Filecoin to substrate bridge

ChainSafe

Last update: Nov 23, 2022

Related tags

Cryptography filecoindot

Overview

filecoindot

A Substrate pallet to bridge from Filecoin to any blockchain built using the Substrate framework, including Polkadot parachains.

How to integrate the Filecoin bridge pallet into a runtime?

TODO

See the example runtime for a full example showing how to integrate the pallet into a substrate runtime.

ChainSafe Security Policy

Reporting a Security Bug

We take all security issues seriously, if you believe you have found a security issue within a ChainSafe project please notify us immediately. If an issue is confirmed, we will take all necessary precautions to ensure a statement and patch release is made in a timely manner.

Please email us a description of the flaw and any related information (e.g. reproduction steps, version) to security at chainsafe dot io.

Comments

Nft generation
creates the buckets in ChainSafe storage for collection metadata, nft metadata, nft content

creates a NFT collection with Alice's key in case it's not been done before

allows to upload an image and create an NFT out of it. It's part of the collection that was created before

the CID of the content is visible and clickable for each NFT

(not visible in the video) I now show in the UI the block where the NFT got minted in case you want to check in the pjs/apps explorer.

I've put my Storage api key here, I'll revoke it in a couple months I guess.

It's recommended to add Alice's account in your Polkadot.js extension to ease things. Just add an account with the following mnemonic (and its derivation, just like that):

bottom drive obey lake curtain smoke basket hold race lonely fit walk//Alice

https://user-images.githubusercontent.com/33178835/150577525-a0698193-c827-44bb-886d-952c90385b96.mp4
opened by Tbaut 3
UI for proof test with cid
This is a simple UI with relatively helpful messages if:

the api can't connect to the node, e.g the node isn't started

the user doesn't have the polkadot extension installed, or if they have no account

if the node throws error at the proof verification, we display them (see demo below)

For now the wallet account is useless since there is nothing that needs to be signed.

https://user-images.githubusercontent.com/33178835/148461351-d7a1e1c0-9016-4f29-90ea-812ce9bd8274.mp4
Status: Approved
opened by Tbaut 3
Ensure vote transaction triggered in e2e tests
Issue summary

in case of the test in this issue is hard to debug ( http requests have problem in production rn ), the implementation of #97 only tested the add_relayer transaction, need a follow up on this problem.

Other information and links
opened by clearloop 3
Adds module for handling the http request of Filecoin RPC
Issue summary

[x] module with http client

[x] declare the data structure of Filecoin RPC

[x] parse the data structure of http response

[ ] Timeout logic ensures that slow or unresponsive RPC endpoints will not cause workers to queue up faster than they are terminated

Other information and links
opened by clearloop 3
Step 5 - NFT Transfer, Test and Display page

The user reach to a the page where they can carry out several actions.

5.1. list all the existing NFT associated to that address 5.2 enter another polkadot address and transfer the NFT. No need to capture errors. 5.3 test another CID >> cf #148

opened by Redoudou 2
refactor(types)!: move the field 'voted' from BlockSubmissionProposal struct into a new storage map
called BlockProposalVotes.

Changes

A new storage double map called BlockProposalVotes is created to store an entry of (BlockNumber, AccountId, ()) this tracks the list accounts which voted for a particular submitted Block proposal

the logic code from vote method in BlockSubmissionProposal shifted into filecoindot pallet's method vote_block_proposal.

A new method set_status is added to BlockSubmissionProposal to allow changes to it's status being called from the pallet's runtime.

The visibility of is_expired method from BlockSubmissionProposal is now pub to allow calling it from the pallet's runtime.

Tests

- cargo test --release

Issues

Issue #73
opened by ivanceras 2

Use rpc call to set keypair to the node

Issue summary

here's the steps setting the signer to filecoindot

generate a new substrate keypair for offchain worker

$ subkey generate
  Secret seed:      0x7807452ba1e8efb0aef1acf30e18e793fa98062c7f40240c44ca1b634a02b3e7
  Public key (hex): 0x90ce9ffe44c70e6118679829bae5548dcb1767b38bcc415b1dafa6588ddb1b5f
  Account ID:       0x90ce9ffe44c70e6118679829bae5548dcb1767b38bcc415b1dafa6588ddb1b5f
  SS58 Address:     5FLa8femo9wavDCdUUGuLQbYLGxGyG9RQ6dS43FQTg2x9gxB

set key to the keystore of filecoindot node with rpc call author_insertkey

$ curl -X POST -vk 'http://localhost:9933' -H "Content-Type:application/json;charset=utf-8" \
  -d '{
    "jsonrpc":2.0,
    "id":1,
    "method":"author_insertKey",
    "params": [
      "fdot",
      "0x7807452ba1e8efb0aef1acf30e18e793fa98062c7f40240c44ca1b634a02b3e7",
      "0x90ce9ffe44c70e6118679829bae5548dcb1767b38bcc415b1dafa6588ddb1b5f"
    ]
  }'

use Signer to find the key we just set in ocw

let  signer: Signer = Signer::<T, T::AuthorityId>::all_accounts();

// sign txs

Other information and links

opened by clearloop 2

Make filecoindot-ocw a substrate pallet
Issue summary

refter to https://github.com/jimmychu0807/substrate-offchain-worker-demo/commits/master, make the ocw a stand alone pallet for flexible configuration

Other information and links
opened by clearloop 2
chore(deps): bump jsonrpc-core from 15.1.0 to 18.0.0
Bumps jsonrpc-core from 15.1.0 to 18.0.0.

Release notes

Sourced from jsonrpc-core's releases.

v17.1.0

IPC bugfixes (#610, #613)

Erroring when unsubscribing from invalid subscription ids (#619)

Allow using future-util dependency (#609)

JSON-RPC v17.0.0

tokio-0.2 migration

JSON-RPC v16.0.0

Initial async/await support

Commits

dc6b8ed Bump versions to v18 (#629)

ab30170 Update to parity-ws 0.11 (#630)

68511bc Add clippy to CI and fix several clippy warnings (#625)

ac72c85 Update to Tokio 1.0 (#628)

609d7a6 Bump minor version. (#624)

014b1ec Return error when unsubscribing from invalid subscription id (#619)

135d929 Fix link to documentation (#620)

9c8110d core: Allow for using only futures-util dependency (#609)

9d4b261 Bump bugfix release of IPC. (#613)

5d6ba66 fix typo in select_with_weak future (#610)

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies
opened by dependabot[bot] 2
chore(deps): bump reqwest from 0.11.5 to 0.11.6
Bumps reqwest from 0.11.5 to 0.11.6.

Changelog

Sourced from reqwest's changelog.

v0.11.6

(wasm) Fix request bodies more.

Commits

59bc9a9 v0.11.6

1365698 Update cookie_store dependency (#1268)

bd4e0c6 fmt: wasm body (#1359)

d35c311 Update async body doc (#1357)

bb3d102 wasm: don't send request body as plain uint8 array (#1358)

fead177 Fix body to JsValue conversion (#1354)

c9217d8 fix: wasm client: pass response header to builder by reference (#1350)

597833d docs/comments: fix some typos (#1346)

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies
opened by dependabot[bot] 2
chore(deps): bump thiserror from 1.0.29 to 1.0.30
Bumps thiserror from 1.0.29 to 1.0.30.

Release notes

Sourced from thiserror's releases.

1.0.30

Make #[source] attribute usable on a field of type Box<dyn Error + Send + Sync + UnwindSafe + 'static> (#155, thanks @cosmicexplorer)

Commits

672e952 Release 1.0.30

5c62f5e Merge pull request #155 from cosmicexplorer/derive-unwindsafe

2fd08cc add UnwindSafe impl for AsDynError

00956f1 Ui test changes for trybuild 1.0.49

035abbd Add actions job to notice outdated dependencies

f072c62 Update ui test files

791a98e Update ui test suite to nightly-2021-10-07

ed234d4 Declare minimum Rust version in Cargo metadata

bda41eb Skip clippy job on pull requests

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies
opened by dependabot[bot] 2
chore(deps): bump serde_json from 1.0.78 to 1.0.91
Bumps serde_json from 1.0.78 to 1.0.91.

Release notes

Sourced from serde_json's releases.

v1.0.90

Documentation improvements

v1.0.89

Fix invalid JSON incorrectly accepted when a large number has no digits after decimal point (#953)

v1.0.88

Optimize serde_json::Map's implementation of append and clone_from (#952, thanks @Lucretiel)

v1.0.87

Add write_i128 and write_u128 methods to serde_json::Formatter to control the formatting of 128-bit integers (#940, thanks @Lucretiel)

v1.0.86

Support arbitrary_precision feature even in no-std mode (#928, thanks @kvinwang)

v1.0.85

Make Display for Number produce the same representation as serializing (#919)

v1.0.84

Make Debug impl of serde_json::Value more compact (#918)

v1.0.83

Add categories to crates.io metadata

v1.0.82

Implement From<Option<T>> for serde_json::Value where T: Into<Value> (#900, thanks @kvnvelasco)

v1.0.81

Work around indexmap/autocfg not always properly detecting whether a std sysroot crate is available (#885, thanks @cuviper)

v1.0.80

Documentation improvements

v1.0.79

Allow RawValue deserialization to propagate \u escapes for unmatched surrogates, which can later by deserialized to Vec<u8> (#830, thanks @lucacasonato)

Commits

26f147f Release 1.0.91

d9cdb98 Opt out -Zrustdoc-scrape-examples on docs.rs

331511d Release 1.0.90

8753829 Replace ancient CI service provider in readme

0a43394 Update build status badge

8794844 Prevent build.rs rerunning unnecessarily on all source changes

0b54871 Time out workflows after 45 minutes

ecad462 Fix renamed let_underscore_drop lint

9295c96 Resolve needless_borrowed_reference clippy lints

d2f9368 Release 1.0.89

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies rust
opened by dependabot[bot] 0
chore(deps): bump express from 4.17.2 to 4.18.2
Bumps express from 4.17.2 to 4.18.2.

Release notes

Sourced from express's releases.

4.18.2

Fix regression routing a large stack in a single route

deps: [email protected]

deps: [email protected]

perf: remove unnecessary object clone

deps: [email protected]

4.18.1

Fix hanging on large stack of sync routes

4.18.0

Add "root" option to res.download

Allow options without filename in res.download

Deprecate string and non-integer arguments to res.status

Fix behavior of null/undefined as maxAge in res.cookie

Fix handling very large stacks of sync middleware

Ignore Object.prototype values in settings through app.set/app.get

Invoke default with same arguments as types in res.format

Support proper 205 responses using res.send

Use http-errors for res.format error

deps: [email protected]

Fix error message for json parse whitespace in strict

Fix internal error when inflated body exceeds limit

Prevent loss of async hooks context

Prevent hanging when request already read

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

Add priority option

Fix expires option to reject invalid dates

deps: [email protected]

Replace internal eval usage with Function constructor

Use instance methods on process to check for listeners

deps: [email protected]

Remove set content headers that break response

deps: [email protected]

deps: [email protected]

deps: [email protected]

Prevent loss of async hooks context

deps: [email protected]

deps: [email protected]

Fix emitted 416 error missing headers property

Limit the headers removed for 304 response

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

... (truncated)

Changelog

Sourced from express's changelog.

4.18.2 / 2022-10-08

Fix regression routing a large stack in a single route

deps: [email protected]

deps: [email protected]

perf: remove unnecessary object clone

deps: [email protected]

4.18.1 / 2022-04-29

Fix hanging on large stack of sync routes

4.18.0 / 2022-04-25

Add "root" option to res.download

Allow options without filename in res.download

Deprecate string and non-integer arguments to res.status

Fix behavior of null/undefined as maxAge in res.cookie

Fix handling very large stacks of sync middleware

Ignore Object.prototype values in settings through app.set/app.get

Invoke default with same arguments as types in res.format

Support proper 205 responses using res.send

Use http-errors for res.format error

deps: [email protected]

Fix error message for json parse whitespace in strict

Fix internal error when inflated body exceeds limit

Prevent loss of async hooks context

Prevent hanging when request already read

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

Add priority option

Fix expires option to reject invalid dates

deps: [email protected]

Replace internal eval usage with Function constructor

Use instance methods on process to check for listeners

deps: [email protected]

Remove set content headers that break response

deps: [email protected]

deps: [email protected]

deps: [email protected]

Prevent loss of async hooks context

deps: [email protected]

deps: [email protected]

... (truncated)

Commits

8368dc1 4.18.2

61f4049 docs: replace Freenode with Libera Chat

bb7907b build: [email protected]

f56ce73 build: [email protected]

24b3dc5 deps: [email protected]

689d175 deps: [email protected]

340be0f build: [email protected]

33e8dc3 docs: use Node.js name style

644f646 build: [email protected]

ecd7572 build: [email protected]

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies javascript
opened by dependabot[bot] 0
chore(deps): bump scale-info from 1.0.0 to 2.3.1
Bumps scale-info from 1.0.0 to 2.3.1.

Release notes

Sourced from scale-info's releases.

v2.3.1

Fixed

Change NonZero* TypeInfo implementation to not be recursive [(#171)](paritytech/scale-info#171)

v2.3.0

Added

Implement the missing pieces for constructing PortableRegistry dynamically at runtime. This allows languages where static rust types are not available to use it. #164

Updated the MSRV to 1.60 #169

v2.1.2

What's Changed

Strip invisible delimiters from type name by @ascjones in paritytech/scale-info#156

v2.1.1

Fixed

Restore leading :: for crate access [(#152)](paritytech/scale-info#152)

v2.1.0

Added

Add ability to reexport crate [(#145)](paritytech/scale-info#145)

Fixed

Allow raw identifiers e.g. r#mod [(#149)](paritytech/scale-info#149)

v2.0.0

Changed

Upgraded to parity-scale-codec 3.0 (#140)

Upgraded to bitvec 1.0 (#137)

Minimum Rust version is 1.56.1 for edition 2021 (#132)

Changelog

Sourced from scale-info's changelog.

[2.3.1] - 2022-12-09

Fixed

Change NonZero* TypeInfo implementation to not be recursive [(#171)](paritytech/scale-info#171)

[2.3.0] - 2022-10-27

Implement the missing pieces for constructing PortableRegistry dynamically at runtime. This allows languages where static rust types are not available to use it.

[2.2.0] - 2022-09-14

The minimum Rust version is bumped to 1.60.0 in this release owing to using weak dependency crate features. Otherwise there are no breaking changes.

Changed

Loosen restriction on TypeDefBitSequence::new() so that bitvec isn't required, and try to avoid pulling in bitvec when the std feature is enabled [(#168)](paritytech/scale-info#168)

[2.1.2] - 2022-05-18

Fixed

Strip invisible delimiters from type name [(#156)](paritytech/scale-info#156)

[2.1.1] - 2022-04-11

Fixed

Restore leading :: for crate access [(#152)](paritytech/scale-info#152)

[2.1.0] - 2022-04-11

Added

Add ability to reexport crate [(#145)](paritytech/scale-info#145)

Fixed

Allow raw identifiers e.g. r#mod [(#149)](paritytech/scale-info#149)

[2.0.1] - 2022-02-24

Changed

Revert bitvec field order to maintain binary compatiblilty

[2.0.0] - 2022-02-07

Changed

Upgraded to parity-scale-codec 3.0

Upgraded to bitvec 1.0

Minimum Rust version is 1.56.1 for edition 2021

Commits

2721f93 Release v2.3.1 (#173)

6d9cb83 Change NonZero* TypeInfo implementation to not be recursive (#171)

ad90cb1 Release v2.3.0 (#170)

a69ac55 Construct PortableRegistry dynamically at runtime (#164)

b881bfb bump to 2.2.0 (#169)

429a388 Remove requirement on bitvec for std feature and constructing TypeDefBitSeque...

2fa4a67 Fix cliff hanger in documentation (#162)

40c3218 Fix clippy warnings (#159)

ec63aa8 newline created a stray space that looked odd. (#158)

e4de349 Strip invisible delimiters from type name (#156)

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies rust
opened by dependabot[bot] 0
chore(deps): bump decode-uri-component from 0.2.0 to 0.2.2
Bumps decode-uri-component from 0.2.0 to 0.2.2.

Release notes

Sourced from decode-uri-component's releases.

v0.2.2

Prevent overwriting previously decoded tokens 980e0bf

https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.1...v0.2.2

v0.2.1

Switch to GitHub workflows 76abc93

Fix issue where decode throws - fixes #6 746ca5d

Update license (#1) 486d7e2

Tidelift tasks a650457

Meta tweaks 66e1c28

https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.0...v0.2.1

Commits

a0eea46 0.2.2

980e0bf Prevent overwriting previously decoded tokens

3c8a373 0.2.1

76abc93 Switch to GitHub workflows

746ca5d Fix issue where decode throws - fixes #6

486d7e2 Update license (#1)

a650457 Tidelift tasks

66e1c28 Meta tweaks

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies javascript
opened by dependabot[bot] 0
chore(deps): bump loader-utils from 1.4.0 to 1.4.2
Bumps loader-utils from 1.4.0 to 1.4.2.

Release notes

Sourced from loader-utils's releases.

v1.4.2

1.4.2 (2022-11-11)

Bug Fixes

ReDoS problem (#226) (17cbf8f)

v1.4.1

1.4.1 (2022-11-07)

Bug Fixes

security problem (#220) (4504e34)

Changelog

Sourced from loader-utils's changelog.

1.4.2 (2022-11-11)

Bug Fixes

ReDoS problem (#226) (17cbf8f)

1.4.1 (2022-11-07)

Bug Fixes

security problem (#220) (4504e34)

Commits

331ad50 chore(release): 1.4.2

17cbf8f fix: ReDoS problem (#226)

8f082b3 chore(release): 1.4.1

4504e34 fix: security problem (#220)

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies javascript
opened by dependabot[bot] 0
chore(deps): bump futures from 0.3.19 to 0.3.25
Bumps futures from 0.3.19 to 0.3.25.

Release notes

Sourced from futures's releases.

0.3.25

Fix soundness issue in join! and try_join! macros (#2649)

Implement Clone for sink::Drain (#2650)

0.3.24

Fix incorrect termination of select_with_strategy streams (#2635)

0.3.23

Work around MSRV increase due to a cargo bug.

0.3.22

Fix Sync impl of BiLockGuard (#2570)

Fix partial iteration in FuturesUnordered (#2574)

Fix false detection of inner panics in Shared (#2576)

Add Mutex::lock_owned and Mutex::try_lock_owned (#2571)

Add io::copy_buf_abortable (#2507)

Remove Unpin bound from TryStreamExt::into_async_read (#2599)

Make run_until_stalled handle self-waking futures (#2593)

Use FuturesOrdered in try_join_all (#2556)

Fix orderings in LocalPool waker (#2608)

Fix stream::Chunk adapters size hints (#2611)

Add push_front and push_back to FuturesOrdered (#2591)

Deprecate FuturesOrdered::push in favor of FuturesOrdered::push_back (#2591)

Performance improvements (#2583, #2626)

Documentation improvements (#2579, #2604, #2613)

0.3.21

Fix potential data race in FlattenUnordered that introduced in 0.3.20 (#2566)

0.3.20

Fix stacked borrows violations when -Zmiri-tag-raw-pointers is enabled. This raises MSRV of futures-task to 1.45. (#2548, #2550)

Change FuturesUnordered to respect yielding from future (#2551)

Add StreamExt::{flatten_unordered, flat_map_unordered} (#2083)

Changelog

Sourced from futures's changelog.

0.3.25 - 2022-10-20

Fix soundness issue in join! and try_join! macros (#2649)

Implement Clone for sink::Drain (#2650)

0.3.24 - 2022-08-29

Fix incorrect termination of select_with_strategy streams (#2635)

0.3.23 - 2022-08-14

Work around MSRV increase due to a cargo bug.

0.3.22 - 2022-08-14

Fix Sync impl of BiLockGuard (#2570)

Fix partial iteration in FuturesUnordered (#2574)

Fix false detection of inner panics in Shared (#2576)

Add Mutex::lock_owned and Mutex::try_lock_owned (#2571)

Add io::copy_buf_abortable (#2507)

Remove Unpin bound from TryStreamExt::into_async_read (#2599)

Make run_until_stalled handle self-waking futures (#2593)

Use FuturesOrdered in try_join_all (#2556)

Fix orderings in LocalPool waker (#2608)

Fix stream::Chunk adapters size hints (#2611)

Add push_front and push_back to FuturesOrdered (#2591)

Deprecate FuturesOrdered::push in favor of FuturesOrdered::push_back (#2591)

Performance improvements (#2583, #2626)

Documentation improvements (#2579, #2604, #2613)

0.3.21 - 2022-02-06

Fix potential data race in FlattenUnordered that introduced in 0.3.20 (#2566)

0.3.20 - 2022-02-06

NOTE: This release has been yanked due to a bug fixed in 0.3.21.

Fix stacked borrows violations when -Zmiri-tag-raw-pointers is enabled. This raises MSRV of futures-task to 1.45. (#2548, #2550)

Change FuturesUnordered to respect yielding from future (#2551)

Add StreamExt::{flatten_unordered, flat_map_unordered} (#2083)

Commits

77d8219 Release 0.3.25

44dc9ef Fix soundness hole in join macros (#2649)

521f2ae Implement Clone for Drain (#2650)

5364e6c Fix clippy::unnecessary_cast warning

485875f Ignore unreachable_pub lint

624a7ec Update no_atomic_cas.rs

8d2f385 Remove some double trait bounds (#2645)

0118f5c Fix CI (#2644)

174cb01 Release 0.3.24

ce6bee0 Update no_atomic_cas.rs

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies rust
opened by dependabot[bot] 0