[Snyk] Upgrade web3 from 4.0.2 to 4.12.1 #3

Mmagkooo · 2024-10-04T05:04:28Z

Snyk has created this PR to upgrade web3 from 4.0.2 to 4.12.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 278 versions ahead of your current version.
The recommended version was released on a month ago.

Issues fixed by the recommended upgrade:

Issue	Score	Exploit Maturity
Improper Verification of Cryptographic Signature SNYK-JS-ELLIPTIC-7577916	776	Proof of Concept
Improper Verification of Cryptographic Signature SNYK-JS-ELLIPTIC-7577917	776	Proof of Concept
Improper Verification of Cryptographic Signature SNYK-JS-ELLIPTIC-7577918	776	Proof of Concept
Prototype Pollution SNYK-JS-WEB3UTILS-6229337	776	Proof of Concept
Denial of Service (DoS) SNYK-JS-WS-7266574	776	Proof of Concept

Release notes

Package name: web3

4.12.1 - 2024-08-23
Hot fix

[4.12.1]

Fixed

web3-eth-accounts
- Revert TransactionFactory.registerTransactionType if there is a version mistatch between web3-eth and web3-eth-accounts and fix nextjs problem. (#7216)
What's Changed
- fix yml by @ avkos in #6803
4.12.1-dev.e746566.0 - 2024-08-22
4.12.1-dev.0b75589.0 - 2024-08-23
4.12.0 - 2024-08-22
[4.12.0]

Fixed

web3-core
- setConfig() fix for setMaxListenerWarningThreshold fix (#5079)
web3-eth-accounts
- Fix TransactionFactory.registerTransactionType not working, if there is a version mistatch between web3-eth and web3-eth-accounts by saving extraTxTypes at globals. (#7197)
Added

web3-eth-accounts
- Added public function signMessageWithPrivateKey (#7174)
web3-eth-contract
- Added populateTransaction to the contract.deploy(...) properties. (#7197)
web3-providers-http
- Added statusCode of response in ResponseError, statusCode is optional property in ResponseError.
web3-rpc-providers
- Updated rate limit error of QuickNode provider for HTTP transport
- Added optional HttpProviderOptions | SocketOptions in Web3ExternalProvider and QuickNodeProvider for provider configs
web3-errors
- Added optional statusCode property of response in ResponseError.
Changed

web3-eth-contract
- The returnred properties of contract.deploy(...) are structured with a newly created class named DeployerMethodClass. (#7197)
- Add a missed accepted type for the abi parameter, at dataInputEncodeMethodHelper and getSendTxParams. (#7197)
What's Changed
- Cookbook integration branch by @ SantiagoDevRel in #7178
- feat(glossary): updated glossary by @ EmmanuelOluwafemi in #7168
- fix infura tests and secrets by @ luu-alex in #7163
- Zk sync plugin related changes by @ avkos in #7174
- 4x tests updates by @ jdevcs in #7162
- feat(docs): Expand web3 config guide by @ mmyyrroonn in #7131
- Fix 7055 one of with scalar value and string by @ mmyyrroonn in #7173
- Quicknode provider update by @ jdevcs in #7195
- Web3 RPC Providers support of configuration of selected transport by @ jdevcs in #7205
- Refactor some parts of contract and accounts packages by @ Muhammad-Altabba in #7197
New Contributors
- @ EmmanuelOluwafemi made their first contribution in #7168
- @ mmyyrroonn made their first contribution in #7131
4.11.2-dev.f87ffbe.0 - 2024-08-01
4.11.2-dev.dee14ec.0 - 2024-07-30
4.11.2-dev.d9d0391.0 - 2024-08-20
4.11.2-dev.cbbbd84.0 - 2024-07-24
4.11.2-dev.8b435c1.0 - 2024-08-06
4.11.2-dev.61e9e06.0 - 2024-08-02
4.11.2-dev.60fc197.0 - 2024-08-21
4.11.2-dev.5080e80.0 - 2024-08-02
4.11.2-dev.4f8e8cc.0 - 2024-08-21
4.11.2-dev.2ef694c.0 - 2024-08-21
4.11.2-dev.0db2b18.0 - 2024-08-08
4.11.2-dev.2706805.0 - 2024-08-02
4.11.1 - 2024-07-24
[4.11.1]

Fixed

web3-errors
- Fixed the undefined data in Eip838ExecutionError constructor (#6905)
web3-eth
- Adds transaction property to be an empty list rather than undefined when no transactions are included in the block (#7151)
- Change method getTransactionReceipt to not be casted as TransactionReceipt to give proper return type (#7159)
web3
- Remove redundant constructor of contractBuilder (#7150)
What's Changed
- fix(web3-errors): the undefined data in Eip838ExecutionError (#6905) by @ jdevcs in #7147
- Fix getblock.transactions by @ luu-alex in #7151
- Tx Types and ERC20 token transaction by @ SantiagoDevRel in #7156
- remove redundant constructor of ContractBuilder by @ agj017 in #7150
- Fix transaction receipt return type by @ luu-alex in #7159
- feat/docs/plugin-middleware by @ danforbes in #7158
New Contributors
- @ agj017 made their first contribution in #7150
Full Changelog: v4.11.0...v4.11.1
4.11.1-dev.e5efe49.0 - 2024-07-22
4.11.1-dev.cbcfc18.0 - 2024-07-22
4.11.1-dev.9afaa61.0 - 2024-07-16
4.11.1-dev.6b80cf0.0 - 2024-07-12
4.11.1-dev.5f6deeb.0 - 2024-07-22
4.11.1-dev.5ad7e5b.0 - 2024-07-17
4.11.1-dev.463d070.0 - 2024-07-11
4.11.0 - 2024-07-11
[4.11.0]

Fixed

web3-eth-abi
- fix encodedata in EIP-712 (#7095)
web3-utils
- _sendPendingRequests will catch unhandled errors from _sendToSocket (#6968)
web3-eth
- Fixed geth issue when running a new instance, transactions will index when there are no blocks created (#7098)
Changed

web3-eth-accounts
- baseTransaction method updated (#7095)
web3-providers-ws
- Update dependancies (#7109)
web3-rpc-providers
- Change request return type Promise<ResultType> to Promise<JsonRpcResponseWithResult<ResultType>> (#7102)
Added

web3-eth-contract
- populateTransaction was added to contract methods (#7124)
- Contract has setTransactionMiddleware and getTransactionMiddleware for automatically passing to sentTransaction for deploy and send functions (#7138)
web3-rpc-providers
- When error is returned with code 429, throw rate limit error (#7102)
web3
- web3.eth.Contract will get transaction middleware and use it, if web3.eth has transaction middleware. (#7138)
4.10.1-dev.89711ab.0 - 2024-07-10
4.10.1-dev.1436228.0 - 2024-07-09
4.10.0 - 2024-06-17
[4.10.0]

Added

web3
- Now when existing packages are added in web3, will be avalible for plugins via context. (#7088)
web3-core
- Now when existing packages are added in web3, will be avalible for plugins via context. (#7088)
web3-eth
- sendTransaction in rpc_method_wrappers accepts optional param of TransactionMiddleware (#7088)
- WebEth has setTransactionMiddleware and getTransactionMiddleware for automatically passing to sentTransaction (#7088)
web3-eth-ens
- getText now supports first param Address
- getName has optional second param checkInterfaceSupport
web3-types
- Added result as optional never and error as optional never in type JsonRpcNotification` (#7091)
- Added JsonRpcNotfication as a union type in JsonRpcResponse (#7091)
web3-rpc-providers
- Alpha release
Fixed

