[Snyk] Upgrade @solana/web3.js from 1.47.3 to 1.78.4

[Laurry-gee]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade @solana/web3.js from 1.47.3 to 1.78.4.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 70 versions ahead of your current version.
• The recommended version was released 23 days ago, on 2023-08-10.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Denial of Service (DoS) SNYK-JS-NWSAPI-2841516	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
	Prototype Pollution SNYK-JS-TOUGHCOOKIE-5672873	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-WORDWRAP-3149973	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @solana/web3.js

• 1.78.4 - 2023-08-10
  

  1.78.4 (2023-08-10)

  Bug Fixes

  • remove fs.readFileSync from genesis hash test (#1521) (954995a)
• 1.78.3 - 2023-08-04
  

  1.78.3 (2023-08-04)

  Bug Fixes

  • bad getBlockCommitment test (#1493) (4ca2749)
• 1.78.2 - 2023-07-31
  

  1.78.2 (2023-07-31)

  Bug Fixes

  • getRecentPrioritizationFees works with commitment (#1465) (9f0ae41)
• 1.78.1 - 2023-07-28
  

  1.78.1 (2023-07-28)

  Bug Fixes

  • use the native fetch() in Node wherever supported (#1447) (91405cb), closes #1418
• 1.78.0 - 2023-07-07
  

  1.78.0 (2023-07-07)

  Features

  • Add isBlockhashValid (#1386) (9232d2b)
• 1.77.3 - 2023-05-31
  

  1.77.3 (2023-05-31)

  Bug Fixes

  • getProgramAccounts type when config is undefined (#1326) (0b7dd02)
• 1.77.2 - 2023-05-28
  

  1.77.2 (2023-05-28)

  Bug Fixes

  • locale independent sort (#1179) (7a6786e)
• 1.77.1 - 2023-05-25
  

  1.77.1 (2023-05-25)

  Bug Fixes

  • build false into CDN build for process.env.TEST_LIVE (#1316) (ffa81ab), closes #1315
• 1.77.0 - 2023-05-24
  

  1.77.0 (2023-05-24)

  Features

  • add withContext flag to getProgramAccounts (#1311) (d2e0117), closes #1285

  Bug Fixes

  • wait until the slot after a program is deployed (#1309) (e1fc77c)
  • when throwing errors from the loader, replicate what sendAndConfirmTransaction does (21cfcdd)
• 1.76.0 - 2023-05-09
  

  1.76.0 (2023-05-09)

  Features

  • upgrade [@ noble](https://snyk.io/redirect/github/noble) libs (curves -> 1.0.0, hashes -> 1.3.0) (#1289) (7b00896)
• 1.75.0 - 2023-04-04
• 1.74.0 - 2023-03-17
• 1.73.4 - 2023-03-16
• 1.73.3 - 2023-02-23
• 1.73.2 - 2023-01-31
• 1.73.1 - 2023-01-31
• 1.73.1-pr-29195.6 - 2023-01-31
• 1.73.0 - 2022-12-30
• 1.72.0 - 2022-12-24
• 1.71.0 - 2022-12-24
• 1.70.3 - 2022-12-20
• 1.70.2 - 2022-12-19
• 1.70.1 - 2022-12-09
• 1.70.1-pr-29195.5 - 2022-12-10
• 1.70.1-pr-29195.4 - 2022-12-10
• 1.70.1-pr-29195.3 - 2022-12-10
• 1.70.1-pr-29195.2 - 2022-12-10
• 1.70.1-pr-29195 - 2022-12-10
• 1.70.0 - 2022-12-06
• 1.70.0-pr-29130-2 - 2022-12-07
• 1.70.0-pr-29130 - 2022-12-07
• 1.69.0 - 2022-12-03
• 1.68.1 - 2022-12-02
• 1.68.0 - 2022-12-02
• 1.67.2 - 2022-11-30
• 1.67.1 - 2022-11-30
• 1.67.0 - 2022-11-29
• 1.66.5 - 2022-11-29
• 1.66.4 - 2022-11-29
• 1.66.3 - 2022-11-28
• 1.66.2 - 2022-10-21
• 1.66.1 - 2022-10-17
• 1.66.0 - 2022-10-16
• 1.65.0 - 2022-10-14
• 1.64.0 - 2022-10-11
• 1.63.1 - 2022-09-24
• 1.63.0 - 2022-09-22
• 1.62.1 - 2022-09-20
• 1.62.0 - 2022-09-15
• 1.61.1 - 2022-09-13
• 1.61.0 - 2022-09-13
• 1.60.0 - 2022-09-09
• 1.59.1 - 2022-09-07
• 1.59.0 - 2022-09-07
• 1.58.0 - 2022-09-07
• 1.57.0 - 2022-09-07
• 1.56.2 - 2022-09-01
• 1.56.1 - 2022-09-01
• 1.56.0 - 2022-08-31
• 1.55.0 - 2022-08-29
• 1.54.1 - 2022-08-28
• 1.54.0 - 2022-08-25
• 1.53.0 - 2022-08-14
• 1.52.0 - 2022-08-11
• 1.51.0 - 2022-08-10
• 1.50.1 - 2022-07-25
• 1.50.0 - 2022-07-22
• 1.49.0 - 2022-07-22
• 1.48.0 - 2022-07-13
• 1.47.4 - 2022-07-13
• 1.47.3 - 2022-07-02

from @solana/web3.js GitHub release notes

Commit messages

Package name: @solana/web3.js

• 954995a fix: remove fs.readFileSync from genesis hash test (#1521)
• 658ab03 chore: bump @ noble/hashes from 1.3.0 to 1.3.1 (#1520)
• bb6ba5b chore: bump @ babel/core from 7.22.9 to 7.22.10 (#1519)
• 86594f2 chore: bump eslint-plugin-prettier from 4.2.1 to 5.0.0 (#1518)
• 25ec508 chore: bump @ typescript-eslint/parser from 6.0.0 to 6.3.0 (#1516)
• 4a829b4 chore: bump @ swc/jest from 0.2.27 to 0.2.28 (#1515)
• 0108bc7 chore: bump @ types/node from 20.4.4 to 20.4.9 (#1514)
• 0a0651f refactor(experimental): add getLargestAccounts API method (#1495)
• baadda0 refactor(experimental): add `getLeaderSchedule` API method (#1494)
• 88e1eaa refactor(experimental): add `getMultipleAccounts` API method (#1492)
• 6ec1b2d chore: bump rollup from 3.27.0 to 3.27.2 (#1513)
• 1411638 chore: bump @ typescript-eslint/eslint-plugin from 6.0.0 to 6.3.0 (#1511)
• 0b7eadc refactor(experimental): repair getClusterNodes (#1510)
• 7e91143 refactor(experimental): make param required (#1509)
• 129c601 refactor(experimental): add getIdentity API method (#1485)
• dffb4b6 refactor(experimental): add `getTokenAccountBalance` API method (#1501)
• c194560 refactor(experimental): add `getSlotLeader` method (#1499)
• 7a52c02 refactor(experimental): add `getTokenSupply` API method (#1502)
• 7e66ec4 refactor(experimental): add `getInflationRate` API method (#1487)
• cb41f36 refactor(experimental): add getFeeForMessage API method (#1504)
• 893be25 refactor(experimental): add getStakeActivation API method (#1500)
• 8f594ac refactor(experimental): add getSignatureStatuses method (#1498)
• 7b76300 refactor(experimental): add getVersion API method (#1503)
• 659134e refactor(experimental): add getRecentPrioritizationFees method (#1497)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs