Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

build: [Snyk] Upgrade web3 from 4.15.0 to 4.16.0 #3359

Merged
merged 1 commit into from
Jan 8, 2025
Merged

build: [Snyk] Upgrade web3 from 4.15.0 to 4.16.0 #3359

merged 1 commit into from
Jan 8, 2025

Conversation

swirlds-automation
Copy link
Contributor

snyk-top-banner

Snyk has created this PR to upgrade web3 from 4.15.0 to 4.16.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

  • The recommended version is 28 versions ahead of your current version.

  • The recommended version was released a month ago.

Release notes
Package name: web3
  • 4.16.0 - 2024-12-03

    What's Changed

  • 4.15.1-dev.e79ace2.0 - 2024-11-19
  • 4.15.1-dev.bde1316.0 - 2024-11-14
  • 4.15.1-dev.b3ee417.0 - 2024-12-03
  • 4.15.1-dev.acdb0c7.0 - 2024-12-03
  • 4.15.1-dev.9aab5cd.0 - 2024-11-14
  • 4.15.1-dev.984cb7c.0 - 2024-11-22
  • 4.15.1-dev.926044b.0 - 2024-11-26
  • 4.15.1-dev.8c55cb0.0 - 2024-11-14
  • 4.15.1-dev.7a8df69.0 - 2024-11-25
  • 4.15.1-dev.7109fb2.0 - 2024-11-21
  • 4.15.1-dev.6af068f.0 - 2024-11-13
  • 4.15.1-dev.6ad1ca9.0 - 2024-11-14
  • 4.15.1-dev.6379aa8.0 - 2024-11-19
  • 4.15.1-dev.6229f4d.0 - 2024-11-19
  • 4.15.1-dev.5eeb2d6.0 - 2024-11-19
  • 4.15.1-dev.56d4aec.0 - 2024-11-19
  • 4.15.1-dev.5437fbc.0 - 2024-11-19
  • 4.15.1-dev.4c55d98.0 - 2024-11-21
  • 4.15.1-dev.471c12b.0 - 2024-11-14
  • 4.15.1-dev.3b122a2.0 - 2024-11-21
  • 4.15.1-dev.1b367e6.0 - 2024-11-14
  • 4.15.1-dev.1724f35.0 - 2024-11-11
  • 4.15.1-dev.0cbc23d.0 - 2024-11-21
  • 4.15.1-dev.098ee6d.0 - 2024-11-06
  • 4.15.1-dev.0915cf4.0 - 2024-11-13
  • 4.15.1-dev.079c558.0 - 2024-11-19
  • 4.15.1-dev.2011192.0 - 2024-11-13
  • 4.15.0 - 2024-11-06

    What's Changed

    New Contributors

    Full Changelog: v4.5.0...v4.15.0

from web3 GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

@github-actions GitHub Actions
Copy link

github-actions bot commented Jan 7, 2025 •
edited
Loading

Test Results

 21 files   -   3  282 suites   - 79   48m 29s ⏱️ - 11m 51s
613 tests  -   6  607 ✅ + 13  4 💤 ±0  2 ❌  - 19 
704 runs   - 197  697 ✅  - 173  4 💤 ±0  3 ❌  - 24 

For more details on these failures, see this check.

Results for commit 135d9e1. ± Comparison against base commit 90739e1.

This pull request removes 7 and adds 1 tests. Note that renamed tests count towards both. 
"after all" hook in "RPC Server Acceptance Tests" ‑ RPC Server Acceptance Tests "after all" hook in "RPC Server Acceptance Tests"
"after each" hook for "Subscribe to multiple contracts on same subscription" ‑ RPC Server Acceptance Tests Acceptance tests @web-socket-batch-3 eth_subscribe "after each" hook for "Subscribe to multiple contracts on same subscription"
"before all" hook for "emits an approval event" ‑ RPC Server Acceptance Tests Acceptance tests @erc20 Acceptance Tests HTS token should behave like erc20 transfer from when the token owner is not the zero address when the recipient is not the zero address when the spender has enough allowance "before all" hook for "emits an approval event"
"before all" hook for "reverts" ‑ RPC Server Acceptance Tests Acceptance tests @erc20 Acceptance Tests HTS token should behave like erc20 transfer from when the token owner is not the zero address when the recipient is not the zero address when the spender does not have enough allowance when the token owner has enough balance "before all" hook for "reverts"
"before each" hook for "reverts" ‑ RPC Server Acceptance Tests Acceptance tests @erc20 Acceptance Tests HTS token should behave like erc20 transfer from when the token owner is not the zero address when the recipient is not the zero address when the spender does not have enough allowance "before each" hook for "reverts"
"before each" hook for "reverts" ‑ RPC Server Acceptance Tests Acceptance tests @erc20 Acceptance Tests HTS token should behave like erc20 transfer from when the token owner is not the zero address when the recipient is the zero address "before each" hook for "reverts"
"before each" hook: reducing balance for "reverts" ‑ RPC Server Acceptance Tests Acceptance tests @erc20 Acceptance Tests HTS token should behave like erc20 transfer from when the token owner is not the zero address when the recipient is not the zero address when the spender does not have enough allowance when the token owner does not have enough balance "before each" hook: reducing balance for "reverts"

"before all" hook in "@precompile-calls Tests for eth_call with HTS" ‑ RPC Server Acceptance Tests Acceptance tests @precompile-calls Tests for eth_call with HTS "before all" hook in "@precompile-calls Tests for eth_call with HTS"

♻️ This comment has been updated with latest results.

@snyk-bot @quiet-node
fix: upgrade web3 from 4.15.0 to 4.16.0
135d9e1 
Snyk has created this PR to upgrade web3 from 4.15.0 to 4.16.0.

See this package in npm:
web3

See this project in Snyk:
https://app.snyk.io/org/json-rpc-relay/project/9e95a688-4e8c-4400-bbd9-181a47c69778?utm_source=github&utm_medium=referral&page=upgrade-pr

Signed-off-by: Logan Nguyen <[email protected]>
@quiet-node quiet-node force-pushed the snyk-upgrade-53bfb29ad91a82905bcdedff0c49189a branch from b50a3f4 to 135d9e1 Compare January 7, 2025 20:43
@quiet-node quiet-node added the dependencies Pull requests that update a dependency file label Jan 7, 2025
@sonarqubecloud SonarQubeCloud
Copy link

sonarqubecloud bot commented Jan 7, 2025

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@quiet-node quiet-node added this to the 0.64.0 milestone Jan 7, 2025
@quiet-node quiet-node changed the title [Snyk] Upgrade web3 from 4.15.0 to 4.16.0 build: [Snyk] Upgrade web3 from 4.15.0 to 4.16.0 Jan 7, 2025
@quiet-node quiet-node merged commit 52b6aaf into main Jan 8, 2025
48 of 50 checks passed
@quiet-node quiet-node deleted the snyk-upgrade-53bfb29ad91a82905bcdedff0c49189a branch January 8, 2025 16:21
@codecov Codecov
Copy link

codecov bot commented Jan 8, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 85.08%. Comparing base (90739e1) to head (135d9e1).
Report is 3 commits behind head on main.

Additional details and impacted files 
@@            Coverage Diff             @@
##             main    #3359      +/-   ##
==========================================
- Coverage   85.11%   85.08%   -0.03%     
==========================================
  Files          69       69              
  Lines        4688     4688              
  Branches     1050     1050              
==========================================
- Hits         3990     3989       -1     
  Misses        389      389              
- Partials      309      310       +1
Flag Coverage Δ
config-service 98.14% <ø> (ø)
relay 79.72% <ø> (ø)
server 83.28% <ø> (ø)
ws-server 36.66% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

see 4 files with indirect coverage changes

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@quiet-node quiet-node quiet-node approved these changes

@nadezhdapopovaa nadezhdapopovaa nadezhdapopovaa approved these changes

@georgi-l95 georgi-l95 Awaiting requested review from georgi-l95 georgi-l95 is a code owner

@Ivo-Yankov Ivo-Yankov Awaiting requested review from Ivo-Yankov Ivo-Yankov is a code owner

Assignees

@swirlds-automation swirlds-automation

Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Milestone
0.64.0
Development

Successfully merging this pull request may close these issues.
4 participants
@swirlds-automation @nadezhdapopovaa @quiet-node @snyk-bot