trufflesuite / ganache

:warning: The Truffle Suite is being sunset. For information on ongoing support, migration options and FAQs, visit the Consensys blog. Thank you for all the support over the years.
https://consensys.io/blog/consensys-announces-the-sunset-of-truffle-and-ganache-and-new-hardhat?utm_source=github&utm_medium=referral&utm_campaign=2023_Sep_truffle-sunset-2023_announcement_
MIT License
2.62k stars 679 forks source link

chore(deps): bump tough-cookie and web3 in /src/chains/ethereum/ethereum #4478

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 1 year ago

Removes tough-cookie. It's no longer used after updating ancestor dependency web3. These dependencies need to be updated together.

Removes tough-cookie

Updates web3 from 1.7.0 to 4.0.2

Release notes

Sourced from web3's releases.

web3-eth@4.0.0-alpha.0

Initial alpha release

Install with yarn add web3-eth@4.0.0-alpha.0

web3-core-requestmanager@4.0.0-alpha.0

Initial alpha release

Install with yarn add web3-core-requestmanager@4.0.0-alpha.0

web3-providers-http@4.0.0-alpha.0

Initial alpha release

Install with yarn add web3-providers-http@4.0.0-alpha.0

web3-providers-base@1.0.0-alpha.1

Changed

  • Update version to 1.0.0-alpha.1 for web3-providers-base
  • Update version to 4.0.0-alpha.0 for web3-utils in web3-providers-base

web3-utils@4.0.0-alpha.0

Initial alpha release

Install with yarn add web3-utils@4.0.0-alpha.0

web3-packagetemplate@1.0.0-alpha.0

Initial alpha release

Install with yarn add web3-packagetemplate@1.0.0-alpha.0

Changelog

Sourced from web3's changelog.

[1.7.0]

Added

  • maxPriorityFeePerGas and maxFeePerGas added to Transaction and TransactionConfig interfaces (#4232) (#4585)

Fixed

  • Fix readthedoc's build for web3js documentation (#4425)
  • Fix response sorting for batch requests (#4250)

Changed

  • Changed getFeeHistory first parameter type from number to hex according to the spec (#4529)

[1.7.1]

Added

  • transactionPollingInterval added to web3, contract and method constructor options. defaults to 1 second. (#4584)
  • Add example import for package level types (#4611)

Fixed

  • Fix a typo in the documentation for methods.myMethod.send (#4599)
  • Use globalThis to locate global object if possible (#4613)
  • Fix typos in web3-utils.rst (#4662)
  • Added effectiveGasPrice to TransactionReceipt (#4692)
  • Correction in documentation for web3.eth.accounts.signTransaction (#4576)
  • Updated README to include Webpack 5 create-react-app support instructions (#4173)
  • Update the documentation for methods.myMethod.estimateGas (#4702)
  • Fix typos in REVIEW.md and TESTING.md (#4691)
  • Fix encoding for "0x" string values (#4512)

Changed

  • Muted E2E gnosis dex tests in CI until fix for issue #4436 is applied (#4701)

Removed

  • Removed deprecated Morden testnet code (#4339)

Security

  • Ran npm audit fix to address vulnerabilities and update libraries (#4719) (#4728)

[1.7.2]

Changed

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by jdevcs, a new releaser for web3 since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/trufflesuite/ganache/network/alerts).
dependabot[bot] commented 1 year ago

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.