Many thanks @hui-an-yang :raised_hands: :bow:

Left a comment over there

Would be nice if the team add type check on createRequest as it merely does a conversion from any to any type of the template is provided.

As createRequest lacks type check I typed this constant as MempoolPendingOperationsResponse to enforce the test to do it.

May you add the MempoolPendingOperationsResponse type back?

Many thanks @hui-an-yang

I just pointed the MR to ecadlabs:2382-support-yagop-contribution-of-rpc-endpoint-getMempoolPendingOperations

Please @dsawali / @hui-an-yang can you help me to get this shorted out?

# npx lerna run lint 
lerna notice cli v6.0.3

    ✔  @taquito/beacon-wallet:lint (5s)
    ✔  @taquito/http-utils:lint (5s)
    ✔  @taquito/remote-signer:lint (5s)
    ✔  @taquito/ledger-signer:lint (5s)
    ✔  @taquito/contracts-library:lint (5s)
    ✔  @taquito/local-forging:lint (5s)
    ✔  @taquito/rpc:lint (6s)
    ✔  @taquito/michel-codec:lint (6s)
    ✔  @taquito/michelson-encoder:lint (8s)
    ✔  @taquito/tzip12:lint (5s)
    ✔  @taquito/signer:lint (5s)
    ✔  @taquito/utils:lint (5s)
    ✔  @taquito/tzip16:lint (5s)
    ✔  @taquito/sapling:lint (5s)
    ✔  @taquito/taquito:lint (6s)

 ————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————

 >  Lerna (powered by Nx)   Successfully ran target lint for 15 projects (12s)

root@acf673080e69:/app# npx lerna run build
lerna notice cli v6.0.3

    ✔  @taquito/http-utils:build (6s)
    ✔  @taquito/utils:build (7s)
    ✔  @taquito/rpc:build (7s)
    ✔  @taquito/michel-codec:build (15s)
    ✔  @taquito/local-forging:build (8s)
    ✔  @taquito/michelson-encoder:build (10s)
    ✔  @taquito/taquito:build (15s)
    ✔  @taquito/remote-signer:build (12s)
    ✔  @taquito/contracts-library:build (12s)
    ✔  @taquito/ledger-signer:build (12s)
    ✔  @taquito/signer:build (13s)
    ✔  @taquito/tzip16:build (13s)
    ✔  @taquito/beacon-wallet:build (14s)
    ✔  @taquito/sapling:build (14s)
    ✔  @taquito/tzip12:build (7s)
    ✔  taquito-test-dapp-vite:build (9s)

    ✖  @taquito/website:build
       > @taquito/website@15.1.0 build
       > docusaurus build
       
       [INFO] [en] Creating an optimized production build...
       [ERROR] Unable to build website for locale en.
       [ERROR] ValidationError: "algolia.appId" is required. If you haven't migrated to the new DocSearch infra, please refer to the blog post for instructions: https://docusaurus.io/blog/2021/11/21/algolia-docsearch-migration
       npm ERR! Lifecycle script `build` failed with error: 
       npm ERR! Error: command failed 
       npm ERR!   in workspace: @taquito/website@15.1.0 
       npm ERR!   at location: /app/website 
       

 ————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————

 >  Lerna (powered by Nx)   Ran target build for 17 projects (1m)
 
    ✔    16/17 succeeded [0 read from cache]
 
    ✖    1/17 targets failed, including the following:
         - @taquito/website:build
 

Thank you for your contribution to Taquito.

Before submitting this PR, please make sure:

• [ ] Your code builds cleanly without any errors or warnings
• [ ] You have run the linter against the changes
• [x] You have added unit tests (if relevant/appropriate)
• [ ] You have added integration tests (if relevant/appropriate)
• [ ] All public methods or types have TypeDoc coverage with a complete description, and ideally an @example
• [ ] You have added or updated corresponding documentation
• [x] If relevant, you have written a first draft summary describing the change for inclusion in Release Notes.

Release Note Draft Snippet

Added RPC getMempoolPendingOperations to fetch pending / refused / outdated operations.

closes https://github.com/ecadlabs/taquito/issues/2382

Is your feature request related to a problem and use case? Please describe. RPC method to fetch transactions from mempool is missing

Describe the solution you'd like Implement method to fetch transactions from mempool

Describe alternatives you've considered Using other library or implementing my own

Additional context Some transactions fail due to the address being used. I need to query the mempool to avoid broadcasting tx in the same block

Bumping this

Nice library.

@IliaSmagloy is this solved now?

This is breaking some CI pipelines. Why was this considered a vulnerability?

The code pointed out is clearly wrong as it's using a object (Array) rather than a string or number.

So the problem here is the developer using the library wrong. Not knex itself.

Would you consider the following code a vuln in Knex?

const attackerControlled = "scriptKiddieSQLi'";
knex.raw(`select * from users where id = ${attackerControlled}`);

I hope not. I would request Github to reconsider CVE-2016-20018