v2.2.20

What's Changed

• Update dependencies to address CVE-2023-45857 by @bestbeforetoday in #689

Supported Node versions

The updated dependency to address CVE-2023-45857 is used only by the CouchDB wallet implementation, and requires Node 14 or later. Therefore Node 10 and 12 are no longer supported by the fabric-network package. If you need to continue running on one of these unsupported Node versions, you should continue to use fabric-network@2.2.19.

Full Changelog: v2.2.19...v2.2.20

v2.2.19

What's Changed

• Explicitly import long to address changes to typing in dependencies by @bestbeforetoday in #682
• Use require to import long to improve compatibility with client application TypeScript configuration by @bestbeforetoday in #683
• Regenerate fabric-protos using current protobufjs to address typing issues introduced by new versions of dependencies by @bestbeforetoday in #684

Full Changelog: v2.2.18...v2.2.19

v2.2.18

What's Changed

• Correctly clean up network connections after use in CA client by @rajat-dlt in #674

New Contributors

• @rajat-dlt made their first contribution in #674

Full Changelog: v2.2.17...v2.2.18

v2.2.17

What's Changed

• Add support for getting CA server information by @redegade in #510
• Close Client in Gateway disconnect by @davidkhala in #287
• Include timestamp in transaction events by @sapthasurendran in #490

Full Changelog: v2.2.16...v2.2.17

v2.2.16

What's Changed

• Downgrade nano dependency (used only for CouchDB wallets) to maintain compatibility with Node 10 and 12 by @bestbeforetoday in #624
• Add support for Node 18 LTS by @bestbeforetoday in #625

Full Changelog: v2.2.15...v2.2.16

v2.2.15

This is a maintenance release containing the following changes:

• Update dependencies to address a gRPC bug that could cause pings to be sent on destroyed HTTP sessions, resulting in an ERR_HTTP2_INVALID_SESSION error.

Full Changelog: v2.2.14...v2.2.15

v2.2.14

This is a maintenance release containing the following changes:

• Dependency updates to address security vulnerability CVE-2022-25898.
• Resolve an issue that could cause partial discovery results to be obtained under high load, and subsequent transaction failures.
• Resolve an issue that could cause an unhandled promise rejection with exceptionally short commit timeouts.

Full Changelog: v2.2.13...v2.2.14

v2.2.13

This is a maintenance release containing dependency updates to address security vulnerability CVE-2021-43138.

Full Changelog: v2.2.12...v2.2.13

v2.2.12

This is a maintenance release containing big fixes and the following enhancements:

• Numeric and boolean configuration properties can be set using environment variables.
• Support for Node 16 LTS.
• Looser Node version requirements.

Full Changelog: v2.2.11...v2.2.12

v1.4.20

Changes

This is a maintenance release containing the following enhancements:

• Support for Node 14 and 16.
• Loosened Node engines requirements to versions >=10.13.0.
• Add configurable eventHandlerOptions.endorseTimeout property to the Gateway connect options.

Security fixes

The following security vulnerability is addressed:

• CVE-2022-21803

New Contributors

• @takayuki-nagai made their first contribution in #565