@stellar/stellar-base and its underlying dependency @stellar/js-xdr have been upgraded to their latest versions; reference their release notes (v12.1.0 and v3.1.2, respectively) for details (#1013).
Added
You can now pass custom headers to both rpc.Server and Horizon.Server (#1013):
import { Server } from "@stellar/stellar-sdk/rpc";
const s = new Server("<some URL>", { headers: { "X-Custom-Header": "hello" }})
Horizon.Server now supports the new POST /transactions_async endpoint via the submitAsyncTransaction method (#989). Its purpose is to provide an immediate response to the submission rather than waiting for Horizon to determine its status. The response schema is as follows:
interface SubmitAsyncTransactionResponse {
// the submitted transaction hash
hash: string;
// one of "PENDING", "DUPLICATE", "TRY_AGAIN_LATER", or "ERROR"
tx_status: string;
// a base64-encoded xdr.TransactionResult iff `tx_status` is "ERROR"
error_result_xdr: string;
}
rpc.Server now has a getFeeStats method which retrieves fee statistics for a previous chunk of ledgers to provide users with a way to provide informed decisions about getting their transactions included in the following ledgers (#998):
@stellar/stellar-base and its underlying dependency @stellar/js-xdr have been upgraded to their latest versions; reference their release notes (v12.1.0 and v3.1.2, respectively) for details (#1013).
Added
You can now pass custom headers to both rpc.Server and Horizon.Server (#1013):
import { Server } from "@stellar/stellar-sdk/rpc";
const s = new Server("<some URL>", { headers: { "X-Custom-Header": "hello" }})
Horizon.Server now supports the new POST /transactions_async endpoint via the submitAsyncTransaction method (#989). Its purpose is to provide an immediate response to the submission rather than waiting for Horizon to determine its status. The response schema is as follows:
interface SubmitAsyncTransactionResponse {
// the submitted transaction hash
hash: string;
// one of "PENDING", "DUPLICATE", "TRY_AGAIN_LATER", or "ERROR"
tx_status: string;
// a base64-encoded xdr.TransactionResult iff `tx_status` is "ERROR"
error_result_xdr: string;
}
rpc.Server now has a getFeeStats method which retrieves fee statistics for a previous chunk of ledgers to provide users with a way to provide informed decisions about getting their transactions included in the following ledgers (#998):
Added better configurability for comment scrubbing default behavior
Added better hardening against Prototype Pollution attacks, thanks @kevin-mizu
Added better handling and readability of the nodeType property, thanks @ssi02014
Fixed some smaller issues in README and other documentation
DOMPurify 3.1.2
Addressed and fixed a mXSS variation found by @kevin-mizu
Addressed and fixed a mXSS variation found by Adam Kues of Assetnote
Updated tests for older Safari and Chrome versions
DOMPurify 3.1.1
Fixed an mXSS sanitiser bypass reported by @icesfont
Added new code to track element nesting depth
Added new code to enforce a maximum nesting depth of 255
Added coverage tests and necessary clobbering protections
Note that this is a security release and should be upgraded to immediately. Please also note that further releases may follow as the underlying vulnerability is apparently new and further variations may be discovered.
DOMPurify 3.1.0
Added new setting SAFE_FOR_XML to enable better control over comment scrubbing
Updated README to warn about happy-dom not being safe for use with DOMPurify yet
Updated the LICENSE file to show the accurate year number
Updated several build and test dependencies
DOMPurify 3.0.11
Fixed another conditional bypass caused by Processing Instructions, thanks @Ry0taK
Fixed the regex for HTML Custom Element detection, thanks @AlekseySolovey3T
DOMPurify 3.0.10
Fixed two possible bypasses when sanitizing an XML document and later using it in HTML, thanks @Slonser
Rename unstable_patchRoutesOnMiss to unstable_patchRoutesOnNavigation to match new behavior (#11888)
Updated dependencies:
@remix-run/router@1.19.1
react-router@6.26.1
6.26.0
Minor Changes
Add a new replace(url, init?) alternative to redirect(url, init?) that performs a history.replaceState instead of a history.pushState on client-side navigation redirects (#11811)
Patch Changes
Fix initial hydration behavior when using future.v7_partialHydration along with unstable_patchRoutesOnMiss (#11838)
During initial hydration, router.state.matches will now include any partial matches so that we can render ancestor HydrateFallback components
Updated dependencies:
@remix-run/router@1.19.0
react-router@6.26.0
6.25.1
Patch Changes
Memoize some RouterProvider internals to reduce unnecessary re-renders (#11803)
Updated dependencies:
react-router@6.25.1
6.25.0
Minor Changes
Stabilize future.unstable_skipActionErrorRevalidation as future.v7_skipActionErrorRevalidation (#11769)
When this flag is enabled, actions will not automatically trigger a revalidation if they return/throw a Response with a 4xx/5xx status code
You may still opt-into revalidation via shouldRevalidate
This also changes shouldRevalidate's unstable_actionStatus parameter to actionStatus
To install Sass 1.78.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.
Changes
The meta.feature-exists function is now deprecated. This deprecation is named feature-exists.
Fix a crash when using @at-root without any queries or children in the indented syntax.
JS API
Backport the deprecation options (fatalDeprecations, futureDeprecations, and silenceDeprecations) to the legacy JS API. The legacy JS API is itself deprecated, and you should move off of it if possible, but this will allow users of bundlers and other tools that are still using the legacy API to still control deprecation warnings.
Fix a bug where accessing SourceSpan.url would crash when a relative URL was passed to the Sass API.
Embedded Sass
Explicitly expose a sass executable from the sass-embedded npm package. This was intended to be included in 1.63.0, but due to the way platform-specific dependency executables are installed it did not work as intended. Now users can run npx sass for local installs or just sass when sass-embedded is installed globally.
Add linux-riscv64, linux-musl-riscv64, and android-riscv64 support for the sass-embedded npm package.
Fix an edge case where the Dart VM could hang when shutting down when requests were in flight.
Fix a race condition where the embedded host could fail to shut down if it was closed around the same time a new compilation was started.
Fix a bug where parse-time deprecation warnings could not be controlled by the deprecation options in some circumstances.
The meta.feature-exists function is now deprecated. This deprecation is
named feature-exists.
Fix a crash when using @at-root without any queries or children in the
indented syntax.
JS API
Backport the deprecation options (fatalDeprecations, futureDeprecations,
and silenceDeprecations) to the legacy JS API. The legacy JS API is itself
deprecated, and you should move off of it if possible, but this will allow
users of bundlers and other tools that are still using the legacy API to
still control deprecation warnings.
Fix a bug where accessing SourceSpan.url would crash when a relative URL was
passed to the Sass API.
Bumps the minor-and-patch group with 39 updates in the / directory:
1.22.21.23.11.0.11.2.012.0.0-rc.212.2.06.0.06.5.014.4.314.5.22.0.02.1.03.0.53.1.618.2.018.3.118.2.2018.3.518.2.018.3.118.2.718.3.06.15.06.26.21.69.71.78.06.0.76.1.135.1.65.6.20.11.10.11.47.22.107.25.27.22.107.25.47.22.57.24.77.22.57.24.729.5.329.5.134.14.1974.17.75.0.45.0.75.1.265.1.349.0.09.1.02.28.02.30.06.7.16.10.07.33.17.36.14.6.04.6.24.0.14.2.05.5.35.6.02.7.62.9.13.0.23.3.39.4.49.5.15.88.25.94.016.3.116.4.54.18.24.21.04.17.174.17.2110.9.110.9.2Updates
@microlink/react-json-viewfrom 1.22.2 to 1.23.1Release notes
Sourced from
@microlink/react-json-view's releases.Changelog
Sourced from
@microlink/react-json-view's changelog.Commits
7f30752chore(release): 1.23.18cc4fa3ci: tweaks041f6d8Merge pull request #29 from DylanDirlam/masterace505aAdd missing typedisplayArrayKeya62836bchore(release): 1.23.0ed6877abuild: tweaks20e8d79Merge pull request #28 from snoh666/masterec10189chore: move new dep to devDeps5275cd4fix: add missed devDeps in new create-react-appdac4e76Merge pull request #26 from snoh666/masterUpdates
@stellar/prettier-configfrom 1.0.1 to 1.2.0Commits
Maintainer changes
This version was pushed to npm by piyalbasu, a new releaser for
@stellar/prettier-configsince your current version.Updates
@stellar/stellar-sdkfrom 12.0.0-rc.2 to 12.2.0Release notes
Sourced from
@stellar/stellar-sdk's releases.... (truncated)
Changelog
Sourced from
@stellar/stellar-sdk's changelog.... (truncated)
Commits
41c03ecRelease v12.2.0 (#1013)e4b3d2fRemove major version upgrades from dependabot (#1012)5f144e1Add support forgetFeeStatsendpoint (#1006)444fb7bAdd Dependabot to CI for all dependency version updates (#1008)fa6b2e7Use command line tooling for end-to-end tests (#995)704535dAdd 'yarn _prettier' run to CI and run it (#999)d0302f9Add async txsub endpoint in Horizon (#989)b8430ddRunning an absolute clinic on appeasing the ES linter (#990)f1f81f7Respect custom headers when usingServers (#988)10e5edcRelease v12.1.0 (#993)Updates
@testing-library/jest-domfrom 6.0.0 to 6.5.0Release notes
Sourced from
@testing-library/jest-dom's releases.... (truncated)
Commits
62f0e3adocs: add waynevanson as a contributor for code, and test (#626)acbf416feat(toHaveValue): Asserting aria-valuenow (#479)47a667cdocs: add vorant94 as a contributor for code (#619)06d19baadjust vitest ambient declaration file according to vitest docs (#612)a073b08docs: add aleks-elkin as a contributor for maintenance (#618)aa094a5chore: remove unused@babel/runtimedependency (#617)d02e80bdocs: add ddolcimascolo as a contributor for maintenance (#616)faf534bfix: Drop peerDependencies from package.json (#610)78a2934docs: add tonyhallett as a contributor for bug (#615)5cc6298fix: Type definition oftoHaveClass(#611)Updates
@testing-library/user-eventfrom 14.4.3 to 14.5.2Release notes
Sourced from
@testing-library/user-event's releases.Commits
d036279chore: upgradenodein codesandbox910fee5chore: set tsconfigbaseUrlfa8d867revert: swap release scriptc4b4629chore: upgrade testing environment6a3c896fix: remove interop and deep DTL importsd7483f0fix: incorrect default import from@testing-library/dom(#1162)4be87b3chore: swap release scriptd95121dchore: add --experimental-import-meta-resolve8779eaechore: format, lint, fix lint4019ceefix(exports): add a named export for userEventUpdates
assertfrom 2.0.0 to 2.1.0Changelog
Sourced from assert's changelog.
Commits
fc65923v2.1.0d99f50d[meta] add to FUNDING.ymlc6e09cb[Deps] updateis-nan,object-is,utila38013b[Dev Deps] update@babel/cli,@babel/core,@babel/preset-env,airtap,...f5d7c66[Refactor] switching to a maintained Object.assign package80664db[readme] Add description for usage with webpack and vited932a53Implementassert.match()andassert.doesNotMatch()bba838eAdd security.mdffd5479Remove duplicate line under usage section (#48)c112ec4Remove duplicate line under usage sectionMaintainer changes
This version was pushed to npm by ljharb, a new releaser for assert since your current version.
Updates
bignumber.jsfrom 9.1.1 to 9.1.2Changelog
Sourced from bignumber.js's changelog.
Commits
a05d98bv9.1.2ee5481b#354 Avoid bug in v8 Maglev compiler.65156ebMerge branch 'master' of https://github.com/MikeMcl/bignumber.js4120e6afix: typo in comments (#350)981a8a9[BUGFIX] #344minumum(0, -0)should be-0Updates
dompurifyfrom 3.0.5 to 3.1.6Release notes
Sourced from dompurify's releases.
... (truncated)
Commits
4083a90Merge pull request #978 from cure53/main90a10a1fix: Fixed a typo on the README65df042chore: Preparing 3.1.6 release6e03334fix: Made sure that remove() is not called directly from node00fc06cfix: Fixed a DOM clobbering issue leading to an error being thrownf8c2ef5Merge pull request #977 from cure53/dependabot/npm_and_yarn/multi-99ca4f73d8e5112ecbuild(deps): bump ws and socket.io-adapter9978cecdocs: Added better security warning about SAFE_FOR_XML to READMEfa542dffix: Changed the order for attribute checks slightly for safer hooksb8b552cMerge pull request #975 from cure53/dependabot/npm_and_yarn/multi-2d3aef8690Updates
reactfrom 18.2.0 to 18.3.1Release notes
Sourced from react's releases.
Changelog
Sourced from react's changelog.
Commits
f1338f8ExportReact.actfrom 18.3d6c42f7Bump to 18.3.173bfaa1Turn on key spread warning in jsx-runtime for everyone (#25697)c2a246eTurn on string ref deprecation warning for everybody (not codemoddable) (#25383)2cfb474Bump version from 18.2 to 18.3Maintainer changes
This version was pushed to npm by react-bot, a new releaser for react since your current version.
Updates
@types/reactfrom 18.2.20 to 18.3.5Commits
Updates
react-domfrom 18.2.0 to 18.3.1Release notes
Sourced from react-dom's releases.
Changelog
Sourced from react-dom's changelog.
Commits
d6c42f7Bump to 18.3.18a015b6Add deprecation warning for unmountComponentAtNodec3b2839Add deprecation warning for findDOMNoded4ea75dReactDOMTestUtils deprecation warnings7548c01DeprecaterenderToStaticNodeStream(#28872) (#28874)5894232Enable warning for defaultProps on function components for everyone (#25699)c2a246eTurn on string ref deprecation warning for everybody (not codemoddable) (#25383)2cfb474Bump version from 18.2 to 18.3Maintainer changes
This version was pushed to npm by react-bot, a new releaser for react-dom since your current version.
Updates
@types/react-domfrom 18.2.7 to 18.3.0Commits
Updates
react-router-domfrom 6.15.0 to 6.26.2Release notes
Sourced from react-router-dom's releases.
... (truncated)
Changelog
Sourced from react-router-dom's changelog.
... (truncated)
Commits
eeb86abchore: Update version for release (#11968)7cbe349chore: Update version for release (pre) (#11955)6483515Merge branch 'release-next' into v605612a3unstable_dataStrategy refactor for better single fetch support (#11943)5651176fix: Wait for restore url navigation to complete before proceeding (#11930)04d09c3chore: Update version for release (#11895)f806fa4chore: Update version for release (pre) (#11889)5a6545bRename patchRoutesOnMiss to patchRoutesOnNavigation (#11888)91ef146chore: Update version for release (#11863)7acbfbechore: Update version for release (pre) (#11860)Updates
sassfrom 1.69.7 to 1.78.0Release notes
Sourced from sass's releases.
... (truncated)
Changelog
Sourced from sass's changelog.
Looks like these dependencies are updatable in another way, so this is no longer needed.