[Snyk] Upgrade @solana/web3.js from 1.31.0 to 1.67.2

[snyk-bot]

Snyk has created this PR to upgrade @solana/web3.js from 1.31.0 to 1.67.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 81 versions ahead of your current version.
• The recommended version was released 21 days ago, on 2022-11-30.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-101-1292345	261/1000 Why? CVSS 5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @solana/web3.js

• 1.67.2 - 2022-11-30
  

  1.67.2 (2022-11-30)

  Bug Fixes

  • support VersionedMessage in getFeeForMessage (#28996) (a731d2d)
• 1.67.1 - 2022-11-30
  

  1.67.1 (2022-11-30)

  Bug Fixes

  • TransactionMessage.decompile() now counts the correct number of unsigned, writable accounts (#28990) (4724539)
• 1.67.0 - 2022-11-29
  

  1.67.0 (2022-11-29)

  Features

  • a nonce-based transaction confirmation strategy for web3.js (#25839) (7906c9f)
• 1.66.5 - 2022-11-29
  

  1.66.5 (2022-11-29)

  Bug Fixes

  • verify commitment level when confirming transactions with one-shot fetch (#28969) (a206ab6)
• 1.66.4 - 2022-11-29
  

  1.66.4 (2022-11-29)

  Bug Fixes

  • remove Buffer from transaction signature verification (#27868) (7498c1a)
• 1.66.3 - 2022-11-28
  

  1.66.3 (2022-11-28)

  Bug Fixes

  • add confirmation status to ConfirmedSignatureInfo web3.js response (#28555) (f6fd2cf)
  • web3.js transaction confirmation now double-checks for already-confirmed txs (#28290) (772c788)
• 1.66.2 - 2022-10-21
  

  1.66.2 (2022-10-21)

  Bug Fixes

  • incorrect error message for getFeeForMessage (#28529) (eaafcf0)
• 1.66.1 - 2022-10-17
  

  1.66.1 (2022-10-17)

  Bug Fixes

  • wrap _rpcWebSocketGeneration around when about to overflow (#28428) (29be3d4)
• 1.66.0 - 2022-10-16
  

  1.66.0 (2022-10-16)

  Features

  • add getMultipleParsedAccounts method (#28414) (c5b3cd9)
• 1.65.0 - 2022-10-14
  

  1.65.0 (2022-10-14)

  Features

  • add dataSlice param to account fetching config (#28389) (8b3cab1)
• 1.64.0 - 2022-10-11
• 1.63.1 - 2022-09-24
• 1.63.0 - 2022-09-22
• 1.62.1 - 2022-09-20
• 1.62.0 - 2022-09-15
• 1.61.1 - 2022-09-13
• 1.61.0 - 2022-09-13
• 1.60.0 - 2022-09-09
• 1.59.1 - 2022-09-07
• 1.59.0 - 2022-09-07
• 1.58.0 - 2022-09-07
• 1.57.0 - 2022-09-07
• 1.56.2 - 2022-09-01
• 1.56.1 - 2022-09-01
• 1.56.0 - 2022-08-31
• 1.55.0 - 2022-08-29
• 1.54.1 - 2022-08-28
• 1.54.0 - 2022-08-25
• 1.53.0 - 2022-08-14
• 1.52.0 - 2022-08-11
• 1.51.0 - 2022-08-10
• 1.50.1 - 2022-07-25
• 1.50.0 - 2022-07-22
• 1.49.0 - 2022-07-22
• 1.48.0 - 2022-07-13
• 1.47.4 - 2022-07-13
• 1.47.3 - 2022-07-02
• 1.47.2 - 2022-07-02
• 1.47.1 - 2022-07-01
• 1.47.0 - 2022-06-30
• 1.46.0 - 2022-06-29
• 1.45.0 - 2022-06-29
• 1.44.3 - 2022-06-27
• 1.44.2 - 2022-06-21
• 1.44.1 - 2022-06-17
• 1.44.0 - 2022-06-10
• 1.43.6 - 2022-06-07
• 1.43.5 - 2022-06-04
• 1.43.4 - 2022-05-30
• 1.43.3 - 2022-05-30
• 1.43.2 - 2022-05-26
• 1.43.1 - 2022-05-20
• 1.43.0 - 2022-05-20
• 1.42.0 - 2022-05-15
• 1.41.10 - 2022-05-14
• 1.41.9 - 2022-05-13
• 1.41.8 - 2022-05-13
• 1.41.7 - 2022-05-12
• 1.41.6 - 2022-05-12
• 1.41.5 - 2022-05-12
• 1.41.4 - 2022-05-05
• 1.41.3 - 2022-04-29
• 1.41.2 - 2022-04-28
• 1.41.1 - 2022-04-27
• 1.41.0 - 2022-04-26
• 1.40.1 - 2022-04-26
• 1.40.0 - 2022-04-26
• 1.39.1 - 2022-04-16
• 1.39.0 - 2022-04-16
• 1.38.0 - 2022-04-16
• 1.37.2 - 2022-04-13
• 1.37.1 - 2022-04-04
• 1.37.0 - 2022-03-28
• 1.36.0 - 2022-03-02
• 1.35.1 - 2022-02-21
• 1.35.0 - 2022-02-17
• 1.34.0 - 2022-02-09
• 1.33.0 - 2022-02-04
• 1.32.2 - 2022-02-04
• 1.32.1 - 2022-02-03
• 1.32.0 - 2022-01-21
• 1.31.0 - 2021-11-24

from @solana/web3.js GitHub release notes

Commit messages

Package name: @solana/web3.js

• a731d2d fix: support `VersionedMessage` in `getFeeForMessage` (fix: support VersionedMessage in getFeeForMessage solana-labs/solana#28996)
• 4724539 fix: TransactionMessage.decompile() now counts the correct number of unsigned, writable accounts (fix: TransactionMessage.decompile() now counts the correct number of unsigned, writable accounts solana-labs/solana#28990)
• c0a35b6 chore: remove @ babel/register dependency from web3.js
• dff827b chore: remove unused http-server dependency from web3.js
• 6c7eeb0 chore: bump http-server from 14.1.0 to 14.1.1 in /web3.js (chore: bump http-server from 14.1.0 to 14.1.1 in /web3.js solana-labs/solana#27333)
• 7bbded0 chore: remove redundant 'Buffer' from 'Account' class (web3.js: remove redundant 'Buffer' from 'Account' class solana-labs/solana#27865)
• 7a858b9 chore: use constant for PUBLIC_KEY_LENGTH for checking length of input (web3.js: use constant for PUBLIC_KEY_LENGTH for checking length of input solana-labs/solana#27876)
• 65cac92 chore: add deprecation notice for createProgramAddress (web3.js: add deprecation notice for createProgramAddress solana-labs/solana#27879)
• f155373 chore: deprecate PublicKey.findProgramAddress (web3.js: deprecate PublicKey.findProgramAddress solana-labs/solana#27882)
• 612f948 chore: replace casts with not-null assertions (web3.js: replace casts with not-null assertions solana-labs/solana#27883)
• 436fe3e chore: fix typo in PublicKey.unique (web3.js: fix typo in PublicKey.unique solana-labs/solana#27884)
• 7906c9f feat: a nonce-based transaction confirmation strategy for web3.js (feat: a nonce-based transaction confirmation strategy for web3.js solana-labs/solana#25839)
• a206ab6 fix: verify commitment level when confirming transactions with one-shot fetch (fix: verify commitment level when confirming transactions with one-shot fetch solana-labs/solana#28969)
• 7498c1a fix: remove Buffer from transaction signature verification (web3.js: remove Buffer from signature verification solana-labs/solana#27868)
• f6fd2cf fix: add confirmation status to ConfirmedSignatureInfo web3.js response (Add confirmation status to ConfirmedSignatureInfo web3 response solana-labs/solana#28555)
• 772c788 fix: web3.js transaction confirmation now double-checks for already-confirmed txs (web3.js: add getSignatureStatuses to confirm transaction solana-labs/solana#28290)
• ed1fe6d ci: fix wrong path (ci: fix wrong path solana-labs/solana#28700)
• 62a4be4 chore: web3js get rid of Travis (chore: web3js get rid of Travis solana-labs/solana#28695)
• a69efa4 chore: bump node version to 16 (chore: bump node version to 16 solana-labs/solana#28693)
• dac470c chore: update Solana docs and code comments that specify "BPF" to "SBF"
• eaafcf0 fix: incorrect error message for getFeeForMessage (fix: incorrect error message for getFeeForMessage solana-labs/solana#28529)
• 3a24350 chore: upgrade eslint in @ solana/web3.js
• 24cace5 chore: upgrade Mocha to 10.1.0
• 3a7d6db test: repair tests, `space` having been added to the account response (test: repair tests, space having been added to the account response solana-labs/solana#28518)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs