Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 14, 2021

Bumps web3 from 1.0.0-beta.36 to 1.3.6.

Release notes

Sourced from web3's releases.

v1.3.6

Changes

  • Bump underscore package from 1.9.1 to 1.12.1 (#4051)
  • Bump @ensdomains/ens package from ^0.4.5 to ^0.6.0 (#4059)
  • Bump ethers package from ^5.0.18 to ^5.1.4 (#4059)

Removes

  • Accidental commit (yarn-error.log) (#4062)

1.3.6-rc.2

Changes

  • Bump underscore package from 1.9.1 to 1.12.1 (#4051)
  • Bump @ensdomains/ens package from ^0.4.5 to ^0.6.0 (#4059)
  • Bump ethers package from ^5.0.18 to ^5.1.4 (#4059)

Removes

  • Accidental commit (yarn-error.log) (#4062)

v1.3.6-rc.1 - Security Patch

Updates underscore package to utilize security patch #4051

v1.3.5

Added

  • Github action for running tests for web3-eth2-core and web3-eth2-beaconchain packages (#3892)
  • Added description to documentation on how to connect using a remote node provider (#3884)
  • Added Security risk warning to docs for web3.utils.soliditySha3 (#3908)
  • .nvmrc file using Node.js version v.14.15.1 (#3817)
  • Add commitment to semantic versioning since version 1.3.0 and onwards (#3961)

Changed

  • Unified babel compiler for web3-eth2-core and web3-eth2-beaconchain (#3892)
  • Renamed the tsc script in all packages to compile; updates the corresponding lerna run usage in the main package.json (#3894)
  • moved deprecation warnings to postinstall scripts (#3917)
  • Upgrade @chainsafe/geth-dev-assistant from 0.1.5 to 0.1.9 (#3950)
  • Replaced hardcoded infura link with Github Secret for some tests (#3943)
  • Bump elliptic from 6.5.3 to 6.5.4 for web3-eth-accounts (#3941)
  • Bump elliptic from 6.5.3 to 6.5.4 for web3-bzz (#3940)
  • Bump elliptic from 6.5.3 to 6.5.4 for web3-core-requestmanager (#3945)
  • Rewrite web3-eth-iban in ES6 (#3955)

v1.3.5-rc.0

Added

  • Github action for running tests for web3-eth2-core and web3-eth2-beaconchain packages (#3892)

... (truncated)

Changelog

Sourced from web3's changelog.

[1.3.6]

Changes

  • Bump underscore package from 1.9.1 to 1.12.1 (#4051)
  • Bump @ensdomains/ens package from ^0.4.5 to ^0.6.0 (#4059)
  • Bump ethers package from ^5.0.18 to ^5.1.4 (#4059)

Removes

  • Accidental commit (yarn-error.log) (#4062)

[Unreleased]

[1.3.7]

Commits
Maintainer changes

This version was pushed to npm by spacesailor, a new releaser for web3 since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [web3](https://github.com/ethereum/web3.js) from 1.0.0-beta.36 to 1.3.6.
- [Release notes](https://github.com/ethereum/web3.js/releases)
- [Changelog](https://github.com/ChainSafe/web3.js/blob/1.x/CHANGELOG.md)
- [Commits](web3/web3.js@v1.0.0-beta.36...v1.3.6)

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label May 14, 2021
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jul 1, 2021

Superseded by #376.

@dependabot dependabot bot closed this Jul 1, 2021
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/web3-1.3.6 branch July 1, 2021 11:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant