Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

upstream update #3

Open
wants to merge 131 commits into
base: master
Choose a base branch
from
Open

upstream update #3

wants to merge 131 commits into from

Conversation

sambacha
Copy link

No description provided.

timbeiko and others added 9 commits September 8, 2020 10:26
…334)

It appears some web3providers (or stubs) insert the CORS response header, regardless of the existence of the ORIGIN header in the request - this in turn breaks CORS validation when EthSIgner is used.

To overcome this, Ethsigner now strips the access-control-allow-origin header from the proxied response.
Signed-off-by: Sally MacFarlane <[email protected]>
@freight-trust freight-trust deleted a comment from CLAassistant Oct 15, 2020
joshuafernandes and others added 20 commits October 22, 2020 15:45
Signed-off-by: Trent Mohay <[email protected]>
* round trip to get enclave lookup ID from besu is working
* call eth_sendRawPrivateTransaction once we have the enclave lookup id
* refactor updateNonce()

Signed-off-by: Sally MacFarlane <[email protected]>
* added changelog for 21.1

Signed-off-by: Sally MacFarlane <[email protected]>
* added GoQuorum private tx serializer which ignores chainId
* fix signature - don't pass chainId of zero but use null signature in that step

Signed-off-by: Sally MacFarlane <[email protected]>
* Updating CI and gradle build to upload to cloudsmith

Signed-off-by: Usman Saleem <[email protected]>
Signed-off-by: Usman Saleem <[email protected]>
* Resolve signers from cloudsmith
* Publish EthSigner module jars to cloudsmith as they are used by Besu AT.

Signed-off-by: Usman Saleem <[email protected]>
-- Upgrade besu metrics library
-- update license aliases in check-licenses
- version calculation is automated based on git commits and tags
* webclientoptions tryUseCompression property to true
* AT DSL Handle Json Error
* Enable support for compression for EthSigner clients
* add debug headers output
* set 100 continue automatically
usmansaleem and others added 30 commits February 28, 2023 11:46
Update owasp gradle plugin version
Add suppression for json-java
-- Update owasp plugin version
-- Update owasp suppression for org.json
-- Update owasp suppression for CVE-2020-8908
-- manual override of json-smart and nimbus-jost-kwt
Signed-off-by: Gabriel Fukushima <[email protected]>
* Update docker to latest LTS
* Add changelog
* Change hardcoded values
* Remove duplication from hardcoded values
* update grpc library

Signed-off-by: Gabriel Fukushima <[email protected]>

* add changelog

Signed-off-by: Gabriel Fukushima <[email protected]>

---------

Signed-off-by: Gabriel Fukushima <[email protected]>
* Fetch latest libc6 and libc-bin in docker image
* Removing libssl3 from docker image as latest libssl3 is part of base image
* Upgrading gradle wrapper to 7.6
* temporary suppression of CVE-2023-4586
* Upgrade Azure libraries to fix CVE-2023-36415
 -- suppress CVE for azure-identity 1.10.2 to 1.10.9 as it is only applicable on 1.10.1 and lower.
* Use Java 17.

 -- Update spotless plugin
 -- Fix javadoc
 -- Update circleci
 -- Update dockerfile

* Use Java 17 in trivy github action
* Update codeql analysis github workflow
* web3j 4.10.2
* okhttp logging-interceptor override
* changelog
* Add web3j in changelog
Java 17 enforces several javadoc comments warnings which results in EthSigner javadoc task to be failed (called during publish task). This PR updates javadoc task to not fail on reported javadoc comments warnings.
Update various vulnerabilities suppressions that are not relevant to EthSigner build.
Update readme to make it clear EthSigner is no longer supported

Signed-off-by: Jason Frame <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.