Starstruk Logo MarkStarstruk

v4.5.69

ccxt/ccxtv4.5.69Jul 28, 2026by github-actions[bot]

AI Summary

A security patch release addressing a libvips vulnerability, adding a new exchange (Nado), and fixing memory leaks.

Key Highlights

  • Pinned sharp to 0.35.0 to resolve libvips security vulnerabilities (GHSA-f88m-g3jw-g9cj).
  • Added new exchange: Nado.
  • Fixed memory leak in Go HTTP transport when using proxies.
  • Added Polymarket prediction example to the playground.

New Features

  • Nado exchange support.
  • Polymarket prediction example.
  • Added `fetchEvent` methods for Myriad.

Full Release Notes

## What's Changed
* fix(website): resolve sharp/libvips GHSA-f88m-g3jw-g9cj by pinning sharp to 0.35.0 by @kroitor with @Copilot in https://github.com/ccxt/ccxt/pull/29287
* fix(playground): pin sharp to 0.35.0 for libvips CVE remediation by @kroitor with @Copilot in https://github.com/ccxt/ccxt/pull/29288
* fix: broken urls by @ttodua in https://github.com/ccxt/ccxt/pull/29291
* chore(deps): bump next from 16.2.6 to 16.2.11 in /website by @dependabot[bot] in https://github.com/ccxt/ccxt/pull/29293
* fix: rootDir paths by @ttodua in https://github.com/ccxt/ccxt/pull/29292
* chore(deps): bump next from 16.2.6 to 16.2.11 in /examples/ts/nextjs-page-router by @dependabot[bot] in https://github.com/ccxt/ccxt/pull/29295
* fix(phemex): round spot order quantities to market precision before Ev scaling by @g0rdonL in https://github.com/ccxt/ccxt/pull/29294
* fix(weex): scale ticker percentage by @Shiven0504 in https://github.com/ccxt/ccxt/pull/29299
* golang http.Transport is not reused for proxies, huge leak by @thebocher in https://github.com/ccxt/ccxt/pull/29300
* fix(lbank): parse swap ticker timestamp by @mavlevich in https://github.com/ccxt/ccxt/pull/29303
* fix(build): reclaim playground box disk before deploy, not only after success by @pcriadoperez in https://github.com/ccxt/ccxt/pull/29301
* chore(deps): bump postcss from 8.5.15 to 8.5.18 in /website by @dependabot[bot] in https://github.com/ccxt/ccxt/pull/29306
* Align Docker image `idna` pin with project metadata by @kroitor with @Copilot in https://github.com/ccxt/ccxt/pull/29307
* fix(build): restore arm64 development image by @mavlevich in https://github.com/ccxt/ccxt/pull/29305
* refactor(js): safestring optimization by @ttodua in https://github.com/ccxt/ccxt/pull/29296
* fix(future): nativeRejectionHandled by @carlosmiei in https://github.com/ccxt/ccxt/pull/29322
* feat(myriad): update fetchEvent(s) for ob events, add static tests by @Dan-krm in https://github.com/ccxt/ccxt/pull/29297
* feat(playground): add Polymarket prediction example by @pcriadoperez in https://github.com/ccxt/ccxt/pull/29224
* perf(js): safe function consistency by @ttodua in https://github.com/ccxt/ccxt/pull/29313
* fix(htx): cap fetchFundingRateHistory limit at 100 for linear swaps by @rayBastard in https://github.com/ccxt/ccxt/pull/29325
* feat(nado): new exchange by @sc0Vu in https://github.com/ccxt/ccxt/pull/28800

## New Contributors
* @g0rdonL made their first contribution in https://github.com/ccxt/ccxt/pull/29294
* @thebocher made their first contribution in https://github.com/ccxt/ccxt/pull/29300
* @mavlevich made their first contribution in https://github.com/ccxt/ccxt/pull/29303

**Full Changelog**: https://github.com/ccxt/ccxt/compare/v4.5.68...v4.5.69