Release 1.3.23 #239

TheLastCicada · 2024-12-18T20:22:04Z

No description provided.

ci: upgrade from checkoutv3 to v4

ci: allow dependabot builds without package signing

Bumps [http-proxy-middleware](https://github.com/chimurai/http-proxy-middleware) from 2.0.6 to 2.0.7. - [Release notes](https://github.com/chimurai/http-proxy-middleware/releases) - [Changelog](https://github.com/chimurai/http-proxy-middleware/blob/v2.0.7/CHANGELOG.md) - [Commits](chimurai/http-proxy-middleware@v2.0.6...v2.0.7) --- updated-dependencies: - dependency-name: http-proxy-middleware dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [braces](https://github.com/micromatch/braces) from 3.0.2 to 3.0.3. - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) --- updated-dependencies: - dependency-name: braces dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [ws](https://github.com/websockets/ws) from 7.5.9 to 7.5.10. - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@7.5.9...7.5.10) --- updated-dependencies: - dependency-name: ws dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

…p-proxy-middleware-2.0.7 chore(deps): bump http-proxy-middleware from 2.0.6 to 2.0.7

…ces-3.0.3 chore(deps): bump braces from 3.0.2 to 3.0.3

…7.5.10 chore(deps-dev): bump ws from 7.5.9 to 7.5.10

Bumps [express](https://github.com/expressjs/express) from 4.19.2 to 4.20.0. - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.19.2...4.20.0) --- updated-dependencies: - dependency-name: express dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [micromatch](https://github.com/micromatch/micromatch) from 4.0.5 to 4.0.8. - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.5...4.0.8) --- updated-dependencies: - dependency-name: micromatch dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

…romatch-4.0.8 chore(deps): bump micromatch from 4.0.5 to 4.0.8

…ress-4.20.0 chore(deps): bump express from 4.19.2 to 4.20.0

Bumps [cookie](https://github.com/jshttp/cookie) to 0.7.1 and updates ancestor dependency [express](https://github.com/expressjs/express). These dependencies need to be updated together. Updates `cookie` from 0.6.0 to 0.7.1 - [Release notes](https://github.com/jshttp/cookie/releases) - [Commits](jshttp/cookie@v0.6.0...v0.7.1) Updates `express` from 4.20.0 to 4.21.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md) - [Commits](expressjs/express@4.20.0...4.21.2) --- updated-dependencies: - dependency-name: cookie dependency-type: indirect - dependency-name: express dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [send](https://github.com/pillarjs/send) to 0.19.0 and updates ancestor dependency [express](https://github.com/expressjs/express). These dependencies need to be updated together. Updates `send` from 0.18.0 to 0.19.0 - [Release notes](https://github.com/pillarjs/send/releases) - [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md) - [Commits](pillarjs/send@0.18.0...0.19.0) Updates `express` from 4.20.0 to 4.21.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md) - [Commits](expressjs/express@4.20.0...4.21.2) --- updated-dependencies: - dependency-name: send dependency-type: indirect - dependency-name: express dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

…ti-d74e9e8b49 chore(deps): bump cookie and express

…ti-db17b8dbde chore(deps): bump send and express

ci: update everything to v4

fix: incorrect resource url for cadt organizations sync status

ci: introduce rc workflow and update dependencies

socket-security · 2024-12-18T20:22:34Z

New, updated, and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@chia-carbon/core-registry-logger@1.0.13 🔁 npm/@chia-carbon/core-registry-logger@1.0.12	None	`0`	24 kB	chia-automation
npm/@yao-pkg/pkg@5.16.1 🔁 npm/@yao-pkg/pkg@5.12.0	Transitive: network	`+90`	8.6 MB	roberts_lando
npm/body-parser@1.20.3 🔁 npm/body-parser@1.20.2	Transitive: environment, eval, filesystem, unsafe	`+40`	1.55 MB	ulisesgascon
npm/chai@4.5.0 🔁 npm/chai@4.4.1	None	`+7`	910 kB	chaijs
npm/chia-datalayer@2.0.20 🔁 npm/chia-datalayer@2.0.14	None	`+1`	27.4 kB	michaeltaylor3d
npm/dotenv@16.4.7 🔁 npm/dotenv@16.4.5	None	`0`	75.8 kB	motdotla
npm/express@4.21.2 🔁 npm/express@4.19.2	Transitive: eval, unsafe	`+62`	1.71 MB	jonchurch
npm/http-proxy-middleware@2.0.7 🔁 npm/http-proxy-middleware@2.0.6	None	`+15`	2.96 MB	chimurai
npm/joi@17.13.3 🔁 npm/joi@17.12.1	None	`+5`	670 kB	marsup
npm/nock@13.5.6 🔁 npm/nock@13.5.3	None	`+2`	211 kB	nockbot
npm/winston@3.17.0 🔁 npm/winston@3.11.0	Transitive: environment	`+27`	1.7 MB	dabh

View full report↗︎

socket-security · 2024-12-18T20:22:35Z

👍 Dependency issues cleared. Learn more about Socket for GitHub ↗︎

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

Ignoring: npm/@yao-pkg/pkg@5.16.1

View full report↗︎

Next steps

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/foo@1.0.0 or ignore all packages with @SocketSecurity ignore-all

TheLastCicada · 2024-12-18T20:31:43Z

@SocketSecurity ignore npm/@yao-pkg/pkg@5.16.1

Updated License

fix: error handling

fix: code quality for api key assertion

ci: switch to jinjanate and GH hosted ARM runner

…tirement-task

fix: retirements task

This reverts commit 4d2b1e2.

fix: explorer test

…ion-tweak chore: dep updates

…api-verfiction-tweak Revert "chore: dep updates"

feat: code quality tweak

TheLastCicada and others added 25 commits November 6, 2024 13:18

ci: upgrade from checkoutv3 to v4

268b7ad

Merge pull request #231 from Chia-Network/checkoutv4

e9ccbbe

ci: upgrade from checkoutv3 to v4

fix: incorrect resource url for cadt organizations sync status

5088617

ci: allow dependabot builds without package signing

9c12016

Merge pull request #233 from Chia-Network/dependabot-builds-yes

b569ed1

ci: allow dependabot builds without package signing

Merge pull request #229 from Chia-Network/dependabot/npm_and_yarn/htt…

d759258

…p-proxy-middleware-2.0.7 chore(deps): bump http-proxy-middleware from 2.0.6 to 2.0.7

Merge pull request #218 from Chia-Network/dependabot/npm_and_yarn/bra…

c2c4b28

…ces-3.0.3 chore(deps): bump braces from 3.0.2 to 3.0.3

Merge pull request #217 from Chia-Network/dependabot/npm_and_yarn/ws-…

ef44211

…7.5.10 chore(deps-dev): bump ws from 7.5.9 to 7.5.10

Merge pull request #220 from Chia-Network/dependabot/npm_and_yarn/mic…

974d173

…romatch-4.0.8 chore(deps): bump micromatch from 4.0.5 to 4.0.8

Merge pull request #232 from Chia-Network/dependabot/npm_and_yarn/exp…

fbfbeeb

…ress-4.20.0 chore(deps): bump express from 4.19.2 to 4.20.0

Merge pull request #234 from Chia-Network/dependabot/npm_and_yarn/mul…

ea66909

…ti-d74e9e8b49 chore(deps): bump cookie and express

Merge pull request #235 from Chia-Network/dependabot/npm_and_yarn/mul…

35790f4

…ti-db17b8dbde chore(deps): bump send and express

ci: update everything to v4

a130d0c

Merge pull request #236 from Chia-Network/v4

f28fdba

ci: update everything to v4

Merge pull request #237 from Chia-Network/correct-org-sync-endpoint

f1f1d7b

fix: incorrect resource url for cadt organizations sync status

ci: introduce rc workflow and update dependencies

3334d7a

chore: version bump

8f7e0f1

Merge pull request #238 from Chia-Network/rc-workflow

5e441b5

ci: introduce rc workflow and update dependencies

ChiaAutomation added 2 commits December 19, 2024 16:07

chore: Update dep-review

312219d

chore: Update commit-signing

8a96913

ChiaAutomation and others added 27 commits January 14, 2025 12:01

chore: Update license

bff3967

feat: add apple ARM package target

28cd30a

Merge remote-tracking branch 'origin/develop' into develop

5fb883c

Merge pull request #258 from Chia-Network/update-license

061a2a8

Updated License

fix: cadt commits endpoint path

c383513

fix: retirements task

8479d96

fix: tests

2a6c457

fix: error handling

chore: dep updates

2eeeca9

fix: code quality for api key assertion

ci: switch to jinjanate and GH hosted ARM runner

0d7a698

ci: linux arm targeting

3017a4f

Merge pull request #261 from Chia-Network/jinjanate

b6e8c84

ci: switch to jinjanate and GH hosted ARM runner

fix: over-calling explorer activities endpoint

1c72d96

fix: failing tests part 2

fea4977

fix: failing tests part 2

120c1ce

Merge remote-tracking branch 'origin/fix-retirement-task' into fix-re…

1659791

…tirement-task

Merge pull request #259 from Chia-Network/fix-retirement-task

308f4f5

fix: retirements task

Merge branch 'develop' into dep-updates-and-api-verfiction-tweak

7505868

fix: tests part 3

4d2b1e2

Revert "fix: tests part 3"

7a7c199

This reverts commit 4d2b1e2.

fix: explorer test

f56adda

Merge pull request #263 from Chia-Network/explorer-test-fix

4ee4b4e

fix: explorer test

Merge pull request #260 from Chia-Network/dep-updates-and-api-verfict…

c6a5350

…ion-tweak chore: dep updates

Revert "chore: dep updates"

6475a24

Merge pull request #264 from Chia-Network/revert-260-dep-updates-and-…

80a40d1

…api-verfiction-tweak Revert "chore: dep updates"

chore: dep updates

f448798

feat: code quality tweak

chore: dep updates

6121556

feat: code quality tweak

Merge remote-tracking branch 'origin/develop' into develop

f2991fe

TheLastCicada enabled auto-merge February 7, 2025 19:51

cmmarslender approved these changes Feb 7, 2025

View reviewed changes

TheLastCicada merged commit e4f43b6 into main Feb 7, 2025
26 checks passed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Release 1.3.23 #239

Release 1.3.23 #239

Uh oh!

TheLastCicada commented Dec 18, 2024

Uh oh!

socket-security bot commented Dec 18, 2024 •

edited

Loading

Uh oh!

socket-security bot commented Dec 18, 2024 •

edited

Loading

Uh oh!

TheLastCicada commented Dec 18, 2024

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

Release 1.3.23 #239

Release 1.3.23 #239

Uh oh!

Conversation

TheLastCicada commented Dec 18, 2024

Uh oh!

socket-security bot commented Dec 18, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security bot commented Dec 18, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Next steps

Uh oh!

TheLastCicada commented Dec 18, 2024

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

socket-security bot commented Dec 18, 2024 •

edited

Loading

socket-security bot commented Dec 18, 2024 •

edited

Loading