[Snyk] Upgrade ethers from 5.0.26 to 5.4.7 - #178

Open
snyk-bot wants to merge 1 commit into
mainfrom
snyk-upgrade-fa17a7cff6f3b77270d084bf2e11dfbb
Open

[Snyk] Upgrade ethers from 5.0.26 to 5.4.7#178
snyk-bot wants to merge 1 commit into
mainfrom
snyk-upgrade-fa17a7cff6f3b77270d084bf2e11dfbb

Conversation

@snyk-bot

@snyk-botsnyk-bot commented Oct 25, 2021

Copy link
Copy Markdown

Snyk has created this PR to upgrade ethers from 5.0.26 to 5.4.7.

merge advice
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

  • The recommended version is 22 versions ahead of your current version.
  • The recommended version was released a month ago, on 2021-09-16.

The recommended version fixes:

SeverityIssuePriorityScore (*)Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-WS-1296835		586/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3		Proof of Concept
Cryptographic Issues
SNYK-JS-ELLIPTIC-1064899		586/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3		No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: ethers
  • 5.4.7 - 2021-09-16

    Embedding UMD with SRI:

    <scripttype="text/javascript"
integrity="sha384-sZE9Fv4ksabiit2R12RbENLCRop5vpbBt6dZPJwM6l+1L0fAm8Q45psc7tmp7mi/"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.7.umd.min.js"></script>
  • 5.4.6 - 2021-08-27
    • Temporarily remove the block miner for clique-based networks from CI testing. (#1967; 8320d53)
    • More readable errors involving Uint8Arrays. (b6a061e)
    • Added Deferred Error support to Description objects to extent Interface parse methods. (#1894; a662490)
    • Fix address coder to prepare non-hexdatastring addresses as hexdatastring. (#1906; 017b1fe)
    • Removed temporary code for better errors needed until Alchemy added EIP-1559 support. (#1893; accb852)

    Embedding UMD with SRI:

    <scripttype="text/javascript"
integrity="sha384-jaqCQEyTaqkzVimN6ycsv5kLSWUSF2ONLspf9q2ETyrm6vav2RnRxhxik5dPc3zP"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.6.umd.min.js"></script>
  • 5.4.5 - 2021-08-18
    • Fxied getBlockWithTransactions results (1858). (78e4273)

    Embedding UMD with SRI:

    <scripttype="text/javascript"
integrity="sha384-NvZDg6ALAelzcNNdjR3jfJwpEPg50zAPV5PB5BV1zx/+KF48DYHNKeUCllqDNjKj"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.5.umd.min.js"></script>
  • 5.4.4 - 2021-08-05
    • Fixed Etherscan API key in default provider. (#1807; 1d27d95)
    • Adjust default masPriorityFeePerGas to account for MEV-heavy blocks. (#1817; 7175e2e)

    Embedding UMD with SRI:

    <scripttype="text/javascript"
integrity="sha384-+zmUPvri3U8M4vN+Wf/Hp9TW5FZAEnEBnyiQ5/nJm/Bm5GjzrLGiDt36mx2uIVmr"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.4.umd.min.js"></script>
  • 5.4.3 - 2021-07-30
    • Fixed JsonRpcProvider for pre-EIP-2930 chains. (#1766; 7274cd0)
    • Forward some missing EIP-1559 fields to call and estimateGas. (#1766; be3854e)
    • Fixed possible UnhandledPromiseException for bad ENS names. (63f8b28)
    • Prevent overriding value for non-payble constructors. (#1785; 593b488)

    Embedding UMD with SRI:

    <scripttype="text/javascript"
integrity="sha384-vsz9YA+ULlESA0434y8k25Vio7Dzn/cFXLqZT+Dk4qv2IMESrfJqqlIws85A9n2g"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.3.umd.min.js"></script>
  • 5.4.2 - 2021-07-23
    • Fix test case for new transactions responses. (0aafca7)
    • Added matic support to INFURA and Alchemy. (#1546; 576e9b5)
    • Added string change to coalesce errors on some clients. (bc5cc2e)
    • Added wait to transactions returned by getBlockWithTransactions. (#971; 660e69d)
    • Fixed floor, ceiling and round for FixedNumber for non-default Formats. (#1749; 551cfa0)
    • Fixed null confirmations in Wallet transaction. (#1706; 0f0d0c0)
    • Fixed Etherscan string change and enabled all tests. (a1f8d18)

    Embedding UMD with SRI:

    <scripttype="text/javascript"
integrity="sha384-E3C8Sq6evrXkqc76OyCo0CoYAb/wRJnUekj79DC85Soudd4+MuAPY0VzpQYzhY68"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.2.umd.min.js"></script>
  • 5.4.1 - 2021-07-03
    • Added Pocket back into Homestead defaultProvider and skip certain EtherscanProvider tests affected by outage. (6e8a39e)
    • Fixed EtherscanProvider NONCE_EXPIRED matching string update. (ecae793)
    • Fixed explicit EIP-1559 keys for JsonRpcSigner. (72feee8)

    Embedding UMD with SRI:

    <scripttype="text/javascript"
integrity="sha384-xA6XksA+S81KMKVo5shbejvuHxb0UMBTEG1c2ifc8SsBJKISpURzwy2Y8dDo0fli"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.1.umd.min.js"></script>
  • 5.4.0 - 2021-06-26
  • 5.3.1 - 2021-06-11
  • 5.3.0 - 2021-06-01
  • 5.2.0 - 2021-05-20
  • 5.1.4 - 2021-04-26
  • 5.1.3 - 2021-04-20
  • 5.1.2 - 2021-04-19
  • 5.1.1 - 2021-04-18
  • 5.1.0 - 2021-03-30
  • 5.0.32 - 2021-03-08
  • 5.0.31 - 2021-02-13
  • 5.0.30 - 2021-02-09
  • 5.0.29 - 2021-02-03
  • 5.0.28 - 2021-02-03
  • 5.0.27 - 2021-02-01
  • 5.0.26 - 2021-01-14
from ethers GitHub release notes
Commit messages
Package name: ethers
  • 4166b27 Updated dist files.
  • 32a6b2a Fix parseUints with excess zeros and fix ReDoS issue (#2016, #1975, #1976).
  • f2a32d0 docs: added provider.FeeData
  • 5762a1f updated dist files.
  • 8320d53 Temporarily remove the block miner for clique-based networks from CI testing (#1967).
  • c41b89a updated dist files.
  • b6a061e More readable errors involving Uint8Arrays.
  • a662490 Added Deferred Error support to Description objects to extent Interface parse methods (#1894).
  • bdb54ac docs: added cookbook entry to compute raw transaction (#1857).
  • 32a90b6 docs: added Alchemy tutorial
  • 95b87f6 docs: added BigNumber.toBigInt (#1799).
  • 017b1fe Fix address coder to prepare non-hexdatastring addresses as hexdatastring (#1906).
  • accb852 Removed temporary code for better errors needed until Alchemy added EIP-1559 support (#1893).
  • f0b3bc3 Updated dist files.
  • 78e4273 Fxied getBlockWithTransactions results (1858).
  • dd09bf0 docs: dded code examples for Contract (#982).
  • 4b163e9 docs: added dynamic localSigner
  • aacb95c docs: added struct encoding example (#1147, #1301, #1302).
  • e6315a6 docs: remove need to restart dev node after each run.
  • 3ac91a4 docs: added StaticJsonRpcProvider (#1514, #1531).
  • 2dd5c1a docs: Fixed topicset example (#1538).
  • 2653449 docs: updated transactions for EIP-1559.
  • cddb038 docs: added API for custom error coding.
  • e80f8dd docs: updates for EIP-1559 (#1777).

