Skip to content

Release/v1.8.7 - #2083

Merged
Tanya-atatakai merged 9 commits into
mainfrom
release/v1.8.7
Jul 24, 2026
Merged

Release/v1.8.7#2083
Tanya-atatakai merged 9 commits into
mainfrom
release/v1.8.7

Conversation

@Tanya-atatakai

Copy link
Copy Markdown
Contributor

Proposed changes

Types of changes

What types of changes does your code introduce?
Put an x in the boxes that apply

  • Bugfix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)

atepem and others added 8 commits July 23, 2026 13:57
Plug in the deployed pearl-transactions subgraph URL for Base
(https://transactions-base.subgraph.autonolas.tech/), replacing the
undefined placeholder that surfaced the 'not available on this network
yet' state.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Clears three new high advisories against next <15.5.21:
GHSA-m99w-x7hq-7vfj (DoS in App Router Server Actions),
GHSA-89xv-2m56-2m9x (SSRF in Server Actions on custom servers),
GHSA-p9j2-gv94-2wf4 (SSRF in rewrites).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Base's transactions proxy pins subgraph v0.0.7, whose schema is
incompatible with the queries Pearl sends (FundsMovement.bondType
removed, bond rows moved to a separate bondMovements ledger, OLAS
sweeps pre-split into AGENT_OLAS_TO_MASTER, Service.id reshaped to
registry bytes with the numeric id in serviceId) — every request
failed GraphQL validation, so Base users saw the error state.

Adds a per-chain schema-revision map beside the subgraph URL map
(Base → v2; absent → v1), v2 query documents + Zod schemas verified
against the live Base deployment, and service-boundary normalization
back to the v1-shaped domain types (bond rows merged into
fundsMovements, sweep rows dropped, service.id mapped from serviceId).
Hooks and components are untouched and revision-agnostic; migrating
Gnosis/Optimism to v0.0.7 later is a one-line map flip.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
… gate)

Clears GHSA-6g55-p6wh-862q (arbitrary file read via attacker-controlled
sourceMappingURL), high, reachable via next>postcss.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
…tion-history

feat: [OPE-1840] enable transaction history on Base
@Tanya-atatakai
Tanya-atatakai merged commit 79ee377 into main Jul 24, 2026
18 checks passed
@Tanya-atatakai
Tanya-atatakai deleted the release/v1.8.7 branch July 24, 2026 09:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants