RedPacket
RedPacket copied to clipboard
Bump undici, @nomiclabs/hardhat-etherscan and hardhat
Bumps undici to 5.19.1 and updates ancestor dependencies undici, @nomiclabs/hardhat-etherscan and hardhat. These dependencies need to be updated together.
Updates undici from 4.16.0 to 5.19.1
Release notes
Sourced from undici's releases.
v5.19.1
⚠️ Security Release ⚠️
- Regular Expression Denial of Service in Headers with CVE-2023-24807
- CRLF Injection in Nodejs ‘undici’ via host with CVE-2023-23936
This release is part of the Node.js security release train: https://nodejs.org/en/blog/vulnerability/february-2023-security-releases/
v5.19.0
What's Changed
- fix(fetch): raise AbortSignal max event listeners by
@KhafraDevin nodejs/undici#1910- fix: content-disposition header parsing by
@climba03003in nodejs/undici#1911- fix: remove test by
@KhafraDevin nodejs/undici#1916- feat: add Headers.prototype.getSetCookie by
@KhafraDevin nodejs/undici#1915- fix(headers): clone getSetCookie list & add getSetCookie type by
@KhafraDevin nodejs/undici#1917- doc(mock): update out-of-date reply documentation by
@p9fin nodejs/undici#1913- fix(types): add missing keepAlive params by
@SkeLLLain nodejs/undici#1918- Make the fetch() abort test pass locally, on Linux and Mac, Node 18/19. by
@mcollinain nodejs/undici#1927New Contributors
@climba03003made their first contribution in nodejs/undici#1911@p9fmade their first contribution in nodejs/undici#1913Full Changelog: https://github.com/nodejs/undici/compare/v5.18.0...v5.19.0
v5.18.0
What's Changed
- Add ability to set TCP keepalive by
@xconvergein nodejs/undici#1904- use faster timers by
@ronagin nodejs/undici#1908- fix: ensure header value is a string by
@ronagin nodejs/undici#1899Full Changelog: https://github.com/nodejs/undici/compare/v5.17.1...v5.18.0
v5.17.1
What's Changed
- fix: bad buffer slice (https://github.com/nodejs/undici/commit/d2be675575512794dcd41b9683b209fc15368154)
Full Changelog: https://github.com/nodejs/undici/compare/v5.17.0...v5.17.1
v5.17.0
What's Changed
- fix(wpts): Blob is a global getter in >=v19.x.x by
@KhafraDevin nodejs/undici#1880- doc: fix anchor links dispatcher.stream by
@RafaelGSSin nodejs/undici#1881- wpt: make runner more resilient by
@KhafraDevin nodejs/undici#1884- Make test pass in v19.x by
@mcollinain nodejs/undici#1879- Correct the type of DispatchOptions["headers"] by
@pan93412in nodejs/undici#1896- perf(content-type parser): faster string collector by
@KhafraDevin nodejs/undici#1894- feat: expose content-type parser by
@KhafraDevin nodejs/undici#1895- fix(types): Update DispatchOptions type for missing "blocking" by
@xconvergein nodejs/undici#1889
... (truncated)
Commits
984d53bBumped v5.19.16c32c0flint fixesf2324e5Merge pull request from GHSA-r6ch-mqf9-qc9wa2eff05Merge pull request from GHSA-5r9g-qh6m-jxfff5c89e5Bumped v5.19.0f7c6c6aMake the fetch() abort test pass locally, on Linux and Mac, Node 18 and 19 (#...aebb232fix(types): add missing keepAlive params (#1918)e155c6ddoc(mock): update out-of-date reply documentation (#1913)87fa734fix(headers): clone getSetCookie list & add getSetCookie type (#1917)ba5ef44feat: add Headers.prototype.getSetCookie (#1915)- Additional commits viewable in compare view
Updates @nomiclabs/hardhat-etherscan from 3.0.3 to 3.1.6
Release notes
Sourced from @nomiclabs/hardhat-etherscan's releases.
@nomiclabs/hardhat-etherscan@3.1.6Changes
- 070abb7f5: Added support for the
http_proxyenvironment variable. When this variable is set,hardhat-etherscanwill use the given proxy to send the verification requests.
@nomiclabs/hardhat-etherscanv3.1.5This release upgrades the version of undici used by the hardhat-etherscan plugin.
@nomiclabs/hardhat-etherscanv3.1.4Added a warning when the
etherscanconfig is mistakenly included in thenetworksobject instead of being at the root of the config.
@nomiclabs/hardhat-etherscanv3.1.3Added a
--no-compileflag to theverifytask (thanks@spalladino!)
@nomiclabs/hardhat-etherscanv3.1.2
- Added Arbitrum Goerli to the list of supported networks.
- Fixed an issue with the URLs used for Optimism Goerli.
@nomiclabs/hardhat-etherscanv3.1.1This version makes two changes to the networks supported by default:
- A new
gnosisnetwork was added, that works as an alias for xdai (thanks@alebanzas!)- The deprecated Optimism Kovan network was removed in favor of the Optimism Goerli network (thanks
@shanefontaine)
@nomiclabs/hardhat-etherscanv3.1.0This release adds support for verifying contracts in chains that are not included by default in
hardhat-etherscan.To do this, you add the network you want to verify in the
customChainsentry of the Etherscan configuration:etherscan: { apiKey: { customNetwork: "<custom-network-api-key>" }, customChains: [ { network: "customNetwork", chainId: 12345, urls: { apiURL: "https://api-custom-network.etherscan.io/api", browserURL: "https://custom-network.etherscan.io" } } ] }You can read more about this here.
Thanks to
@no2chemfor the initial implementation and to@calvinacowho helped test this.
... (truncated)
Commits
6baf30aVersion Packagesccf8841Merge pull request #3658 from NomicFoundation/plugin-error-eslint5a9b9a3remove unnecessary line471a70fUpdate packages/eslint-plugin/onlyHardhatErrorRule.js0edcf75Merge pull request #2976 from NomicFoundation/francovictorio/hh-937/improve-w...337456bCreate cyan-knives-study.md4256068add eslint rule for hardhat plugin errors95328ccMerge pull request #3432 from NomicFoundation/improve-proxy-support6a3c6ecAdd docs about http_proxy42d8481Update .changeset/few-flies-drum.md- Additional commits viewable in compare view
Updates hardhat from 2.9.3 to 2.12.7
Release notes
Sourced from hardhat's releases.
[email protected]
Changes
e443b3667: Added an option in Hardhat Network to allow mining blocks with the same timestamp
c23a1cac4: Added support for the
http_proxyenvironment variable. When this variable is set, Hardhat will send its requests through the given proxy for things like JSON-RPC requests, mainnet forking and downloading compilers.We also removed support for the
HTTP_PROXYandHTTPS_PROXYenvironment variables, sincehttp_proxyis the most commonly used environment variable for this kind of thing. Those variables could only be used for downloading compilers.Finally, we also added support for
no_proxy, which accepts a comma separated list of hosts or"*". Any host included in this list will not be proxied.Note that requests to
"localhost"or"127.0.0.1"are never proxied.69546655e: Added support for sending batch requests through WebSocket to the Hardhat node (thanks
@tenbits!)6bf1673bb: Added a config validation for the number of optimizer runs used (thanks
@konarshankar07!)Hardhat v2.12.6
Features
- Added support for pnpm during project creation (thanks
@Hopsken!)- Added a
versionfield to the Hardhat Runtime Environment (thanks@konarshankar07!)Bug fixes
- Fixed a problem with impersonated-sender transactions sometimes resulting in duplicate transaction hashes (issue #1963)
Other changes
- Added a minor clarification to the help output of the
flattentask- Upgraded the versions of
mochaand@types/mochaused by Hardhat- Upgraded the version of undici used by Hardhat.
- Removed the message linking to the 2022 Solidity Survey
- Added a new subtask to the
compiletask that will be used by thehardhat-foundryplugin.Hardhat v2.12.5
- The full return data of unrecognized custom errors is now shown in error messages
- Fixed a bug that was causing the flatten task to produce non-deterministic results
- Fixed a bug when
gasPricewas set to"auto", which is the default configuration when connecting to a JSON-RPC network. This bug was preventing the results frometh_feeHistoryfrom being used when they should.- Added an experimental environment variable flag to disable the local installation check (thanks
@arijoon!)Hardhat v2.12.4
This release fixes a small issue that was affecting our VSCode extension in some edge cases.
It also includes a non-intrusive message promoting this year's Solidity Developer Survey.
Hardhat v2.12.3
- Added a new
hardhat_metadataRPC method- Trim leading and trailing spaces in mnemonics (thanks
@winor30!)- Pending blocks now include the
bloomfield (thanks@InoMurko!)- A better error is shown if a Solidity file makes an import through its own package name (thanks
@KaanKC!)- Added a
getBuildInfoSyncfunction to thehre.artifactsobject (thanks@emretepedev!)
... (truncated)
Commits
6baf30aVersion Packagesccf8841Merge pull request #3658 from NomicFoundation/plugin-error-eslint5a9b9a3remove unnecessary line471a70fUpdate packages/eslint-plugin/onlyHardhatErrorRule.js0edcf75Merge pull request #2976 from NomicFoundation/francovictorio/hh-937/improve-w...337456bCreate cyan-knives-study.md4256068add eslint rule for hardhat plugin errors95328ccMerge pull request #3432 from NomicFoundation/improve-proxy-support6a3c6ecAdd docs about http_proxy42d8481Update .changeset/few-flies-drum.md- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)@dependabot use these labelswill set the current labels as the default for future PRs for this repo and language@dependabot use these reviewerswill set the current reviewers as the default for future PRs for this repo and language@dependabot use these assigneeswill set the current assignees as the default for future PRs for this repo and language@dependabot use this milestonewill set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.