Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 22, 2025

Bumps @hashgraph/sdk from 2.69.0 to 2.73.1.

Release notes

Sourced from @​hashgraph/sdk's releases.

v2.73.1

What's Changed

Full Changelog: hiero-ledger/hiero-sdk-js@v2.73.0...v2.73.1

v2.73.1-beta.1

What's Changed

Full Changelog: hiero-ledger/hiero-sdk-js@v2.72.0...v2.73.1-beta.1

v2.72.0

This release introduces important improvements to transaction validation and fee flexibility in the Hiero SDK. These changes enhance both security and usability for developers working with smart contracts and scheduled transactions.

Enhancements

  • Validation for Negative Gas: Added validation in ContractExecuteTransaction to prevent setting a negative gas value, ensuring safer transaction execution and reducing the risk of invalid or rejected transactions. #3317
  • Custom Fees in Scheduled Transactions: Added support for including CustomFee in scheduled transaction bodies, enabling more flexible and transparent fee structures when scheduling transactions. #3254

Full Changelog: hiero-ledger/hiero-sdk-js@v2.71.1...v2.72.0

v2.71.1

What's Changed

Full Changelog: hiero-ledger/hiero-sdk-js@v2.71.0...v2.71.1

... (truncated)

Changelog

Sourced from @​hashgraph/sdk's changelog.

v2.73.1

Added

  • Added negative NodeId check in the NodeUpdateTransaction and NodeDeleteTransaction
  • Updated NodeDeleteTransaction and NodeUpdateTransaction to transform the input always to Long

Changed

  • Pin all dependency versions in the SDK package/proto package/cryptography

v2.72.0

Added

  • Validation for negative gas in ContractExecuteTransaction, ensuring safer transaction execution. #3317
  • Support for CustomFee in scheduled transaction body, enabling more flexible fee structures in scheduled transactions. #3254

v2.71.0

Added

  • Async client initialization support for WebClient to allow fetching the latest address book during setup:

    • WebClient.forMainnetAsync()
    • WebClient.forTestnetAsync()
    • WebClient.forPreviewnetAsync()
    • WebClient.forNameAsync(name) #3274

    These methods default to performing an address book update unless scheduleNetworkUpdate is explicitly set to false, improving client reliability.

  • Async client initialization for NativeClient (intended for React Native / Expo users), allowing automatic address book updates at instantiation time. #3285

    • NativeClient.forMainnetAsync()
    • NativeClient.forTestnetAsync()
    • NativeClient.forPreviewnetAsync()
    • NativeClient.forNameAsync(networkName)

    These methods fetch the latest address book unless scheduleNetworkUpdate is explicitly set to false.

  • Support for HIP-1046 (HIP Link): Enabled in native environments to expand protocol capabilities. #3283

  • Implemented permanentRemoval in ContractDeleteTransaction, enabling permanent contract deletion behavior. #3304

  • Added ability to remove auto-renew account in ContractUpdateTransaction by setting it to 0.0.0.

  • Added validation in ContractCreateTransaction to reject gas values less than 0.

  • Added validations in hex.js to reject invalid hex string decoding. #3299

Changed

  • Native clients (React Native / Expo) now attempt to retrieve node addresses from mirror nodes before falling back to hardcoded values in Web environments. #3283
  • Made setStakedAccountId and setStakedNodeId explicitly mutually exclusive. Setting one clears the other.
  • Made setTransferAccountId and setTransferContractId explicitly mutually exclusive. Setting one clears the other. #3299

Fixed

  • Fixed a bug where an error status triggered the error callback twice. #3280

v2.71.0-beta.0

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@hashgraph/sdk](https://github.com/hiero-ledger/hiero-sdk-js) from 2.69.0 to 2.73.1.
- [Release notes](https://github.com/hiero-ledger/hiero-sdk-js/releases)
- [Changelog](https://github.com/hiero-ledger/hiero-sdk-js/blob/main/CHANGELOG.md)
- [Commits](hiero-ledger/hiero-sdk-js@v2.69.0...v2.73.1)

---
updated-dependencies:
- dependency-name: "@hashgraph/sdk"
  dependency-version: 2.73.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 22, 2025
@dependabot dependabot bot requested review from a team as code owners September 22, 2025 19:46
@dependabot dependabot bot requested a review from quiet-node September 22, 2025 19:46
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 22, 2025
Copy link

codecov bot commented Sep 22, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.

❌ Your project check has failed because the head coverage (68.80%) is below the target coverage (80.00%). You can increase the head coverage or adjust the target coverage.

❗ There is a different number of reports uploaded between BASE (c5c5433) and HEAD (26784a0). Click for more details.

HEAD has 23 uploads less than BASE
Flag BASE (c5c5433) HEAD (26784a0)
config-service 1 0
relay 1 0
server 1 0
ws-server 1 0
20 1
@@             Coverage Diff             @@
##             main    #4403       +/-   ##
===========================================
- Coverage   96.10%   68.80%   -27.31%     
===========================================
  Files         121      121               
  Lines       19940    19940               
  Branches     1755      543     -1212     
===========================================
- Hits        19164    13719     -5445     
- Misses        751     6206     +5455     
+ Partials       25       15       -10     
Flag Coverage Δ
config-service ?
relay ?
server ?
ws-server ?

Flags with carried forward coverage won't be shown. Click here to find out more.
see 70 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants