[Snyk] Upgrade @solana/web3.js from 1.31.0 to 1.50.1

[snyk-bot]

Snyk has created this PR to upgrade @solana/web3.js from 1.31.0 to 1.50.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 50 versions ahead of your current version.
• The recommended version was released a month ago, on 2022-07-25.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-101-1292345	261/1000 Why? CVSS 5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @solana/web3.js

• 1.50.1 - 2022-07-25
  

  1.50.1 (2022-07-25)

  Bug Fixes

  • (web3.js) clear the idle timer whenever the websocket closes (#26734) (091faf5)
• 1.50.0 - 2022-07-22
  

  1.50.0 (2022-07-22)

  Features

  • web3.js: add support for get stake minimum delegation (#26682) (85a6a3f)

  Bug Fixes

  • add maxSupportedTransactionVersion config to remaining getTransaction calls (7675695)
• 1.49.0 - 2022-07-22
  

  1.49.0 (2022-07-22)

  Features

  • add maxSupportedTransactionVersion option to getBlock and getTransaction (#26726) (411cfdd)
• 1.48.0 - 2022-07-13
  

  1.48.0 (2022-07-13)

  Features

  • added web3 bindings for Address Lookup Table Program instructions (#26469) (e1567ab)
• 1.47.4 - 2022-07-13
  

  1.47.4 (2022-07-13)

  Bug Fixes

  • fork URL and fetch for React Native in web3.js (#26604) (d217b6b)
• 1.47.3 - 2022-07-02
  

  1.47.3 (2022-07-02)

  Bug Fixes

  • ingest only the relevant properties when constructing Transactions (88a5d74)
• 1.47.2 - 2022-07-02
  

  1.47.2 (2022-07-02)

  Bug Fixes

  • getPerformanceSamples no longer breaks when the connection has a default commitment (2f33b79)
  • a much simpler way to prevent getRecentPerformanceSamples from sending a commitment (c660a91)
• 1.47.1 - 2022-07-01
  

  1.47.1 (2022-07-01)

  Bug Fixes

  • web3.js; maxRetries no longer stripped when zero (#26345) (ea9dffa)
• 1.47.0 - 2022-06-30
  

  1.47.0 (2022-06-30)

  Features

  • web3.js RPC errors now hold the error code and data on the error object (#26318) (f4d9f51)
• 1.46.0 - 2022-06-29
  

  1.46.0 (2022-06-29)

  Features

  • add minContextSlot configuration to (almost) all web3.js methods (#26296) (6482d0d)
• 1.45.0 - 2022-06-29
• 1.44.3 - 2022-06-27
• 1.44.2 - 2022-06-21
• 1.44.1 - 2022-06-17
• 1.44.0 - 2022-06-10
• 1.43.6 - 2022-06-07
• 1.43.5 - 2022-06-04
• 1.43.4 - 2022-05-30
• 1.43.3 - 2022-05-30
• 1.43.2 - 2022-05-26
• 1.43.1 - 2022-05-20
• 1.43.0 - 2022-05-20
• 1.42.0 - 2022-05-15
• 1.41.10 - 2022-05-14
• 1.41.9 - 2022-05-13
• 1.41.8 - 2022-05-13
• 1.41.7 - 2022-05-12
• 1.41.6 - 2022-05-12
• 1.41.5 - 2022-05-12
• 1.41.4 - 2022-05-05
• 1.41.3 - 2022-04-29
• 1.41.2 - 2022-04-28
• 1.41.1 - 2022-04-27
• 1.41.0 - 2022-04-26
• 1.40.1 - 2022-04-26
• 1.40.0 - 2022-04-26
• 1.39.1 - 2022-04-16
• 1.39.0 - 2022-04-16
• 1.38.0 - 2022-04-16
• 1.37.2 - 2022-04-13
• 1.37.1 - 2022-04-04
• 1.37.0 - 2022-03-28
• 1.36.0 - 2022-03-02
• 1.35.1 - 2022-02-21
• 1.35.0 - 2022-02-17
• 1.34.0 - 2022-02-09
• 1.33.0 - 2022-02-04
• 1.32.2 - 2022-02-04
• 1.32.1 - 2022-02-03
• 1.32.0 - 2022-01-21
• 1.31.0 - 2021-11-24

from @solana/web3.js GitHub release notes

Commit messages

Package name: @solana/web3.js

• 091faf5 fix: (web3.js) clear the idle timer whenever the websocket closes (fix: (web3.js) clear the idle timer whenever the websocket closes solana-labs/solana#26734)
• 85a6a3f feat(web3.js): add support for get stake minimum delegation (feat(web3.js): add support for get stake minimum delegation solana-labs/solana#26682)
• 7675695 fix: add `maxSupportedTransactionVersion` config to remaining `getTransaction` calls
• 411cfdd feat: add `maxSupportedTransactionVersion` option to `getBlock` and `getTransaction` (feat: add maxSupportedTransactionVersion option to getBlock and getTransaction solana-labs/solana#26726)
• 194d2d1 chore: bump terser from 5.12.1 to 5.14.2 in /web3.js (chore: bump terser from 5.12.1 to 5.14.2 in /web3.js solana-labs/solana#26702)
• e1567ab feat: added web3 bindings for Address Lookup Table Program instructions (Address Lookup Table Program Instruction Web3 Bindings solana-labs/solana#26469)
• d217b6b fix: fork `URL` and `fetch` for React Native in web3.js (fix: fork URL and fetch for React Native in web3.js solana-labs/solana#26604)
• e8390c6 Support for returnData in simulate transaction (Support for returnData in simulate transaction solana-labs/solana#26499)
• e3dc440 chore: remove web3 examples (chore: remove web3 examples solana-labs/solana#26515)
• 5c6b178 chore: make documentation and examples more prominent in README (Make documentation and examples more prominent in README solana-labs/solana#26498)
• 0d598b7 chore: move `checkBlockHeight` into block where it's used
• 88a5d74 fix: ingest only the relevant properties when constructing `Transactions`
• c660a91 fix: a much simpler way to prevent getRecentPerformanceSamples from sending a commitment
• 798cd3b test: maybe don't disable all the web3.js tests
• 2f33b79 fix: `getPerformanceSamples` no longer breaks when the connection has a default commitment
• ea9dffa fix: web3.js; maxRetries no longer stripped when zero (Update connection.ts, maxRetries no longer strips solana-labs/solana#26345)
• f4d9f51 feat: web3.js RPC errors now hold the error `code` and `data` on the error object (feat: web3.js RPC errors now hold the error code and data on the error object solana-labs/solana#26318)
• 6482d0d feat: add `minContextSlot` configuration to (almost) all web3.js methods (feat: add minContextSlot configuration to (almost) all web3.js methods solana-labs/solana#26296)
• 6e009d8 feat: add custom version HTTP header string to RPC requests
• 5790271 test: compile web3.js tests in such a way that you can use es2020+ syntax without crashing Mocha
• 5a8625a chore: upgrade `rpc-websockets` to eliminate bad `circular-json` dependency
• 2f80949 fix: always use the nonce as the recent blockhash; never overwrite it (fix: nonce-based Transactions no longer mutate the transaction in place when you compileMessage solana-labs/solana#25829)
• 0b3de2b chore: fix types of `RpcRequest` and `RpcBatchRequest` (chore: correct the types of Rpc{Batch}Request to prevent type errors in Connection.ts solana-labs/solana#26102)
• af0d949 fix: `getTransactions()` now returns the expected datatype (Fix getTransactions web3.js method solana-labs/solana#26099)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs