Update dependency ethers to v5.8.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
ethers (source)	5.4.7 → 5.8.0

---

Release Notes

ethers-io/ethers.js (ethers)

v5.8.0: ethers/v5.8.0 (2025-02-25 19:15) [legacy version]

Compare Source

This is a security update for the legacy Ethers v5 branch, addressing two security fixes.

• A bug in elliptic, which does not affect ethers but triggers a critical security warning during nom audit [see: missing signature length check, missing check for leading bit, allow BER-encoded signatures, false negative verification, signing malformed input]
• A bug in ws which can be used as DoS vector when communicating with malicious WebSocket service providers, triggering a high security warning during nom audit [see: too many HTTP headers]

For those that wish to audit the specific changes in the the bundled version between v5.7 and v5.8, see this gist.

Changes

• Updated to latest elliptic library to fix audit warnings. (f8deaae)
• Added ENS to Sepolia. (0065547)
• Bump ws package version to address DoS security concern. (#​4791; f345816)
• Added modern networks, updated third-party backend URLs and added QuickNode. (#​3935, #​4010; f7c813d)

---

Embedding UMD with SRI:

<script type="text/javascript"
  integrity="sha384-KpyAXoFibPIUEi79EsnN1EtEWCCrOQ8MtGsa4IrVxeZo514PYarFXujnjyu0DzgC"
  crossorigin="anonymous"
  src="https://cdnjs.cloudflare.com/ajax/libs/ethers/5.8.0/ethers.umd.min.js">
</script>

v5.7.2: ethers/v5.7.2 (2022-10-19 04:19)

Compare Source

• Updated tests to use goerli instead of ropsten. (1392803, 706d3ca)
• Added new error strings Pocket returns. (9f990c5)
• Fixed Alchemy goerli URL. (#​3320, #​3323, #​3340, #​3358, #​3423; 74e3d98)
• Update testnets for third-party providers. (#​3320, #​3323, #​3340, #​3358, #​3423; 2a3a2e1)

---

Embedding UMD with SRI:

<script type="text/javascript"
        integrity="sha384-Htz1SE4Sl5aitpvFgr2j0sfsGUIuSXI6t8hEyrlQ93zflEF3a29bH2AvkUROUw7J"
        crossorigin="anonymous"
        src="https://cdn-cors.ethers.io/lib/ethers-5.7.2.umd.min.js">
</script>

v5.7.1: ethers/v5.7.1 (2022-09-13 21:28)

Compare Source

• Fixed message signing errors that clobbered critical Error properties. (#​3356; b14cb0f)
• Add support for all data URL formats. (#​3341; 4c86dc9)
• Added Sepolia network. (#​3325; d083522)

---

Embedding UMD with SRI:

<script type="text/javascript"
        integrity="sha384-RG8QV/8Pwe52alIcSWxFpA7GbD1/mIxUAQA5PeEDh5EnTyJiWhIvYfw5RYBIz8DQ"
        crossorigin="anonymous"
        src="https://cdn-cors.ethers.io/lib/ethers-5.7.1.umd.min.js">
</script>

v5.7.0: ethers/v5.7.0 (2022-08-18 16:17)

Compare Source

• Update PocketProvider to newer URL format. (#​2980; 10d07ca)
• Add new ENS normalization specification for wider UTF-8 support. (#​42, #​2376, #​2754; 14bf407, fce9aaa, f274104)
• Added ACTION_REJECTED error for UI-based Signers. (d9897e0)
• Include current baseFee in feeData for easier custom fee calculation. (8314236)
• Add restrictions for new UTF-8 specification ENS names. (#​42, #​2376, #​2754; e52fbfb)
• Expand the definition of a WebSocketLike. (#​2843; 00114d7)
• Expanded type for queryFitler to allow string. (#​2882; 60da870)
• Added finalized and safe blockTags. (#​3091; 549168c)
• Added arbitrum-goerli to Networks and AlchemyProvider. (#​3246; e72d13e)
• Add EIP-712 type exports. (#​221; 7ce41cd)
• Added optimism-goerli to AlchemyProvider. (#​3246; f1cb0d2)
• Updated EtherscanProvider for new CommunityResource API throttling. (6bd13c3)
• Fix old events from being emitted at the beginning of a filter. (#​3069, #​3094; ea2d245)
• Fixed Interface signautres missing strings as eventFragments. (#​3157; c004ae5)
• Fix bug in EIP1193Bridge forwarding to the wrong method. (#​3166; 17676e9)
• Use updated Web3 Secret Storage format for JSON wallets. (#​3075; 6f57e8b)
• Relaxed nameprep length requirement dropping RFC-5891 section 4.2.4. (#​3161; abdf2e3)
• Switch to hash.js for ripemd160 on node as it was removed from the default crypto provider in node 17. (#​3082; 450694e)
• Add optimism-kovan to EtherscanProvider. (#​3135; 4d3e586)
• Forward any blockTag along in the FallbackProvider during call. (#​3168; ab43e7d)
• Allow browser fetch option overrides. (#​3096; c309df8)

---

Embedding UMD with SRI:

<script type="text/javascript"
        integrity="sha384-EQi5ynMqKKWGuwfjllsutXzvDo0ubfkYMhKrz5WJJB7PUXnkSo5qxWSy80hu/Zh9"
        crossorigin="anonymous"
        src="https://cdn-cors.ethers.io/lib/ethers-5.7.0.umd.min.js">
</script>

v5.6.9: ethers/v5.6.9 (2022-06-17 14:44)

Compare Source

• Removed Ankr for Ropsten default provider; the merge seems to have broke it. (3790671)
• Fix NonceManager for increment 0 and provided nonce. (#​3062, #​3085; 0a28679)
• Fixed topic filters for numeric types with string values. (#​3013; 0078e02)

---

Embedding UMD with SRI:

<script type="text/javascript"
        integrity="sha384-qU3nvpskWirnJuSLmQWFfAFKbiN5+JKbAEEoTOcPYJu3s1xCe66b66sUER3x5wVF"
        crossorigin="anonymous"
        src="https://cdn-cors.ethers.io/lib/ethers-5.6.9.umd.min.js">
</script>

v5.6.8: ethers/v5.6.8 (2022-05-24 11:50)

Compare Source

• Update BN.js for hexstring bug fix. (#​3017; 30b716b, a27ef82)

---

Embedding UMD with SRI:

<script type="text/javascript"
        integrity="sha384-HylgU+iVrVfHivfdkJGhzBJmBxfXLECLZzB2HEiL6bU7GwQH+Xnf/lEDZpNbWs9C"
        crossorigin="anonymous"
        src="https://cdn-cors.ethers.io/lib/ethers-5.6.8.umd.min.js">
</script>

v5.6.7: ethers/v5.6.7 (2022-05-20 19:11)

Compare Source

• Add Skynet support. (#​2853, #​2866; 13dd42c)
• Fix WebWorker support in rollup files. (#​2976; d06aa26)
• Remove superfluous logging. (#​2995; ed7e6a5)
• Add matic and optimism support to default provider. (a301297)
• Use case-insensitive schemes for getDefaultProvider. (#​2320; 8b62aef)
• Pad position in JSON-RPC getStorageAt calls. (#​2982; d5815cc)

---

Embedding UMD with SRI:

<script type="text/javascript"
        integrity="sha384-YUSWh0CQ0Ck2wXgObj8tXJeOqe0QLhmeONEcw5N3OIBknCB4kZxHB5pHvhrLRSFB"
        crossorigin="anonymous"
        src="https://cdn-cors.ethers.io/lib/ethers-5.6.7.umd.min.js">
</script>

v5.6.6: ethers/v5.6.6 (2022-05-12 17:29)

Compare Source

• Ensure gas estimate errors are not call exceptions in disguise. (#​2954; 2c3dae0)
• Added optimism to EtherscanProvider. (#​2968; c6eebf9)
• Remove pedantic check for new keyword which broke some platforms for inheritance. (#​2860, #​2861; 32b7373)

---

Embedding UMD with SRI:

<script type="text/javascript"
        integrity="sha384-aYbelA/Ptk4xbBWv+CrZGR4bFtfdsUgXeWNCIKloTT769EAtwGS81FYbgbnbRP3r"
        crossorigin="anonymous"
        src="https://cdn-cors.ethers.io/lib/ethers-5.6.6.umd.min.js">
</script>

v5.6.5: ethers/v5.6.5 (2022-05-01 02:10)

Compare Source

• Added testnets for AnkrProvider. (#​2949, #​2950; d9f45b3)
• Better error coalescing for OpenEthereum nodes. (#​2846; bebd669)
• Enforce 32-byte private key length (2926). (7b299dd)
• Fixed decimal strings as value-type properties for JsonRpcSigner. (#​2948; 9bf17fa)

---

Embedding UMD with SRI:

<script type="text/javascript"
        integrity="sha384-HDtKXW/WGUPp3+NyVJAJ7Uocm4RHhHnupa1pgV6m+G8JSFlL5wCphMFvwkPhdaTo"
        crossorigin="anonymous"
        src="https://cdn-cors.ethers.io/lib/ethers-5.6.5.umd.min.js">
</script>

v5.6.4: ethers/v5.6.4 (2022-04-13 16:56)

Compare Source

• Support new OpenEthereum NONCE_EXPIRED string. (#​2845, #​2846; 0855d6e)

---

Embedding UMD with SRI:

<script type="text/javascript"
        integrity="sha384-Y3akzp1SirJeIbvoXIqJpwsCXex0qqH9sYkn3YBk5V+eFg6UjDOL3+SuzFDBoehq"
        crossorigin="anonymous"
        src="https://cdn-cors.ethers.io/lib/ethers-5.6.4.umd.min.js">
</script>

v5.6.3: ethers/v5.6.3 (2022-04-13 00:23)

Compare Source

• Mimic Hardhard error strings in CALL_EXCEPTION for popular matchers. (#​2849, #​2862; dab6ede)
• Fix pocket API key not being passed in for default provider. (#​2890; 056d7c8)

---

Embedding UMD with SRI:

<script type="text/javascript"
        integrity="sha384-FdKjh3/99hRuPi1kjKQCoVDxcqDyadFCzn+0eGRqlRDfCfu34dUIvARvD1GetdRk"
        crossorigin="anonymous"
        src="https://cdn-cors.ethers.io/lib/ethers-5.6.3.umd.min.js">
</script>

v5.6.2: ethers/v5.6.2 (2022-03-25 17:56)

Compare Source

• Fixed left-padding in arrayify. (#​2833; e192903)
• More robust JSON-RPC error handling for reverted executions. (#​2603; 9d9b14b)
• Added IPNS support for ENS contenthash. (e70f3fe)
• Added initial AnkrProvider (96de581)

---

Embedding UMD with SRI:

<script type="text/javascript"
        integrity="sha384-qs2vsqAFA8HemUN26W9rQk9FbPhRSx8Nom/DUpdKIyoiRhE5KX9hPgWhX5X4baBB"
        crossorigin="anonymous"
        src="https://cdn-cors.ethers.io/lib/ethers-5.6.2.umd.min.js">
</script>

v5.6.1: ethers/v5.6.1 (2022-03-16 01:25)

Compare Source

• Fix issue with CCIP Read using wrong sender. (#​2478; 5998fea, 905e98a)

---

Embedding UMD with SRI:

<script type="text/javascript"
        integrity="sha384-gpTMxPzzvJTTqvtQYTKNpUG2OF+R5E8zdloHZvHIh+fw0lwlsStx33A86eG4WKve"
        crossorigin="anonymous"
        src="https://cdn-cors.ethers.io/lib/ethers-5.6.1.umd.min.js">
</script>

v5.6.0: ethers/v5.6.0 (2022-03-09 14:57)

Compare Source

• Tweaked test case to re-order transaction after event listeners added. (fa4a290)
• Ignore errors when resolving ENS resolver properties. (d160bac)
• Enable CCIP Read for ENS resolvers. (#​2478; be518c3)
• Fix missing events on certain network conditions. (#​1798, #​1814, #​1830, #​2274, #​2652; f67a9a8, f46aa75)
• Added defaultProvider option to omit specific Providers. (bae215e)
• Add support for pending blocks. (#​2225; 54e6e57)
• Help URLs for errors. (#​2489; 38e825c, c562150)
• Added CCIP support to provider.call. (#​2478; ae23bb7)
• Adjust default maxPriorityFeePerGas to 1.5 gwei. (33a029e)
• Fix contracts when name resolution fails without any checks. (#​2737; c2a6a01)
• Preserve explicit chainId in JsonRpcProvider during transaction serialization. (#​2691; 6807a76)
• Fixed eth_chainId response for Eip1193Bridge. (#​2711; 5f26fd5)
• Remove spurious console.log from Interface. (#​2714; 4e8f004)
• Allow raw WebSocket to be passed into WebSocketProvider. (#​2562, #​2644; 9aac785)
• Added Cloudflare Worker support. (#​1886; 2d98b4f, 1651389)
• Add support for EIP-2098 compact signatures. (#​2246; f26074b)
• Add EIP-2544 Wildcard support. (#​2477, #​2582, #​2583; 83891f9)

---

Embedding UMD with SRI:

<script type="text/javascript"
        integrity="sha384-9yTnv56yzVfnTq5ivTdc/x0dgp+W1JPRborbGbrr8lAvXBP/W83A08rvYb2hIs6O"
        crossorigin="anonymous"
        src="https://cdn-cors.ethers.io/lib/ethers-5.6.0.umd.min.js">
</script>

v5.5.4: ethers/v5.5.4 (2022-01-24 16:45)

Compare Source

• Support invalid but popular IPFS URI format. (#​2271, #​2527, #​2590; 03545aa)

---

Embedding UMD with SRI:

<script type="text/javascript"
        integrity="sha384-Jk2KQmxNIrlZNY8bE1bEnOjnx9PkvpwWgH/MEBCK+gpks+KdtHLnr2RzmMseDrGh"
        crossorigin="anonymous"
        src="https://cdn-cors.ethers.io/lib/ethers-5.5.4.umd.min.js">
</script>

v5.5.3: ethers/v5.5.3 (2022-01-06 03:52)

Compare Source

• Fixed case-folding in schemes for ENS avatars. (#​2500; 3f5bc6d)
• Added Kintsugi network. (#​2434; ab13887)
• Fix browser random in WebWorkers. (#​2405; 4ba63ac)
• Add support for IPFS metadata imageUrl in getAvatar. (#​2426; 3d6a7ec)
• Do not swallow ENS not supported errors. (#​2387; 2f57c6a)

---

Embedding UMD with SRI:

<script type="text/javascript"
        integrity="sha384-9YjKsdXMXrDGpJr2BHBh4/Ho+T0N760c/6CNf9rTk8PVPu51rpSgiQONc8II24HF"
        crossorigin="anonymous"
        src="https://cdn-cors.ethers.io/lib/ethers-5.5.3.umd.min.js">
</script>

v5.5.2: ethers/v5.5.2 (2021-11-30 19:16)

Compare Source

• Fixed test case for getAvatar; url has moved (617714d)
• Added basic redirect support. (42784b8)
• Added arbitrum and optimism to networks and providers. (#​2335; 0844de4)
• Added support for data URLs for avatar metadata. (b8391b0)
• Fixed getAvatar for unconfigured ENS names. (1e1c93e)

---

Embedding UMD with SRI:

<script type="text/javascript"
        integrity="sha384-nSPKJoI2xuw1LI9bDU45beoc7mnZtae7zmXYuchecL92MMNqHsTzQAX/xSVP6YMV"
        crossorigin="anonymous"
        src="https://cdn-cors.ethers.io/lib/ethers-5.5.2.umd.min.js">
</script>

v5.5.1: ethers/v5.5.1 (2021-10-20 03:59)

Compare Source

• Fixed abstract Provider signature issue. (#​2190; 1bd9161)

---

Embedding UMD with SRI:

<script type="text/javascript"
        integrity="sha384-TOrQOibRJLhwxzAdxn9pLj7Kx8mTIBrNfq6jSOiHrB519TUbe3z/d79TTvE0Pv6d"
        crossorigin="anonymous"
        src="https://cdn-cors.ethers.io/lib/ethers-5.5.1.umd.min.js">
</script>

v5.5.0: ethers/v5.5.0 (2021-10-19 00:01)

Compare Source

• Added ENS avatar support to provider. (#​2185; ecce861)
• Fixed splitSignature logic for verifying EIP-2930 and EIP-1559 v. (#​2084; 3de1b81)
• Include events on ContractFactory deployment transactions. (#​1334; ab319f2)
• admin: fixed alias script. (#​1494; 8f3d71d)
• Better errors when non-string address or ENS name is passed into Contracts or provider methods. (#​1051; a5c6a46)
• Use personal_sign instead of eth_sign for message signing with JsonRpcSigner; added _legacySignMessage for legacy support. (#​1542, #​1840; 8947fd4)
• Removed extra wordlists from the dist files. (#​2058, #​2077; cb43a99)
• Fix issue when Solidity method collises with JavaScript prototype. (#​1432, #​2054, #​2120; 0a8be37)
• Add support for Cloudflare Workers. (#​1886; 6582ede)
• Added more information to some invalid argument errors. (#​1130; f3c6d81)
• Fix compile-time error in new TypeScript version. (bee76a4)
• Adding customData support to transactions to assist L2 chains. (#​1761; 68095a4)
• Added some explicit null results to previously implicit null results for ENS. (#​1850; 0e5419e)
• Added BigNumber _difficulty to Block results. (#​2001, #​2036; a48552a)
• Removed redundant call to normalizing blockTag (1838). (d5b41ce)
• Fixed isBytes check for invalid length or elements. (#​1964; 7a404fb)
• Fixed randomBytes not rejecting NaN as a length. (#​1977; f8adf82)
• Allow any Networkish for getDefaultProvider. (#​2031; cc250b2)
• Stop allowing commas in fixed numbers; left over from legacy comma support. (#​2083; 45f3675)
• Export FallbackProviderConfig. (#​2121; 48c9e0b)

---

Embedding UMD with SRI:

<script type="text/javascript"
        integrity="sha384-B0/+vAZvVIFYnN5Jy/sN0OJZd7ai9oCi69Xw8kjMkRDDHPoQpGMYOwcN+fp8OLSw"
        crossorigin="anonymous"
        src="https://cdn-cors.ethers.io/lib/ethers-5.5.0.umd.min.js">
</script>

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[damianczer]

ok