Compare

Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@snyk-bot
snyk-bot requested a review from a teamOctober 25, 2021 23:31
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@snyk-bot
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Add copy buttons to all 
 blocks\n(function() {\n function addCopyButtons() {\n document.querySelectorAll('pre code').forEach(function(codeBlock) {\n if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;\n codeBlock.parentElement.setAttribute('data-copy-added', 'true');\n \n var btn = document.createElement('button');\n btn.textContent = 'Copy';\n btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';\n btn.onmouseover = function() { this.style.opacity = '1'; };\n btn.onmouseout = function() { this.style.opacity = '0.7'; };\n btn.onclick = function() {\n navigator.clipboard.writeText(codeBlock.textContent).then(function() {\n btn.textContent = 'Copied!';\n setTimeout(function() { btn.textContent = 'Copy'; }, 1500);\n });\n };\n codeBlock.parentElement.style.position = 'relative';\n codeBlock.parentElement.appendChild(btn);\n });\n }\n \n addCopyButtons();\n \n // Re-run on dynamic content\n var observer = new MutationObserver(addCopyButtons);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Add Copy Buttons to Code Blocks");
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '

Skip to content
[Snyk] Upgrade ethers from 5.0.26 to 5.4.7 - #178
Open
snyk-bot wants to merge 1 commit into
mainfrom 
snyk-upgrade-fa17a7cff6f3b77270d084bf2e11dfbb
Open
[Snyk] Upgrade ethers from 5.0.26 to 5.4.7#178
snyk-bot wants to merge 1 commit into
mainfrom 
snyk-upgrade-fa17a7cff6f3b77270d084bf2e11dfbb
Conversation
@snyk-bot
@snyk-botsnyk-bot
commented
Oct 25, 2021

Copy link


Copy Markdown

Snyk has created this PR to upgrade ethers from 5.0.26 to 5.4.7.
merge advice

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
  • The recommended version is 22 versions ahead of your current version.
  • The recommended version was released a month ago, on 2021-09-16.
The recommended version fixes:
SeverityIssuePriorityScore (*)Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-WS-1296835		586/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3		Proof of Concept
Cryptographic Issues
SNYK-JS-ELLIPTIC-1064899		586/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3		No Known Exploit
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: ethers
  • 5.4.7 - 2021-09-16
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-sZE9Fv4ksabiit2R12RbENLCRop5vpbBt6dZPJwM6l+1L0fAm8Q45psc7tmp7mi/"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.7.umd.min.js"></script>
  • 5.4.6 - 2021-08-27
    • Temporarily remove the block miner for clique-based networks from CI testing. (#1967; 8320d53)
    • More readable errors involving Uint8Arrays. (b6a061e)
    • Added Deferred Error support to Description objects to extent Interface parse methods. (#1894; a662490)
    • Fix address coder to prepare non-hexdatastring addresses as hexdatastring. (#1906; 017b1fe)
    • Removed temporary code for better errors needed until Alchemy added EIP-1559 support. (#1893; accb852)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-jaqCQEyTaqkzVimN6ycsv5kLSWUSF2ONLspf9q2ETyrm6vav2RnRxhxik5dPc3zP"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.6.umd.min.js"></script>
  • 5.4.5 - 2021-08-18
    • Fxied getBlockWithTransactions results (1858). (78e4273)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-NvZDg6ALAelzcNNdjR3jfJwpEPg50zAPV5PB5BV1zx/+KF48DYHNKeUCllqDNjKj"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.5.umd.min.js"></script>
  • 5.4.4 - 2021-08-05
    • Fixed Etherscan API key in default provider. (#1807; 1d27d95)
    • Adjust default masPriorityFeePerGas to account for MEV-heavy blocks. (#1817; 7175e2e)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-+zmUPvri3U8M4vN+Wf/Hp9TW5FZAEnEBnyiQ5/nJm/Bm5GjzrLGiDt36mx2uIVmr"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.4.umd.min.js"></script>
  • 5.4.3 - 2021-07-30
    • Fixed JsonRpcProvider for pre-EIP-2930 chains. (#1766; 7274cd0)
    • Forward some missing EIP-1559 fields to call and estimateGas. (#1766; be3854e)
    • Fixed possible UnhandledPromiseException for bad ENS names. (63f8b28)
    • Prevent overriding value for non-payble constructors. (#1785; 593b488)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-vsz9YA+ULlESA0434y8k25Vio7Dzn/cFXLqZT+Dk4qv2IMESrfJqqlIws85A9n2g"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.3.umd.min.js"></script>
  • 5.4.2 - 2021-07-23
    • Fix test case for new transactions responses. (0aafca7)
    • Added matic support to INFURA and Alchemy. (#1546; 576e9b5)
    • Added string change to coalesce errors on some clients. (bc5cc2e)
    • Added wait to transactions returned by getBlockWithTransactions. (#971; 660e69d)
    • Fixed floor, ceiling and round for FixedNumber for non-default Formats. (#1749; 551cfa0)
    • Fixed null confirmations in Wallet transaction. (#1706; 0f0d0c0)
    • Fixed Etherscan string change and enabled all tests. (a1f8d18)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-E3C8Sq6evrXkqc76OyCo0CoYAb/wRJnUekj79DC85Soudd4+MuAPY0VzpQYzhY68"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.2.umd.min.js"></script>
  • 5.4.1 - 2021-07-03
    • Added Pocket back into Homestead defaultProvider and skip certain EtherscanProvider tests affected by outage. (6e8a39e)
    • Fixed EtherscanProvider NONCE_EXPIRED matching string update. (ecae793)
    • Fixed explicit EIP-1559 keys for JsonRpcSigner. (72feee8)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-xA6XksA+S81KMKVo5shbejvuHxb0UMBTEG1c2ifc8SsBJKISpURzwy2Y8dDo0fli"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.1.umd.min.js"></script>
  • 5.4.0 - 2021-06-26

  • 5.3.1 - 2021-06-11

  • 5.3.0 - 2021-06-01

  • 5.2.0 - 2021-05-20

  • 5.1.4 - 2021-04-26

  • 5.1.3 - 2021-04-20

  • 5.1.2 - 2021-04-19

  • 5.1.1 - 2021-04-18

  • 5.1.0 - 2021-03-30

  • 5.0.32 - 2021-03-08

  • 5.0.31 - 2021-02-13

  • 5.0.30 - 2021-02-09

  • 5.0.29 - 2021-02-03

  • 5.0.28 - 2021-02-03

  • 5.0.27 - 2021-02-01

  • 5.0.26 - 2021-01-14


from ethers GitHub release notes
Commit messages
Package name: ethers
  • 4166b27 Updated dist files.
  • 32a6b2a Fix parseUints with excess zeros and fix ReDoS issue (#2016, #1975, #1976).
  • f2a32d0 docs: added provider.FeeData
  • 5762a1f updated dist files.
  • 8320d53 Temporarily remove the block miner for clique-based networks from CI testing (#1967).
  • c41b89a updated dist files.
  • b6a061e More readable errors involving Uint8Arrays.
  • a662490 Added Deferred Error support to Description objects to extent Interface parse methods (#1894).
  • bdb54ac docs: added cookbook entry to compute raw transaction (#1857).
  • 32a90b6 docs: added Alchemy tutorial
  • 95b87f6 docs: added BigNumber.toBigInt (#1799).
  • 017b1fe Fix address coder to prepare non-hexdatastring addresses as hexdatastring (#1906).
  • accb852 Removed temporary code for better errors needed until Alchemy added EIP-1559 support (#1893).
  • f0b3bc3 Updated dist files.
  • 78e4273 Fxied getBlockWithTransactions results (1858).
  • dd09bf0 docs: dded code examples for Contract (#982).
  • 4b163e9 docs: added dynamic localSigner
  • aacb95c docs: added struct encoding example (#1147, #1301, #1302).
  • e6315a6 docs: remove need to restart dev node after each run.
  • 3ac91a4 docs: added StaticJsonRpcProvider (#1514, #1531).
  • 2dd5c1a docs: Fixed topicset example (#1538).
  • 2653449 docs: updated transactions for EIP-1559.
  • cddb038 docs: added API for custom error coding.
  • e80f8dd docs: updates for EIP-1559 (#1777).
Compare
Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: 
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs
@snyk-bot
snyk-bot
requested a review
from a teamOctober 25, 2021 23:31
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

1 participant

@snyk-bot

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Force GitHub README to respect dark mode\n(function() {\n var style = document.createElement('style');\n style.textContent = '\n .markdown-body {\n color-scheme: dark light;\n }\n .markdown-body pre { background: #161b22 !important; }\n .markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }\n .markdown-body table th, .markdown-body table td { border-color: #30363d !important; }\n .markdown-body img { background: #0d1117; }\n .markdown-body blockquote { border-left-color: #8b949e; }\n .markdown-body hr { border-color: #30363d; }\n ';\n document.head.appendChild(style);\n})();", "GitHub Dark Mode README Fix");
}
} catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
[Snyk] Upgrade ethers from 5.0.26 to 5.4.7 - #178
Open
snyk-bot wants to merge 1 commit into
mainfrom 
snyk-upgrade-fa17a7cff6f3b77270d084bf2e11dfbb
Open
[Snyk] Upgrade ethers from 5.0.26 to 5.4.7#178
snyk-bot wants to merge 1 commit into
mainfrom 
snyk-upgrade-fa17a7cff6f3b77270d084bf2e11dfbb
Conversation
@snyk-bot
@snyk-botsnyk-bot
commented
Oct 25, 2021

Copy link


Copy Markdown

Snyk has created this PR to upgrade ethers from 5.0.26 to 5.4.7.
merge advice

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
  • The recommended version is 22 versions ahead of your current version.
  • The recommended version was released a month ago, on 2021-09-16.
The recommended version fixes:
SeverityIssuePriorityScore (*)Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-WS-1296835		586/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3		Proof of Concept
Cryptographic Issues
SNYK-JS-ELLIPTIC-1064899		586/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3		No Known Exploit
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: ethers
  • 5.4.7 - 2021-09-16
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-sZE9Fv4ksabiit2R12RbENLCRop5vpbBt6dZPJwM6l+1L0fAm8Q45psc7tmp7mi/"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.7.umd.min.js"></script>
  • 5.4.6 - 2021-08-27
    • Temporarily remove the block miner for clique-based networks from CI testing. (#1967; 8320d53)
    • More readable errors involving Uint8Arrays. (b6a061e)
    • Added Deferred Error support to Description objects to extent Interface parse methods. (#1894; a662490)
    • Fix address coder to prepare non-hexdatastring addresses as hexdatastring. (#1906; 017b1fe)
    • Removed temporary code for better errors needed until Alchemy added EIP-1559 support. (#1893; accb852)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-jaqCQEyTaqkzVimN6ycsv5kLSWUSF2ONLspf9q2ETyrm6vav2RnRxhxik5dPc3zP"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.6.umd.min.js"></script>
  • 5.4.5 - 2021-08-18
    • Fxied getBlockWithTransactions results (1858). (78e4273)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-NvZDg6ALAelzcNNdjR3jfJwpEPg50zAPV5PB5BV1zx/+KF48DYHNKeUCllqDNjKj"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.5.umd.min.js"></script>
  • 5.4.4 - 2021-08-05
    • Fixed Etherscan API key in default provider. (#1807; 1d27d95)
    • Adjust default masPriorityFeePerGas to account for MEV-heavy blocks. (#1817; 7175e2e)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-+zmUPvri3U8M4vN+Wf/Hp9TW5FZAEnEBnyiQ5/nJm/Bm5GjzrLGiDt36mx2uIVmr"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.4.umd.min.js"></script>
  • 5.4.3 - 2021-07-30
    • Fixed JsonRpcProvider for pre-EIP-2930 chains. (#1766; 7274cd0)
    • Forward some missing EIP-1559 fields to call and estimateGas. (#1766; be3854e)
    • Fixed possible UnhandledPromiseException for bad ENS names. (63f8b28)
    • Prevent overriding value for non-payble constructors. (#1785; 593b488)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-vsz9YA+ULlESA0434y8k25Vio7Dzn/cFXLqZT+Dk4qv2IMESrfJqqlIws85A9n2g"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.3.umd.min.js"></script>
  • 5.4.2 - 2021-07-23
    • Fix test case for new transactions responses. (0aafca7)
    • Added matic support to INFURA and Alchemy. (#1546; 576e9b5)
    • Added string change to coalesce errors on some clients. (bc5cc2e)
    • Added wait to transactions returned by getBlockWithTransactions. (#971; 660e69d)
    • Fixed floor, ceiling and round for FixedNumber for non-default Formats. (#1749; 551cfa0)
    • Fixed null confirmations in Wallet transaction. (#1706; 0f0d0c0)
    • Fixed Etherscan string change and enabled all tests. (a1f8d18)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-E3C8Sq6evrXkqc76OyCo0CoYAb/wRJnUekj79DC85Soudd4+MuAPY0VzpQYzhY68"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.2.umd.min.js"></script>
  • 5.4.1 - 2021-07-03
    • Added Pocket back into Homestead defaultProvider and skip certain EtherscanProvider tests affected by outage. (6e8a39e)
    • Fixed EtherscanProvider NONCE_EXPIRED matching string update. (ecae793)
    • Fixed explicit EIP-1559 keys for JsonRpcSigner. (72feee8)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-xA6XksA+S81KMKVo5shbejvuHxb0UMBTEG1c2ifc8SsBJKISpURzwy2Y8dDo0fli"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.1.umd.min.js"></script>
  • 5.4.0 - 2021-06-26

  • 5.3.1 - 2021-06-11

  • 5.3.0 - 2021-06-01

  • 5.2.0 - 2021-05-20

  • 5.1.4 - 2021-04-26

  • 5.1.3 - 2021-04-20

  • 5.1.2 - 2021-04-19

  • 5.1.1 - 2021-04-18

  • 5.1.0 - 2021-03-30

  • 5.0.32 - 2021-03-08

  • 5.0.31 - 2021-02-13

  • 5.0.30 - 2021-02-09

  • 5.0.29 - 2021-02-03

  • 5.0.28 - 2021-02-03

  • 5.0.27 - 2021-02-01

  • 5.0.26 - 2021-01-14


from ethers GitHub release notes
Commit messages
Package name: ethers
  • 4166b27 Updated dist files.
  • 32a6b2a Fix parseUints with excess zeros and fix ReDoS issue (#2016, #1975, #1976).
  • f2a32d0 docs: added provider.FeeData
  • 5762a1f updated dist files.
  • 8320d53 Temporarily remove the block miner for clique-based networks from CI testing (#1967).
  • c41b89a updated dist files.
  • b6a061e More readable errors involving Uint8Arrays.
  • a662490 Added Deferred Error support to Description objects to extent Interface parse methods (#1894).
  • bdb54ac docs: added cookbook entry to compute raw transaction (#1857).
  • 32a90b6 docs: added Alchemy tutorial
  • 95b87f6 docs: added BigNumber.toBigInt (#1799).
  • 017b1fe Fix address coder to prepare non-hexdatastring addresses as hexdatastring (#1906).
  • accb852 Removed temporary code for better errors needed until Alchemy added EIP-1559 support (#1893).
  • f0b3bc3 Updated dist files.
  • 78e4273 Fxied getBlockWithTransactions results (1858).
  • dd09bf0 docs: dded code examples for Contract (#982).
  • 4b163e9 docs: added dynamic localSigner
  • aacb95c docs: added struct encoding example (#1147, #1301, #1302).
  • e6315a6 docs: remove need to restart dev node after each run.
  • 3ac91a4 docs: added StaticJsonRpcProvider (#1514, #1531).
  • 2dd5c1a docs: Fixed topicset example (#1538).
  • 2653449 docs: updated transactions for EIP-1559.
  • cddb038 docs: added API for custom error coding.
  • e80f8dd docs: updates for EIP-1559 (#1777).
Compare
Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: 
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs
@snyk-bot
snyk-bot
requested a review
from a teamOctober 25, 2021 23:31
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

1 participant

@snyk-bot

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Highlight search terms from Google/DuckDuckGo/Bing referrer\n(function() {\n var ref = document.referrer;\n var terms = [];\n \n if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {\n var url = new URL(ref);\n var q = url.searchParams.get('q') || url.searchParams.get('p');\n if (q) {\n terms = q.split(/\\s+/).filter(function(t) { return t.length > 2; });\n }\n }\n \n if (terms.length === 0) return;\n \n var style = document.createElement('style');\n style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';\n document.head.appendChild(style);\n \n function highlight(node) {\n if (node.nodeType === 3) { // text node\n var text = node.textContent;\n var found = false;\n terms.forEach(function(term) {\n var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\') + ')', 'gi');\n if (regex.test(text)) {\n found = true;\n var frag = document.createDocumentFragment();\n var parts = text.split(regex);\n parts.forEach(function(part, i) {\n if (i % 2 === 0) {\n frag.appendChild(document.createTextNode(part));\n } else {\n var span = document.createElement('span');\n span.className = 'userscript-highlight';\n span.textContent = part;\n frag.appendChild(span);\n }\n });\n node.parentNode.replaceChild(frag, node);\n }\n });\n } else if (node.nodeType === 1 && node.childNodes) { // element\n var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];\n if (!skipTags.includes(node.tagName)) {\n Array.from(node.childNodes).forEach(highlight);\n }\n }\n }\n \n highlight(document.body);\n \n // Re-highlight on dynamic content\n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1 || node.nodeType === 3) highlight(node);\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Highlight Search Terms");
}
} catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
[Snyk] Upgrade ethers from 5.0.26 to 5.4.7 - #178
Open
snyk-bot wants to merge 1 commit into
mainfrom 
snyk-upgrade-fa17a7cff6f3b77270d084bf2e11dfbb
Open
[Snyk] Upgrade ethers from 5.0.26 to 5.4.7#178
snyk-bot wants to merge 1 commit into
mainfrom 
snyk-upgrade-fa17a7cff6f3b77270d084bf2e11dfbb
Conversation
@snyk-bot
@snyk-botsnyk-bot
commented
Oct 25, 2021

Copy link


Copy Markdown

Snyk has created this PR to upgrade ethers from 5.0.26 to 5.4.7.
merge advice

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
  • The recommended version is 22 versions ahead of your current version.
  • The recommended version was released a month ago, on 2021-09-16.
The recommended version fixes:
SeverityIssuePriorityScore (*)Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-WS-1296835		586/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3		Proof of Concept
Cryptographic Issues
SNYK-JS-ELLIPTIC-1064899		586/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3		No Known Exploit
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: ethers
  • 5.4.7 - 2021-09-16
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-sZE9Fv4ksabiit2R12RbENLCRop5vpbBt6dZPJwM6l+1L0fAm8Q45psc7tmp7mi/"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.7.umd.min.js"></script>
  • 5.4.6 - 2021-08-27
    • Temporarily remove the block miner for clique-based networks from CI testing. (#1967; 8320d53)
    • More readable errors involving Uint8Arrays. (b6a061e)
    • Added Deferred Error support to Description objects to extent Interface parse methods. (#1894; a662490)
    • Fix address coder to prepare non-hexdatastring addresses as hexdatastring. (#1906; 017b1fe)
    • Removed temporary code for better errors needed until Alchemy added EIP-1559 support. (#1893; accb852)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-jaqCQEyTaqkzVimN6ycsv5kLSWUSF2ONLspf9q2ETyrm6vav2RnRxhxik5dPc3zP"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.6.umd.min.js"></script>
  • 5.4.5 - 2021-08-18
    • Fxied getBlockWithTransactions results (1858). (78e4273)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-NvZDg6ALAelzcNNdjR3jfJwpEPg50zAPV5PB5BV1zx/+KF48DYHNKeUCllqDNjKj"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.5.umd.min.js"></script>
  • 5.4.4 - 2021-08-05
    • Fixed Etherscan API key in default provider. (#1807; 1d27d95)
    • Adjust default masPriorityFeePerGas to account for MEV-heavy blocks. (#1817; 7175e2e)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-+zmUPvri3U8M4vN+Wf/Hp9TW5FZAEnEBnyiQ5/nJm/Bm5GjzrLGiDt36mx2uIVmr"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.4.umd.min.js"></script>
  • 5.4.3 - 2021-07-30
    • Fixed JsonRpcProvider for pre-EIP-2930 chains. (#1766; 7274cd0)
    • Forward some missing EIP-1559 fields to call and estimateGas. (#1766; be3854e)
    • Fixed possible UnhandledPromiseException for bad ENS names. (63f8b28)
    • Prevent overriding value for non-payble constructors. (#1785; 593b488)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-vsz9YA+ULlESA0434y8k25Vio7Dzn/cFXLqZT+Dk4qv2IMESrfJqqlIws85A9n2g"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.3.umd.min.js"></script>
  • 5.4.2 - 2021-07-23
    • Fix test case for new transactions responses. (0aafca7)
    • Added matic support to INFURA and Alchemy. (#1546; 576e9b5)
    • Added string change to coalesce errors on some clients. (bc5cc2e)
    • Added wait to transactions returned by getBlockWithTransactions. (#971; 660e69d)
    • Fixed floor, ceiling and round for FixedNumber for non-default Formats. (#1749; 551cfa0)
    • Fixed null confirmations in Wallet transaction. (#1706; 0f0d0c0)
    • Fixed Etherscan string change and enabled all tests. (a1f8d18)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-E3C8Sq6evrXkqc76OyCo0CoYAb/wRJnUekj79DC85Soudd4+MuAPY0VzpQYzhY68"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.2.umd.min.js"></script>
  • 5.4.1 - 2021-07-03
    • Added Pocket back into Homestead defaultProvider and skip certain EtherscanProvider tests affected by outage. (6e8a39e)
    • Fixed EtherscanProvider NONCE_EXPIRED matching string update. (ecae793)
    • Fixed explicit EIP-1559 keys for JsonRpcSigner. (72feee8)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-xA6XksA+S81KMKVo5shbejvuHxb0UMBTEG1c2ifc8SsBJKISpURzwy2Y8dDo0fli"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.1.umd.min.js"></script>
  • 5.4.0 - 2021-06-26

  • 5.3.1 - 2021-06-11

  • 5.3.0 - 2021-06-01

  • 5.2.0 - 2021-05-20

  • 5.1.4 - 2021-04-26

  • 5.1.3 - 2021-04-20

  • 5.1.2 - 2021-04-19

  • 5.1.1 - 2021-04-18

  • 5.1.0 - 2021-03-30

  • 5.0.32 - 2021-03-08

  • 5.0.31 - 2021-02-13

  • 5.0.30 - 2021-02-09

  • 5.0.29 - 2021-02-03

  • 5.0.28 - 2021-02-03

  • 5.0.27 - 2021-02-01

  • 5.0.26 - 2021-01-14


from ethers GitHub release notes
Commit messages
Package name: ethers
  • 4166b27 Updated dist files.
  • 32a6b2a Fix parseUints with excess zeros and fix ReDoS issue (#2016, #1975, #1976).
  • f2a32d0 docs: added provider.FeeData
  • 5762a1f updated dist files.
  • 8320d53 Temporarily remove the block miner for clique-based networks from CI testing (#1967).
  • c41b89a updated dist files.
  • b6a061e More readable errors involving Uint8Arrays.
  • a662490 Added Deferred Error support to Description objects to extent Interface parse methods (#1894).
  • bdb54ac docs: added cookbook entry to compute raw transaction (#1857).
  • 32a90b6 docs: added Alchemy tutorial
  • 95b87f6 docs: added BigNumber.toBigInt (#1799).
  • 017b1fe Fix address coder to prepare non-hexdatastring addresses as hexdatastring (#1906).
  • accb852 Removed temporary code for better errors needed until Alchemy added EIP-1559 support (#1893).
  • f0b3bc3 Updated dist files.
  • 78e4273 Fxied getBlockWithTransactions results (1858).
  • dd09bf0 docs: dded code examples for Contract (#982).
  • 4b163e9 docs: added dynamic localSigner
  • aacb95c docs: added struct encoding example (#1147, #1301, #1302).
  • e6315a6 docs: remove need to restart dev node after each run.
  • 3ac91a4 docs: added StaticJsonRpcProvider (#1514, #1531).
  • 2dd5c1a docs: Fixed topicset example (#1538).
  • 2653449 docs: updated transactions for EIP-1559.
  • cddb038 docs: added API for custom error coding.
  • e80f8dd docs: updates for EIP-1559 (#1777).
Compare
Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: 
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs
@snyk-bot
snyk-bot
requested a review
from a teamOctober 25, 2021 23:31
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

1 participant

@snyk-bot

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Strip utm_, fbclid, gclid, etc. from all links on page\n(function() {\n var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',\n 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',\n 'ref', 'ref_src', 'source', 'medium', 'campaign'];\n \n function cleanUrl(url) {\n try {\n var u = new URL(url, window.location.origin);\n var changed = false;\n trackingParams.forEach(function(p) {\n if (u.searchParams.has(p)) {\n u.searchParams.delete(p);\n changed = true;\n }\n });\n return changed ? u.toString() : url;\n } catch (e) {\n return url;\n }\n }\n \n function cleanLinks() {\n document.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n \n cleanLinks();\n \n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1) {\n if (node.tagName === 'A') cleanLinks();\n node.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Remove Tracking Parameters from Links");
}
} catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); }
})();
(function(){
try {
var __m = "youtube.com";
var __re = new RegExp('^' + "youtube\\.com" + '

Skip to content
[Snyk] Upgrade ethers from 5.0.26 to 5.4.7 - #178
Open
snyk-bot wants to merge 1 commit into
mainfrom 
snyk-upgrade-fa17a7cff6f3b77270d084bf2e11dfbb
Open
[Snyk] Upgrade ethers from 5.0.26 to 5.4.7#178
snyk-bot wants to merge 1 commit into
mainfrom 
snyk-upgrade-fa17a7cff6f3b77270d084bf2e11dfbb
Conversation
@snyk-bot
@snyk-botsnyk-bot
commented
Oct 25, 2021

Copy link


Copy Markdown

Snyk has created this PR to upgrade ethers from 5.0.26 to 5.4.7.
merge advice

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
  • The recommended version is 22 versions ahead of your current version.
  • The recommended version was released a month ago, on 2021-09-16.
The recommended version fixes:
SeverityIssuePriorityScore (*)Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-WS-1296835		586/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3		Proof of Concept
Cryptographic Issues
SNYK-JS-ELLIPTIC-1064899		586/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3		No Known Exploit
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: ethers
  • 5.4.7 - 2021-09-16
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-sZE9Fv4ksabiit2R12RbENLCRop5vpbBt6dZPJwM6l+1L0fAm8Q45psc7tmp7mi/"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.7.umd.min.js"></script>
  • 5.4.6 - 2021-08-27
    • Temporarily remove the block miner for clique-based networks from CI testing. (#1967; 8320d53)
    • More readable errors involving Uint8Arrays. (b6a061e)
    • Added Deferred Error support to Description objects to extent Interface parse methods. (#1894; a662490)
    • Fix address coder to prepare non-hexdatastring addresses as hexdatastring. (#1906; 017b1fe)
    • Removed temporary code for better errors needed until Alchemy added EIP-1559 support. (#1893; accb852)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-jaqCQEyTaqkzVimN6ycsv5kLSWUSF2ONLspf9q2ETyrm6vav2RnRxhxik5dPc3zP"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.6.umd.min.js"></script>
  • 5.4.5 - 2021-08-18
    • Fxied getBlockWithTransactions results (1858). (78e4273)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-NvZDg6ALAelzcNNdjR3jfJwpEPg50zAPV5PB5BV1zx/+KF48DYHNKeUCllqDNjKj"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.5.umd.min.js"></script>
  • 5.4.4 - 2021-08-05
    • Fixed Etherscan API key in default provider. (#1807; 1d27d95)
    • Adjust default masPriorityFeePerGas to account for MEV-heavy blocks. (#1817; 7175e2e)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-+zmUPvri3U8M4vN+Wf/Hp9TW5FZAEnEBnyiQ5/nJm/Bm5GjzrLGiDt36mx2uIVmr"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.4.umd.min.js"></script>
  • 5.4.3 - 2021-07-30
    • Fixed JsonRpcProvider for pre-EIP-2930 chains. (#1766; 7274cd0)
    • Forward some missing EIP-1559 fields to call and estimateGas. (#1766; be3854e)
    • Fixed possible UnhandledPromiseException for bad ENS names. (63f8b28)
    • Prevent overriding value for non-payble constructors. (#1785; 593b488)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-vsz9YA+ULlESA0434y8k25Vio7Dzn/cFXLqZT+Dk4qv2IMESrfJqqlIws85A9n2g"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.3.umd.min.js"></script>
  • 5.4.2 - 2021-07-23
    • Fix test case for new transactions responses. (0aafca7)
    • Added matic support to INFURA and Alchemy. (#1546; 576e9b5)
    • Added string change to coalesce errors on some clients. (bc5cc2e)
    • Added wait to transactions returned by getBlockWithTransactions. (#971; 660e69d)
    • Fixed floor, ceiling and round for FixedNumber for non-default Formats. (#1749; 551cfa0)
    • Fixed null confirmations in Wallet transaction. (#1706; 0f0d0c0)
    • Fixed Etherscan string change and enabled all tests. (a1f8d18)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-E3C8Sq6evrXkqc76OyCo0CoYAb/wRJnUekj79DC85Soudd4+MuAPY0VzpQYzhY68"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.2.umd.min.js"></script>
  • 5.4.1 - 2021-07-03
    • Added Pocket back into Homestead defaultProvider and skip certain EtherscanProvider tests affected by outage. (6e8a39e)
    • Fixed EtherscanProvider NONCE_EXPIRED matching string update. (ecae793)
    • Fixed explicit EIP-1559 keys for JsonRpcSigner. (72feee8)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-xA6XksA+S81KMKVo5shbejvuHxb0UMBTEG1c2ifc8SsBJKISpURzwy2Y8dDo0fli"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.1.umd.min.js"></script>
  • 5.4.0 - 2021-06-26

  • 5.3.1 - 2021-06-11

  • 5.3.0 - 2021-06-01

  • 5.2.0 - 2021-05-20

  • 5.1.4 - 2021-04-26

  • 5.1.3 - 2021-04-20

  • 5.1.2 - 2021-04-19

  • 5.1.1 - 2021-04-18

  • 5.1.0 - 2021-03-30

  • 5.0.32 - 2021-03-08

  • 5.0.31 - 2021-02-13

  • 5.0.30 - 2021-02-09

  • 5.0.29 - 2021-02-03

  • 5.0.28 - 2021-02-03

  • 5.0.27 - 2021-02-01

  • 5.0.26 - 2021-01-14


from ethers GitHub release notes
Commit messages
Package name: ethers
  • 4166b27 Updated dist files.
  • 32a6b2a Fix parseUints with excess zeros and fix ReDoS issue (#2016, #1975, #1976).
  • f2a32d0 docs: added provider.FeeData
  • 5762a1f updated dist files.
  • 8320d53 Temporarily remove the block miner for clique-based networks from CI testing (#1967).
  • c41b89a updated dist files.
  • b6a061e More readable errors involving Uint8Arrays.
  • a662490 Added Deferred Error support to Description objects to extent Interface parse methods (#1894).
  • bdb54ac docs: added cookbook entry to compute raw transaction (#1857).
  • 32a90b6 docs: added Alchemy tutorial
  • 95b87f6 docs: added BigNumber.toBigInt (#1799).
  • 017b1fe Fix address coder to prepare non-hexdatastring addresses as hexdatastring (#1906).
  • accb852 Removed temporary code for better errors needed until Alchemy added EIP-1559 support (#1893).
  • f0b3bc3 Updated dist files.
  • 78e4273 Fxied getBlockWithTransactions results (1858).
  • dd09bf0 docs: dded code examples for Contract (#982).
  • 4b163e9 docs: added dynamic localSigner
  • aacb95c docs: added struct encoding example (#1147, #1301, #1302).
  • e6315a6 docs: remove need to restart dev node after each run.
  • 3ac91a4 docs: added StaticJsonRpcProvider (#1514, #1531).
  • 2dd5c1a docs: Fixed topicset example (#1538).
  • 2653449 docs: updated transactions for EIP-1559.
  • cddb038 docs: added API for custom error coding.
  • e80f8dd docs: updates for EIP-1559 (#1777).
Compare
Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: 
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs
@snyk-bot
snyk-bot
requested a review
from a teamOctober 25, 2021 23:31
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

1 participant

@snyk-bot

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Auto-enable theater mode on YouTube\n(function() {\n function tryTheater() {\n var btn = document.querySelector('button[aria-label=\"Theater mode\"], ytd-player #player button[title=\"Theater mode\"]');\n if (btn && !btn.classList.contains('activated')) {\n btn.click();\n }\n }\n \n // Try immediately\n tryTheater();\n \n // Try after navigation (SPA)\n var lastUrl = location.href;\n setInterval(function() {\n if (location.href !== lastUrl) {\n lastUrl = location.href;\n setTimeout(tryTheater, 500);\n }\n }, 1000);\n \n // Also try on player load\n var observer = new MutationObserver(tryTheater);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "YouTube Theater Mode Default");
}
} catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
[Snyk] Upgrade ethers from 5.0.26 to 5.4.7 - #178
Open
snyk-bot wants to merge 1 commit into
mainfrom 
snyk-upgrade-fa17a7cff6f3b77270d084bf2e11dfbb
Open
[Snyk] Upgrade ethers from 5.0.26 to 5.4.7#178
snyk-bot wants to merge 1 commit into
mainfrom 
snyk-upgrade-fa17a7cff6f3b77270d084bf2e11dfbb
Conversation
@snyk-bot
@snyk-botsnyk-bot
commented
Oct 25, 2021