web3-eth-ens
- getName reverse resolution
What's Changed
- release/v4.9.0 by @ luu-alex in #7057
- fix(docs): intro by @ danforbes in #7056
- coverage increase by @ jdevcs in #7051
- 6992 getText update and getName fix by @ jdevcs in #7047
- web3 external provider - Quicknode by @ jdevcs in #7019
- fix(docs): quickstart by @ danforbes in #7062
- Fix SNYK for 4.x by @ avkos in #7064
- Use .snyk file for all projects by @ avkos in #7071
- fix(docs): sidebar by @ danforbes in #7063
- fix(docs): mastering providers by @ danforbes in #7070
- Remove .snyk files by @ avkos in #7073
- 100% Coverage web3-utills by @ Muhammad-Altabba in #7042
- chore(docs): formatting by @ danforbes in #7072
- update gas estimation test by @ luu-alex in #7074
- fix(docs): contract-tutorial-hardhat-node by @ danforbes in #7076
- fix(docs): header-nav by @ danforbes in #7082
- fix(docs): introduction by @ danforbes in #7083
- fix(docs): contracts-tutorial by @ danforbes in #7084
- chore(docs): provider-tutorials by @ danforbes in #7085
- fix(docs): mastering-accounts by @ danforbes in #7089
- transaction middleware by @ jdevcs in #7088
- add test coverage to web3-core by @ luu-alex in #7091
Full Changelog: v4.9.0...v4.10.0
4.9.1-dev.fd2982d.0 - 2024-05-23
4.9.1-dev.f687df6.0 - 2024-05-29
4.9.1-dev.b63af9f.0 - 2024-05-30
4.9.1-dev.962b99f.0 - 2024-05-24
4.9.1-dev.9086b98.0 - 2024-05-30
4.9.1-dev.7537f03.0 - 2024-05-23
4.9.1-dev.692987a.0 - 2024-05-24
4.9.1-dev.683be62.0 - 2024-05-28
4.9.1-dev.22c07ad.0 - 2024-05-27
4.9.1-dev.7084665.0 - 2024-05-29
4.9.0 - 2024-05-23
What's Changed
- Release/4.8.0 by @ luu-alex in #6982
- web3 middleware by @ jdevcs in #6951
- Add default return format to the context by @ avkos in #6947
- Events guide 6741 by @ SantiagoDevRel in #6983
- Fix towei scientific notation by @ luu-alex in #6908
- fix(validator): generate abi name if not provided by @ MaxMustermann2 in #6981
- Plugin guide 6840 draft by @ SantiagoDevRel in #6941
- Compare package size (wihtout image) by @ SantiagoDevRel in #6994
- fixed broken links by @ SantiagoDevRel in #7005
- Added plugin videos to guide by @ SantiagoDevRel in #7004
- Utils guide by @ SantiagoDevRel in #7008
- Add the missing types to the ”accounts“ by @ jdevcs in #7011
- Add extra changes to make possibility add eip4844 type as a plugin by @ avkos in #7000
- add drips funding by @ GregTheGreek in #7023
- Tests & ESLint Improvements by @ avkos in #7012
- Added troubleshooting example by @ SantiagoDevRel in #7009
- Implement a way to know which response corresponds to which request in the middleware by @ avkos in #7028
- Add type checking to unit tests by @ avkos in #7027
- fix(glossary): links by @ danforbes in #7034
- Add interactive code editor for tutorials by @ avkos in #7036
- fix: web3-validator browser target removed by @ PeKne in #7016
- catching promise - legacy provider error by @ luu-alex in #7022
- web3modal documentation by @ luu-alex in #7041
- add gas conditional if simple transaction by @ luu-alex in #7043
- fix(#7044): toWei trim strings with more than 20 decimal places by @ gordon-to in #7045
- allow fromwei and toWei to accept numbers as units by @ luu-alex in #7052
- use bigint power by @ luu-alex in #7054
- Fix format schema with list of objects by @ avkos in #7040
- 6801 Fill gas price when baseFeePerGas==='0x0' by @ avkos in #7050
New Contributors
- @ MaxMustermann2 ma...

Snyk has created this PR to upgrade web3 from 4.0.2 to 4.12.1. See this package in npm: web3 See this project in Snyk: https://app.snyk.io/org/mmagkooo-5L3pixNTddTCRxxAFN5RFd/project/b64ffa8e-25dd-4b8f-9cdb-defefb6c0ba0?utm_source=github&utm_medium=referral&page=upgrade-pr

[Snyk] Upgrade web3 from 4.0.2 to 4.12.1 #3

Are you sure you want to change the base?

[Snyk] Upgrade web3 from 4.0.2 to 4.12.1 #3

Conversation

Mmagkooo commented Oct 4, 2024

Snyk has created this PR to upgrade web3 from 4.0.2 to 4.12.1.

Issues fixed by the recommended upgrade:

[4.12.1]

Fixed

web3-eth-accounts

What's Changed

[4.12.0]

Fixed

web3-core

web3-eth-accounts

Added

web3-eth-accounts

web3-eth-contract

web3-providers-http

web3-rpc-providers

web3-errors

Changed

web3-eth-contract

What's Changed

New Contributors

[4.11.1]

Fixed

web3-errors

web3-eth

web3

What's Changed

New Contributors

[4.11.0]

Fixed

web3-eth-abi

web3-utils

web3-eth

Changed

web3-eth-accounts

web3-providers-ws

web3-rpc-providers

Added

web3-eth-contract

web3-rpc-providers

web3

[4.10.0]

Added

web3

web3-core

web3-eth

web3-eth-ens

web3-types

web3-rpc-providers

Fixed

web3-eth-ens

What's Changed

What's Changed

New Contributors