build(deps): bump tronweb from 6.2.2 to 6.4.0

[dependabot]

Bumps tronweb from 6.2.2 to 6.4.0.

Release notes

Sourced from tronweb's releases.

v6.4.0

New Features

• Typed read / write contract namespaces

  Added contract.read and contract.write namespaces for type-safe, ergonomic access to contract methods. Functions are split by state mutability: view / pure (constant call) functions are exposed under contract.read, while state-changing functions are exposed under contract.write. When an ABI is declared as const, function names and argument types are checked at compile time.

  • Call as contract.read.methodName([arg0, arg1, ...], options) / contract.write.methodName([arg0, arg1, ...], options).
  • The write account option is a private key: its derived address owns and signs the transaction, so a write can be issued from a non-default signer — including on an instance with no default key. A value that is not a private key is rejected. Treat this value as secret. For reads, a from option sets the caller address directly (validated as an address).
  • Validation errors (argument count, signer, call value, account) are surfaced as promise rejections.
  • ABI functions literally named read or write remain callable via the legacy flat surface (handled through a proxy).
  • Each function is additionally exposed under its full selector, e.g. contract.read['balanceOf(address)'] / contract.write['transfer(address,uint256)']. The selector form pins that exact overload, so same-arity overloads can be addressed unambiguously. Note: namespaces now enumerate each method under both its bare name and its selector, so Object.keys / for…in over contract.read / contract.write return two entries per function.

• Added utils.abi.encodeFunctionData

  Added utils.abi.encodeFunctionData(funcABI, args) to build smart contract calldata (function selector + encoded parameters). Validates argument count and supports TRON-specific handling of trcToken (kept in the selector, encoded as uint256).

• Added transactionBuilder.updateWitness

  Added transactionBuilder.updateWitness(address, url, options) to create a WitnessUpdateContract transaction that updates a witness node URL. Validates the address and the URL format / length (≤ 256).

Improvements

• Dropped Buffer in favor of TextEncoder / TextDecoder

  Replaced Buffer-based encoding in tronweb, utils/crypto, utils/abi and utils/ethersUtils with TextEncoder / TextDecoder for better cross-environment (browser) compatibility. The conversion is byte-for-byte equivalent to the previous behavior.

• address.fromPrivateKey accepts 0x-prefixed private keys

  TronWeb.address.fromPrivateKey now strips a leading 0x from the private key before deriving the address, so a private key works whether or not it carries the 0x prefix.

Changes

• Bump axios from 1.15.0 to 1.18.0.
• Bump dev dependency nyc to 18.
• Add overrides for ws (8.21.0) and serialize-javascript (7.0.5) to pin security-patched versions.
• build now runs the full build:all (esm, cjs, dist).

v6.3.0

New Features

• Added trx.getContractInfo

  Added trx.getContractInfo(contractAddress) method that retrieves detailed contract information via the wallet/getcontractinfo node API endpoint.

• Extended deserializeTx with full contract type coverage

  Added deserialization support for all remaining TransactionBuilder contract types via raw_data_hex:

  • Account: AccountCreateContract, AccountUpdateContract, SetAccountIdContract, AccountPermissionUpdateContract

... (truncated)

Changelog

Sourced from tronweb's changelog.

Change Log

6.4.0

New Features

• Typed read / write contract namespaces

  Added contract.read and contract.write namespaces for type-safe, ergonomic access to contract methods. Functions are split by state mutability: view / pure (constant call) functions are exposed under contract.read, while state-changing functions are exposed under contract.write. When an ABI is declared as const, function names and argument types are checked at compile time.

  • Call as contract.read.methodName([arg0, arg1, ...], options) / contract.write.methodName([arg0, arg1, ...], options).
  • The write account option is a private key: its derived address owns and signs the transaction, so a write can be issued from a non-default signer — including on an instance with no default key. A value that is not a private key is rejected. Treat this value as secret. For reads, a from option sets the caller address directly (validated as an address).
  • Validation errors (argument count, signer, call value, account) are surfaced as promise rejections.
  • ABI functions literally named read or write remain callable via the legacy flat surface (handled through a proxy).
  • Each function is additionally exposed under its full selector, e.g. contract.read['balanceOf(address)'] / contract.write['transfer(address,uint256)']. The selector form pins that exact overload, so same-arity overloads can be addressed unambiguously. Note: namespaces now enumerate each method under both its bare name and its selector, so Object.keys / for…in over contract.read / contract.write return two entries per function.

• Added utils.abi.encodeFunctionData

  Added utils.abi.encodeFunctionData(funcABI, args) to build smart contract calldata (function selector + encoded parameters). Validates argument count and supports TRON-specific handling of trcToken (kept in the selector, encoded as uint256).

• Added transactionBuilder.updateWitness

  Added transactionBuilder.updateWitness(address, url, options) to create a WitnessUpdateContract transaction that updates a witness node URL. Validates the address and the URL format / length (≤ 256).

Improvements

• Dropped Buffer in favor of TextEncoder / TextDecoder

  Replaced Buffer-based encoding in tronweb, utils/crypto, utils/abi and utils/ethersUtils with TextEncoder / TextDecoder for better cross-environment (browser) compatibility. The conversion is byte-for-byte equivalent to the previous behavior.

• address.fromPrivateKey accepts 0x-prefixed private keys

  TronWeb.address.fromPrivateKey now strips a leading 0x from the private key before deriving the address, so a private key works whether or not it carries the 0x prefix.

Changes

• Bump axios from 1.15.0 to 1.18.0.
• Bump dev dependency nyc to 18.
• Add overrides for ws (8.21.0) and serialize-javascript (7.0.5) to pin security-patched versions.
• build now runs the full build:all (esm, cjs, dist).

6.3.0

New Features

• Added trx.getContractInfo

  Added trx.getContractInfo(contractAddress) method that retrieves detailed contract information via the wallet/getcontractinfo node API endpoint.

... (truncated)

Commits

• 3c23529 Merge pull request #709 from tronprotocol/release/v6.4.0
• 7f1f71e Merge pull request #708 from Stan202310/release/v6.4.0
• 21d0ff8 refactor(contract): make read caller from-only and require a caller address
• a4e1abb fix(webpack): keep CommonJS deps as CJS in the browser build
• 85144ba feat(contract): make read/write account option a private key; add read from
• d495a27 fix(tronweb): strip 0x prefix when storing default private key
• 96a938e build(webpack): bump babel preset-env target to node 14
• 9dffa0b refactor(crypto): use Base64 class in arrayToBase64String
• fe0e9f2 fix(contract): reset methodInstances when loading ABI
• 3261ab5 fix(abi): canonicalize uint/int aliases in function signatures
• Additional commits viewable in compare view

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)