Copy link


Copy Markdown

Snyk has created this PR to upgrade ethers from 5.0.26 to 5.4.7.
merge advice

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
  • The recommended version is 22 versions ahead of your current version.
  • The recommended version was released a month ago, on 2021-09-16.
The recommended version fixes:
SeverityIssuePriorityScore (*)Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-WS-1296835		586/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3		Proof of Concept
Cryptographic Issues
SNYK-JS-ELLIPTIC-1064899		586/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3		No Known Exploit
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: ethers
  • 5.4.7 - 2021-09-16
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-sZE9Fv4ksabiit2R12RbENLCRop5vpbBt6dZPJwM6l+1L0fAm8Q45psc7tmp7mi/"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.7.umd.min.js"></script>
  • 5.4.6 - 2021-08-27
    • Temporarily remove the block miner for clique-based networks from CI testing. (#1967; 8320d53)
    • More readable errors involving Uint8Arrays. (b6a061e)
    • Added Deferred Error support to Description objects to extent Interface parse methods. (#1894; a662490)
    • Fix address coder to prepare non-hexdatastring addresses as hexdatastring. (#1906; 017b1fe)
    • Removed temporary code for better errors needed until Alchemy added EIP-1559 support. (#1893; accb852)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-jaqCQEyTaqkzVimN6ycsv5kLSWUSF2ONLspf9q2ETyrm6vav2RnRxhxik5dPc3zP"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.6.umd.min.js"></script>
  • 5.4.5 - 2021-08-18
    • Fxied getBlockWithTransactions results (1858). (78e4273)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-NvZDg6ALAelzcNNdjR3jfJwpEPg50zAPV5PB5BV1zx/+KF48DYHNKeUCllqDNjKj"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.5.umd.min.js"></script>
  • 5.4.4 - 2021-08-05
    • Fixed Etherscan API key in default provider. (#1807; 1d27d95)
    • Adjust default masPriorityFeePerGas to account for MEV-heavy blocks. (#1817; 7175e2e)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-+zmUPvri3U8M4vN+Wf/Hp9TW5FZAEnEBnyiQ5/nJm/Bm5GjzrLGiDt36mx2uIVmr"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.4.umd.min.js"></script>
  • 5.4.3 - 2021-07-30
    • Fixed JsonRpcProvider for pre-EIP-2930 chains. (#1766; 7274cd0)
    • Forward some missing EIP-1559 fields to call and estimateGas. (#1766; be3854e)
    • Fixed possible UnhandledPromiseException for bad ENS names. (63f8b28)
    • Prevent overriding value for non-payble constructors. (#1785; 593b488)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-vsz9YA+ULlESA0434y8k25Vio7Dzn/cFXLqZT+Dk4qv2IMESrfJqqlIws85A9n2g"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.3.umd.min.js"></script>
  • 5.4.2 - 2021-07-23
    • Fix test case for new transactions responses. (0aafca7)
    • Added matic support to INFURA and Alchemy. (#1546; 576e9b5)
    • Added string change to coalesce errors on some clients. (bc5cc2e)
    • Added wait to transactions returned by getBlockWithTransactions. (#971; 660e69d)
    • Fixed floor, ceiling and round for FixedNumber for non-default Formats. (#1749; 551cfa0)
    • Fixed null confirmations in Wallet transaction. (#1706; 0f0d0c0)
    • Fixed Etherscan string change and enabled all tests. (a1f8d18)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-E3C8Sq6evrXkqc76OyCo0CoYAb/wRJnUekj79DC85Soudd4+MuAPY0VzpQYzhY68"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.2.umd.min.js"></script>
  • 5.4.1 - 2021-07-03
    • Added Pocket back into Homestead defaultProvider and skip certain EtherscanProvider tests affected by outage. (6e8a39e)
    • Fixed EtherscanProvider NONCE_EXPIRED matching string update. (ecae793)
    • Fixed explicit EIP-1559 keys for JsonRpcSigner. (72feee8)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-xA6XksA+S81KMKVo5shbejvuHxb0UMBTEG1c2ifc8SsBJKISpURzwy2Y8dDo0fli"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.1.umd.min.js"></script>
  • 5.4.0 - 2021-06-26

  • 5.3.1 - 2021-06-11

  • 5.3.0 - 2021-06-01

  • 5.2.0 - 2021-05-20

  • 5.1.4 - 2021-04-26

  • 5.1.3 - 2021-04-20

  • 5.1.2 - 2021-04-19

  • 5.1.1 - 2021-04-18

  • 5.1.0 - 2021-03-30

  • 5.0.32 - 2021-03-08

  • 5.0.31 - 2021-02-13

  • 5.0.30 - 2021-02-09

  • 5.0.29 - 2021-02-03

  • 5.0.28 - 2021-02-03

  • 5.0.27 - 2021-02-01

  • 5.0.26 - 2021-01-14


from ethers GitHub release notes
Commit messages
Package name: ethers
  • 4166b27 Updated dist files.
  • 32a6b2a Fix parseUints with excess zeros and fix ReDoS issue (#2016, #1975, #1976).
  • f2a32d0 docs: added provider.FeeData
  • 5762a1f updated dist files.
  • 8320d53 Temporarily remove the block miner for clique-based networks from CI testing (#1967).
  • c41b89a updated dist files.
  • b6a061e More readable errors involving Uint8Arrays.
  • a662490 Added Deferred Error support to Description objects to extent Interface parse methods (#1894).
  • bdb54ac docs: added cookbook entry to compute raw transaction (#1857).
  • 32a90b6 docs: added Alchemy tutorial
  • 95b87f6 docs: added BigNumber.toBigInt (#1799).
  • 017b1fe Fix address coder to prepare non-hexdatastring addresses as hexdatastring (#1906).
  • accb852 Removed temporary code for better errors needed until Alchemy added EIP-1559 support (#1893).
  • f0b3bc3 Updated dist files.
  • 78e4273 Fxied getBlockWithTransactions results (1858).
  • dd09bf0 docs: dded code examples for Contract (#982).
  • 4b163e9 docs: added dynamic localSigner
  • aacb95c docs: added struct encoding example (#1147, #1301, #1302).
  • e6315a6 docs: remove need to restart dev node after each run.
  • 3ac91a4 docs: added StaticJsonRpcProvider (#1514, #1531).
  • 2dd5c1a docs: Fixed topicset example (#1538).
  • 2653449 docs: updated transactions for EIP-1559.
  • cddb038 docs: added API for custom error coding.
  • e80f8dd docs: updates for EIP-1559 (#1777).
Compare
Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: 
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs
@snyk-bot
snyk-bot
requested a review
from a teamOctober 25, 2021 23:31
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

1 participant

@snyk-bot

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Remove or un-stick sticky/fixed headers that block content\n(function() {\n function unstick() {\n document.querySelectorAll('header, nav, [role=\"banner\"], .header, .navbar, .sticky, .fixed-top, [style*=\"position: fixed\"], [style*=\"position:sticky\"]').forEach(function(el) {\n if (el.style.position === 'fixed' || el.style.position === 'sticky' || \n getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {\n el.style.position = 'static';\n el.style.top = 'auto';\n el.style.zIndex = 'auto';\n }\n });\n }\n \n unstick();\n \n var observer = new MutationObserver(unstick);\n observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });\n})();", "Kill Sticky Headers");
}
} catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
[Snyk] Upgrade ethers from 5.0.26 to 5.4.7 - #178
Open
snyk-bot wants to merge 1 commit into
mainfrom 
snyk-upgrade-fa17a7cff6f3b77270d084bf2e11dfbb
Open
[Snyk] Upgrade ethers from 5.0.26 to 5.4.7#178
snyk-bot wants to merge 1 commit into
mainfrom 
snyk-upgrade-fa17a7cff6f3b77270d084bf2e11dfbb
Conversation
@snyk-bot
@snyk-botsnyk-bot
commented
Oct 25, 2021

Copy link


Copy Markdown

Snyk has created this PR to upgrade ethers from 5.0.26 to 5.4.7.
merge advice

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
  • The recommended version is 22 versions ahead of your current version.
  • The recommended version was released a month ago, on 2021-09-16.
The recommended version fixes:
SeverityIssuePriorityScore (*)Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-WS-1296835		586/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3		Proof of Concept
Cryptographic Issues
SNYK-JS-ELLIPTIC-1064899		586/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3		No Known Exploit
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: ethers
  • 5.4.7 - 2021-09-16
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-sZE9Fv4ksabiit2R12RbENLCRop5vpbBt6dZPJwM6l+1L0fAm8Q45psc7tmp7mi/"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.7.umd.min.js"></script>
  • 5.4.6 - 2021-08-27
    • Temporarily remove the block miner for clique-based networks from CI testing. (#1967; 8320d53)
    • More readable errors involving Uint8Arrays. (b6a061e)
    • Added Deferred Error support to Description objects to extent Interface parse methods. (#1894; a662490)
    • Fix address coder to prepare non-hexdatastring addresses as hexdatastring. (#1906; 017b1fe)
    • Removed temporary code for better errors needed until Alchemy added EIP-1559 support. (#1893; accb852)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-jaqCQEyTaqkzVimN6ycsv5kLSWUSF2ONLspf9q2ETyrm6vav2RnRxhxik5dPc3zP"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.6.umd.min.js"></script>
  • 5.4.5 - 2021-08-18
    • Fxied getBlockWithTransactions results (1858). (78e4273)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-NvZDg6ALAelzcNNdjR3jfJwpEPg50zAPV5PB5BV1zx/+KF48DYHNKeUCllqDNjKj"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.5.umd.min.js"></script>
  • 5.4.4 - 2021-08-05
    • Fixed Etherscan API key in default provider. (#1807; 1d27d95)
    • Adjust default masPriorityFeePerGas to account for MEV-heavy blocks. (#1817; 7175e2e)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-+zmUPvri3U8M4vN+Wf/Hp9TW5FZAEnEBnyiQ5/nJm/Bm5GjzrLGiDt36mx2uIVmr"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.4.umd.min.js"></script>
  • 5.4.3 - 2021-07-30
    • Fixed JsonRpcProvider for pre-EIP-2930 chains. (#1766; 7274cd0)
    • Forward some missing EIP-1559 fields to call and estimateGas. (#1766; be3854e)
    • Fixed possible UnhandledPromiseException for bad ENS names. (63f8b28)
    • Prevent overriding value for non-payble constructors. (#1785; 593b488)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-vsz9YA+ULlESA0434y8k25Vio7Dzn/cFXLqZT+Dk4qv2IMESrfJqqlIws85A9n2g"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.3.umd.min.js"></script>
  • 5.4.2 - 2021-07-23
    • Fix test case for new transactions responses. (0aafca7)
    • Added matic support to INFURA and Alchemy. (#1546; 576e9b5)
    • Added string change to coalesce errors on some clients. (bc5cc2e)
    • Added wait to transactions returned by getBlockWithTransactions. (#971; 660e69d)
    • Fixed floor, ceiling and round for FixedNumber for non-default Formats. (#1749; 551cfa0)
    • Fixed null confirmations in Wallet transaction. (#1706; 0f0d0c0)
    • Fixed Etherscan string change and enabled all tests. (a1f8d18)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-E3C8Sq6evrXkqc76OyCo0CoYAb/wRJnUekj79DC85Soudd4+MuAPY0VzpQYzhY68"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.2.umd.min.js"></script>
  • 5.4.1 - 2021-07-03
    • Added Pocket back into Homestead defaultProvider and skip certain EtherscanProvider tests affected by outage. (6e8a39e)
    • Fixed EtherscanProvider NONCE_EXPIRED matching string update. (ecae793)
    • Fixed explicit EIP-1559 keys for JsonRpcSigner. (72feee8)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-xA6XksA+S81KMKVo5shbejvuHxb0UMBTEG1c2ifc8SsBJKISpURzwy2Y8dDo0fli"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.1.umd.min.js"></script>
  • 5.4.0 - 2021-06-26

  • 5.3.1 - 2021-06-11

  • 5.3.0 - 2021-06-01

  • 5.2.0 - 2021-05-20

  • 5.1.4 - 2021-04-26

  • 5.1.3 - 2021-04-20

  • 5.1.2 - 2021-04-19

  • 5.1.1 - 2021-04-18

  • 5.1.0 - 2021-03-30

  • 5.0.32 - 2021-03-08

  • 5.0.31 - 2021-02-13

  • 5.0.30 - 2021-02-09

  • 5.0.29 - 2021-02-03

  • 5.0.28 - 2021-02-03

  • 5.0.27 - 2021-02-01

  • 5.0.26 - 2021-01-14


from ethers GitHub release notes
Commit messages
Package name: ethers
  • 4166b27 Updated dist files.
  • 32a6b2a Fix parseUints with excess zeros and fix ReDoS issue (#2016, #1975, #1976).
  • f2a32d0 docs: added provider.FeeData
  • 5762a1f updated dist files.
  • 8320d53 Temporarily remove the block miner for clique-based networks from CI testing (#1967).
  • c41b89a updated dist files.
  • b6a061e More readable errors involving Uint8Arrays.
  • a662490 Added Deferred Error support to Description objects to extent Interface parse methods (#1894).
  • bdb54ac docs: added cookbook entry to compute raw transaction (#1857).
  • 32a90b6 docs: added Alchemy tutorial
  • 95b87f6 docs: added BigNumber.toBigInt (#1799).
  • 017b1fe Fix address coder to prepare non-hexdatastring addresses as hexdatastring (#1906).
  • accb852 Removed temporary code for better errors needed until Alchemy added EIP-1559 support (#1893).
  • f0b3bc3 Updated dist files.
  • 78e4273 Fxied getBlockWithTransactions results (1858).
  • dd09bf0 docs: dded code examples for Contract (#982).
  • 4b163e9 docs: added dynamic localSigner
  • aacb95c docs: added struct encoding example (#1147, #1301, #1302).
  • e6315a6 docs: remove need to restart dev node after each run.
  • 3ac91a4 docs: added StaticJsonRpcProvider (#1514, #1531).
  • 2dd5c1a docs: Fixed topicset example (#1538).
  • 2653449 docs: updated transactions for EIP-1559.
  • cddb038 docs: added API for custom error coding.
  • e80f8dd docs: updates for EIP-1559 (#1777).
Compare
Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: 
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs
@snyk-bot
snyk-bot
requested a review
from a teamOctober 25, 2021 23:31
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

1 participant

@snyk-bot

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Universal Dark Mode - works on any site\n(function() {\n var enabled = true;\n \n function applyDarkMode() {\n if (!enabled) return;\n \n // Create style element if it doesn't exist\n var style = document.getElementById('universal-dark-mode-style');\n if (!style) {\n style = document.createElement('style');\n style.id = 'universal-dark-mode-style';\n document.head.appendChild(style);\n }\n \n // Dark mode CSS - inverts colors but preserves images/video\n style.textContent = '\n /* Invert everything except media */\n html {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #1a1a2e !important;\n }\n \n /* Restore images, videos, iframes, canvas */\n img, video, iframe, canvas, svg, picture, [style*=\"background-image\"] {\n filter: invert(1) hue-rotate(180deg) !important;\n }\n \n /* Preserve specific elements that should not be inverted */\n .no-dark-mode, .no-dark-mode *,\n [data-theme=\"light\"], [data-theme=\"light\"],\n .ace_editor, .ace_editor *,\n .CodeMirror, .CodeMirror *,\n .monaco-editor, .monaco-editor *,\n .markdown-body pre, .markdown-body pre *,\n .highlight, .highlight *,\n pre code, pre code * {\n filter: none !important;\n }\n \n /* Fix common UI elements */\n .modal, .popup, .dropdown-menu, .tooltip, .popover {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #2d2d44 !important;\n border-color: #444 !important;\n }\n \n /* Scrollbars */\n ::-webkit-scrollbar { background: #1a1a2e !important; }\n ::-webkit-scrollbar-thumb { background: #444 !important; }\n ::-webkit-scrollbar-thumb:hover { background: #555 !important; }\n \n /* Selection */\n ::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ';\n }\n \n function removeDarkMode() {\n var style = document.getElementById('universal-dark-mode-style');\n if (style) style.remove();\n }\n \n // Toggle with Alt+Shift+D\n document.addEventListener('keydown', function(e) {\n if (e.altKey && e.shiftKey && e.key === 'D') {\n e.preventDefault();\n enabled = !enabled;\n if (enabled) {\n applyDarkMode();\n console.log('[Universal Dark Mode] Enabled');\n } else {\n removeDarkMode();\n console.log('[Universal Dark Mode] Disabled');\n }\n }\n });\n \n // Apply on load\n applyDarkMode();\n \n // Re-apply on dynamic content\n var observer = new MutationObserver(function(mutations) {\n if (enabled && !document.getElementById('universal-dark-mode-style')) {\n applyDarkMode();\n }\n });\n observer.observe(document.head, { childList: true });\n \n console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');\n})();", "Universal Dark Mode");
}
} catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); }
})();
})();

Skip to content
[Snyk] Upgrade ethers from 5.0.26 to 5.4.7 - #178
Open
snyk-bot wants to merge 1 commit into
mainfrom 
snyk-upgrade-fa17a7cff6f3b77270d084bf2e11dfbb
Open
[Snyk] Upgrade ethers from 5.0.26 to 5.4.7#178
snyk-bot wants to merge 1 commit into
mainfrom 
snyk-upgrade-fa17a7cff6f3b77270d084bf2e11dfbb
Conversation
@snyk-bot
@snyk-botsnyk-bot
commented
Oct 25, 2021

Copy link


Copy Markdown

Snyk has created this PR to upgrade ethers from 5.0.26 to 5.4.7.
merge advice

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
  • The recommended version is 22 versions ahead of your current version.
  • The recommended version was released a month ago, on 2021-09-16.
The recommended version fixes:
SeverityIssuePriorityScore (*)Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-WS-1296835		586/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3		Proof of Concept
Cryptographic Issues
SNYK-JS-ELLIPTIC-1064899		586/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3		No Known Exploit
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: ethers
  • 5.4.7 - 2021-09-16
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-sZE9Fv4ksabiit2R12RbENLCRop5vpbBt6dZPJwM6l+1L0fAm8Q45psc7tmp7mi/"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.7.umd.min.js"></script>
  • 5.4.6 - 2021-08-27
    • Temporarily remove the block miner for clique-based networks from CI testing. (#1967; 8320d53)
    • More readable errors involving Uint8Arrays. (b6a061e)
    • Added Deferred Error support to Description objects to extent Interface parse methods. (#1894; a662490)
    • Fix address coder to prepare non-hexdatastring addresses as hexdatastring. (#1906; 017b1fe)
    • Removed temporary code for better errors needed until Alchemy added EIP-1559 support. (#1893; accb852)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-jaqCQEyTaqkzVimN6ycsv5kLSWUSF2ONLspf9q2ETyrm6vav2RnRxhxik5dPc3zP"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.6.umd.min.js"></script>
  • 5.4.5 - 2021-08-18
    • Fxied getBlockWithTransactions results (1858). (78e4273)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-NvZDg6ALAelzcNNdjR3jfJwpEPg50zAPV5PB5BV1zx/+KF48DYHNKeUCllqDNjKj"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.5.umd.min.js"></script>
  • 5.4.4 - 2021-08-05
    • Fixed Etherscan API key in default provider. (#1807; 1d27d95)
    • Adjust default masPriorityFeePerGas to account for MEV-heavy blocks. (#1817; 7175e2e)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-+zmUPvri3U8M4vN+Wf/Hp9TW5FZAEnEBnyiQ5/nJm/Bm5GjzrLGiDt36mx2uIVmr"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.4.umd.min.js"></script>
  • 5.4.3 - 2021-07-30
    • Fixed JsonRpcProvider for pre-EIP-2930 chains. (#1766; 7274cd0)
    • Forward some missing EIP-1559 fields to call and estimateGas. (#1766; be3854e)
    • Fixed possible UnhandledPromiseException for bad ENS names. (63f8b28)
    • Prevent overriding value for non-payble constructors. (#1785; 593b488)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-vsz9YA+ULlESA0434y8k25Vio7Dzn/cFXLqZT+Dk4qv2IMESrfJqqlIws85A9n2g"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.3.umd.min.js"></script>
  • 5.4.2 - 2021-07-23
    • Fix test case for new transactions responses. (0aafca7)
    • Added matic support to INFURA and Alchemy. (#1546; 576e9b5)
    • Added string change to coalesce errors on some clients. (bc5cc2e)
    • Added wait to transactions returned by getBlockWithTransactions. (#971; 660e69d)
    • Fixed floor, ceiling and round for FixedNumber for non-default Formats. (#1749; 551cfa0)
    • Fixed null confirmations in Wallet transaction. (#1706; 0f0d0c0)
    • Fixed Etherscan string change and enabled all tests. (a1f8d18)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-E3C8Sq6evrXkqc76OyCo0CoYAb/wRJnUekj79DC85Soudd4+MuAPY0VzpQYzhY68"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.2.umd.min.js"></script>
  • 5.4.1 - 2021-07-03
    • Added Pocket back into Homestead defaultProvider and skip certain EtherscanProvider tests affected by outage. (6e8a39e)
    • Fixed EtherscanProvider NONCE_EXPIRED matching string update. (ecae793)
    • Fixed explicit EIP-1559 keys for JsonRpcSigner. (72feee8)
    Embedding UMD with SRI:
    <scripttype="text/javascript"
integrity="sha384-xA6XksA+S81KMKVo5shbejvuHxb0UMBTEG1c2ifc8SsBJKISpURzwy2Y8dDo0fli"
crossorigin="anonymous"
src="https://cdn-cors.ethers.io/lib/ethers-5.4.1.umd.min.js"></script>
  • 5.4.0 - 2021-06-26

  • 5.3.1 - 2021-06-11

  • 5.3.0 - 2021-06-01

  • 5.2.0 - 2021-05-20

  • 5.1.4 - 2021-04-26

  • 5.1.3 - 2021-04-20

  • 5.1.2 - 2021-04-19

  • 5.1.1 - 2021-04-18

  • 5.1.0 - 2021-03-30

  • 5.0.32 - 2021-03-08

  • 5.0.31 - 2021-02-13

  • 5.0.30 - 2021-02-09

  • 5.0.29 - 2021-02-03

  • 5.0.28 - 2021-02-03

  • 5.0.27 - 2021-02-01

  • 5.0.26 - 2021-01-14


from ethers GitHub release notes
Commit messages
Package name: ethers
  • 4166b27 Updated dist files.
  • 32a6b2a Fix parseUints with excess zeros and fix ReDoS issue (#2016, #1975, #1976).
  • f2a32d0 docs: added provider.FeeData
  • 5762a1f updated dist files.
  • 8320d53 Temporarily remove the block miner for clique-based networks from CI testing (#1967).
  • c41b89a updated dist files.
  • b6a061e More readable errors involving Uint8Arrays.
  • a662490 Added Deferred Error support to Description objects to extent Interface parse methods (#1894).
  • bdb54ac docs: added cookbook entry to compute raw transaction (#1857).
  • 32a90b6 docs: added Alchemy tutorial
  • 95b87f6 docs: added BigNumber.toBigInt (#1799).
  • 017b1fe Fix address coder to prepare non-hexdatastring addresses as hexdatastring (#1906).
  • accb852 Removed temporary code for better errors needed until Alchemy added EIP-1559 support (#1893).
  • f0b3bc3 Updated dist files.
  • 78e4273 Fxied getBlockWithTransactions results (1858).
  • dd09bf0 docs: dded code examples for Contract (#982).
  • 4b163e9 docs: added dynamic localSigner
  • aacb95c docs: added struct encoding example (#1147, #1301, #1302).
  • e6315a6 docs: remove need to restart dev node after each run.
  • 3ac91a4 docs: added StaticJsonRpcProvider (#1514, #1531).
  • 2dd5c1a docs: Fixed topicset example (#1538).
  • 2653449 docs: updated transactions for EIP-1559.
  • cddb038 docs: added API for custom error coding.
  • e80f8dd docs: updates for EIP-1559 (#1777).
Compare
Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: 
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs
@snyk-bot
snyk-bot
requested a review
from a teamOctober 25, 2021 23:31
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

1 participant

@snyk-bot