Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade ganache-cli from 6.4.2 to 6.9.1 #7

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

snyk-bot
Copy link
Contributor

Snyk has created this PR to upgrade ganache-cli from 6.4.2 to 6.9.1.

merge advice

✨What is Merge Advice? We check thousands of dependency upgrade pull requests and CI tests every day to see which upgrades were successfully merged. After crunching this data, we give a recommendation on how safe we think the change is for you to merge without causing issues. Learn more, and share your feedback to help improve this feature. 🙏
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
  • The recommended version is 22 versions ahead of your current version.
  • The recommended version was released 3 months ago, on 2020-02-14.

The recommended version fixes:

Severity Issue Exploit Maturity
Denial of Service (DoS)
npm:mem:20180117
No Known Exploit
Release notes
Package name: ganache-cli
  • 6.9.1 - 2020-02-14

     Highlights    How to Upgrade    Changelog    Related Releases 


    We're moving to a betalatest release pipeline, where all non-hotfix changes are first released in a beta before being promoted to a stable release.

    We'd love it if you'd start using the latest betas and let us know early and often if you find any bugs or regressions!

    Highlights

    v6.9.1 – Queen of Puddings 👑🍮🎂

    This updates ganache-cli to the latest ganache-core which includes several small but much needed improvements. As some of you may know, ganache recently included an update to fix the dreaded TypeError: Cannot read property 'pop' of undefined bug. However, in doing so we had inadvertently introduced another subtle bug where a long running ganache instance would hang on shutdown; waiting for the OS to gracefully cleanup any temporary files created during runtime before exiting completely. We quickly fixed this issue with ganache-core version 2.10.1. However :) in doing so we had inadvertently introduced another subtle bug: If the user's tmp dir and ganache's db directory are not located on the same drive/partition then db file writes would fail. We hope that this patch does not inadvertently introduce any subtle bugs.

    We also include a bug fix for a long standing issue of JSONRPC compliance. Receipts will no longer include the v, r, and s transaction signature feilds.

    The patch also includes an update to correct a typo in ganache's options for the hdPath parameter. Big thanks to @GregTheGreek for this PR!!

    Finally, we've updated our version of ethereumjs-util to fix a bug in the keccak package for node 12 users.


    How to Upgrade

    Upgrade to the latest version of ganache-cli by running:

    npm

    npm uninstall ganache-cli -g
    npm install ganache-cli@beta -g

    yarn

    yarn global remove ganache-cli
    yarn global add ganache-cli@beta

    Changelog

    Bug Fixes

    Maintenance

    Related Releases


    💖 The Truffle Team

  • 6.9.0 - 2020-01-30

     Highlights    How to Upgrade    Changelog    Related Releases 


    We're moving to a betalatest release pipeline, where all non-hotfix changes are first released in a beta before being promoted to a stable release.

    We'd love it if you'd start using the latest betas and let us know early and often if you find any bugs or regressions!

    Highlights

    Muir Glacier Mint 🏔️ 🍬 🌿

    This release updates ganache-cli's default hardfork to muirGlacier, inline with Ethereum's mainnet and testnet's. As many of you know, the Muir Glacier hardfork is a minor adjustment in the way difficulty was calculated; it was intended only to delay the 'ice age' (by 52 million seconds (~611 days)). Since ganache-core (the underlying engine) mines with 0 difficulty, users can expect functionality to remain identical to the istanbul hardfork.

    Finally, this beta version contains a (potential? 😅) fix to work around an open Merkle Patricia Tree bug from 2016 ethereumjs/merkle-patricia-tree#12! If you do still get the dreaded TypeError: Cannot read property 'pop' of undefined please file an issue with all the details!


    How to Upgrade

    Upgrade to the latest version of ganache-cli by running:

    npm

    npm uninstall ganache-cli -g
    npm install ganache-cli@beta -g

    yarn

    yarn global remove ganache-cli
    yarn global add ganache-cli@beta

    Changelog

    Features

    Bug Fixes

    Maintenance

    Related Releases


    💖 The Truffle Team

  • 6.8.3-beta.0 - 2020-01-17

     Highlights    How to Upgrade    Changelog    Related Releases 


    We're moving to a betalatest release pipeline, where all non-hotfix changes are first released in a beta before being promoted to a stable release.

    We'd love it if you'd start using the latest betas and let us know early and often if you find any bugs or regressions!

    Highlights

    Popcorn (of undefined) 🍿

    This beta version contains a (potential? 😅) fix to work around this open Merkle Patricia Tree bug from 2016 ethereumjs/merkle-patricia-tree#12!

    Being that this seems to be a race-condition bug it is difficult to say for sure if this will fix all instances of this bug. If you do still get the dreaded TypeError: Cannot read property 'pop' of undefined after upgrading to this version please file an issue with the details!


    How to Upgrade

    Upgrade to this beta version of ganache-cli by running:

    npm

    npm uninstall ganache-cli -g
    npm install ganache-cli@beta -g

    yarn

    yarn global remove ganache-cli
    yarn global add ganache-cli@beta

    Changelog

    Bug Fixes

    Maintenance

    Related Releases


    💖 The Truffle Team

  • 6.8.2 - 2020-01-16

     Highlights    How to Upgrade    Changelog    Related Releases 


    We're moving to a betalatest release pipeline, where all non-hotfix changes are first released in a beta before being promoted to a stable release.

    We'd love it if you'd start using the latest betas and let us know early and often if you find any bugs or regressions!

    Highlights

    The previous release, v6.8.1, changed the way chainId's (the v value) were handled for raw transactions which in turn was preventing them from being accepted in certain situations. This fixes this issue and reverts the change that enabled EIP-155 replay protection in order to preserve backwards compatibility. Additionally, the mismatch of between ganache-cli's hardcoded chainId and its default net_version caused metamask signed transactions to always fail. Ganache-cli will accept any v value as it used to prior to v6.8.2.

    This behavior will change in the next major release of ganache-cli and the default behavior will be to validate the v value of raw transactions against the configured chainId.


    How to Upgrade

    Upgrade to the latest version of ganache-cli by running:

    npm

    npm uninstall ganache-cli -g
    npm install ganache-cli@latest -g

    yarn

    yarn global remove ganache-cli
    yarn global add ganache-cli@latest

    Changelog

    Bug Fixes

    Related Releases


    💖 The Truffle Team

  • 6.8.2-beta.0 - 2020-01-14

     Highlights    How to Upgrade    Changelog    Related Releases 


    We're moving to a betalatest release pipeline, where all non-hotfix changes are first released in a beta before being promoted to a stable release.

    We'd love it if you'd start using the latest betas and let us know early and often if you find any bugs or regressions!

    Highlights

    Popcorn (of undefined) 🍿

    This beta version contains a (potential? 😅) fix to work around this open Merkle Patricia Tree bug from 2016: ethereumjs/merkle-patricia-tree#12!

    Being that this seems to be a race-condition bug it is difficult to say for sure if this will fix all instances of this bug. If you do still get the dreaded TypeError: Cannot read property 'pop' of undefined after upgrading to this version please file an issue with the details!


    How to Upgrade

    Upgrade to this beta version of ganache-cli by running:

    npm

    npm uninstall ganache-cli -g
    npm install ganache-cli@beta -g

    yarn

    yarn global remove ganache-cli
    yarn global add ganache-cli@beta

    Changelog

    Bug Fixes

    Related Releases


    💖 The Truffle Team

  • 6.8.1 - 2020-01-06

     Highlights    How to Upgrade    Changelog    Related Releases 


    We're moving to a betalatest release pipeline, where all non-hotfix changes are first released in a beta before being promoted to a stable release.

    We'd love it if you'd start using the latest betas and let us know early and often if you find any bugs or regressions!

    Highlights

    Istanbul 🦃!

    This version adds Istanbul support and includes a bunch of bug fixes too!


    How to Upgrade

    Upgrade to the latest version of ganache-cli by running:

    npm

    npm uninstall ganache-cli -g
    npm install ganache-cli@latest

    yarn

    yarn global remove ganache-cli
    yarn global add ganache-cli@latest

    Changelog

    Features

    Bug Fixes

    Misc

    Related Releases


    💖 The Truffle Team

  • 6.8.1-beta.0 - 2019-10-09

    6.8.1-beta.0

  • 6.8.0-istanbul.0 - 2019-09-21

     Highlights    How to Upgrade    Changelog    Related Releases 


    This is a special istanbul tagged release bringing you the latest from ethereumjs-vm's work on Istanbul (currently in beta). To use the new istanbul hardfork pass "istanbul" as the hardfork option in ganache-core's server or provider options, or ganache-cli via ganache-cli --harfork istanbul

    Highlights

    Istanbul 🦃

    This special tagged version of ganache-cli includes beta support for the upcoming Istanbul harfork!

    This version also includes a fix for forking value and code deletion/destruction.


    How to Upgrade

    Upgrade to this special tagged version of ganache-cli by running:

    npm

    npm uninstall ganache-cli -g
    npm install ganache-cli@istanbul -g

    yarn

    yarn global remove ganache-cli
    yarn global add ganache-cli@istanbul

    Changelog

    Feature

    Bug Fixes

    Related Releases


    💖 The Truffle Team

  • 6.7.0 - 2019-09-09
  • 6.7.0-beta.0 - 2019-08-27
  • 6.6.0 - 2019-08-14
  • 6.6.0-beta.0 - 2019-07-31
  • 6.5.1 - 2019-07-31
  • 6.5.1-beta.0 - 2019-07-18
  • 6.5.0 - 2019-07-17
  • 6.4.6-beta.0 - 2019-07-09
  • 6.4.5 - 2019-07-09
  • 6.4.5-beta.0 - 2019-07-02
  • 6.4.4 - 2019-06-13
  • 6.4.4-beta.0 - 2019-04-30
  • 6.4.3 - 2019-04-15
  • 6.4.3-beta.0 - 2019-04-08
  • 6.4.2 - 2019-04-04
from ganache-cli GitHub release notes
Commit messages
Package name: ganache-cli
  • 307db6f 6.9.1
  • 4adb3ea Update ganache-core to v2.10.2
  • 424bfe5 Add hd_path to cli (#704)
  • ce82e50 6.9.0
  • 2342bf7 Update default hardfork to muirGlacier (#713)
  • 33b9b0a Update ganache-core to v2.10.1
  • f0b1eee Update ganache-core to v2.10.0
  • 3737c4e misc: update `hardfork` default in cli "describe" to `istanbul` (#711)
  • 9319f49 6.8.3-beta.0
  • bf1c134 Update ganache-core to v2.9.3-beta.0
  • 7a0e737 Merge branch 'develop' into beta
  • ccba143 6.8.2
  • 9f788a0 Update ganache-core to v2.9.2
  • a7eba57 Update default hardfork to `istanbul`
  • 95b53a4 6.8.2-beta.0
  • e3ebf6c Update ganache-core to v2.9.2-beta.1
  • 15f2e76 Merge branch 'develop' of github.com:trufflesuite/ganache-cli into develop
  • ac15fff 6.8.1
  • 7c2202f Update sub-dependencies
  • 0bd23a3 Update ganache-core to v2.9.1
  • b12e988 docs: improve `db_path` documentation (#693)
  • 686ddf2 Update gasLimit type docs (#695)
  • 1c8d2bc 6.8.1-beta.0
  • 0e24de3 UPdate ganache-core to v2.9.1-beta.0

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant