Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update dependency @solana/web3.js to v1.77.4 [security] #7211

Closed

Conversation

live-github-bot[bot]
Copy link
Contributor

@live-github-bot live-github-bot bot commented Jun 26, 2024

This PR contains the following updates:

Package Type Update Change
@solana/web3.js (source) devDependencies patch 1.77.3 -> 1.77.4
@solana/web3.js (source) dependencies patch 1.77.3 -> 1.77.4

GitHub Vulnerability Alerts

CVE-2024-30253

Using particular inputs with @solana/web3.js will result in memory exhaustion (OOM).

If you have a server, client, mobile, or desktop product that accepts untrusted input for use with @solana/web3.js, your application/service may crash, resulting in a loss of availability.


Configuration

📅 Schedule: Branch creation - "" in timezone Europe/Paris, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@live-github-bot live-github-bot bot requested a review from a team as a code owner June 26, 2024 22:05
Copy link

vercel bot commented Jun 26, 2024

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
web-tools ❌ Failed (Inspect) Aug 9, 2024 10:07pm
4 Skipped Deployments
Name Status Preview Comments Updated (UTC)
ledger-live-docs ⬜️ Ignored (Inspect) Visit Preview Aug 9, 2024 10:07pm
ledger-live-github-bot ⬜️ Ignored (Inspect) Visit Preview Aug 9, 2024 10:07pm
native-ui-storybook ⬜️ Ignored (Inspect) Visit Preview Aug 9, 2024 10:07pm
react-ui-storybook ⬜️ Ignored (Inspect) Visit Preview Aug 9, 2024 10:07pm

Justkant
Justkant previously approved these changes Jun 27, 2024
@live-github-bot live-github-bot bot changed the title Update dependency @solana/web3.js to v1.77.4 [SECURITY] chore(deps): update dependency @solana/web3.js to v1.77.4 [security] Jun 27, 2024
@live-github-bot live-github-bot bot force-pushed the renovate/npm-@solana/web3.js-vulnerability branch from 987ad9f to 28372a0 Compare July 3, 2024 22:05
@live-github-bot live-github-bot bot force-pushed the renovate/npm-@solana/web3.js-vulnerability branch from 28372a0 to be79bce Compare July 5, 2024 22:05
Copy link

There as been no activity on this PR for the last 14 days. Please consider closing this PR.

@github-actions github-actions bot added the Stale label Jul 21, 2024
@live-github-bot live-github-bot bot changed the title chore(deps): update dependency @solana/web3.js to v1.77.4 [security] Update dependency @solana/web3.js to v1.77.4 [SECURITY] Jul 26, 2024
@live-github-bot live-github-bot bot force-pushed the renovate/npm-@solana/web3.js-vulnerability branch from be79bce to 839956f Compare July 29, 2024 22:06
@live-github-bot live-github-bot bot changed the title Update dependency @solana/web3.js to v1.77.4 [SECURITY] chore(deps): update dependency @solana/web3.js to v1.77.4 [security] Jul 29, 2024
@live-github-bot
Copy link
Contributor Author

live-github-bot bot commented Jul 29, 2024

Desktop Bundle Checks

Comparing 942cda4 against 9a650da.

✅ Previous issues have all been fixed.

Mobile Bundle Checks

Comparing 942cda4 against 9a650da.

✅ Previous issues have all been fixed.

@live-github-bot
Copy link
Contributor Author

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (1.77.4). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.

@live-github-bot live-github-bot bot deleted the renovate/npm-@solana/web3.js-vulnerability branch August 12, 2024 22:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
common Has changes in live-common security Stale
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants