hyperliquid 2.0.0 → 2.0.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8e6bb2e8c5d8813c99f4b22bddf75f04c86064312adae19611084220da933abd
-  data.tar.gz: 1e2af33ccfd4e1ed6675d0b5bbf37f5beda70dd701a4705bed9b2806105bb076
+  metadata.gz: 353285075e17708af138c8d14c934607f73c9d2e29e898fca33f7c2d70bb34e8
+  data.tar.gz: e76bd9c3307fab826dddab97056165be1d0323857b5723eda36f7a90f3a8b6c5
 SHA512:
-  metadata.gz: 0234a3af5933018870b8cfcff64fcd576ec5686d5e0afef43f97e52fc5c8fbdcec793a67c52648f157acf2f1f7b67ef3134ed8ab17450bab0c15ddf96d7b2b7a
-  data.tar.gz: 16ece5522815247ca7c708e70d9fb7529cdfdeeac3727fdf654dfff8e41df37aa4246d926d4b81e6f26db7e78be312f6ed61947653c6a9b8a5ad679b55900902
+  metadata.gz: 02b0ba9749c8fe7dc3918db4a674877f073da2138c20f980097a6844c974588152f92eda956a84a198d6fe3fb2307828a436191a96c8ad2a5417d4c2a3377674
+  data.tar.gz: 85e56fa57887fb750ca7eecf9ecff9abc3ed252519ddf39c5c22fb5d88db717ef5f2c159a55bea101016fc33e6b3ad354b92b601cc5fdfa34ce3f510d6503d43

data/CHANGELOG.md

@@ -1,5 +1,16 @@
 ## [Ruby Hyperliquid SDK Changelog]
 
+## [2.0.1] - 2026-10-30
+
+### Security
+
+- `hyperliquid` now requires `rbsecp256k1` `~> 6.0, >= 6.0.1`. rbsecp256k1 6.0.1 and later require rubyzip `~> 3.4`, so applications installing this gem resolve a rubyzip release fixed for GHSA-47m2-wp7j-p9vc (CVE-2026-85396); run `bundle update hyperliquid rbsecp256k1 rubyzip` to pick it up. This also requires `eth` 0.5.11 or later, because eth 0.5.0–0.5.10 required rbsecp256k1 5.x.
+- The development and CI lockfile now uses `rbsecp256k1` 6.0.2 from RubyGems instead of the `carter2099/rbsecp256k1` fork. Applications that added the fork line from the 1.9.2 README can remove it; keeping it also satisfies the new requirement.
+
+### Fixed
+
+- `Info#user_subaccounts` sent `type: "subaccounts"`, which the API rejects with 422; it now sends `subAccounts`, matching the Python SDK. Its documented return value is now an array of sub-account hashes, or `nil` when the user has none.
+
 ## [2.0.0] - 2026-10-02
 
 ### Breaking

data/README.md

@@ -24,32 +24,6 @@ Or install it yourself as:
 
     $ gem install hyperliquid
 
-### rubyzip 3 (optional)
-
-This gem signs with [`eth`](https://github.com/q9f/eth.rb), which depends on
-`rbsecp256k1 ~> 6.0`. The latest `rbsecp256k1` on RubyGems (6.0.0) pins `rubyzip ~> 2.3`,
-so your app stays on rubyzip 2.x and scanners report
-[GHSA-47m2-wp7j-p9vc](https://github.com/advisories/GHSA-47m2-wp7j-p9vc) (fixed in rubyzip
-3.4.0).
-
-The practical risk is small. `rbsecp256k1` uses rubyzip only while installing, to unpack
-its libsecp256k1 source archive, which is checked against a pinned SHA-256. Neither this
-SDK nor `eth` loads rubyzip at runtime.
-
-Upstream has merged rubyzip 3 support
-([etscrivner/rbsecp256k1#85](https://github.com/etscrivner/rbsecp256k1/pull/85)), but it
-is not on RubyGems yet. Until that release, you can move to rubyzip 3 by adding the
-maintained fork to your own Gemfile. The fork is version 6.1.0: it allows `rubyzip >= 3.4,
-< 4` and bundles libsecp256k1 0.8.0, and it still satisfies `eth`'s `~> 6.0` requirement.
-
-```ruby
-gem 'hyperliquid'
-gem 'rbsecp256k1', github: 'carter2099/rbsecp256k1', ref: 'bbfe3e346828e39d13aa590cca7cc74f663d2fde'
-```
-
-Then run `bundle update rbsecp256k1 rubyzip`. This SDK's own test suite and CI run against
-that fork.
-
 ## Usage
 
 ### Basic Setup

data/docs/EXAMPLES.md

@@ -78,7 +78,9 @@ twap_fills_ranged = sdk.info.user_twap_slice_fills(user_address, start_time_ms,
 
 # Retrieve a user's subaccounts
 subaccounts = sdk.info.user_subaccounts(user_address)
-# => ["0x1111...", ...]
+# => [{ "name" => "sub1", "subAccountUser" => "0x2222...", "master" => "0x...",
+#       "clearinghouseState" => {...}, "spotState" => {...} }, ...]
+# => nil when the user has no subaccounts
 
 # Retrieve details for a vault
 vault_addr = "0x..."

data/lib/hyperliquid/info.rb

@@ -180,10 +180,11 @@ module Hyperliquid
     end
 
     # Retrieve a user's subaccounts
-    # @param user [String]
-    # @return [Array]
+    # @param user [String] Wallet address
+    # @return [Array<Hash>, nil] Array of entries with name, subAccountUser, master,
+    #   clearinghouseState and spotState; nil if the user has no subaccounts
     def user_subaccounts(user)
-      @client.post(Constants::INFO_ENDPOINT, { type: 'subaccounts', user: user })
+      @client.post(Constants::INFO_ENDPOINT, { type: 'subAccounts', user: user })
     end
 
     # Retrieve a user's V2 subaccounts (per-dex clearinghouse + spot state)

data/lib/hyperliquid/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Hyperliquid
-  VERSION = '2.0.0'
+  VERSION = '2.0.1'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: hyperliquid
 version: !ruby/object:Gem::Version
-  version: 2.0.0
+  version: 2.0.1
 platform: ruby
 authors:
 - carter2099
@@ -79,6 +79,26 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '1.7'
+- !ruby/object:Gem::Dependency
+  name: rbsecp256k1
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '6.0'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 6.0.1
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '6.0'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 6.0.1
 - !ruby/object:Gem::Dependency
   name: ws_lite
   requirement: !ruby/object:Gem::Requirement