[Snyk] Upgrade @solana/web3.js from 1.31.0 to 1.47.0

[Balantion2020]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade @solana/web3.js from 1.31.0 to 1.47.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 42 versions ahead of your current version.
• The recommended version was released 21 days ago, on 2022-06-30.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-101-1292345	261/1000 Why? CVSS 5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @solana/web3.js

• 1.47.0 - 2022-06-30
  

  1.47.0 (2022-06-30)

  Features

  • web3.js RPC errors now hold the error code and data on the error object (#26318) (f4d9f51)
• 1.46.0 - 2022-06-29
  

  1.46.0 (2022-06-29)

  Features

  • add minContextSlot configuration to (almost) all web3.js methods (#26296) (6482d0d)
• 1.45.0 - 2022-06-29
  

  1.45.0 (2022-06-29)

  Features

  • add custom version HTTP header string to RPC requests (6e009d8)
• 1.44.3 - 2022-06-27
  

  1.44.3 (2022-06-27)

  Bug Fixes

  • always use the nonce as the recent blockhash; never overwrite it (#25829) (2f80949)
• 1.44.2 - 2022-06-21
  

  1.44.2 (2022-06-21)

  Bug Fixes

  • getTransactions() now returns the expected datatype (#26099) (af0d949)
• 1.44.1 - 2022-06-17
  

  1.44.1 (2022-06-17)

  Bug Fixes

  • export custom transaction confirmation error classes (fb2aeaa)
• 1.44.0 - 2022-06-10
  

  1.44.0 (2022-06-10)

  Features

  • nonce: adds system instruction to upgrade legacy nonce versions (#25789) (5047369)
• 1.43.6 - 2022-06-07
  

  1.43.6 (2022-06-07)

  Bug Fixes

  • alias TransactionCtorFields_DEPRECATED back to the way it was for back-compat (ca780d8)
• 1.43.5 - 2022-06-04
  

  1.43.5 (2022-06-04)

  Bug Fixes

  • repair sort order of pubkeys when compiling messages (6b105ee)
• 1.43.4 - 2022-05-30
  

  1.43.4 (2022-05-30)

  Bug Fixes

  • serializing transactions; sort that takes less time and memory (f119e02)
• 1.43.3 - 2022-05-30
• 1.43.2 - 2022-05-26
• 1.43.1 - 2022-05-20
• 1.43.0 - 2022-05-20
• 1.42.0 - 2022-05-15
• 1.41.10 - 2022-05-14
• 1.41.9 - 2022-05-13
• 1.41.8 - 2022-05-13
• 1.41.7 - 2022-05-12
• 1.41.6 - 2022-05-12
• 1.41.5 - 2022-05-12
• 1.41.4 - 2022-05-05
• 1.41.3 - 2022-04-29
• 1.41.2 - 2022-04-28
• 1.41.1 - 2022-04-27
• 1.41.0 - 2022-04-26
• 1.40.1 - 2022-04-26
• 1.40.0 - 2022-04-26
• 1.39.1 - 2022-04-16
• 1.39.0 - 2022-04-16
• 1.38.0 - 2022-04-16
• 1.37.2 - 2022-04-13
• 1.37.1 - 2022-04-04
• 1.37.0 - 2022-03-28
• 1.36.0 - 2022-03-02
• 1.35.1 - 2022-02-21
• 1.35.0 - 2022-02-17
• 1.34.0 - 2022-02-09
• 1.33.0 - 2022-02-04
• 1.32.2 - 2022-02-04
• 1.32.1 - 2022-02-03
• 1.32.0 - 2022-01-21
• 1.31.0 - 2021-11-24

from @solana/web3.js GitHub release notes

Commit messages

Package name: @solana/web3.js

• f4d9f51 feat: web3.js RPC errors now hold the error `code` and `data` on the error object (feat: web3.js RPC errors now hold the error code and data on the error object solana-labs/solana#26318)
• 6482d0d feat: add `minContextSlot` configuration to (almost) all web3.js methods (feat: add minContextSlot configuration to (almost) all web3.js methods solana-labs/solana#26296)
• 6e009d8 feat: add custom version HTTP header string to RPC requests
• 5790271 test: compile web3.js tests in such a way that you can use es2020+ syntax without crashing Mocha
• 5a8625a chore: upgrade `rpc-websockets` to eliminate bad `circular-json` dependency
• 2f80949 fix: always use the nonce as the recent blockhash; never overwrite it (fix: nonce-based Transactions no longer mutate the transaction in place when you compileMessage solana-labs/solana#25829)
• 0b3de2b chore: fix types of `RpcRequest` and `RpcBatchRequest` (chore: correct the types of Rpc{Batch}Request to prevent type errors in Connection.ts solana-labs/solana#26102)
• af0d949 fix: `getTransactions()` now returns the expected datatype (Fix getTransactions web3.js method solana-labs/solana#26099)
• fb2aeaa fix: export custom transaction confirmation error classes
• 5047369 feat(nonce): adds system instruction to upgrade legacy nonce versions (adds system instruction to upgrade legacy nonce versions solana-labs/solana#25789)
• e8b1cea chore: bump semantic-release from 18.0.1 to 19.0.3 in /web3.js (chore: bump semantic-release from 18.0.1 to 19.0.3 in /web3.js solana-labs/solana#25864)
• ca780d8 fix: alias `TransactionCtorFields_DEPRECATED` back to the way it was for back-compat
• 6b105ee fix: repair sort order of pubkeys when compiling messages
• a52f423 chore: bump semver-regex from 3.1.3 to 3.1.4 in /web3.js (chore: bump semver-regex from 3.1.3 to 3.1.4 in /web3.js solana-labs/solana#25777)
• 8e088f8 chore: bump @ commitlint/config-conventional in /web3.js (chore: bump @commitlint/config-conventional from 15.0.0 to 17.0.2 in /web3.js solana-labs/solana#25691)
• f119e02 fix: serializing transactions; sort that takes less time and memory
• 363998a test: massage tests from PR 25641
• e6327c9 fix: sort accountMetas after deduping
• 36f7c04 fix: web3.js fork fetch for browsers
• 2af4bc1 fix: correct the types of the fetch infra in web3.js
• c35397c chore: augment build script to build forked modules into correct bundles
• 7f33484 chore: bump @ commitlint/travis-cli from 16.2.4 to 17.0.0 in /web3.js (chore: bump @commitlint/travis-cli from 16.2.4 to 17.0.0 in /web3.js solana-labs/solana#25457)
• c1378cd chore: bump @ babel/preset-env from 7.16.11 to 7.18.0 in /web3.js (chore: bump @babel/preset-env from 7.16.11 to 7.18.0 in /web3.js solana-labs/solana#25455)
• 344f1d4 chore: bump @ rollup/plugin-commonjs from 21.0.3 to 22.0.0 in /web3.js (chore: bump @rollup/plugin-commonjs from 21.0.3 to 22.0.0 in /web3.js solana-labs/solana#25454)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs