[Snyk] Upgrade @solana/web3.js from 1.31.0 to 1.89.1

[Balantion2020]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade @solana/web3.js from 1.31.0 to 1.89.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 136 versions ahead of your current version.
• The recommended version was released 22 days ago, on 2024-01-15.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-101-1292345	475/1000 Why? Has a fix available, CVSS 5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @solana/web3.js

• 1.89.1 - 2024-01-15
  

  1.89.1 (2024-01-15)

  Bug Fixes

  • change request retry output log to an error log (#2038) (5e43617)
• 1.89.0 - 2024-01-11
  

  1.89.0 (2024-01-11)

  Features

  • Remove bailout behavior from missing sig func (#2006) (6b33c7e)
• 1.88.0 - 2024-01-05
  

  1.88.0 (2024-01-05)

  Features

  • specify which account is missing/has an invalid signature on signature verification failure (#2002) (109615d)
• 1.87.6 - 2023-11-11
  

  1.87.6 (2023-11-11)

  Bug Fixes

  • update @ babel/plugin-transform-runtime & @ babel/preset-env (#1826) (b7ead05)
• 1.87.5 - 2023-11-07
  

  1.87.5 (2023-11-07)

  Bug Fixes

  • legacy: declare transaction meta as nullable (#1812) (ffeddf6)
• 1.87.4 - 2023-11-06
  

  1.87.4 (2023-11-06)

  Bug Fixes

  • parameter names in GetTokenAccountsByOwnerApi (#1809) (d575f09)
• 1.87.3 - 2023-10-26
  

  1.87.3 (2023-10-26)

  Bug Fixes

  • temporarily lock to Node 18.x for CI/CD workflow (#1785) (6910664)
• 1.87.2 - 2023-10-19
  

  1.87.2 (2023-10-19)

  Bug Fixes

  • experimental: fix scalar enum codec options (#1751) (72efece)
• 1.87.1 - 2023-10-09
  

  1.87.1 (2023-10-09)

  Bug Fixes

  • unclosed string literal in code example, async keyword for the function (#1702) (2cae718)
• 1.87.0 - 2023-10-06
• 1.86.0 - 2023-10-06
• 1.85.0 - 2023-10-06
• 1.84.0 - 2023-10-06
• 1.83.0 - 2023-10-06
• 1.82.0 - 2023-10-06
• 1.81.0 - 2023-10-06
• 1.80.0 - 2023-10-06
• 1.79.0 - 2023-10-06
• 1.78.7 - 2023-10-04
• 1.78.6 - 2023-10-04
• 1.78.5 - 2023-09-12
• 1.78.4 - 2023-08-10
• 1.78.3 - 2023-08-04
• 1.78.2 - 2023-07-31
• 1.78.1 - 2023-07-28
• 1.78.0 - 2023-07-07
• 1.77.3 - 2023-05-31
• 1.77.2 - 2023-05-28
• 1.77.1 - 2023-05-25
• 1.77.0 - 2023-05-24
• 1.76.0 - 2023-05-09
• 1.75.0 - 2023-04-04
• 1.74.0 - 2023-03-17
• 1.73.4 - 2023-03-16
• 1.73.3 - 2023-02-23
• 1.73.2 - 2023-01-31
• 1.73.1 - 2023-01-31
• 1.73.1-pr-29195.6 - 2023-01-31
• 1.73.0 - 2022-12-30
• 1.72.0 - 2022-12-24
• 1.71.0 - 2022-12-24
• 1.70.3 - 2022-12-20
• 1.70.2 - 2022-12-19
• 1.70.1 - 2022-12-09
• 1.70.1-pr-29195.5 - 2022-12-10
• 1.70.1-pr-29195.4 - 2022-12-10
• 1.70.1-pr-29195.3 - 2022-12-10
• 1.70.1-pr-29195.2 - 2022-12-10
• 1.70.1-pr-29195 - 2022-12-10
• 1.70.0 - 2022-12-06
• 1.70.0-pr-29130-2 - 2022-12-07
• 1.70.0-pr-29130 - 2022-12-07
• 1.69.0 - 2022-12-03
• 1.68.1 - 2022-12-02
• 1.68.0 - 2022-12-02
• 1.67.2 - 2022-11-30
• 1.67.1 - 2022-11-30
• 1.67.0 - 2022-11-29
• 1.66.5 - 2022-11-29
• 1.66.4 - 2022-11-29
• 1.66.3 - 2022-11-28
• 1.66.2 - 2022-10-21
• 1.66.1 - 2022-10-17
• 1.66.0 - 2022-10-16
• 1.65.0 - 2022-10-14
• 1.64.0 - 2022-10-11
• 1.63.1 - 2022-09-24
• 1.63.0 - 2022-09-22
• 1.62.1 - 2022-09-20
• 1.62.0 - 2022-09-15
• 1.61.1 - 2022-09-13
• 1.61.0 - 2022-09-13
• 1.60.0 - 2022-09-09
• 1.59.1 - 2022-09-07
• 1.59.0 - 2022-09-07
• 1.58.0 - 2022-09-07
• 1.57.0 - 2022-09-07
• 1.56.2 - 2022-09-01
• 1.56.1 - 2022-09-01
• 1.56.0 - 2022-08-31
• 1.55.0 - 2022-08-29
• 1.54.1 - 2022-08-28
• 1.54.0 - 2022-08-25
• 1.53.0 - 2022-08-14
• 1.52.0 - 2022-08-11
• 1.51.0 - 2022-08-10
• 1.50.1 - 2022-07-25
• 1.50.0 - 2022-07-22
• 1.49.0 - 2022-07-22
• 1.48.0 - 2022-07-13
• 1.47.4 - 2022-07-13
• 1.47.3 - 2022-07-02
• 1.47.2 - 2022-07-02
• 1.47.1 - 2022-07-01
• 1.47.0 - 2022-06-30
• 1.46.0 - 2022-06-29
• 1.45.0 - 2022-06-29
• 1.44.3 - 2022-06-27
• 1.44.2 - 2022-06-21
• 1.44.1 - 2022-06-17
• 1.44.0 - 2022-06-10
• 1.43.6 - 2022-06-07
• 1.43.5 - 2022-06-04
• 1.43.4 - 2022-05-30
• 1.43.3 - 2022-05-30
• 1.43.2 - 2022-05-26
• 1.43.1 - 2022-05-20
• 1.43.0 - 2022-05-20
• 1.42.0 - 2022-05-15
• 1.41.10 - 2022-05-14
• 1.41.9 - 2022-05-13
• 1.41.8 - 2022-05-13
• 1.41.7 - 2022-05-12
• 1.41.6 - 2022-05-12
• 1.41.5 - 2022-05-12
• 1.41.4 - 2022-05-05
• 1.41.3 - 2022-04-29
• 1.41.2 - 2022-04-28
• 1.41.1 - 2022-04-27
• 1.41.0 - 2022-04-26
• 1.40.1 - 2022-04-26
• 1.40.0 - 2022-04-26
• 1.39.1 - 2022-04-16
• 1.39.0 - 2022-04-16
• 1.38.0 - 2022-04-16
• 1.37.2 - 2022-04-13
• 1.37.1 - 2022-04-04
• 1.37.0 - 2022-03-28
• 1.36.0 - 2022-03-02
• 1.35.1 - 2022-02-21
• 1.35.0 - 2022-02-17
• 1.34.0 - 2022-02-09
• 1.33.0 - 2022-02-04
• 1.32.2 - 2022-02-04
• 1.32.1 - 2022-02-03
• 1.32.0 - 2022-01-21
• 1.31.0 - 2021-11-24

from @solana/web3.js GitHub release notes

Commit messages

Package name: @solana/web3.js

• 5e43617 fix: change request retry output log to an error log ([Snyk] Upgrade @docusaurus/theme-search-algolia from 2.0.0-beta.0 to 2.4.3 #2038)
• 7aeac5a nit: Add comment specifying encoding of addresses ([Snyk] Upgrade @blockworks-foundation/mango-client from 3.2.16 to 3.6.20 #2036)
• 4c9a8b8 refactor(experimental): Add Nonce and Token JSON parsed account types ([Snyk] Upgrade @docusaurus/theme-search-algolia from 2.0.0-beta.0 to 2.4.3 #2031)
• cee6f23 refactor(experimental): Add lookup table, BPF loader, config JSON parsed RPC types ([Snyk] Upgrade @docusaurus/preset-classic from 2.0.0-beta.0 to 2.4.3 #2028)
• dbe6a73 The coalescing transport no longer double-throws `AbortError` when the last subscriber aborts ([Snyk] Upgrade rpc-websockets from 7.4.16 to 7.9.0 #2029)
• 62b6bd6 Add async function to decode a transaction using an RPC to fetch lookup tables ([Snyk] Upgrade @blockworks-foundation/mango-client from 3.2.16 to 3.6.20 #2005)
• c588817 refactor(experimental): fix bug where decompileTransaction would return empty signatures instead of excluding the field ([Snyk] Upgrade @docusaurus/preset-classic from 2.0.0-beta.0 to 2.4.3 #2000)
• 6466d76 Update transaction decoder to use lookup tables ([Snyk] Upgrade @docusaurus/theme-search-algolia from 2.0.0-beta.0 to 2.4.3 #1999)
• 23420ec Fix return type of getTokenAccountsByDelegate/Owner ([Snyk] Upgrade @docusaurus/preset-classic from 2.0.0-beta.0 to 2.4.3 #2027)
• acab173 Add @ solana/rpc-json-parsed and move TokenAccount there ([Snyk] Upgrade @docusaurus/theme-search-algolia from 2.0.0-beta.0 to 2.4.3 #2026)
• 6b33c7e feat: Remove bailout behavior from missing sig func ([Snyk] Upgrade rpc-websockets from 7.4.16 to 7.8.0 #2006)
• b5bbd3a Re-export @ solana/accounts from @ solana/web3.js ([Snyk] Upgrade @docusaurus/core from 2.0.0-beta.0 to 2.4.3 #2025)
• 510ead7 refactor(experimental): add support for variable-sized items in remainder-sized codecs ([Snyk] Upgrade @docusaurus/preset-classic from 2.0.0-beta.0 to 2.4.3 #2020)
• 8488c9f refactor(experimental): refactor GraphQL doc comments
• be3d130 refactor(experimental): refactor GraphQL `QueryArgs` to `LoaderArgs`
• 7f1f0fd refactor(experimental): fix memo instructions in GraphQL
• 0835c79 refactor(experimental): use `json-stable-stringify` with bigint support for cache keys
• 53b24f4 refactor(experimental): move rpc-transport type tests into `src`
• d148156 refactor(experimental): use scoped APIs in rpc-graphql
• f5d64e6 refactor(experimental): use scoped APIs in rpc-graphql tests
• 944fbc3 refactor(experimental): use scoped APIs in rpc-core tests
• 24d71d6 Export `@ solana/functional` from the main library ([Snyk] Upgrade @docusaurus/core from 2.0.0-beta.0 to 2.4.3 #2007)
• 7bc521b Detect block height exceedences using a combination of slot notifications and `getEpochInfo` ([Snyk] Upgrade @docusaurus/theme-search-algolia from 2.0.0-beta.0 to 2.4.3 #1990)
• f51a7d7 chore: bump @ commitlint/config-conventional from 17.6.7 to 18.4.4 ([Snyk] Upgrade @solana/web3.js from 1.31.0 to 1.87.6 #2004)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs