From 70085b814801967cd7ccce3a26ed681e45da9677 Mon Sep 17 00:00:00 2001 From: Richard Kenigs <18597956+Rihyx@users.noreply.github.com> Date: Wed, 14 Aug 2024 14:22:47 +0200 Subject: [PATCH 1/3] fix axios vulnerability (#322) --- .changeset/honest-onions-smoke.md | 9 +++++++++ package-lock.json | 14 ++++++++------ 2 files changed, 17 insertions(+), 6 deletions(-) create mode 100644 .changeset/honest-onions-smoke.md diff --git a/.changeset/honest-onions-smoke.md b/.changeset/honest-onions-smoke.md new file mode 100644 index 00000000..4a965309 --- /dev/null +++ b/.changeset/honest-onions-smoke.md @@ -0,0 +1,9 @@ +--- +'@moonbeam-network/xcm-builder': patch +'@moonbeam-network/xcm-config': patch +'@moonbeam-network/xcm-sdk': patch +'@moonbeam-network/xcm-types': patch +'@moonbeam-network/xcm-utils': patch +--- + +Fix axios vulnerability diff --git a/package-lock.json b/package-lock.json index 2152f3dc..5645e559 100644 --- a/package-lock.json +++ b/package-lock.json @@ -7676,10 +7676,11 @@ } }, "node_modules/axios": { - "version": "1.7.2", - "resolved": "https://registry.npmjs.org/axios/-/axios-1.7.2.tgz", - "integrity": "sha512-2A8QhOMrbomlDuiLeK9XibIBzuHeRcqqNOHp0Cyp5EoJ1IFDh+XZH3A6BkXtv0K4gFGCI0Y4BM7B1wOEi0Rmgw==", + "version": "1.7.4", + "resolved": "https://registry.npmjs.org/axios/-/axios-1.7.4.tgz", + "integrity": "sha512-DukmaFRnY6AzAALSH4J2M3k6PkaC+MfaAGdEERRWcC9q3/TWQwLpHR8ZRLKTdQ3aBDL64EdluRDjJqKw+BPZEw==", "dev": true, + "license": "MIT", "dependencies": { "follow-redirects": "^1.15.6", "form-data": "^4.0.0", @@ -9097,9 +9098,10 @@ "peer": true }, "node_modules/elliptic": { - "version": "6.5.5", - "resolved": "https://registry.npmjs.org/elliptic/-/elliptic-6.5.5.tgz", - "integrity": "sha512-7EjbcmUm17NQFu4Pmgmq2olYMj8nwMnpcddByChSUjArp8F5DQWcIcpriwO4ZToLNAJig0yiyjswfyGNje/ixw==", + "version": "6.5.7", + "resolved": "https://registry.npmjs.org/elliptic/-/elliptic-6.5.7.tgz", + "integrity": "sha512-ESVCtTwiA+XhY3wyh24QqRGBoP3rEdDUl3EDUUo9tft074fi19IrdpH7hLCMMP3CIj7jb3W96rn8lt/BqIlt5Q==", + "license": "MIT", "dependencies": { "bn.js": "^4.11.9", "brorand": "^1.1.0", From 9eaeb72b67494766fc3ff2a9106adcd58500470d Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Wed, 14 Aug 2024 14:32:31 +0200 Subject: [PATCH 2/3] Version Packages (#323) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com> --- .changeset/honest-onions-smoke.md | 9 -------- examples/sdk-simple/package.json | 6 +++--- package-lock.json | 34 +++++++++++++++---------------- packages/builder/CHANGELOG.md | 10 +++++++++ packages/builder/package.json | 6 +++--- packages/config/CHANGELOG.md | 10 +++++++++ packages/config/package.json | 6 +++--- packages/sdk/CHANGELOG.md | 12 +++++++++++ packages/sdk/package.json | 10 ++++----- packages/types/CHANGELOG.md | 9 ++++++++ packages/types/package.json | 4 ++-- packages/utils/CHANGELOG.md | 6 ++++++ packages/utils/package.json | 2 +- 13 files changed, 81 insertions(+), 43 deletions(-) delete mode 100644 .changeset/honest-onions-smoke.md diff --git a/.changeset/honest-onions-smoke.md b/.changeset/honest-onions-smoke.md deleted file mode 100644 index 4a965309..00000000 --- a/.changeset/honest-onions-smoke.md +++ /dev/null @@ -1,9 +0,0 @@ ---- -'@moonbeam-network/xcm-builder': patch -'@moonbeam-network/xcm-config': patch -'@moonbeam-network/xcm-sdk': patch -'@moonbeam-network/xcm-types': patch -'@moonbeam-network/xcm-utils': patch ---- - -Fix axios vulnerability diff --git a/examples/sdk-simple/package.json b/examples/sdk-simple/package.json index a54b6c04..cc6eedde 100644 --- a/examples/sdk-simple/package.json +++ b/examples/sdk-simple/package.json @@ -12,9 +12,9 @@ "author": "", "license": "MIT", "dependencies": { - "@moonbeam-network/xcm-config": "2.5.3", - "@moonbeam-network/xcm-sdk": "2.5.4", - "@moonbeam-network/xcm-utils": "2.1.4" + "@moonbeam-network/xcm-config": "2.5.4", + "@moonbeam-network/xcm-sdk": "2.5.5", + "@moonbeam-network/xcm-utils": "2.1.5" }, "devDependencies": { "bun": "^1.1.21" diff --git a/package-lock.json b/package-lock.json index 5645e559..875dbe66 100644 --- a/package-lock.json +++ b/package-lock.json @@ -50,9 +50,9 @@ "version": "1.0.0", "license": "MIT", "dependencies": { - "@moonbeam-network/xcm-config": "2.5.3", - "@moonbeam-network/xcm-sdk": "2.5.4", - "@moonbeam-network/xcm-utils": "2.1.4" + "@moonbeam-network/xcm-config": "2.5.4", + "@moonbeam-network/xcm-sdk": "2.5.5", + "@moonbeam-network/xcm-utils": "2.1.5" }, "devDependencies": { "bun": "^1.1.21" @@ -19502,11 +19502,11 @@ }, "packages/builder": { "name": "@moonbeam-network/xcm-builder", - "version": "2.4.1", + "version": "2.4.2", "license": "MIT", "dependencies": { - "@moonbeam-network/xcm-types": "2.3.1", - "@moonbeam-network/xcm-utils": "2.1.4", + "@moonbeam-network/xcm-types": "2.3.2", + "@moonbeam-network/xcm-utils": "2.1.5", "big.js": "^6.2.1" }, "peerDependencies": { @@ -19519,11 +19519,11 @@ }, "packages/config": { "name": "@moonbeam-network/xcm-config", - "version": "2.5.3", + "version": "2.5.4", "license": "MIT", "dependencies": { - "@moonbeam-network/xcm-builder": "2.4.1", - "@moonbeam-network/xcm-types": "2.3.1" + "@moonbeam-network/xcm-builder": "2.4.2", + "@moonbeam-network/xcm-types": "2.3.2" }, "peerDependencies": { "@polkadot/types": "^12.2.3", @@ -19533,13 +19533,13 @@ }, "packages/sdk": { "name": "@moonbeam-network/xcm-sdk", - "version": "2.5.4", + "version": "2.5.5", "license": "MIT", "dependencies": { - "@moonbeam-network/xcm-builder": "2.4.1", - "@moonbeam-network/xcm-config": "2.5.3", - "@moonbeam-network/xcm-types": "2.3.1", - "@moonbeam-network/xcm-utils": "2.1.4", + "@moonbeam-network/xcm-builder": "2.4.2", + "@moonbeam-network/xcm-config": "2.5.4", + "@moonbeam-network/xcm-types": "2.3.2", + "@moonbeam-network/xcm-utils": "2.1.5", "big.js": "^6.2.1" }, "peerDependencies": { @@ -19553,10 +19553,10 @@ }, "packages/types": { "name": "@moonbeam-network/xcm-types", - "version": "2.3.1", + "version": "2.3.2", "license": "MIT", "dependencies": { - "@moonbeam-network/xcm-utils": "2.1.4", + "@moonbeam-network/xcm-utils": "2.1.5", "big.js": "^6.2.1" }, "peerDependencies": { @@ -19565,7 +19565,7 @@ }, "packages/utils": { "name": "@moonbeam-network/xcm-utils", - "version": "2.1.4", + "version": "2.1.5", "license": "MIT", "dependencies": { "big.js": "^6.2.1", diff --git a/packages/builder/CHANGELOG.md b/packages/builder/CHANGELOG.md index b34e1a5d..ef338737 100644 --- a/packages/builder/CHANGELOG.md +++ b/packages/builder/CHANGELOG.md @@ -1,5 +1,15 @@ # @moonbeam-network/xcm-builder +## 2.4.2 + +### Patch Changes + +- [#322](https://github.com/moonbeam-foundation/xcm-sdk/pull/322) [`70085b8`](https://github.com/moonbeam-foundation/xcm-sdk/commit/70085b814801967cd7ccce3a26ed681e45da9677) Thanks [@Rihyx](https://github.com/Rihyx)! - Fix axios vulnerability + +- Updated dependencies [[`70085b8`](https://github.com/moonbeam-foundation/xcm-sdk/commit/70085b814801967cd7ccce3a26ed681e45da9677)]: + - @moonbeam-network/xcm-types@2.3.2 + - @moonbeam-network/xcm-utils@2.1.5 + ## 2.4.1 ### Patch Changes diff --git a/packages/builder/package.json b/packages/builder/package.json index 549b86fd..a0e90c5e 100644 --- a/packages/builder/package.json +++ b/packages/builder/package.json @@ -1,6 +1,6 @@ { "name": "@moonbeam-network/xcm-builder", - "version": "2.4.1", + "version": "2.4.2", "description": "Moonbeam XCM builder", "scripts": { "build": "tsup", @@ -49,8 +49,8 @@ "types": "./build/index.d.ts", "main": "./build/index.cjs", "dependencies": { - "@moonbeam-network/xcm-types": "2.3.1", - "@moonbeam-network/xcm-utils": "2.1.4", + "@moonbeam-network/xcm-types": "2.3.2", + "@moonbeam-network/xcm-utils": "2.1.5", "big.js": "^6.2.1" }, "peerDependencies": { diff --git a/packages/config/CHANGELOG.md b/packages/config/CHANGELOG.md index bcee71a2..cbdfb321 100644 --- a/packages/config/CHANGELOG.md +++ b/packages/config/CHANGELOG.md @@ -1,5 +1,15 @@ # @moonbeam-network/xcm-config +## 2.5.4 + +### Patch Changes + +- [#322](https://github.com/moonbeam-foundation/xcm-sdk/pull/322) [`70085b8`](https://github.com/moonbeam-foundation/xcm-sdk/commit/70085b814801967cd7ccce3a26ed681e45da9677) Thanks [@Rihyx](https://github.com/Rihyx)! - Fix axios vulnerability + +- Updated dependencies [[`70085b8`](https://github.com/moonbeam-foundation/xcm-sdk/commit/70085b814801967cd7ccce3a26ed681e45da9677)]: + - @moonbeam-network/xcm-builder@2.4.2 + - @moonbeam-network/xcm-types@2.3.2 + ## 2.5.3 ### Patch Changes diff --git a/packages/config/package.json b/packages/config/package.json index 46503c2c..6ff78e1c 100644 --- a/packages/config/package.json +++ b/packages/config/package.json @@ -1,6 +1,6 @@ { "name": "@moonbeam-network/xcm-config", - "version": "2.5.3", + "version": "2.5.4", "description": "All necessary configuration to transfer assets from Moonbeam, Moonriver, Moonbase to other parachains and back", "scripts": { "build": "tsup", @@ -49,8 +49,8 @@ "types": "./build/index.d.ts", "main": "./build/index.cjs", "dependencies": { - "@moonbeam-network/xcm-builder": "2.4.1", - "@moonbeam-network/xcm-types": "2.3.1" + "@moonbeam-network/xcm-builder": "2.4.2", + "@moonbeam-network/xcm-types": "2.3.2" }, "peerDependencies": { "@polkadot/types": "^12.2.3", diff --git a/packages/sdk/CHANGELOG.md b/packages/sdk/CHANGELOG.md index 27947a9d..3d4616fc 100644 --- a/packages/sdk/CHANGELOG.md +++ b/packages/sdk/CHANGELOG.md @@ -1,5 +1,17 @@ # @moonbeam-network/xcm-sdk +## 2.5.5 + +### Patch Changes + +- [#322](https://github.com/moonbeam-foundation/xcm-sdk/pull/322) [`70085b8`](https://github.com/moonbeam-foundation/xcm-sdk/commit/70085b814801967cd7ccce3a26ed681e45da9677) Thanks [@Rihyx](https://github.com/Rihyx)! - Fix axios vulnerability + +- Updated dependencies [[`70085b8`](https://github.com/moonbeam-foundation/xcm-sdk/commit/70085b814801967cd7ccce3a26ed681e45da9677)]: + - @moonbeam-network/xcm-builder@2.4.2 + - @moonbeam-network/xcm-config@2.5.4 + - @moonbeam-network/xcm-types@2.3.2 + - @moonbeam-network/xcm-utils@2.1.5 + ## 2.5.4 ### Patch Changes diff --git a/packages/sdk/package.json b/packages/sdk/package.json index 45a882c5..dd2e797c 100644 --- a/packages/sdk/package.json +++ b/packages/sdk/package.json @@ -1,6 +1,6 @@ { "name": "@moonbeam-network/xcm-sdk", - "version": "2.5.4", + "version": "2.5.5", "description": "The Moonbeam XCM SDK enables developers to easily deposit and withdraw assets to Moonbeam/Moonriver from the relay chain and other parachains in the Polkadot/Kusama ecosystem", "scripts": { "build": "tsup", @@ -51,10 +51,10 @@ "types": "./build/index.d.ts", "main": "./build/index.cjs", "dependencies": { - "@moonbeam-network/xcm-builder": "2.4.1", - "@moonbeam-network/xcm-config": "2.5.3", - "@moonbeam-network/xcm-types": "2.3.1", - "@moonbeam-network/xcm-utils": "2.1.4", + "@moonbeam-network/xcm-builder": "2.4.2", + "@moonbeam-network/xcm-config": "2.5.4", + "@moonbeam-network/xcm-types": "2.3.2", + "@moonbeam-network/xcm-utils": "2.1.5", "big.js": "^6.2.1" }, "peerDependencies": { diff --git a/packages/types/CHANGELOG.md b/packages/types/CHANGELOG.md index 28158d7a..8e3398a5 100644 --- a/packages/types/CHANGELOG.md +++ b/packages/types/CHANGELOG.md @@ -1,5 +1,14 @@ # @moonbeam-network/xcm-types +## 2.3.2 + +### Patch Changes + +- [#322](https://github.com/moonbeam-foundation/xcm-sdk/pull/322) [`70085b8`](https://github.com/moonbeam-foundation/xcm-sdk/commit/70085b814801967cd7ccce3a26ed681e45da9677) Thanks [@Rihyx](https://github.com/Rihyx)! - Fix axios vulnerability + +- Updated dependencies [[`70085b8`](https://github.com/moonbeam-foundation/xcm-sdk/commit/70085b814801967cd7ccce3a26ed681e45da9677)]: + - @moonbeam-network/xcm-utils@2.1.5 + ## 2.3.1 ### Patch Changes diff --git a/packages/types/package.json b/packages/types/package.json index f3dc0a6d..fe1910f4 100644 --- a/packages/types/package.json +++ b/packages/types/package.json @@ -1,6 +1,6 @@ { "name": "@moonbeam-network/xcm-types", - "version": "2.3.1", + "version": "2.3.2", "description": "Moonbeam XCM Types", "scripts": { "build": "tsup", @@ -48,7 +48,7 @@ "types": "./build/index.d.ts", "main": "./build/index.cjs", "dependencies": { - "@moonbeam-network/xcm-utils": "2.1.4", + "@moonbeam-network/xcm-utils": "2.1.5", "big.js": "^6.2.1" }, "peerDependencies": { diff --git a/packages/utils/CHANGELOG.md b/packages/utils/CHANGELOG.md index 32f5665e..997820bb 100644 --- a/packages/utils/CHANGELOG.md +++ b/packages/utils/CHANGELOG.md @@ -1,5 +1,11 @@ # @moonbeam-network/xcm-utils +## 2.1.5 + +### Patch Changes + +- [#322](https://github.com/moonbeam-foundation/xcm-sdk/pull/322) [`70085b8`](https://github.com/moonbeam-foundation/xcm-sdk/commit/70085b814801967cd7ccce3a26ed681e45da9677) Thanks [@Rihyx](https://github.com/Rihyx)! - Fix axios vulnerability + ## 2.1.4 ### Patch Changes diff --git a/packages/utils/package.json b/packages/utils/package.json index 458d47de..80a523bc 100644 --- a/packages/utils/package.json +++ b/packages/utils/package.json @@ -1,6 +1,6 @@ { "name": "@moonbeam-network/xcm-utils", - "version": "2.1.4", + "version": "2.1.5", "description": "Moonbeam XCM utilities", "scripts": { "build": "tsup", From 22603d0c527ee8579310b76d0a9443412f5b2818 Mon Sep 17 00:00:00 2001 From: Richard Kenigs <18597956+Rihyx@users.noreply.github.com> Date: Wed, 14 Aug 2024 14:46:06 +0200 Subject: [PATCH 3/3] fix acceptance tests and make them run on push (#324) * change acceptance test to run on all branches * add changeset --- .changeset/eight-insects-warn.md | 5 +++++ .github/workflows/acceptance.yml | 6 +----- .../sdk/tests/acceptance/__snapshots__/sdk.test.ts.snap | 7 +++++++ 3 files changed, 13 insertions(+), 5 deletions(-) create mode 100644 .changeset/eight-insects-warn.md diff --git a/.changeset/eight-insects-warn.md b/.changeset/eight-insects-warn.md new file mode 100644 index 00000000..c854c826 --- /dev/null +++ b/.changeset/eight-insects-warn.md @@ -0,0 +1,5 @@ +--- +'@moonbeam-network/xcm-sdk': patch +--- + +Fix acceptance tests and make them run on every push diff --git a/.github/workflows/acceptance.yml b/.github/workflows/acceptance.yml index 5ee43cef..27f9ad9f 100644 --- a/.github/workflows/acceptance.yml +++ b/.github/workflows/acceptance.yml @@ -1,10 +1,6 @@ name: acceptance -on: - push: - branches: - - main - workflow_dispatch: +on: push concurrency: ${{ github.workflow }}-${{ github.ref }} diff --git a/packages/sdk/tests/acceptance/__snapshots__/sdk.test.ts.snap b/packages/sdk/tests/acceptance/__snapshots__/sdk.test.ts.snap index e2e8497a..a6cf46de 100644 --- a/packages/sdk/tests/acceptance/__snapshots__/sdk.test.ts.snap +++ b/packages/sdk/tests/acceptance/__snapshots__/sdk.test.ts.snap @@ -448,6 +448,13 @@ exports[`sdk > getParachainBalances > on 'Moonbeam' for address: '0x4E82143Af671 "originSymbol": "NCTR", "symbol": "NCTR", }, + a { + "amount": 0n, + "decimals": 10, + "key": "wifd", + "originSymbol": "WIFD", + "symbol": "WIFD", + }, a { "amount": 0n, "decimals": 10,