[Snyk] Upgrade @solana/web3.js from 1.31.0 to 1.67.0

[snyk-bot]

Snyk has created this PR to upgrade @solana/web3.js from 1.31.0 to 1.67.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 79 versions ahead of your current version.
• The recommended version was released 21 days ago, on 2022-11-29.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-101-1292345	261/1000 Why? CVSS 5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @solana/web3.js

• 1.67.0 - 2022-11-29
  

  1.67.0 (2022-11-29)

  Features

  • a nonce-based transaction confirmation strategy for web3.js (#25839) (7906c9f)
• 1.66.5 - 2022-11-29
  

  1.66.5 (2022-11-29)

  Bug Fixes

  • verify commitment level when confirming transactions with one-shot fetch (#28969) (a206ab6)
• 1.66.4 - 2022-11-29
  

  1.66.4 (2022-11-29)

  Bug Fixes

  • remove Buffer from transaction signature verification (#27868) (7498c1a)
• 1.66.3 - 2022-11-28
  

  1.66.3 (2022-11-28)

  Bug Fixes

  • add confirmation status to ConfirmedSignatureInfo web3.js response (#28555) (f6fd2cf)
  • web3.js transaction confirmation now double-checks for already-confirmed txs (#28290) (772c788)
• 1.66.2 - 2022-10-21
  

  1.66.2 (2022-10-21)

  Bug Fixes

  • incorrect error message for getFeeForMessage (#28529) (eaafcf0)
• 1.66.1 - 2022-10-17
  

  1.66.1 (2022-10-17)

  Bug Fixes

  • wrap _rpcWebSocketGeneration around when about to overflow (#28428) (29be3d4)
• 1.66.0 - 2022-10-16
  

  1.66.0 (2022-10-16)

  Features

  • add getMultipleParsedAccounts method (#28414) (c5b3cd9)
• 1.65.0 - 2022-10-14
  

  1.65.0 (2022-10-14)

  Features

  • add dataSlice param to account fetching config (#28389) (8b3cab1)
• 1.64.0 - 2022-10-11
  

  1.64.0 (2022-10-11)

  Features

  • add getParsedBlock method to Connection (#28345) (b066139)
• 1.63.1 - 2022-09-24
  

  1.63.1 (2022-09-24)

  Bug Fixes

  • improve MessageV0.getAccountKeys API ergonomics (#28042) (8f5ba1b)
• 1.63.0 - 2022-09-22
• 1.62.1 - 2022-09-20
• 1.62.0 - 2022-09-15
• 1.61.1 - 2022-09-13
• 1.61.0 - 2022-09-13
• 1.60.0 - 2022-09-09
• 1.59.1 - 2022-09-07
• 1.59.0 - 2022-09-07
• 1.58.0 - 2022-09-07
• 1.57.0 - 2022-09-07
• 1.56.2 - 2022-09-01
• 1.56.1 - 2022-09-01
• 1.56.0 - 2022-08-31
• 1.55.0 - 2022-08-29
• 1.54.1 - 2022-08-28
• 1.54.0 - 2022-08-25
• 1.53.0 - 2022-08-14
• 1.52.0 - 2022-08-11
• 1.51.0 - 2022-08-10
• 1.50.1 - 2022-07-25
• 1.50.0 - 2022-07-22
• 1.49.0 - 2022-07-22
• 1.48.0 - 2022-07-13
• 1.47.4 - 2022-07-13
• 1.47.3 - 2022-07-02
• 1.47.2 - 2022-07-02
• 1.47.1 - 2022-07-01
• 1.47.0 - 2022-06-30
• 1.46.0 - 2022-06-29
• 1.45.0 - 2022-06-29
• 1.44.3 - 2022-06-27
• 1.44.2 - 2022-06-21
• 1.44.1 - 2022-06-17
• 1.44.0 - 2022-06-10
• 1.43.6 - 2022-06-07
• 1.43.5 - 2022-06-04
• 1.43.4 - 2022-05-30
• 1.43.3 - 2022-05-30
• 1.43.2 - 2022-05-26
• 1.43.1 - 2022-05-20
• 1.43.0 - 2022-05-20
• 1.42.0 - 2022-05-15
• 1.41.10 - 2022-05-14
• 1.41.9 - 2022-05-13
• 1.41.8 - 2022-05-13
• 1.41.7 - 2022-05-12
• 1.41.6 - 2022-05-12
• 1.41.5 - 2022-05-12
• 1.41.4 - 2022-05-05
• 1.41.3 - 2022-04-29
• 1.41.2 - 2022-04-28
• 1.41.1 - 2022-04-27
• 1.41.0 - 2022-04-26
• 1.40.1 - 2022-04-26
• 1.40.0 - 2022-04-26
• 1.39.1 - 2022-04-16
• 1.39.0 - 2022-04-16
• 1.38.0 - 2022-04-16
• 1.37.2 - 2022-04-13
• 1.37.1 - 2022-04-04
• 1.37.0 - 2022-03-28
• 1.36.0 - 2022-03-02
• 1.35.1 - 2022-02-21
• 1.35.0 - 2022-02-17
• 1.34.0 - 2022-02-09
• 1.33.0 - 2022-02-04
• 1.32.2 - 2022-02-04
• 1.32.1 - 2022-02-03
• 1.32.0 - 2022-01-21
• 1.31.0 - 2021-11-24

from @solana/web3.js GitHub release notes

Commit messages

Package name: @solana/web3.js

• 7906c9f feat: a nonce-based transaction confirmation strategy for web3.js (feat: a nonce-based transaction confirmation strategy for web3.js solana-labs/solana#25839)
• a206ab6 fix: verify commitment level when confirming transactions with one-shot fetch (fix: verify commitment level when confirming transactions with one-shot fetch solana-labs/solana#28969)
• 7498c1a fix: remove Buffer from transaction signature verification (web3.js: remove Buffer from signature verification solana-labs/solana#27868)
• f6fd2cf fix: add confirmation status to ConfirmedSignatureInfo web3.js response (Add confirmation status to ConfirmedSignatureInfo web3 response solana-labs/solana#28555)
• 772c788 fix: web3.js transaction confirmation now double-checks for already-confirmed txs (web3.js: add getSignatureStatuses to confirm transaction solana-labs/solana#28290)
• ed1fe6d ci: fix wrong path (ci: fix wrong path solana-labs/solana#28700)
• 62a4be4 chore: web3js get rid of Travis (chore: web3js get rid of Travis solana-labs/solana#28695)
• a69efa4 chore: bump node version to 16 (chore: bump node version to 16 solana-labs/solana#28693)
• dac470c chore: update Solana docs and code comments that specify "BPF" to "SBF"
• eaafcf0 fix: incorrect error message for getFeeForMessage (fix: incorrect error message for getFeeForMessage solana-labs/solana#28529)
• 3a24350 chore: upgrade eslint in @ solana/web3.js
• 24cace5 chore: upgrade Mocha to 10.1.0
• 3a7d6db test: repair tests, `space` having been added to the account response (test: repair tests, space having been added to the account response solana-labs/solana#28518)
• f99dff4 chore: bump vm2 from 3.9.9 to 3.9.11 in /web3.js (chore: bump vm2 from 3.9.9 to 3.9.11 in /web3.js solana-labs/solana#28118)
• 29be3d4 fix: wrap _rpcWebSocketGeneration around when about to overflow (fix: wrap _rpcWebSocketGeneration around when about to overflow solana-labs/solana#28428)
• c5b3cd9 feat: add getMultipleParsedAccounts method (feat: add getMultipleParsedAccounts method solana-labs/solana#28414)
• 8b3cab1 feat: add dataSlice param to account fetching config (feat: add dataSlice param to account fetching config solana-labs/solana#28389)
• fbe2a2f chore: move programs/bpf to programs/sbf
• e674c60 chore: improve default PublicKey docs (docs: replace zeros comments with ones solana-labs/solana#28372)
• b066139 feat: add getParsedBlock method to Connection (feat: add getParsedBlock method to Connection solana-labs/solana#28345)
• 8f5ba1b fix: improve `MessageV0.getAccountKeys` API ergonomics (fix: improve MessageV0.getAccountKeys API ergonomics solana-labs/solana#28042)
• dee241d feat: implement addSignature in VersionedTransaction (web3.js: Implement addSignature in VersionedTransaction solana-labs/solana#27945)
• 41e5eab fix: replace bigint literals with `BigInt` constructors (fix: replace bigint literals with BigInt constructors solana-labs/solana#27930)
• ddb5d7b chore: remove Buffer from PublicKeyInitData (web3.js: remove Buffer from PublicKeyInitData solana-labs/solana#27888)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs