@agoric/swingset-liveslots - npm Package Compare versions

Comparing version 0.10.3-dev-8a52ddd.0 to 0.10.3-dev-8a7c1b2.0

package.json

 {
   "name": "@agoric/swingset-liveslots",
-  "version": "0.10.3-dev-8a52ddd.0+8a52ddd",
+  "version": "0.10.3-dev-8a7c1b2.0+8a7c1b2",
   "description": "SwingSet ocap support layer",
@@ -20,4 +20,4 @@ "type": "module",
   "dependencies": {
-    "@agoric/internal": "0.3.3-dev-8a52ddd.0+8a52ddd",
-    "@agoric/store": "0.9.3-dev-8a52ddd.0+8a52ddd",
+    "@agoric/internal": "0.3.3-dev-8a7c1b2.0+8a7c1b2",
+    "@agoric/store": "0.9.3-dev-8a7c1b2.0+8a7c1b2",
     "@endo/env-options": "^1.1.8",
@@ -36,3 +36,3 @@ "@endo/errors": "^1.2.8",
   "devDependencies": {
-    "@agoric/kmarshal": "0.1.1-dev-8a52ddd.0+8a52ddd",
+    "@agoric/kmarshal": "0.1.1-dev-8a7c1b2.0+8a7c1b2",
     "ava": "^5.3.0"
@@ -64,4 +64,3 @@ },
     ],
-    "timeout": "20m",
-    "workerThreads": false
+    "timeout": "20m"
   },
@@ -74,3 +73,3 @@ "publishConfig": {
   },
-  "gitHead": "8a52dddcda0af5eaedeca94bebcffd88bb8eebae"
+  "gitHead": "8a7c1b2d30cea44dae1a5706fdef530b2f6dc28a"
 }

src/watchedPromises.js

@@ -238,2 +238,15 @@ // @ts-check
 
+        promiseRegistrations.init(vpid, p);
+
+        // pseudoThen registers a settlement callback that will remove
+        // this promise from promiseRegistrations and
+        // watchedPromiseTable. To avoid triggering
+        // https://github.com/Agoric/agoric-sdk/issues/10757 and
+        // preventing slotToVal cleanup, the `pseudoThen()` should
+        // precede `maybeExportPromise()`. This isn't foolproof, but
+        // does mitigate in advance of a proper fix. See #10756 for
+        // details of this particular mitigation, and #10757 for the
+        // deeper bug.
+        pseudoThen(p, vpid);
+
         // Ensure that this vat's promises are rejected at termination.
@@ -243,5 +256,2 @@ if (maybeExportPromise(vpid)) {
         }
-
-        promiseRegistrations.init(vpid, p);
-        pseudoThen(p, vpid);
       }
@@ -248,0 +258,0 @@ });

New alerts

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Fixed alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

728242

increased by0.22%

Number of package files

78

increased by1.3%

Lines of code

18562

increased by0.24%

Number of medium supply chain risk alerts

1

decreased by-50%

Dependency changes

• Updated@agoric/internal@0.3.3-dev-8a7c1b2.0+8a7c1b2

• Updated@agoric/store@0.9.3-dev-8a7c1b2.0+8a7c1b2