Skip to content

build(deps): bump xrpl-py from 4.5.0 to 5.0.0#209

Merged
Timwal78 merged 1 commit into
mainfrom
dependabot/pip/xrpl-py-5.0.0
Jun 22, 2026
Merged

build(deps): bump xrpl-py from 4.5.0 to 5.0.0#209
Timwal78 merged 1 commit into
mainfrom
dependabot/pip/xrpl-py-5.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 22, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps xrpl-py from 4.5.0 to 5.0.0.

Release notes

Sourced from xrpl-py's releases.

v5.0.0

What's Changed

New Contributors

Full Changelog: XRPLF/xrpl-py@v4.4.0...v5.0.0

v4.6.0b0

What's Changed

New Contributors

Full Changelog: XRPLF/xrpl-py@v4.4.0...v4.6.0b0

Changelog

Sourced from xrpl-py's changelog.

[[5.0.0]]

BREAKING CHANGE

  • Dropped support for Python 3.8 (EOL October 2024) and Python 3.9 (EOL October 2025). The minimum supported Python version is now 3.10.
  • Ensure consistent use of ED25519 as the default cryptographic algorithm in Wallet.from_secret_numbers method. This change ensures consistency across the entire Wallet class, where ED25519 is used as the default Cryptographic signing algorithm.
  • Wallet.from_seed and Wallet.from_secret no longer default to ED25519 when algorithm is omitted. The algorithm is now inferred from the seed prefix: sEd... seeds derive an ED25519 keypair, all other family seeds (s...) derive a SECP256K1 keypair. This fixes the long-standing case where ingesting a secp256k1 family seed without an explicit algorithm silently produced an ED25519 keypair for an unrelated account. Callers that previously relied on the ED25519 default being applied to an s... family seed must now pass algorithm=CryptoAlgorithm.ED25519 explicitly to keep deriving the same keypair. Callers that pass an explicit algorithm are unaffected. Wallet.create, Wallet.from_entropy, and Wallet.from_secret_numbers continue to default to ED25519 (they generate a fresh seed rather than ingesting one, so there is no prefix to infer from).

Fixed

  • Fixed correct mapping of sfMutableFlags, sfStartDate, and sfPreviousPaymentDueDate fields in the binary codec definitions.json.
  • Fixed Amount codec to correctly handle large integers with trailing zeros (precision is counted by significant digits, not total digits).
  • Fixed Amount.to_json to preserve significant digits when an IOU value's canonical Decimal stringifies as an integer or in scientific notation; previously the decoder applied rstrip("0") unconditionally and silently truncated values such as 1000000000000000 to "1".
  • Fixed async WebSocket handler so a single malformed JSON frame is skipped instead of terminating the handler task and silencing the client for the remainder of the connection (issue #977).
  • Fixed WebSocket request-ID generation to use a cryptographic RNG (secrets.randbelow) and widened the ID range from 1_000_000 to 2**62, making birthday-paradox collisions astronomically unlikely (expected collision after ~2**31 requests instead of ~1,177) (issue #986).
Commits
  • 859c3c0 release-5.0.0: Update Changelog and SDK version
  • 8dc4147 fix(wallet): infer signing algorithm from seed prefix in Wallet.from_seed / W...
  • be88042 fix: preserve significant trailing zeros in Amount.to_json for IOU values (...
  • e46a4fd fix: docker path for integration test (#1003)
  • 69573b2 Collection of bug-fixes (#993)
  • a68a2f0 chore(deps): quarterly batch dependency upgrade 2026-Q2 (#995)
  • 8879e95 Update default algorithm inWallet class (breaking change) (#942)
  • fdb2992 Drop python 3.9 support (#940)
  • f1b1fc3 fix _calculate_precision (#924)
  • e8d8e32 update trivy-action version (#922)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jun 22, 2026
@vercel

vercel Bot commented Jun 22, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
signal-auction-loom Ready Ready Preview, Comment Jun 22, 2026 6:52pm
squeeze-os Ready Ready Preview, Comment Jun 22, 2026 6:52pm

@dependabot
build(deps): bump xrpl-py from 4.5.0 to 5.0.0
d638a21 
Bumps [xrpl-py](https://github.com/XRPLF/xrpl-py) from 4.5.0 to 5.0.0.
- [Release notes](https://github.com/XRPLF/xrpl-py/releases)
- [Changelog](https://github.com/XRPLF/xrpl-py/blob/main/CHANGELOG.md)
- [Commits](XRPLF/xrpl-py@v4.5.0...v5.0.0)

---
updated-dependencies:
- dependency-name: xrpl-py
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/xrpl-py-5.0.0 branch from 713cfe1 to d638a21 Compare June 22, 2026 18:51
@Timwal78 Timwal78 merged commit 68e50e0 into main Jun 22, 2026
6 checks passed
@dependabot dependabot Bot deleted the dependabot/pip/xrpl-py-5.0.0 branch June 22, 2026 18:56
@Timwal78 Timwal78 mentioned this pull request Jun 22, 2026
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Timwal78