Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade web3 from 0.20.7 to 4.16.0 #3

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

Boomtokn
Copy link

snyk-top-banner

Snyk has created this PR to upgrade web3 from 0.20.7 to 4.16.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

  • The recommended version is 523 versions ahead of your current version.

  • The recommended version was released 3 months ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Use of Weak Hash
SNYK-JS-CRYPTOJS-6028119
300 No Known Exploit
Release notes
Package name: web3
  • 4.16.0 - 2024-12-03

    What's Changed

  • 4.15.1-dev.e79ace2.0 - 2024-11-19
  • 4.15.1-dev.bde1316.0 - 2024-11-14
  • 4.15.1-dev.b3ee417.0 - 2024-12-03
  • 4.15.1-dev.acdb0c7.0 - 2024-12-03
  • 4.15.1-dev.9aab5cd.0 - 2024-11-14
  • 4.15.1-dev.984cb7c.0 - 2024-11-22
  • 4.15.1-dev.926044b.0 - 2024-11-26
  • 4.15.1-dev.8c55cb0.0 - 2024-11-14
  • 4.15.1-dev.7a8df69.0 - 2024-11-25
  • 4.15.1-dev.7109fb2.0 - 2024-11-21
  • 4.15.1-dev.6af068f.0 - 2024-11-13
  • 4.15.1-dev.6ad1ca9.0 - 2024-11-14
  • 4.15.1-dev.6379aa8.0 - 2024-11-19
  • 4.15.1-dev.6229f4d.0 - 2024-11-19
  • 4.15.1-dev.5eeb2d6.0 - 2024-11-19
  • 4.15.1-dev.56d4aec.0 - 2024-11-19
  • 4.15.1-dev.5437fbc.0 - 2024-11-19
  • 4.15.1-dev.4c55d98.0 - 2024-11-21
  • 4.15.1-dev.471c12b.0 - 2024-11-14
  • 4.15.1-dev.3b122a2.0 - 2024-11-21
  • 4.15.1-dev.1b367e6.0 - 2024-11-14
  • 4.15.1-dev.1724f35.0 - 2024-11-11
  • 4.15.1-dev.0cbc23d.0 - 2024-11-21
  • 4.15.1-dev.098ee6d.0 - 2024-11-06
  • 4.15.1-dev.0915cf4.0 - 2024-11-13
  • 4.15.1-dev.079c558.0 - 2024-11-19
  • 4.15.1-dev.2011192.0 - 2024-11-13
  • 4.15.0 - 2024-11-06

    What's Changed

    New Contributors

    Full Changelog: v4.5.0...v4.15.0

  • 4.14.1-dev.fab66e9.0 - 2024-10-21
  • 4.14.1-dev.efac906.0 - 2024-10-28
  • 4.14.1-dev.ed85cce.0 - 2024-10-21
  • 4.14.1-dev.d446838.0 - 2024-11-04
  • 4.14.1-dev.d3baae6.0 - 2024-10-24
  • 4.14.1-dev.9fa32c9.0 - 2024-11-05
  • 4.14.1-dev.95b4bab.0 - 2024-10-30
  • 4.14.1-dev.70352cd.0 - 2024-10-23
  • 4.14.1-dev.69d83e7.0 - 2024-10-30
  • 4.14.1-dev.4ca66af.0 - 2024-10-23
  • 4.14.1-dev.4aaf915.0 - 2024-11-04
  • 4.14.1-dev.376f192.0 - 2024-10-21
  • 4.14.1-dev.331aa9c.0 - 2024-10-22
  • 4.14.1-dev.07993c2.0 - 2024-11-05
  • 4.14.1-dev.0681f97.0 - 2024-10-24
  • 4.14.1-dev.3687070.0 - 2024-10-22
  • 4.14.1-dev.3283431.0 - 2024-10-31
  • 4.14.0 - 2024-10-21

    What's Changed

    New Contributors

    Full Changelog: v4.13.0...v4.14.0

  • 4.13.1-dev.facc2e6.0 - 2024-10-08
  • 4.13.1-dev.f701406.0 - 2024-10-09
  • 4.13.1-dev.dcd9d6a.0 - 2024-10-02
  • 4.13.1-dev.d6baee6.0 - 2024-09-23
  • 4.13.1-dev.d45b712.0 - 2024-09-24
  • 4.13.1-dev.cc99825.0 - 2024-09-26
  • 4.13.1-dev.c602fc6.0 - 2024-09-24
  • 4.13.1-dev.bbde6ea.0 - 2024-10-11
  • 4.13.1-dev.adf483f.0 - 2024-10-04
  • 4.13.1-dev.aa471e7.0 - 2024-09-24
  • 4.13.1-dev.9edb183.0 - 2024-10-07
  • 4.13.1-dev.822f8c1.0 - 2024-10-16
  • 4.13.1-dev.7c207b8.0 - 2024-10-05
  • 4.13.1-dev.76c468a.0 - 2024-10-04
  • 4.13.1-dev.7008e5c.0 - 2024-10-15
  • 4.13.1-dev.6f9a485.0 - 2024-09-19
  • 4.13.1-dev.69187c5.0 - 2024-10-16
  • 4.13.1-dev.61babcc.0 - 2024-09-24
  • 4.13.1-dev.5a7e302.0 - 2024-09-18
  • 4.13.1-dev.496ed93.0 - 2024-10-07
  • 4.13.1-dev.32c8cc8.0 - 2024-09-26
  • 4.13.1-dev.04da324.0 - 2024-09-26
  • 4.13.0 - 2024-09-18

    What's Changed

    New Contributors

  • 4.12.2-dev.f351e00.0 - 2024-08-23
  • 4.12.2-dev.b86d8ca.0 - 2024-09-09
  • 4.12.2-dev.b3cb1b7.0 - 2024-09-13
  • 4.12.2-dev.a21078b.0 - 2024-09-17
  • 4.12.2-dev.9b32205.0 - 2024-08-28
  • 4.12.2-dev.973ee80.0 - 2024-09-09
  • 4.12.2-dev.7a6e492.0 - 2024-09-05
  • 4.12.2-dev.75df267.0 - 2024-09-09
  • 4.12.2-dev.2f24244.0 - 2024-09-09
  • 4.12.2-dev.27155ea.0 - 2024-09-09
  • 4.12.1 - 2024-08-23

    Hot fix

    [4.12.1]

    Fixed

    web3-eth-accounts

    • Revert TransactionFactory.registerTransactionType if there is a version mistatch between web3-eth and web3-eth-accounts and fix nextjs problem. (#7216)

    What's Changed

  • 4.12.1-dev.e746566.0 - 2024-08-22
  • 4.12.1-dev.0b75589.0 - 2024-08-23
  • 4.12.0 - 2024-08-22

    [4.12.0]

    Fixed

    web3-core

    • setConfig() fix for setMaxListenerWarningThreshold fix (#5079)

    web3-eth-accounts

    • Fix TransactionFactory.registerTransactionType not working, if there is a version mistatch between web3-eth and web3-eth-accounts by saving extraTxTypes at globals. (#7197)

    Added

    web3-eth-accounts

    • Added public function signMessageWithPrivateKey (#7174)

    web3-eth-contract

    • Added populateTransaction to the contract.deploy(...) properties. (#7197)

    web3-providers-http

    • Added statusCode of response in ResponseError, statusCode is optional property in ResponseError.

    web3-rpc-providers

    • Updated rate limit error of QuickNode provider for HTTP transport
    • Added optional HttpProviderOptions | SocketOptions in Web3ExternalProvider and QuickNodeProvider for provider configs

    web3-errors

    • Added optional statusCode property of response in ResponseError.

    Changed

    web3-eth-contract

    • The returnred properties of contract.deploy(...) are structured with a newly created class named DeployerMethodClass. (#7197)
    • Add a missed accepted type for the abi parameter, at dataInputEncodeMethodHelper and getSendTxParams. (#7197)

    What's Changed

Snyk has created this PR to upgrade web3 from 0.20.7 to 4.16.0.

See this package in npm:
web3

See this project in Snyk:
https://app.snyk.io/org/boomtokn/project/801774dc-2ee3-4933-b791-827a2684e154?utm_source=github&utm_medium=referral&page=upgrade-pr
@Boomtokn
Copy link
Author

Boomtokn commented Feb 25, 2025

Snyk checks have failed. 4 issues have been found so far.

Icon Severity Issues
Critical 2
High 2
Medium 0
Low 0

security/snyk check is complete. 4 issues have been found. (View Details)

license/snyk check is complete. No issues have been found. (View Details)

Copy link

New, updated, and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/web3@4.16.0 🔁 npm/web3@0.20.7 None 0 3.46 MB luu-alex

View full report↗︎

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants