-
Notifications
You must be signed in to change notification settings - Fork 0
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[Snyk] Upgrade eosjs from 20.0.3 to 22.1.0 #1
base: master
Are you sure you want to change the base?
Conversation
Snyk has created this PR to upgrade eosjs from 20.0.3 to 22.1.0. See this package in npm: https://www.npmjs.com/package/eosjs See this project in Snyk: https://app.snyk.io/org/naiba4/project/25ee4df4-6110-45e2-b90a-54dd3148e290?utm_source=github&utm_medium=referral&page=upgrade-pr
Updated dependencies detected. Learn more about Socket for GitHub ↗︎
|
🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎ To accept the risk, merge this PR and you will not be notified again.
Next stepsWhat is a chronological version anomaly?Semantic versions published out of chronological order. This could either indicate dependency confusion or a patched vulnerability. What are unmaintained packages?Package has not been updated in more than a year and may be unmaintained. Problems with the package may go unaddressed. Package should publish periodic maintenance releases if they are maintained, or deprecate if they have no intention in further maintenance. Take a deeper look at the dependencyTake a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev. Remove the packageIf you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency. Mark a package as acceptable riskTo ignore an alert, reply with a comment starting with
|
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade eosjs from 20.0.3 to 22.1.0.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
Warning: This is a major version upgrade, and may be a breaking change.
Release notes
Package name: eosjs
Read more
This release is the stable release of EOSJS v22.0.0 and contains features, security, stability and miscellaneous fixes. Please note that since this release promotes EOSJS v22.0.0-rc2 to v22.0.0 (stable), using the @ latest tag will now automatically cause an upgrade from v21.0.x to v22.0.0.
Support for Action Return Values
This release introduces support for the new feature of return values from actions within smart contracts. More information can be found here in the documentation for eosio.cdt and here in the documentation specific to eosjs.
Additionally, an example application has been created to demonstrate how to use this new feature with nodeos and eosjs.
Support for Key Value Databases
This release introduces support for the new key value database feature. More information can be found here in the documentation for eosio.cdt and here in the documentation specific to eosjs.
Due to differences in the format of key value databases in smart contract ABIs,
abi.abi.json
has been removed and added directly into the code ofeosjs-serialize.ts
.A new data type in EOSIO.CDT v1.8.0 called
eosio::kv::map
provides the underlying functionality and should be used in contracts over the type calledeosio::kv::table
that is currently in a developer preview state.Additionally, an example application has been created to demonstrate how to use this new feature with nodeos and eosjs.
New Method for Constructing Actions and Transactions
A concise new method for constructing actions has been added to improve the developer experience. It is now possible to either construct an action in either a shorter syntax or construct both actions and transactions by creating a stateful
TransactionBuilder
object that can be passed through an application before sending when ready. The details for this concise method can be found here in the eosjs documentation.BREAKING CHANGE: New Endpoints and Typescript Types for Nodeos API Plugins
New endpoints have been added to eosjs to match the latest versions of the api plugins. New Typescript types have been added to assist developers in better understanding what to expect from certain features or responses from the nodeos api plugins. The goal of these new types is to facilitate accurate typescript support and additional documentation for eosjs but there is the possibility of backwards incompatibility. In these situations, it is advised to override the affected types with
any
or a user-defined type.Other Changes
abi.abi.json
to eosio::abi/1.2Thanks!
Special thanks to the community contributors that submitted patches for this release:
Disclaimer: All repositories and other materials are provided subject to this IMPORTANT notice and you must familiarize yourself with its terms. The notice contains important information, limitations and restrictions relating to our software, publications, trademarks, third-party resources, and forward-looking statements. By accessing any of our repositories and other materials, you accept and agree to the terms of the notice.
This is a RELEASE CANDIDATE for version 22.0.0. The latest STABLE release is v21.0.3.
This Release Candidate can be accessed by running yarn add eosjs@RC.
BREAKING CHANGE: New Endpoints and Typescript Types for Nodeos API Plugins
More endpoints and types have been added to eosjs to match the latest versions of the api plugins. The goal of these types is to facilitate accurate typescript support and additional documentation for eosjs but there is the possibility of backwards incompatibility. In these situations, it is advised to override the affected types with
any
or a user-defined type at this time.Other Changes
Disclaimer: All repositories and other materials are provided subject to this IMPORTANT notice and you must familiarize yourself with its terms. The notice contains important information, limitations and restrictions relating to our software, publications, trademarks, third-party resources, and forward-looking statements. By accessing any of our repositories and other materials, you accept and agree to the terms of the notice.
This is a RELEASE CANDIDATE for version 22.0.0. The latest STABLE release is v21.0.3.
This Release Candidate can be accessed by running yarn add eosjs@RC.
Support for Action Return Values
This release candidate introduces support for the new feature of return values from actions within smart contracts. More information can be found here in the documentation for eosio.cdt and here in the documentation specific to eosjs.
Additionally, an example application has been created to demonstrate how to use this new feature with nodeos and eosjs.
Support for Key Value Databases
This release candidate introduces support for the new key value database feature. More information can be found here in the documentation for eosio.cdt and here in the documentation specific to eosjs.
Due to difference in the format of key value databases in smart contract ABIs,
abi.abi.json
has been removed and added directly into the code ofeosjs-serialize.ts
.Additionally, an example application has been created to demonstrate how to use this new feature with nodeos and eosjs.
New Method for Constructing Actions and Transactions
A concise new method for constructing actions has been added to improve the developer experience. It is now possible to either construct an action in either a shorter syntax or construct both actions and transactions by creating a stateful
TransactionBuilder
object that can be passed through an application before sending when ready. The details for this concise method can be found here in the eosjs documentation.BREAKING CHANGE: Additional Typescript Types/Nodeos API Plugin Responses
New Typescript types have been added to assist developers in better understanding what to expect from certain features or responses from the nodeos api plugins. These types are defined for the latest versions of the api plugins which have changed, specifically the response for submitting a transaction.
Other Changes
abi.abi.json
to eosio::abi/1.2Thanks!
Special thanks to the community contributors that submitted patches for this release:
Disclaimer: All repositories and other materials are provided subject to this IMPORTANT notice and you must familiarize yourself with its terms. The notice contains important information, limitations and restrictions relating to our software, publications, trademarks, third-party resources, and forward-looking statements. By accessing any of our repositories and other materials, you accept and agree to the terms of the notice.
This release contains security, stability, and miscellaneous fixes.
Other Changes
Thanks!
Special thanks to the community contributors that submitted patches for this release:
Disclaimer: All repositories and other materials are provided subject to this IMPORTANT notice and you must familiarize yourself with its terms. The notice contains important information, limitations and restrictions relating to our software, publications, trademarks, third-party resources, and forward-looking statements. By accessing any of our repositories and other materials, you accept and agree to the terms of the notice.
Read more
Read more
Read more
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs