Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 29, 2025

Bumps @hashgraph/sdk from 2.69.0 to 2.73.2.

Release notes

Sourced from @​hashgraph/sdk's releases.

v2.73.2

What's Changed

This release introduces improvements to how mirror network URLs are handled across the SDK. Specifically, it ensures that custom ports and schemes defined in client.mirrorNetwork are respected, and removes duplication of URL parsing logic. This change enhances compatibility with custom and non-standard network setups.

Enhancements

  • Introduced a new Client.mirrorRestApiBaseUrl getter that exposes the full Mirror Node REST API base URL, including scheme and port.
  • Updated AccountId.populateAccountEvmAddress and AccountId.populateAccountNum to use mirrorRestApiBaseUrl for constructing request URLs, removing string slicing logic.

Bug Fixes

  • Fixed an issue in MirrorNodeContractQuery where the port was incorrectly overridden to 8545 when connecting to custom networks.

Full Changelog: hiero-ledger/hiero-sdk-js@v2.73.1...v2.73.2

v2.73.1

What's Changed

Full Changelog: hiero-ledger/hiero-sdk-js@v2.73.0...v2.73.1

v2.73.1-beta.1

What's Changed

Full Changelog: hiero-ledger/hiero-sdk-js@v2.72.0...v2.73.1-beta.1

v2.72.0

This release introduces important improvements to transaction validation and fee flexibility in the Hiero SDK. These changes enhance both security and usability for developers working with smart contracts and scheduled transactions.

Enhancements

... (truncated)

Changelog

Sourced from @​hashgraph/sdk's changelog.

v2.73.2

Added

  • Introduced Client.mirrorRestApiBaseUrl getter to provide the full Mirror Node REST API base URL, including scheme and port. #3376

Changed

  • Updated AccountId.populateAccountEvmAddress, AccountId.populateAccountNum MirrorNodeContractQuery to construct URLs using mirrorRestApiBaseUrl instead of manually parsing strings. #3376

Fixed

  • Resolved an issue in MirrorNodeContractQuery where the port was incorrectly overridden to 8545 for custom network configurations. #3376

v2.73.1

Added

  • Added negative NodeId check in the NodeUpdateTransaction and NodeDeleteTransaction
  • Updated NodeDeleteTransaction and NodeUpdateTransaction to transform the input always to Long

Changed

  • Pin all dependency versions in the SDK package/proto package/cryptography

v2.72.0

Added

  • Validation for negative gas in ContractExecuteTransaction, ensuring safer transaction execution. #3317
  • Support for CustomFee in scheduled transaction body, enabling more flexible fee structures in scheduled transactions. #3254

v2.71.0

Added

  • Async client initialization support for WebClient to allow fetching the latest address book during setup:

    • WebClient.forMainnetAsync()
    • WebClient.forTestnetAsync()
    • WebClient.forPreviewnetAsync()
    • WebClient.forNameAsync(name) #3274

    These methods default to performing an address book update unless scheduleNetworkUpdate is explicitly set to false, improving client reliability.

  • Async client initialization for NativeClient (intended for React Native / Expo users), allowing automatic address book updates at instantiation time. #3285

    • NativeClient.forMainnetAsync()
    • NativeClient.forTestnetAsync()
    • NativeClient.forPreviewnetAsync()
    • NativeClient.forNameAsync(networkName)

    These methods fetch the latest address book unless scheduleNetworkUpdate is explicitly set to false.

  • Support for HIP-1046 (HIP Link): Enabled in native environments to expand protocol capabilities. #3283

  • Implemented permanentRemoval in ContractDeleteTransaction, enabling permanent contract deletion behavior. #3304

  • Added ability to remove auto-renew account in ContractUpdateTransaction by setting it to 0.0.0.

  • Added validation in ContractCreateTransaction to reject gas values less than 0.

  • Added validations in hex.js to reject invalid hex string decoding. #3299

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@hashgraph/sdk](https://github.com/hiero-ledger/hiero-sdk-js) from 2.69.0 to 2.73.2.
- [Release notes](https://github.com/hiero-ledger/hiero-sdk-js/releases)
- [Changelog](https://github.com/hiero-ledger/hiero-sdk-js/blob/main/CHANGELOG.md)
- [Commits](hiero-ledger/hiero-sdk-js@v2.69.0...v2.73.2)

---
updated-dependencies:
- dependency-name: "@hashgraph/sdk"
  dependency-version: 2.73.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 29, 2025
@dependabot dependabot bot requested review from a team as code owners September 29, 2025 22:55
@dependabot dependabot bot requested a review from natanasow September 29, 2025 22:55
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 29, 2025
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 6, 2025

Superseded by #4451.

@dependabot dependabot bot closed this Oct 6, 2025
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/tools/hedera-crosschain-bridge/hashgraph/sdk-2.73.2 branch October 6, 2025 19:49
Copy link

codecov bot commented Oct 6, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.

❌ Your project status has failed because the head coverage (69.11%) is below the target coverage (80.00%). You can increase the head coverage or adjust the target coverage.

❗ There is a different number of reports uploaded between BASE (9f9c6d9) and HEAD (f918d9c). Click for more details.

HEAD has 20 uploads less than BASE
Flag BASE (9f9c6d9) HEAD (f918d9c)
config-service 1 0
relay 1 0
server 1 0
ws-server 1 0
17 1
@@             Coverage Diff             @@
##             main    #4427       +/-   ##
===========================================
- Coverage   95.97%   69.11%   -26.87%     
===========================================
  Files         121      121               
  Lines       19949    19949               
  Branches     1751      520     -1231     
===========================================
- Hits        19146    13787     -5359     
- Misses        778     6152     +5374     
+ Partials       25       10       -15     
Flag Coverage Δ
config-service ?
relay ?
server ?
ws-server ?

Flags with carried forward coverage won't be shown. Click here to find out more.
see 70 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants