Starstruk Logo MarkStarstruk

v4.5.69

stalwartlabs/stalwartv4.5.69Jul 28, 2026by github-actions[bot]

AI Summary

A maintenance release focusing on security updates for the sharp library to address CVEs, alongside new exchange support for Nado and bug fixes for several integrations including Phemex, Weex, and HtX.

Key Highlights

  • Fixed security vulnerability in sharp/libvips (GHSA-f88m-g3jw-g9cj) by pinning to 0.35.0.
  • Added support for the Nado exchange.
  • Added Polymarket prediction example to the playground.
  • Fixed HTTP transport proxy leaks.
  • Updated Next.js and PostCSS dependencies.

New Features

  • New Nado exchange support.
  • Polymarket prediction example in playground.
  • Safe string optimization refactor.

Full Release Notes

## What's Changed
* fix(website): resolve sharp/libvips GHSA-f88m-g3jw-g9cj by pinning sharp to 0.35.0 by @kroitor with @Copilot in https://github.com/ccxt/ccxt/pull/29287
* fix(playground): pin sharp to 0.35.0 for libvips CVE remediation by @kroitor with @Copilot in https://github.com/ccxt/ccxt/pull/29288
* fix: broken urls by @ttodua in https://github.com/ccxt/ccxt/pull/29291
* chore(deps): bump next from 16.2.6 to 16.2.11 in /website by @dependabot[bot] in https://github.com/ccxt/ccxt/pull/29293
* fix: rootDir paths by @ttodua in https://github.com/ccxt/ccxt/pull/29292
* chore(deps): bump next from 16.2.6 to 16.2.11 in /examples/ts/nextjs-page-router by @dependabot[bot] in https://github.com/ccxt/ccxt/pull/29295
* fix(phemex): round spot order quantities to market precision before Ev scaling by @g0rdonL in https://github.com/ccxt/ccxt/pull/29294
* fix(weex): scale ticker percentage by @Shiven0504 in https://github.com/ccxt/ccxt/pull/29299
* golang http.Transport is not reused for proxies, huge leak by @thebocher in https://github.com/ccxt/ccxt/pull/29300
* fix(lbank): parse swap ticker timestamp by @mavlevich in https://github.com/ccxt/ccxt/pull/29303
* fix(build): reclaim playground box disk before deploy, not only after success by @pcriadoperez in https://github.com/ccxt/ccxt/pull/29301
* chore(deps): bump postcss from 8.5.15 to 8.5.18 in /website by @dependabot[bot] in https://github.com/ccxt/ccxt/pull/29306
* Align Docker image `idna` pin with project metadata by @kroitor with @Copilot in https://github.com/ccxt/ccxt/pull/29307
* fix(build): restore arm64 development image by @mavlevich in https://github.com/ccxt/ccxt/pull/29305
* refactor(js): safestring optimization by @ttodua in https://github.com/ccxt/ccxt/pull/29296
* fix(future): nativeRejectionHandled by @carlosmiei in https://github.com/ccxt/ccxt/pull/29322
* feat(myriad): update fetchEvent(s) for ob events, add static tests by @Dan-krm in https://github.com/ccxt/ccxt/pull/29297
* feat(playground): add Polymarket prediction example by @pcriadoperez in https://github.com/ccxt/ccxt/pull/29224
* perf(js): safe function consistency by @ttodua in https://github.com/ccxt/ccxt/pull/29313
* fix(htx): cap fetchFundingRateHistory limit at 100 for linear swaps by @rayBastard in https://github.com/ccxt/ccxt/pull/29325
* feat(nado): new exchange by @sc0Vu in https://github.com/ccxt/ccxt/pull/28800

## New Contributors
* @g0rdonL made their first contribution in https://github.com/ccxt/ccxt/pull/29294
* @thebocher made their first contribution in https://github.com/ccxt/ccxt/pull/29300
* @mavlevich made their first contribution in https://github.com/ccxt/ccxt/pull/29303

**Full Changelog**: https://github.com/ccxt/ccxt/compare/v4.5.68...v4.5.69