Skip to content
This repository has been archived by the owner on Jan 19, 2024. It is now read-only.

Bump semver, web3 and @grpc/grpc-js in /node #78

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 25, 2023

Removes semver. It's no longer used after updating ancestor dependencies semver, web3 and @grpc/grpc-js. These dependencies need to be updated together.

Removes semver

Updates web3 from 1.2.7 to 1.10.0

Release notes

Sourced from web3's releases.

web3-eth@4.0.0-alpha.0

Initial alpha release

Install with yarn add web3-eth@4.0.0-alpha.0

web3-core-requestmanager@4.0.0-alpha.0

Initial alpha release

Install with yarn add web3-core-requestmanager@4.0.0-alpha.0

web3-providers-http@4.0.0-alpha.0

Initial alpha release

Install with yarn add web3-providers-http@4.0.0-alpha.0

web3-providers-base@1.0.0-alpha.1

Changed

  • Update version to 1.0.0-alpha.1 for web3-providers-base
  • Update version to 4.0.0-alpha.0 for web3-utils in web3-providers-base

web3-utils@4.0.0-alpha.0

Initial alpha release

Install with yarn add web3-utils@4.0.0-alpha.0

web3-packagetemplate@1.0.0-alpha.0

Initial alpha release

Install with yarn add web3-packagetemplate@1.0.0-alpha.0

Changelog

Sourced from web3's changelog.

[1.2.7]

Added

  • Add revert reason support to sendSignedTransaction (#3345)
  • ENS module extended with the possibility to add a custom registry (#3301)
  • Missing ENS Registry methods and Resolver.supportsInterface method added (#3325)
  • Add optional gas type to AbiItem typescript definitions (for ABIs generated by Vyper) (#3437)
  • Add görli testnet ENS registry to the known registries (#3252)
  • Add auto-reconnect option for Websockets (#3092, #1085, #1391, #1558, #1852, #1646)

Changed

  • Ensure '0x' prefix is existing for Accounts.sign and Accounts.privateKeyToAccount (#3041)
  • Repository cleanup (#3443)
    • Removed old docs/_build folder
    • Removed old bower and meteor artifacts
    • Moved logo assets to own folder
    • Moved github assets to own folder
    • Remove @​types/node from (non-dev) dependency tree (#3965, #3227)
  • Please note: Geth v1.9.12 contains a breaking change for eth_call that will not default to your first account anymore if from is not set. If a sender is not explicitly defined, the eth_call will be executed from address(0). (#3467)
    • This was done to avoid the same input behaving differently in different environments. You should never do eth_call without explicitly setting a sender.
    • This means that if you're calling view methods that refer to a msg.sender without explicitly setting a from address in your request options, you may see unexpected behavior.
    • In web3.js, the from address can be specified on a per-call basis or by setting the defaultAccount property.

Fixed

  • Add missing subscription.on('connected') TS type definition (#3319)
  • Add missing bignumber.js dependency for TS types (#3386)
  • Upgrade swarm-js to 0.1.40 to remove npm vulnerability warning (#3399)
  • Upgrade devDeps to resolve security warnings (#3464)
    • dtslint 0.4.2 => 3.4.1
    • definitelytyped-header-parser 1.0.1 => 3.9.0
  • Race-condition when subscribing to historical logs as first client request (#3389)
  • Fix crash when using Web-Workers by removing any-promise dependency (#3377 #2211 #1774)
  • MaxListenersExceededWarning event emitter warning mitigated (#1648)

[1.2.8]

Added

  • Introduce review and release guidelines. (#3460)
  • Add EIP-1193 compatible provider to AbstractProvider interface. (#3499)
  • Add Typescript definitions for contract methods and call. (#3454)
  • Update AbstractProvider and contract.methods TS definitions (#3521)
  • Add support for ENS contenthash methods. (#3392, #2782)

Changed

  • Change CI provider from Travis to Github Actions. (#3468)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by jdevcs, a new releaser for web3 since your current version.


Updates @grpc/grpc-js from 1.2.1 to 1.8.16

Release notes

Sourced from @​grpc/grpc-js's releases.

@​grpc/grpc-js 1.8.16

  • Fix missing transport trace logs (#2470)

@​grpc/grpc-js 1.8.15

  • Fix a memory leak that could result from a specific pattern of recursive function calls (#2456)
  • Ensure status and error events are consistently emitted asynchronously (#2456)

@​grpc/grpc-js 1.8.14

  • Fix sequencing of some events related to connectivity state changes (#2421)

@​grpc/grpc-js 1.8.13

  • Fix memory leak in channelz socket tracking (#2394)

@​grpc/grpc-js@​1.8.12

  • Fix an occasional type error when receiving DNS updates (#2380)
  • Fix ordering of events when handing requests on the server (#2376 contributed by @​phoenix741)

@​grpc/grpc-js 1.8.11

  • Avoid accumulating placeholder objects when sending many messages on a long-running stream (#2372)

@​grpc/grpc-js 1.8.10

  • Fix bugs in "pick first" load balancing policy that caused incorrect reconnection behavior (#2369)

@​grpc/grpc-js 1.8.9

  • Fix a bug where clients would continue to send pings at the original configured rate after receiving a backoff request from the server (#2363)

@​grpc/grpc-js 1.8.8

  • Remove progress field in returned status object (#2350)
  • Export InterceptingListener and NextCall types (#2351)
  • Fix a bug that could cause a crash when sending messages that exceed the outgoing message buffer size while a retry is in progress (#2349)

@​grpc/grpc-js 1.8.7

  • Make handling of HTTP2 session references work independent of keepalive settings (#2337)

@​grpc/grpc-js 1.8.6

  • Hold a reference to transport from call to avoid premature garbage collection (#2336)

@​grpc/grpc-js 1.8.5

  • Cancel deadline timer when the call ends (#2335)

@​grpc/grpc-js@​1.8.4

  • Fix a bug that would sometimes allow the Node process to exit even though a gRPC request is active (#2322)

@​grpc/grpc-js 1.8.3

  • Fix bug that caused streams to fail early when receiving a GOAWAY (#2319)

@​grpc/grpc-js@​1.8.2

  • Continue keepalive pings after receiving a GOAWAY on the client (#2308)
  • Fix handling of keepalive timers when the timeout is longer than the interval (#2304 contributed by @​nicknotfun, included in #2308)
  • Ensure the last received message is fully handled before outputting status (#2316)

... (truncated)

Commits
  • 09d74ca Merge pull request #2470 from murgatroid99/grpc-js_transport_trace_fix
  • 87b5466 grpc-js: Implement trace function in Http2SubchannelConnector
  • 25e2845 Merge pull request #2456 from murgatroid99/grpc-js_minor_fixes
  • bcd52c1 Merge pull request #2458 from XuanWang-Amos/backport-1.8-xds_duplicate_bugs
  • 039032c Merge pull request #2457 from XuanWang-Amos/xds_duplicate_bugs
  • 2b455e7 grpc-js: Fix a couple of minor issues
  • 4b41929 Merge pull request #2438 from murgatroid99/grpc-js-xds_driver_qps_1.8.x
  • 0933633 PSM Interop: Increase old driver QPS to 75
  • 4fcd9c2 Merge pull request #2433 from murgatroid99/grpc-js-xds_watcher_validation_errors
  • edeeda6 Add trailing newline in packages/grpc-js-xds/test/test-nack.ts
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Removes [semver](https://github.com/npm/node-semver). It's no longer used after updating ancestor dependencies [semver](https://github.com/npm/node-semver), [web3](https://github.com/ChainSafe/web3.js) and [@grpc/grpc-js](https://github.com/grpc/grpc-node). These dependencies need to be updated together.


Removes `semver`

Updates `web3` from 1.2.7 to 1.10.0
- [Release notes](https://github.com/ChainSafe/web3.js/releases)
- [Changelog](https://github.com/web3/web3.js/blob/v1.10.0/CHANGELOG.md)
- [Commits](web3/web3.js@v1.2.7...v1.10.0)

Updates `@grpc/grpc-js` from 1.2.1 to 1.8.16
- [Release notes](https://github.com/grpc/grpc-node/releases)
- [Commits](https://github.com/grpc/grpc-node/compare/@grpc/grpc-js-xds@1.2.1...@grpc/grpc-js@1.8.16)

---
updated-dependencies:
- dependency-name: semver
  dependency-type: indirect
- dependency-name: web3
  dependency-type: direct:production
- dependency-name: "@grpc/grpc-js"
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jun 25, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

0 participants