Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github May 24, 2023

Bumps elliptic to 6.5.4 and updates ancestor dependencies elliptic, @truffle/contract, web3-eth-abi and @ethersproject/signing-key. These dependencies need to be updated together.

Updates elliptic from 6.5.1 to 6.5.4

Commits

Updates @truffle/contract from 4.1.10 to 4.6.22

Release notes

Sourced from @​truffle/contract's releases.

v5.3.13 – Life is like...

I guess it's true: you never know what you're going to get! 💝

This release fixes a bug to truffle unbox that caused community Truffle Boxes to fail to download. Thanks @​CaleTeeter and @​patrickalphac for identifying this problem.

Apologies to anyone who ran into this bug... hope this fixes things for you! 🙇

How to upgrade

We recommend upgrading to the latest version of Truffle by running:

npm uninstall -g truffle
npm install -g truffle

Changelog

Bug fixes

Internal improvements

  • Allow a few missing values in artifactor/compile-common internals (#4126 by @​bergarces)

v5.3.11 – Mrs. Malinda Russell's Rich Black Cake 🍰

Salutations and happy Friday! 👋🏾

We have another release for you! This week offers a couple of bug fixes, internal improvements and version updates. truffle unbox will now recognize branches that have slashes, like truffle unbox <orgOrName>/repo#branch/with/slashes. In case you didn't know you can create your own Truffle boxes which is a great way to bootstrap your Truffle project: hooray! 🎉

Enjoy, and as always please feel free to reach out through one of these resources.

Changelog

Fixes

Dependency updates

Internal improvements

Commits

Updates web3-eth-abi from 1.2.2 to 1.10.0

Release notes

Sourced from web3-eth-abi's releases.

v1.10.0

Fixed

  • Improved the error propagation in web3-providers-http package to effectively propagate useful error infomation about failed HTTP connections (#5955)
  • Fixed "Uncaught TypeError" calling a contract function that revert using MetaMask (#4454) and related "n.data.substring is not a function", that is raised when there is a revert and web.eth.handleRevert = true (#6000)

Changed

  • transaction.type is now formatted to a hex string before being send to provider (#5979)
  • When sending a transaction, if transaction.type === '0x1' && transaction.accessList === undefined, then transaction.accessList is set to [] (#5979)
  • Removed an unnecessary chainId parameter from toChecksumAddress() function types (#5888)

Added

  • Added support for getPastEvents method to filter allEvents and specific event (#6015)

Security

  • Updated dependencies (#6044)

v1.10.0-rc.0

Fixed

  • Improved the error propagation in web3-providers-http package to effectively propagate useful error infomation about failed HTTP connections (#5955)
  • Fixed "Uncaught TypeError" calling a contract function that revert using MetaMask (#4454) and related "n.data.substring is not a function", that is raised when there is a revert and web.eth.handleRevert = true (#6000)

Changed

  • transaction.type is now formatted to a hex string before being send to provider (#5979)
  • When sending a transaction, if transaction.type === '0x1' && transaction.accessList === undefined, then transaction.accessList is set to [] (#5979)
  • Removed an unnecessary chainId parameter from toChecksumAddress() function types (#5888)

Added

  • Added support for getPastEvents method to filter allEvents and specific event (#6015)

Security

  • Updated dependencies (#6044)

v1.9.0

Fixed

  • Fixed skipped ws-ganache tests (#5759)
  • Fixed "provider started to reconnect error" in web3-provider-ws (#5820)
  • Fixed Error: Number can only safely store up to 53 bits (#5845)
  • Fixed types for packages which have default exports but not declared default export in .d.ts (#5866)
  • Fixed Transaction type by adding missing properties (#5856)

Changed

  • Add optional hexFormat param to getTransaction and getBlock that accepts the value 'hex' (#5845)
  • utils.toNumber and utils.hexToNumber can now return the large unsafe numbers as BigInt, if true was passed to a new optional parameter called bigIntOnOverflow (#5845)
  • Updated @​types/bn.js dependency to 5.1.1 in web3, web3-core and web3-eth-contract as reason mentioned in #5640 (#5885)
  • Add description to error for failed connection on websocket (#5884)

... (truncated)

Changelog

Sourced from web3-eth-abi's changelog.

[1.2.2]

Added

  • localStorage support detection added (#3031)
  • getNetworkType method extended with Görli testnet (#3095)
  • supportsSubscriptions method added to providers (#3116)
  • Add eth.getChainId method (#3113)
  • Minified file added to web3 package (#3131)
  • The transaction confirmation workflow can now be configured (#3130)
  • Additional parameters for accounts.signTransaction added (docs) (#3141)
  • Emit connected event on subscription creation (#3028)
  • TypeScript type definitions added for all modules (#3132)
  • Bloom filters added to web3.utils (#3137)

Fixed

  • Fix allow 0 as a valid fromBlock or toBlock filter param (#1100)
  • Fix randomHex returning inconsistent string lengths (#1490)
  • Fix make isBN minification safe (#1777)
  • Fix incorrect references to BigNumber in utils.fromWei and utils.toWei error messages (#2468)
  • Fix error incorrectly thrown when receipt.status is null (#2183)
  • Fix incorrectly populating chainId param with net_version when signing txs (#2378)
  • regeneratorRuntime error fixed (#3058)
  • Fix accessing event.name where event is undefined (#3014)
  • fixed Web3Utils toHex() for Buffer input (#3021)
  • Fix bubbling up tx signing errors (#2063, #3105)
  • HttpProvider: CORS issue with Firefox and Safari (#2978)
  • Ensure the immutability of the tx object passed to function signTransaction (#2190)
  • Gas check fixed (#2381)
  • Signing issues #1998, #2033, and #1074 fixed (#3125)
  • Fix hexToNumber and hexToNumberString prefix validation (#3086)
  • The receipt will now returned on a EVM error (this got removed on beta.18) (#3129)
  • Fixes transaction confirmations with the HttpProvider (#3140)

[1.2.3]

Fixed

  • Fix perfect gas usage causes tx to error (#3175)
  • Fix regenerator runtime error in web3.min.js (#3155)
  • Fix TS types for eth.subscribe syncing, newBlockHeaders, pendingTransactions (#3159)
  • Improve web3-eth-abi decodeParameters error message (#3134)

[1.2.4]

Fixed

  • Fix npm installation error for scrypt-shim and websocket (#3210)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by jdevcs, a new releaser for web3-eth-abi since your current version.


Updates @ethersproject/signing-key from 5.0.1 to 5.7.0

Release notes

Sourced from @​ethersproject/signing-key's releases.

ethers/v5.7.0 (2022-08-18 16:17)

  • Update PocketProvider to newer URL format. (#2980; 10d07ca)
  • Add new ENS normalization specification for wider UTF-8 support. (#42, #2376, #2754; 14bf407, fce9aaa, f274104)
  • Added ACTION_REJECTED error for UI-based Signers. (d9897e0)
  • Include current baseFee in feeData for easier custom fee calculation. (8314236)
  • Add restrictions for new UTF-8 specification ENS names. (#42, #2376, #2754; e52fbfb)
  • Expand the definition of a WebSocketLike. (#2843; 00114d7)
  • Expanded type for queryFitler to allow string. (#2882; 60da870)
  • Added finalized and safe blockTags. (#3091; 549168c)
  • Added arbitrum-goerli to Networks and AlchemyProvider. (#3246; e72d13e)
  • Add EIP-712 type exports. (#221; 7ce41cd)
  • Added optimism-goerli to AlchemyProvider. (#3246; f1cb0d2)
  • Updated EtherscanProvider for new CommunityResource API throttling. (6bd13c3)
  • Fix old events from being emitted at the beginning of a filter. (#3069, #3094; ea2d245)
  • Fixed Interface signautres missing strings as eventFragments. (#3157; c004ae5)
  • Fix bug in EIP1193Bridge forwarding to the wrong method. (#3166; 17676e9)
  • Use updated Web3 Secret Storage format for JSON wallets. (#3075; 6f57e8b)
  • Relaxed nameprep length requirement dropping RFC-5891 section 4.2.4. (#3161; abdf2e3)
  • Switch to hash.js for ripemd160 on node as it was removed from the default crypto provider in node 17. (#3082; 450694e)
  • Add optimism-kovan to EtherscanProvider. (#3135; 4d3e586)
  • Forward any blockTag along in the FallbackProvider during call. (#3168; ab43e7d)
  • Allow browser fetch option overrides. (#3096; c309df8)

Embedding UMD with SRI:

<script type="text/javascript"
        integrity="sha384-EQi5ynMqKKWGuwfjllsutXzvDo0ubfkYMhKrz5WJJB7PUXnkSo5qxWSy80hu/Zh9"
        crossorigin="anonymous"
        src="https://cdn-cors.ethers.io/lib/ethers-5.7.0.umd.min.js">
</script>

ethers/v5.6.9 (2022-06-17 14:44)

  • Removed Ankr for Ropsten default provider; the merge seems to have broke it. (3790671)
  • Fix NonceManager for increment 0 and provided nonce. (#3062, #3085; 0a28679)
  • Fixed topic filters for numeric types with string values. (#3013; 0078e02)

Embedding UMD with SRI:

<script type="text/javascript"
        integrity="sha384-qU3nvpskWirnJuSLmQWFfAFKbiN5+JKbAEEoTOcPYJu3s1xCe66b66sUER3x5wVF"
        crossorigin="anonymous"
        src="https://cdn-cors.ethers.io/lib/ethers-5.6.9.umd.min.js">
</script>

... (truncated)

Changelog

Sourced from @​ethersproject/signing-key's changelog.

ethers/v5.7.0 (2022-08-18 16:17)

  • Update PocketProvider to newer URL format. (#2980; 10d07ca)
  • Add new ENS normalization specification for wider UTF-8 support. (#42, #2376, #2754; 14bf407, fce9aaa, f274104)
  • Added ACTION_REJECTED error for UI-based Signers. (d9897e0)
  • Include current baseFee in feeData for easier custom fee calculation. (8314236)
  • Add restrictions for new UTF-8 specification ENS names. (#42, #2376, #2754; e52fbfb)
  • Expand the definition of a WebSocketLike. (#2843; 00114d7)
  • Expanded type for queryFitler to allow string. (#2882; 60da870)
  • Added finalized and safe blockTags. (#3091; 549168c)
  • Added arbitrum-goerli to Networks and AlchemyProvider. (#3246; e72d13e)
  • Add EIP-712 type exports. (#221; 7ce41cd)
  • Added optimism-goerli to AlchemyProvider. (#3246; f1cb0d2)
  • Updated EtherscanProvider for new CommunityResource API throttling. (6bd13c3)
  • Fix old events from being emitted at the beginning of a filter. (#3069, #3094; ea2d245)
  • Fixed Interface signautres missing strings as eventFragments. (#3157; c004ae5)
  • Fix bug in EIP1193Bridge forwarding to the wrong method. (#3166; 17676e9)
  • Use updated Web3 Secret Storage format for JSON wallets. (#3075; 6f57e8b)
  • Relaxed nameprep length requirement dropping RFC-5891 section 4.2.4. (#3161; abdf2e3)
  • Switch to hash.js for ripemd160 on node as it was removed from the default crypto provider in node 17. (#3082; 450694e)
  • Add optimism-kovan to EtherscanProvider. (#3135; 4d3e586)
  • Forward any blockTag along in the FallbackProvider during call. (#3168; ab43e7d)
  • Allow browser fetch option overrides. (#3096; c309df8)

ethers/v5.6.9 (2022-06-17 14:44)

  • Removed Ankr for Ropsten default provider; the merge seems to have broke it. (3790671)
  • Fix NonceManager for increment 0 and provided nonce. (#3062, #3085; 0a28679)
  • Fixed topic filters for numeric types with string values. (#3013; 0078e02)

ethers/v5.6.8 (2022-05-24 11:50)

ethers/v5.6.7 (2022-05-20 19:11)

ethers/v5.6.6 (2022-05-12 17:29)

... (truncated)

Commits
  • ec1b958 admin: updated dist files
  • a71f518 admin: update dist files
  • a27ef82 Lock versions for BigNumber fix (#3017).
  • fc1e006 admin: update dist files
  • 7b299dd Enforce 32-byte private key length (2926).
  • b8cda5d admin: updated dist files
  • 73a46ef admin: updated dist files
  • c2c0ce7 Updated dist files.
  • 4e6d121 Updated dist files.
  • 819b1ac Version bumps for bn.js and hash.js to match elliptic and fix some build tool...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

…ning-key

Bumps [elliptic](https://github.com/indutny/elliptic) to 6.5.4 and updates ancestor dependencies [elliptic](https://github.com/indutny/elliptic), [@truffle/contract](https://github.com/trufflesuite/truffle/tree/HEAD/packages/contract), [web3-eth-abi](https://github.com/ethereum/web3.js) and [@ethersproject/signing-key](https://github.com/ethers-io/ethers.js/tree/HEAD/packages/signing-key). These dependencies need to be updated together.


Updates `elliptic` from 6.5.1 to 6.5.4
- [Commits](indutny/elliptic@v6.5.1...v6.5.4)

Updates `@truffle/contract` from 4.1.10 to 4.6.22
- [Release notes](https://github.com/trufflesuite/truffle/releases)
- [Commits](https://github.com/trufflesuite/truffle/commits/@truffle/contract@4.6.22/packages/contract)

Updates `web3-eth-abi` from 1.2.2 to 1.10.0
- [Release notes](https://github.com/ethereum/web3.js/releases)
- [Changelog](https://github.com/web3/web3.js/blob/v1.10.0/CHANGELOG.md)
- [Commits](web3/web3.js@v1.2.2...v1.10.0)

Updates `@ethersproject/signing-key` from 5.0.1 to 5.7.0
- [Release notes](https://github.com/ethers-io/ethers.js/releases)
- [Changelog](https://github.com/ethers-io/ethers.js/blob/v5.7.0/CHANGELOG.md)
- [Commits](https://github.com/ethers-io/ethers.js/commits/v5.7.0/packages/signing-key)

---
updated-dependencies:
- dependency-name: elliptic
  dependency-type: indirect
- dependency-name: "@truffle/contract"
  dependency-type: direct:production
- dependency-name: web3-eth-abi
  dependency-type: direct:production
- dependency-name: "@ethersproject/signing-key"
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label May 24, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant