Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update dependency @solana/web3.js to v1.77.4 [security] #8137

Closed

Conversation

live-github-bot[bot]
Copy link
Contributor

This PR contains the following updates:

Package Type Update Change
@solana/web3.js (source) devDependencies patch 1.77.3 -> 1.77.4
@solana/web3.js (source) dependencies patch 1.77.3 -> 1.77.4

GitHub Vulnerability Alerts

CVE-2024-30253

Using particular inputs with @solana/web3.js will result in memory exhaustion (OOM).

If you have a server, client, mobile, or desktop product that accepts untrusted input for use with @solana/web3.js, your application/service may crash, resulting in a loss of availability.


Configuration

📅 Schedule: Branch creation - "" in timezone Europe/Paris, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@live-github-bot live-github-bot bot requested a review from a team as a code owner October 17, 2024 22:05
Copy link

vercel bot commented Oct 17, 2024

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
web-tools ✅ Ready (Inspect) Visit Preview 💬 Add feedback Oct 29, 2024 10:11pm
4 Skipped Deployments
Name Status Preview Comments Updated (UTC)
ledger-live-docs ⬜️ Ignored (Inspect) Visit Preview Oct 29, 2024 10:11pm
ledger-live-github-bot ⬜️ Ignored (Inspect) Visit Preview Oct 29, 2024 10:11pm
native-ui-storybook ⬜️ Ignored (Inspect) Visit Preview Oct 29, 2024 10:11pm
react-ui-storybook ⬜️ Ignored (Inspect) Visit Preview Oct 29, 2024 10:11pm

@Justkant
Copy link
Contributor

I'm updating this in my PR we can probably close

@live-github-bot live-github-bot bot changed the title Update dependency @solana/web3.js to v1.77.4 [SECURITY] chore(deps): update dependency @solana/web3.js to v1.77.4 [security] Oct 18, 2024
@Justkant
Copy link
Contributor

Will be done in this PR: #8234

@Justkant Justkant closed this Oct 30, 2024
@Justkant Justkant deleted the renovate/npm-@solana/web3.js-vulnerability branch October 30, 2024 08:32
@live-github-bot
Copy link
Contributor Author

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (1.77.4). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
common Has changes in live-common security
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant