Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

gateway sync / gateway development -> staging for release version 1.19.0 #189

Merged
merged 95 commits into from
Aug 24, 2023

Conversation

rapcmia
Copy link
Contributor

@rapcmia rapcmia commented Aug 22, 2023

Before submitting this PR, please make sure:

  • Your code builds clean without any errors or warnings
  • You are using approved title ("feat/", "fix/", "docs/", "refactor/")

A description of the changes proposed in the pull request:
Staging to development

Tests performed by the developer:
na

Tips for QA testing:
na

dependabot bot and others added 30 commits July 20, 2023 05:37
Bumps [word-wrap](https://github.com/jonschlinkert/word-wrap) from 1.2.3 to 1.2.4.
- [Release notes](https://github.com/jonschlinkert/word-wrap/releases)
- [Commits](jonschlinkert/word-wrap@1.2.3...1.2.4)

---
updated-dependencies:
- dependency-name: word-wrap
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
sync gateway / gateway staging -> main
…wrap-1.2.4

Bump word-wrap from 1.2.3 to 1.2.4
- added workflows to build both the latest and version tags for gateway
fix / update test-helper/postman using chain
Signed-off-by: OjusWiZard <ojuswimail@gmail.com>
Signed-off-by: OjusWiZard <ojuswimail@gmail.com>
Signed-off-by: OjusWiZard <ojuswimail@gmail.com>
Signed-off-by: OjusWiZard <ojuswimail@gmail.com>
OjusWiZard and others added 24 commits August 7, 2023 02:56
Signed-off-by: OjusWiZard <ojuswimail@gmail.com>
Fix/ unhandled error when using USDC.e
Bumps [protobufjs](https://github.com/protobufjs/protobuf.js) from 6.11.3 to 6.11.4.
- [Release notes](https://github.com/protobufjs/protobuf.js/releases)
- [Changelog](https://github.com/protobufjs/protobuf.js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/protobufjs/protobuf.js/commits)

---
updated-dependencies:
- dependency-name: protobufjs
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: OjusWiZard <ojuswimail@gmail.com>
rawData.push(fileData);
}
} else {
rawData.push(await fse.readFile(`${path}/${address}.json`, 'utf8'));

Check failure

Code scanning / CodeQL

Uncontrolled data used in path expression

This path depends on a [user-provided value](1). This path depends on a [user-provided value](2). This path depends on a [user-provided value](3).
const iv = crypto.randomBytes(16);
const key = crypto
.createHash('sha256')
.update(String(password))

Check failure

Code scanning / CodeQL

Use of password hash with insufficient computational effort

Password from [an access to password](1) is hashed insecurely. Password from [a call to readPassphrase](2) is hashed insecurely. Password from [an access to passphrase](3) is hashed insecurely.
): string {
const key = crypto
.createHash('sha256')
.update(String(password))

Check failure

Code scanning / CodeQL

Use of password hash with insufficient computational effort

Password from [a call to readPassphrase](1) is hashed insecurely. Password from [an access to passphrase](2) is hashed insecurely. Password from [an access to password](3) is hashed insecurely. Password from [an access to password](4) is hashed insecurely.
}

async getTransaction(txHash: string): Promise<TransactionResponse[]> {
const res = await axios.get(`${this._tzktURL}/v1/operations/transactions/${txHash}`);

Check failure

Code scanning / CodeQL

Server-side request forgery

The [URL](1) of this request depends on a [user-provided value](2).
): Record<string, TokenInfo> => {
const tokens: Record<string, TokenInfo> = {};

for (let i = 0; i < tokenSymbols.length; i++) {

Check failure

Code scanning / CodeQL

Loop bound injection

Iteration over a user-controlled object with a potentially unbounded .length property from a [user-provided value](1). Iteration over a user-controlled object with a potentially unbounded .length property from a [user-provided value](2).
@nikspz nikspz changed the title sync / development -> staging for release version 1.19.0 gateway sync / gateway development -> staging for release version 1.19.0 Aug 22, 2023
@rapcmia rapcmia merged commit 3d78167 into staging Aug 24, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

7 participants