@agoric/swingset-liveslots - npm Package Compare versions

Comparing version 0.10.3-dev-8f9f075.0 to 0.10.3-dev-8fb6eaf.0

package.json

 {
   "name": "@agoric/swingset-liveslots",
-  "version": "0.10.3-dev-8f9f075.0+8f9f075",
+  "version": "0.10.3-dev-8fb6eaf.0+8fb6eaf",
   "description": "SwingSet ocap support layer",
@@ -20,4 +20,4 @@ "type": "module",
   "dependencies": {
-    "@agoric/internal": "0.3.3-dev-8f9f075.0+8f9f075",
-    "@agoric/store": "0.9.3-dev-8f9f075.0+8f9f075",
+    "@agoric/internal": "0.3.3-dev-8fb6eaf.0+8fb6eaf",
+    "@agoric/store": "0.9.3-dev-8fb6eaf.0+8fb6eaf",
     "@endo/env-options": "^1.1.8",
@@ -36,3 +36,3 @@ "@endo/errors": "^1.2.8",
   "devDependencies": {
-    "@agoric/kmarshal": "0.1.1-dev-8f9f075.0+8f9f075",
+    "@agoric/kmarshal": "0.1.1-dev-8fb6eaf.0+8fb6eaf",
     "ava": "^5.3.0"
@@ -73,3 +73,3 @@ },
   },
-  "gitHead": "8f9f07501c1e5f25103d0a015f2f2817275391f2"
+  "gitHead": "8fb6eaf1945eaccbd5d0d445566a4fbce0cacd47"
 }

src/watchedPromises.js

@@ -238,2 +238,15 @@ // @ts-check
 
+        promiseRegistrations.init(vpid, p);
+
+        // pseudoThen registers a settlement callback that will remove
+        // this promise from promiseRegistrations and
+        // watchedPromiseTable. To avoid triggering
+        // https://github.com/Agoric/agoric-sdk/issues/10757 and
+        // preventing slotToVal cleanup, the `pseudoThen()` should
+        // precede `maybeExportPromise()`. This isn't foolproof, but
+        // does mitigate in advance of a proper fix. See #10756 for
+        // details of this particular mitigation, and #10757 for the
+        // deeper bug.
+        pseudoThen(p, vpid);
+
         // Ensure that this vat's promises are rejected at termination.
@@ -243,5 +256,2 @@ if (maybeExportPromise(vpid)) {
         }
-
-        promiseRegistrations.init(vpid, p);
-        pseudoThen(p, vpid);
       }
@@ -248,0 +258,0 @@ });

New alerts

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Fixed alerts

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

728270

increased by0.23%

Number of package files

78

increased by1.3%

Lines of code

18562

increased by0.24%

Dependency changes

• Updated@agoric/internal@0.3.3-dev-8fb6eaf.0+8fb6eaf

• Updated@agoric/store@0.9.3-dev-8fb6eaf.0+8fb6eaf