[Snyk] Upgrade @solana/web3.js from 1.31.0 to 1.54.1

[snyk-bot]

Snyk has created this PR to upgrade @solana/web3.js from 1.31.0 to 1.54.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 55 versions ahead of your current version.
• The recommended version was released 21 days ago, on 2022-08-28.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-101-1292345	261/1000 Why? CVSS 5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @solana/web3.js

• 1.54.1 - 2022-08-28
  

  1.54.1 (2022-08-28)

  Bug Fixes

  • replace tweetnacl impl (7141986)
• 1.54.0 - 2022-08-25
  

  1.54.0 (2022-08-25)

  Features

  • add support for creating version 0 transactions (#27142) (8e30e66)
• 1.53.0 - 2022-08-14
  

  1.53.0 (2022-08-14)

  Features

  • add getAddressLookupTable method to Connection (#27127) (895de4c)
• 1.52.0 - 2022-08-11
  

  1.52.0 (2022-08-11)

  Features

  • support minContextSlot in getParsedAccountInfo method (#27084) (7d05857)
• 1.51.0 - 2022-08-10
  

  1.51.0 (2022-08-10)

  Features

  • handle loadedAddresses field in tx meta responses (#27065) (bbfd5d3)
• 1.50.1 - 2022-07-25
  

  1.50.1 (2022-07-25)

  Bug Fixes

  • (web3.js) clear the idle timer whenever the websocket closes (#26734) (091faf5)
• 1.50.0 - 2022-07-22
  

  1.50.0 (2022-07-22)

  Features

  • web3.js: add support for get stake minimum delegation (#26682) (85a6a3f)

  Bug Fixes

  • add maxSupportedTransactionVersion config to remaining getTransaction calls (7675695)
• 1.49.0 - 2022-07-22
  

  1.49.0 (2022-07-22)

  Features

  • add maxSupportedTransactionVersion option to getBlock and getTransaction (#26726) (411cfdd)
• 1.48.0 - 2022-07-13
  

  1.48.0 (2022-07-13)

  Features

  • added web3 bindings for Address Lookup Table Program instructions (#26469) (e1567ab)
• 1.47.4 - 2022-07-13
  

  1.47.4 (2022-07-13)

  Bug Fixes

  • fork URL and fetch for React Native in web3.js (#26604) (d217b6b)
• 1.47.3 - 2022-07-02
• 1.47.2 - 2022-07-02
• 1.47.1 - 2022-07-01
• 1.47.0 - 2022-06-30
• 1.46.0 - 2022-06-29
• 1.45.0 - 2022-06-29
• 1.44.3 - 2022-06-27
• 1.44.2 - 2022-06-21
• 1.44.1 - 2022-06-17
• 1.44.0 - 2022-06-10
• 1.43.6 - 2022-06-07
• 1.43.5 - 2022-06-04
• 1.43.4 - 2022-05-30
• 1.43.3 - 2022-05-30
• 1.43.2 - 2022-05-26
• 1.43.1 - 2022-05-20
• 1.43.0 - 2022-05-20
• 1.42.0 - 2022-05-15
• 1.41.10 - 2022-05-14
• 1.41.9 - 2022-05-13
• 1.41.8 - 2022-05-13
• 1.41.7 - 2022-05-12
• 1.41.6 - 2022-05-12
• 1.41.5 - 2022-05-12
• 1.41.4 - 2022-05-05
• 1.41.3 - 2022-04-29
• 1.41.2 - 2022-04-28
• 1.41.1 - 2022-04-27
• 1.41.0 - 2022-04-26
• 1.40.1 - 2022-04-26
• 1.40.0 - 2022-04-26
• 1.39.1 - 2022-04-16
• 1.39.0 - 2022-04-16
• 1.38.0 - 2022-04-16
• 1.37.2 - 2022-04-13
• 1.37.1 - 2022-04-04
• 1.37.0 - 2022-03-28
• 1.36.0 - 2022-03-02
• 1.35.1 - 2022-02-21
• 1.35.0 - 2022-02-17
• 1.34.0 - 2022-02-09
• 1.33.0 - 2022-02-04
• 1.32.2 - 2022-02-04
• 1.32.1 - 2022-02-03
• 1.32.0 - 2022-01-21
• 1.31.0 - 2021-11-24

from @solana/web3.js GitHub release notes

Commit messages

Package name: @solana/web3.js

• 7141986 fix: replace tweetnacl impl
• ef5a6da Update rollup script to exclude new secp256k1 and hmac/sha256 dependencies (Update rollup script to exclude new secp256k1 and hmac/sha256 dependencies solana-labs/solana#27428)
• f8b5608 [web3.js] Replace sha256 and secp256k1 impls ([web3.js] Replace sha256 and secp256k1 impls solana-labs/solana#27390)
• 8e30e66 feat: add support for creating version 0 transactions (feat: add support for creating version 0 transactions solana-labs/solana#27142)
• 4f2d052 [web3.js] Eliminate dependency on `URL` class ([web3.js] Eliminate dependency on URL class solana-labs/solana#27349)
• 8d5e263 chore: bump eslint-plugin-mocha from 10.0.4 to 10.1.0 in /web3.js (chore: bump eslint-plugin-mocha from 10.0.4 to 10.1.0 in /web3.js solana-labs/solana#27332)
• 40022a3 chore: bump @ commitlint/travis-cli from 17.0.0 to 17.0.3 in /web3.js (chore: bump @commitlint/travis-cli from 17.0.0 to 17.0.3 in /web3.js solana-labs/solana#27331)
• eaa318d chore: bump @ babel/register from 7.17.7 to 7.18.9 in /web3.js (chore: bump @babel/register from 7.17.7 to 7.18.9 in /web3.js solana-labs/solana#27330)
• 9abf36c chore: bump @ babel/core from 7.18.0 to 7.18.13 in /web3.js (chore: bump @babel/core from 7.18.0 to 7.18.13 in /web3.js solana-labs/solana#27329)
• 2cc39ab VoteProgram.safeWithdraw function to safeguard against accidental vote account closures (VoteProgram.safeWithdraw function to safeguard against accidental vote account closures solana-labs/solana#26586)
• 55652a0 chore: bump @ babel/preset-env from 7.18.0 to 7.18.10 in /web3.js (chore: bump @babel/preset-env from 7.18.0 to 7.18.10 in /web3.js solana-labs/solana#27138)
• 659067b chore: add constant for pubkey byte length (chore: add constant for pubkey byte length solana-labs/solana#27134)
• 895de4c feat: add getAddressLookupTable method to Connection (feat: add getAddressLookupTable method to Connection solana-labs/solana#27127)
• 732f8aa chore: restructure utils code
• 81a1d2c chore: restructure program files
• 53dd609 chore: restucture message files
• 9823da7 chore: restructure transaction files
• 7d05857 feat: support minContextSlot in getParsedAccountInfo method (feat: support minContextSlot in getParsedAccountInfo method solana-labs/solana#27084)
• d7ed86a chore: annotate more types as deprecated (chore: annotate more types as deprecated solana-labs/solana#27067)
• bbfd5d3 feat: handle `loadedAddresses` field in tx meta responses (feat: handle loadedAddresses field in tx meta responses solana-labs/solana#27065)
• 3708ea1 chore: update `tweetnacl` dependency to 1.0.3 explicitly (chore: update tweetnacl dependency to 1.0.3 explicitly solana-labs/solana#26907)
• 2dc0551 chore: Update web3.js README to ask that contributions and issues regarding web3.js be filed against the monorepo and not the mirror
• 091faf5 fix: (web3.js) clear the idle timer whenever the websocket closes (fix: (web3.js) clear the idle timer whenever the websocket closes solana-labs/solana#26734)
• 85a6a3f feat(web3.js): add support for get stake minimum delegation (feat(web3.js): add support for get stake minimum delegation solana-labs/solana#26682)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs