size structs in your buffer layouts (fix: recursively size variable size structs in your buffer layouts solana-labs/solana#27624)
• 0ea74ce feat: support versioned txs in `sendTransaction` and `simulateTransaction` (feat: support versioned txs in sendTransaction and simulateTransaction solana-labs/solana#27528)
• f255bc5 feat: add `TransactionMessage` class (feat: add TransactionMessage class solana-labs/solana#27526)
• e7ceb19 feat: implement message v0 compilation (feat: implement message v0 compilation solana-labs/solana#27524)
• ae708ce fix: add compute units to jsonrpc parser (fix: add compute units to jsonrpc parser solana-labs/solana#27554)
• e71d0b4 Revert "fix: add compute units to jsonrpc parser" (Revert "fix: add compute units to jsonrpc parser" solana-labs/solana#27553)
• 4f9f1bc fix: add compute units to jsonrpc parser (fix: add compute units to jsonrpc parser solana-labs/solana#27466)
• 0f27496 feat: update `Connection` to support versioned transactions (feat: update Connection to support versioned transactions solana-labs/solana#27068)
• 0f013f0 feat: add VersionedMessage.deserializeMessageVersion utility function (feat: add VersionedMessage.deserializeMessageVersion utility function solana-labs/solana#27415)
• 7141986 fix: replace tweetnacl impl
• ef5a6da Update rollup script to exclude new secp256k1 and hmac/sha256 dependencies (Update rollup script to exclude new secp256k1 and hmac/sha256 dependencies solana-labs/solana#27428)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs