[Snyk] Upgrade @trustwallet/wallet-core from 3.0.1 to 3.3.2 #79

Mhmonicox · 2023-11-03T15:18:39Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade @trustwallet/wallet-core from 3.0.1 to 3.3.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 72 versions ahead of your current version.
The recommended version was released 21 days ago, on 2023-10-13.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Inadequate Encryption Strength SNYK-JS-TRUSTWALLETWALLETCORE-5489780	681/1000 Why? Mature exploit, Has a fix available, CVSS 5.9	Mature

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @trustwallet/wallet-core

3.3.2 - 2023-10-13
What's Changed
- fix typos by @ i-fix-typos in #3462
- [Security/Legacy]: Fix security findings by @ satoshiotomakan in #3477
- [Greenfield]: Update to mainnet by @ satoshiotomakan in #3484
New Contributors
- @ i-fix-typos made their first contribution in #3462
Full Changelog: 3.2.21...3.3.2
3.3.1-dev - 2023-10-09
What's Changed

This dev release introduces several sweeping changes to the Wallet Core, primarily centering on the shift from C++ to Rust for improved performance, security, and maintenance:
1. Elliptic Curves in Rust: We've successfully migrated most of the currently supported elliptic curves to Rust. Implementation details are as follows:
  - secp256k1 - using RustCrypto: k256
  - ed25519, ed25519-blake2b, ed25519-cardano-extended - using curve25519-dalek
  - nistp256p1 - using RustCrypto/p256
2. Wallet Core Redesign: Exploiting Rust's robust type system, the Wallet Core design has been massively enhanced to promote easier implementation of features and long-term code maintainability.
3. Ethereum Transition: We've shifted the main Ethereum functionality from C++ to Rust. The implementation encompasses Ethereum's basic operations, RLP and ABI interfaces, as well as EIP712 message signing. As it stands now, the Ethereum transition is fully executed.
4. Bitcoin Transition: Progress is underway to move Bitcoin functionality from C++ to Rust. So far, this involves Bitcoin's basic operations and interface redesign. Pending tasks include:
  - Establishing a bridge between the legacy and new Bitcoin protobuf interfaces for seamless transition.
  - Shifting all tests to Rust.
  - Implementing other Bitcoin-related functionality in Rust.
Progress
- #3107
- #3146
- #3163
- #3169
- #3322
- #3350
- #3382
- #3440
- #3458
Breaking changes
- VeChain and Theta no longer support JSON signing. Initially, the chains inherited Ethereum::Entry, but Entry::signJSON was not overridden with the chain specific implementation.
- UserOperation signed transaction (JSON representation) now has the sender: Address field normalized with EIP55 checksum.
- Removed Ethereum::RLP::decode functionality as it's not used in C++.
- Ethereum and all EVM-compatible chains no longer support TWTransactionCompilerBuildInput.
Deprecated
- TWEthereumAbiFunction and all methods.
- TWEthereumAbiEncode. Consider using TWEthereumAbiEncodeFunction through Protobuf interface instead.
- TWEthereumAbiDecodeOutput. Consider using TWEthereumAbiDecodeParams through Protobuf interface instead.
- TWEthereumAbiDecodeCall. Consider using TWEthereumAbiDecodeContractCall through Protobuf interface instead.
- TWEthereumAbiValueDecodeValue, TWEthereumAbiValueDecodeArray and all TWEthereumAbiValueDecode*. Consider using TWEthereumAbiDecodeValue through Protobuf interface instead.
3.3.0-dev - 2023-10-09
What's Changed

This dev release introduces several sweeping changes to the Wallet Core, primarily centering on the shift from C++ to Rust for improved performance, security, and maintenance:
1. Elliptic Curves in Rust: We've successfully migrated most of the currently supported elliptic curves to Rust. Implementation details are as follows:
  - secp256k1 - using RustCrypto: k256
  - ed25519, ed25519-blake2b, ed25519-cardano-extended - using curve25519-dalek
  - nistp256p1 - using RustCrypto/p256
2. Wallet Core Redesign: Exploiting Rust's robust type system, the Wallet Core design has been massively enhanced to promote easier implementation of features and long-term code maintainability.
3. Ethereum Transition: We've shifted the main Ethereum functionality from C++ to Rust. The implementation encompasses Ethereum's basic operations, RLP and ABI interfaces, as well as EIP712 message signing. As it stands now, the Ethereum transition is fully executed.
4. Bitcoin Transition: Progress is underway to move Bitcoin functionality from C++ to Rust. So far, this involves Bitcoin's basic operations and interface redesign. Pending tasks include:
  - Establishing a bridge between the legacy and new Bitcoin protobuf interfaces for seamless transition.
  - Shifting all tests to Rust.
  - Implementing other Bitcoin-related functionality in Rust.
Progress
- #3107
- #3146
- #3163
- #3169
- #3322
- #3350
- #3382
- #3440
- #3458
Breaking changes
- VeChain and Theta no longer support JSON signing. Initially, the chains inherited Ethereum::Entry, but Entry::signJSON was not overridden with the chain specific implementation.
- UserOperation signed transaction (JSON representation) now has the sender: Address field normalized with EIP55 checksum.
- Removed Ethereum::RLP::decode functionality as it's not used in C++.
- Ethereum and all EVM-compatible chains no longer support TWTransactionCompilerBuildInput.
Deprecated
- TWEthereumAbiFunction and all methods.
- TWEthereumAbiEncode. Consider using TWEthereumAbiEncodeFunction through Protobuf interface instead.
- TWEthereumAbiDecodeOutput. Consider using TWEthereumAbiDecodeParams through Protobuf interface instead.
- TWEthereumAbiDecodeCall. Consider using TWEthereumAbiDecodeContractCall through Protobuf interface instead.
- TWEthereumAbiValueDecodeValue, TWEthereumAbiValueDecodeArray and all TWEthereumAbiValueDecode*. Consider using TWEthereumAbiDecodeValue through Protobuf interface instead.
3.2.21 - 2023-09-29
What's Changed
- [ZenEON]: Add support for ZenEON EVM-compatible chain by @ satoshiotomakan in #3418
- Fix typos by @ omahs in #3438
- [BSC]: Thorswap BSC support by @ Milerius in #3429
New Contributors
- @ omahs made their first contribution in #3438
Full Changelog: 3.2.20...3.2.21
3.2.20 - 2023-09-06
What's Changed
- Fix Metis Coin type by @ vcoolish in #3395
- [Mantle]: Add Mantle EVM-compatible chain by @ satoshiotomakan in #3417
Full Changelog: 3.2.19...3.2.20
3.2.19 - 2023-09-06
3.2.18 - 2023-09-01
3.2.17 - 2023-08-31
3.2.16 - 2023-08-30
3.2.15 - 2023-08-29
3.2.14 - 2023-08-28
3.2.13 - 2023-08-21
3.2.12 - 2023-08-15
3.2.11 - 2023-08-11
3.2.10 - 2023-08-08
3.2.9 - 2023-08-02
3.2.8 - 2023-08-01
3.2.7 - 2023-07-28
3.2.6 - 2023-07-21
3.2.5 - 2023-07-07
3.2.4 - 2023-07-07
3.2.3 - 2023-06-30
3.2.2 - 2023-06-27
3.2.1 - 2023-06-26
3.2.0 - 2023-06-21
3.1.39 - 2023-06-16
3.1.38 - 2023-06-09
3.1.37 - 2023-06-02
3.1.36 - 2023-05-26
3.1.35 - 2023-05-19
3.1.34 - 2023-05-12
3.1.33 - 2023-05-11
3.1.32 - 2023-05-11
3.1.31 - 2023-05-03
3.1.30 - 2023-05-02
3.1.29 - 2023-04-25
3.1.28 - 2023-04-21
3.1.27 - 2023-04-17
3.1.26 - 2023-04-16
3.1.25 - 2023-04-14
3.1.24 - 2023-04-07
3.1.23 - 2023-03-31
3.1.22 - 2023-03-29
3.1.21 - 2023-03-27
3.1.20 - 2023-03-17
3.1.19 - 2023-03-03
3.1.18 - 2023-02-24
3.1.17 - 2023-02-24
3.1.16 - 2023-02-17
3.1.15 - 2023-02-15
3.1.14 - 2023-02-10
3.1.13 - 2023-02-10
3.1.12 - 2023-02-07
3.1.11 - 2023-02-03
3.1.10 - 2023-01-27
3.1.9 - 2023-01-19
3.1.8 - 2023-01-11
3.1.7 - 2022-12-16
3.1.6 - 2022-12-09
3.1.5 - 2022-11-29
3.1.4 - 2022-11-25
3.1.3 - 2022-11-22
3.1.1 - 2022-11-21
3.1.0 - 2022-11-14
3.0.9 - 2022-11-04
3.0.8 - 2022-10-19
3.0.7 - 2022-10-13
3.0.6 - 2022-10-10
3.0.5 - 2022-10-03
3.0.4 - 2022-09-20
3.0.3 - 2022-09-15
3.0.2 - 2022-09-01
3.0.1 - 2022-08-04

from @trustwallet/wallet-core GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade @trustwallet/wallet-core from 3.0.1 to 3.3.2. See this package in npm: https://www.npmjs.com/package/@trustwallet/wallet-core See this project in Snyk: https://app.snyk.io/org/mhmoni25/project/154eae99-9dbc-40f8-8ee6-91d1e5aa9c9e?utm_source=github&utm_medium=referral&page=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[Snyk] Upgrade @trustwallet/wallet-core from 3.0.1 to 3.3.2 #79

[Snyk] Upgrade @trustwallet/wallet-core from 3.0.1 to 3.3.2 #79

Uh oh!

Mhmonicox commented Nov 3, 2023

What's Changed

New Contributors

What's Changed

Progress

Breaking changes

Deprecated

What's Changed

Progress

Breaking changes

Deprecated

What's Changed

New Contributors

What's Changed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

[Snyk] Upgrade @trustwallet/wallet-core from 3.0.1 to 3.3.2 #79

Are you sure you want to change the base?

[Snyk] Upgrade @trustwallet/wallet-core from 3.0.1 to 3.3.2 #79

Uh oh!

Conversation

Mhmonicox commented Nov 3, 2023

Snyk has created this PR to upgrade @trustwallet/wallet-core from 3.0.1 to 3.3.2.

What's Changed

New Contributors

What's Changed

Progress

Breaking changes

Deprecated

What's Changed

Progress

Breaking changes

Deprecated

What's Changed

New Contributors

What's Changed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants