Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[CHIA-1259] Update chia-blockchain to 2.4.3 #200

Merged
merged 7 commits into from
Oct 18, 2024
Merged

Conversation

Quexington
Copy link
Contributor

@Quexington Quexington commented Sep 4, 2024

(ignore the branch name)

This repo is currently pinned to chia-blockchain 2.2.1. With the new influx of users, it would be good to update this to 2.4.3.

Copy link

socket-security bot commented Sep 4, 2024

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
pypi/[email protected] filesystem 0 133 kB tinchester
pypi/[email protected] environment, eval, filesystem, network, shell, unsafe 0 14.2 MB Andrew.Svetlov, fafhrd, webknjaz
pypi/[email protected] filesystem, network 0 71.8 kB amyreese
pypi/[email protected] environment, eval, filesystem, network, shell, unsafe +68 413 MB Thomas.Grainger, Zac-HD, agronholm, ...2 more
pypi/[email protected] environment, eval, filesystem, shell, unsafe 0 1.47 MB hynek
pypi/[email protected] environment, eval, filesystem 0 745 kB jaraco
pypi/[email protected] eval, filesystem, network 0 996 kB aws
pypi/[email protected] None 0 0 B
pypi/[email protected] filesystem 0 313 kB Lukasa
pypi/[email protected] environment, eval, filesystem, network, shell, unsafe 0 2.16 MB Armin.Rigo, alexgaynor, fijal, ...5 more
pypi/[email protected] eval 0 66.2 kB richardkiss
pypi/[email protected] filesystem, unsafe 0 18 MB chia-network
pypi/[email protected] None 0 8.74 MB chia-network
pypi/[email protected] None 0 5.93 kB richardkiss
pypi/[email protected] None 0 10.4 kB richardkiss
pypi/[email protected] environment, filesystem, shell, unsafe 0 31.7 MB chia-network
pypi/[email protected] environment, filesystem, shell, unsafe 0 5.51 MB chia-network
pypi/[email protected] environment, eval, filesystem, network, shell 0 923 kB
pypi/[email protected] environment, eval, filesystem, network, shell, unsafe 0 12 MB chia-network
pypi/[email protected] None 0 3.64 MB chia-network
pypi/[email protected] environment, eval, filesystem 0 89.8 kB chia-network
pypi/[email protected] None 0 63.9 kB chia-network
pypi/[email protected] environment, filesystem +2 84.8 kB borntyping
pypi/[email protected] environment, eval, filesystem, network, shell, unsafe 0 18.2 MB reaperhulk
pypi/[email protected] eval, filesystem, network, shell 0 366 kB paulc
pypi/[email protected] environment, eval, filesystem, network, shell, unsafe 0 1.78 MB rthalley
pypi/[email protected] environment, eval, shell 0 131 kB
pypi/[email protected] environment, eval, filesystem, network, shell 0 375 kB hpk, nicoddemus, ronny
pypi/[email protected] unsafe 0 85.8 kB benediktschmitt
pypi/[email protected] environment, eval, filesystem, shell 0 163 kB chia-network
pypi/[email protected] filesystem, network 0 1.1 MB kjd
pypi/[email protected] environment, filesystem, unsafe Transitive: eval, network, shell +243 823 MB barry, brettcannon, jaraco
pypi/[email protected] filesystem 0 141 kB barry, brettcannon, jaraco
pypi/[email protected] environment 0 30.2 kB jaraco
pypi/[email protected] environment, eval, filesystem, unsafe 0 921 kB
pypi/[email protected] environment, filesystem, shell 0 204 kB jaraco
pypi/[email protected] environment, unsafe 0 143 kB
pypi/[email protected] eval, filesystem, unsafe 0 588 kB bbayles, erikrose
pypi/[email protected] environment, shell, unsafe 0 685 kB Andrew.Svetlov, webknjaz
pypi/[email protected] environment, eval, filesystem, shell 0 2.4 MB brettcannon, dstufft, pf_moore, ...1 more
pypi/[email protected] environment, eval, filesystem, network, shell 0 7.79 MB acsbidoul, dstufft, pf_moore, ...3 more
pypi/[email protected] environment, shell 0 122 kB Julian, Ofekmeister, ronny
pypi/[email protected] environment, filesystem, network, shell 0 232 kB The_Compiler, flub, goodboy, ...3 more
pypi/[email protected] filesystem, shell 0 136 kB wolph
pypi/[email protected] environment, eval, filesystem, network, shell 0 1.79 MB jonathan.slenders
pypi/[email protected] environment, eval, filesystem, shell, unsafe 0 889 kB eliben
pypi/[email protected] environment, eval, filesystem, unsafe 0 9.93 MB samuelcolvin
pypi/[email protected] environment, eval, filesystem, shell, unsafe 0 1.08 MB dateutilbot, jarondl, pganssle, ...1 more
pypi/[email protected] environment, filesystem 0 116 kB enthought, itziakos
pypi/[email protected] environment, filesystem, network 0 784 kB aws
pypi/[email protected] environment, filesystem, network 0 370 kB heuer
pypi/[email protected] environment, eval, filesystem, network, shell, unsafe 0 6.89 MB abravalheri, dstufft, jaraco
pypi/[email protected] None 0 55.6 kB
pypi/[email protected] environment, eval, filesystem, network, shell, unsafe 0 53.3 MB CaselIT
pypi/[email protected] filesystem, shell, unsafe 0 1.95 MB neersighted
pypi/[email protected] environment, eval, filesystem, shell, unsafe 0 389 kB JelleZijlstra, guido, hauntsaninja, ...3 more
pypi/[email protected] eval Transitive: environment, shell, unsafe +3 627 kB ilevkivskyi
pypi/[email protected] environment, eval, filesystem, network, shell, unsafe 0 1.25 MB SethMichaelLarson, shazow
pypi/[email protected] environment, filesystem, shell, unsafe 0 544 kB T2, blag, danilo.bellini, ...2 more
pypi/[email protected] None 0 0 B
pypi/[email protected] None 0 0 B

🚮 Removed packages: pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected]

View full report↗︎

Copy link

socket-security bot commented Sep 4, 2024

👍 Dependency issues cleared. Learn more about Socket for GitHub ↗︎

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

Ignoring: pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected], pypi/[email protected]

View full report↗︎

Next steps

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/[email protected] or ignore all packages with @SocketSecurity ignore-all

@Quexington Quexington changed the title Update chia-blockchain to 2.4.3 [CHIA-1259] Update chia-blockchain to 2.4.3 Sep 4, 2024
@emlowe
Copy link
Contributor

emlowe commented Sep 12, 2024

@SocketSecurity ignore pypi/[email protected] pypi/[email protected] pypi/[email protected] pypi/[email protected] pypi/[email protected] pypi/[email protected] pypi/[email protected] pypi/[email protected]

@TheLastCicada TheLastCicada merged commit 3487b31 into develop Oct 18, 2024
31 checks passed
@TheLastCicada TheLastCicada deleted the quex.wtf_tests branch October 18, 2024 16:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants