From 1a527174f48e724811b0d04484bc2f70a50f0ef1 Mon Sep 17 00:00:00 2001 From: Cheng Wang Date: Mon, 5 Aug 2024 17:36:32 +0200 Subject: [PATCH] Fix audit --- package.json | 3 +- packages/walletconnect/package.json | 8 +-- pnpm-lock.yaml | 91 +++++++++++++---------------- 3 files changed, 48 insertions(+), 54 deletions(-) diff --git a/package.json b/package.json index 967697468..2873cf56b 100644 --- a/package.json +++ b/package.json @@ -52,7 +52,8 @@ "browserify-sign": ">=4.2.2", "axios": ">=1.6.0", "word-wrap": ">=1.2.4", - "braces@<3.0.3": ">=3.0.3" + "braces@<3.0.3": ">=3.0.3", + "ws@<7.5.10": "^7.5.10" } } } diff --git a/packages/walletconnect/package.json b/packages/walletconnect/package.json index d8df72e35..69301dc37 100644 --- a/packages/walletconnect/package.json +++ b/packages/walletconnect/package.json @@ -34,10 +34,10 @@ "dependencies": { "@alephium/web3": "workspace:^", "@alephium/web3-wallet": "workspace:^", - "@walletconnect/sign-client": "2.13.3", - "@walletconnect/types": "2.13.3", - "@walletconnect/utils": "2.13.3", - "@walletconnect/core": "2.13.3", + "@walletconnect/sign-client": "2.14.0", + "@walletconnect/types": "2.14.0", + "@walletconnect/utils": "2.14.0", + "@walletconnect/core": "2.14.0", "@walletconnect/keyvaluestorage": "1.1.1", "eventemitter3": "^4.0.7", "async-sema": "^3.1.1" diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index af5773f4e..96b31ce80 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -12,6 +12,7 @@ overrides: axios: '>=1.6.0' word-wrap: '>=1.2.4' braces@<3.0.3: '>=3.0.3' + ws@<7.5.10: ^7.5.10 importers: @@ -47,7 +48,7 @@ importers: version: 8.38.0 eslint-plugin-jest: specifier: ^27.2.1 - version: 27.2.1(@typescript-eslint/eslint-plugin@5.59.0(eslint@8.38.0)(typescript@4.9.5))(eslint@8.38.0)(jest@28.1.3(@types/node@16.18.24)(ts-node@10.9.1(@swc/core@1.4.1)(@types/node@16.18.24)(typescript@4.9.5)))(typescript@4.9.5) + version: 27.2.1(@typescript-eslint/eslint-plugin@5.59.0(@typescript-eslint/parser@5.59.0(eslint@8.38.0)(typescript@4.9.5))(eslint@8.38.0)(typescript@4.9.5))(eslint@8.38.0)(jest@28.1.3(@types/node@16.18.24)(ts-node@10.9.1(@swc/core@1.4.1)(@types/node@16.18.24)(typescript@4.9.5)))(typescript@4.9.5) jest: specifier: ^28.1.3 version: 28.1.3(@types/node@16.18.24)(ts-node@10.9.1(@swc/core@1.4.1)(@types/node@16.18.24)(typescript@4.9.5)) @@ -195,20 +196,20 @@ importers: specifier: workspace:^ version: link:../web3-wallet '@walletconnect/core': - specifier: 2.13.3 - version: 2.13.3 + specifier: 2.14.0 + version: 2.14.0 '@walletconnect/keyvaluestorage': specifier: 1.1.1 version: 1.1.1 '@walletconnect/sign-client': - specifier: 2.13.3 - version: 2.13.3 + specifier: 2.14.0 + version: 2.14.0 '@walletconnect/types': - specifier: 2.13.3 - version: 2.13.3 + specifier: 2.14.0 + version: 2.14.0 '@walletconnect/utils': - specifier: 2.13.3 - version: 2.13.3 + specifier: 2.14.0 + version: 2.14.0 async-sema: specifier: ^3.1.1 version: 3.1.1 @@ -450,7 +451,7 @@ importers: version: 5.3.7(@swc/core@1.4.1)(webpack@5.80.0(@swc/core@1.4.1)(webpack-cli@4.10.0)) ts-jest: specifier: ^28.0.8 - version: 28.0.8(@babel/core@7.21.4)(@jest/types@28.1.3)(babel-jest@28.1.3(@babel/core@7.21.4))(jest@28.1.3(@types/node@16.18.24)(ts-node@10.9.1(@swc/core@1.4.1)(@types/node@16.18.24)(typescript@4.9.5)))(typescript@4.9.5) + version: 28.0.8(@babel/core@7.21.4)(@jest/types@29.5.0)(babel-jest@29.5.0(@babel/core@7.21.4))(jest@28.1.3(@types/node@16.18.24)(ts-node@10.9.1(@swc/core@1.4.1)(@types/node@16.18.24)(typescript@4.9.5)))(typescript@4.9.5) ts-node: specifier: ^10.9.1 version: 10.9.1(@swc/core@1.4.1)(@types/node@16.18.24)(typescript@4.9.5) @@ -2151,8 +2152,8 @@ packages: '@walletconnect/browser-utils@1.8.0': resolution: {integrity: sha512-Wcqqx+wjxIo9fv6eBUFHPsW1y/bGWWRboni5dfD8PtOmrihrEpOCmvRJe4rfl7xgJW8Ea9UqKEaq0bIRLHlK4A==} - '@walletconnect/core@2.13.3': - resolution: {integrity: sha512-TdF+rC6rONJGyOUtt/nLkbyQWjnkwbD3kXq3ZA0Q7+tYtmSjTDE4wbArlLbHIbtf69g+9/DpEVEQimWWcEOn2g==} + '@walletconnect/core@2.14.0': + resolution: {integrity: sha512-E/dgBM9q3judXnTfZQ5ILvDpeSdDpabBLsXtYXa3Nyc26cfNplfLJ2nXm9FgtTdhM1nZ7yx4+zDPiXawBRZl2g==} '@walletconnect/environment@1.0.1': resolution: {integrity: sha512-T426LLZtHj8e8rYnKfzsw1aG6+M0BT1ZxayMdv/p8yM0MU+eJDISqNY3/bccxRr4LrF9csq02Rhqt08Ibl0VRg==} @@ -2169,9 +2170,6 @@ packages: '@walletconnect/jsonrpc-types@1.0.2': resolution: {integrity: sha512-CZe8tjJX73OWdHjrBHy7HtAapJ2tT0Q3TYhPBhRxi3643lwPIQWC9En45ldY14TZwgSewkbZ0FtGBZK0G7Bbyg==} - '@walletconnect/jsonrpc-types@1.0.3': - resolution: {integrity: sha512-iIQ8hboBl3o5ufmJ8cuduGad0CQm3ZlsHtujv9Eu16xq89q+BG7Nh5VLxxUgmtpnrePgFkTwXirCTkwJH1v+Yw==} - '@walletconnect/jsonrpc-types@1.0.4': resolution: {integrity: sha512-P6679fG/M+wuWg9TY8mh6xFSdYnFyFjwFelxyISxMDrlbXokorEVXYOxiqEbrU3x1BmBoCAJJ+vtEaEoMlpCBQ==} @@ -2210,8 +2208,8 @@ packages: '@walletconnect/safe-json@1.0.2': resolution: {integrity: sha512-Ogb7I27kZ3LPC3ibn8ldyUr5544t3/STow9+lzz7Sfo808YD7SBWk7SAsdBFlYgP2zDRy2hS3sKRcuSRM0OTmA==} - '@walletconnect/sign-client@2.13.3': - resolution: {integrity: sha512-3Pcq6trHWdBZn5X0VUFQ3zJaaqyEbMW9WNVKcZ2SakIpQAwySd08Mztvq48G98jfucdgP3tjGPbBvzHX9vJX7w==} + '@walletconnect/sign-client@2.14.0': + resolution: {integrity: sha512-UrB3S3eLjPYfBLCN3WJ5u7+WcZ8kFMe/QIDqLf76Jk6TaLwkSUy563LvnSw4KW/kA+/cY1KBSdUDfX1tzYJJXg==} '@walletconnect/time@1.0.2': resolution: {integrity: sha512-uzdd9woDcJ1AaBZRhqy5rNC9laqWGErfc4dxA9a87mPdKOgWMD85mcFo9dIYIts/Jwocfwn07EC6EzclKubk/g==} @@ -2220,11 +2218,11 @@ packages: resolution: {integrity: sha512-Cn+3I0V0vT9ghMuzh1KzZvCkiAxTq+1TR2eSqw5E5AVWfmCtECFkVZBP6uUJZ8YjwLqXheI+rnjqPy7sVM4Fyg==} deprecated: 'WalletConnect''s v1 SDKs are now deprecated. Please upgrade to a v2 SDK. For details see: https://docs.walletconnect.com/' - '@walletconnect/types@2.13.3': - resolution: {integrity: sha512-9UdtLoQqwGFfepCPprUAXeUbKg9zyDarPRmEJVco51OWXHCOpvRgroWk54fQHDhCUIfDELjObY6XNAzNrmNYUA==} + '@walletconnect/types@2.14.0': + resolution: {integrity: sha512-vevMi4jZLJ55vLuFOicQFmBBbLyb+S0sZS4IsaBdZkQflfGIq34HkN13c/KPl4Ye0aoR4/cUcUSitmGIzEQM5g==} - '@walletconnect/utils@2.13.3': - resolution: {integrity: sha512-hjyyNhnhTCezGNr6OCfKRzqRsiak+p+YP57iRo1Tsf222fsj/9JD++MP97YiDwc4e4xXaZp/boiLB+8hJHsCog==} + '@walletconnect/utils@2.14.0': + resolution: {integrity: sha512-vRVomYQEtEAyCK2c5bzzEvtgxaGGITF8mWuIL+WYSAMyEJLY97mirP2urDucNwcUczwxUgI+no9RiNFbUHreQQ==} '@walletconnect/window-getters@1.0.0': resolution: {integrity: sha512-xB0SQsLaleIYIkSsl43vm8EwETpBzJ2gnzk7e0wMF3ktqiTGS6TFHxcprMl5R44KKh4tCcHCJwolMCaDSwtAaA==} @@ -6076,8 +6074,8 @@ packages: resolution: {integrity: sha512-7KxauUdBmSdWnmpaGFg+ppNjKF8uNLry8LyzjauQDOVONfFLNKrKvQOxZ/VuTIcS/gge/YNahf5RIIQWTSarlg==} engines: {node: ^12.13.0 || ^14.15.0 || >=16.0.0} - ws@7.5.9: - resolution: {integrity: sha512-F+P9Jil7UiSKSkppIiD94dN07AwvFixvLIj1Og1Rl9GGMuNipJnV9JzjD6XuqmAeiswGvUmNLjr5cFuXwNS77Q==} + ws@7.5.10: + resolution: {integrity: sha512-+dbF1tHwZpXcbOJdVOkzLDxZP1ailvSxM6ZweXTegylPny803bFhA+vqBYw4s31NSAk4S2Qz+AKXK9a4wkdjcQ==} engines: {node: '>=8.3.0'} peerDependencies: bufferutil: ^4.0.1 @@ -8186,7 +8184,7 @@ snapshots: '@walletconnect/window-metadata': 1.0.0 detect-browser: 5.2.0 - '@walletconnect/core@2.13.3': + '@walletconnect/core@2.14.0': dependencies: '@walletconnect/heartbeat': 1.2.2 '@walletconnect/jsonrpc-provider': 1.0.14 @@ -8199,8 +8197,8 @@ snapshots: '@walletconnect/relay-auth': 1.0.4 '@walletconnect/safe-json': 1.0.2 '@walletconnect/time': 1.0.2 - '@walletconnect/types': 2.13.3 - '@walletconnect/utils': 2.13.3 + '@walletconnect/types': 2.14.0 + '@walletconnect/utils': 2.14.0 events: 3.3.0 isomorphic-unfetch: 3.1.0 lodash.isequal: 4.5.0 @@ -8249,11 +8247,6 @@ snapshots: keyvaluestorage-interface: 1.0.0 tslib: 1.14.1 - '@walletconnect/jsonrpc-types@1.0.3': - dependencies: - keyvaluestorage-interface: 1.0.0 - tslib: 1.14.1 - '@walletconnect/jsonrpc-types@1.0.4': dependencies: events: 3.3.0 @@ -8267,7 +8260,7 @@ snapshots: '@walletconnect/jsonrpc-utils@1.0.8': dependencies: '@walletconnect/environment': 1.0.1 - '@walletconnect/jsonrpc-types': 1.0.3 + '@walletconnect/jsonrpc-types': 1.0.4 tslib: 1.14.1 '@walletconnect/jsonrpc-ws-connection@1.0.14': @@ -8275,7 +8268,7 @@ snapshots: '@walletconnect/jsonrpc-utils': 1.0.8 '@walletconnect/safe-json': 1.0.2 events: 3.3.0 - ws: 7.5.9 + ws: 7.5.10 transitivePeerDependencies: - bufferutil - utf-8-validate @@ -8308,7 +8301,7 @@ snapshots: '@walletconnect/relay-api@1.0.10': dependencies: - '@walletconnect/jsonrpc-types': 1.0.3 + '@walletconnect/jsonrpc-types': 1.0.4 '@walletconnect/relay-auth@1.0.4': dependencies: @@ -8325,16 +8318,16 @@ snapshots: dependencies: tslib: 1.14.1 - '@walletconnect/sign-client@2.13.3': + '@walletconnect/sign-client@2.14.0': dependencies: - '@walletconnect/core': 2.13.3 + '@walletconnect/core': 2.14.0 '@walletconnect/events': 1.0.1 '@walletconnect/heartbeat': 1.2.2 '@walletconnect/jsonrpc-utils': 1.0.8 '@walletconnect/logger': 2.1.2 '@walletconnect/time': 1.0.2 - '@walletconnect/types': 2.13.3 - '@walletconnect/utils': 2.13.3 + '@walletconnect/types': 2.14.0 + '@walletconnect/utils': 2.14.0 events: 3.3.0 transitivePeerDependencies: - '@azure/app-configuration' @@ -8360,7 +8353,7 @@ snapshots: '@walletconnect/types@1.8.0': {} - '@walletconnect/types@2.13.3': + '@walletconnect/types@2.14.0': dependencies: '@walletconnect/events': 1.0.1 '@walletconnect/heartbeat': 1.2.2 @@ -8383,7 +8376,7 @@ snapshots: - '@vercel/kv' - supports-color - '@walletconnect/utils@2.13.3': + '@walletconnect/utils@2.14.0': dependencies: '@stablelib/chacha20poly1305': 1.0.1 '@stablelib/hkdf': 1.0.1 @@ -8393,7 +8386,7 @@ snapshots: '@walletconnect/relay-api': 1.0.10 '@walletconnect/safe-json': 1.0.2 '@walletconnect/time': 1.0.2 - '@walletconnect/types': 2.13.3 + '@walletconnect/types': 2.14.0 '@walletconnect/window-getters': 1.0.1 '@walletconnect/window-metadata': 1.0.1 detect-browser: 5.3.0 @@ -9731,24 +9724,24 @@ snapshots: - eslint-import-resolver-webpack - supports-color - eslint-plugin-jest@27.2.1(@typescript-eslint/eslint-plugin@5.59.0(@typescript-eslint/parser@5.59.0(eslint@8.38.0)(typescript@4.9.5))(eslint@8.38.0)(typescript@4.9.5))(eslint@8.38.0)(jest@29.5.0(@types/node@16.18.24)(ts-node@10.9.1(@swc/core@1.4.1)(@types/node@16.18.24)(typescript@4.9.5)))(typescript@4.9.5): + eslint-plugin-jest@27.2.1(@typescript-eslint/eslint-plugin@5.59.0(@typescript-eslint/parser@5.59.0(eslint@8.38.0)(typescript@4.9.5))(eslint@8.38.0)(typescript@4.9.5))(eslint@8.38.0)(jest@28.1.3(@types/node@16.18.24)(ts-node@10.9.1(@swc/core@1.4.1)(@types/node@16.18.24)(typescript@4.9.5)))(typescript@4.9.5): dependencies: '@typescript-eslint/utils': 5.59.0(eslint@8.38.0)(typescript@4.9.5) eslint: 8.38.0 optionalDependencies: '@typescript-eslint/eslint-plugin': 5.59.0(@typescript-eslint/parser@5.59.0(eslint@8.38.0)(typescript@4.9.5))(eslint@8.38.0)(typescript@4.9.5) - jest: 29.5.0(@types/node@16.18.24)(ts-node@10.9.1(@swc/core@1.4.1)(@types/node@16.18.24)(typescript@4.9.5)) + jest: 28.1.3(@types/node@16.18.24)(ts-node@10.9.1(@swc/core@1.4.1)(@types/node@16.18.24)(typescript@4.9.5)) transitivePeerDependencies: - supports-color - typescript - eslint-plugin-jest@27.2.1(@typescript-eslint/eslint-plugin@5.59.0(eslint@8.38.0)(typescript@4.9.5))(eslint@8.38.0)(jest@28.1.3(@types/node@16.18.24)(ts-node@10.9.1(@swc/core@1.4.1)(@types/node@16.18.24)(typescript@4.9.5)))(typescript@4.9.5): + eslint-plugin-jest@27.2.1(@typescript-eslint/eslint-plugin@5.59.0(@typescript-eslint/parser@5.59.0(eslint@8.38.0)(typescript@4.9.5))(eslint@8.38.0)(typescript@4.9.5))(eslint@8.38.0)(jest@29.5.0(@types/node@16.18.24)(ts-node@10.9.1(@swc/core@1.4.1)(@types/node@16.18.24)(typescript@4.9.5)))(typescript@4.9.5): dependencies: '@typescript-eslint/utils': 5.59.0(eslint@8.38.0)(typescript@4.9.5) eslint: 8.38.0 optionalDependencies: '@typescript-eslint/eslint-plugin': 5.59.0(@typescript-eslint/parser@5.59.0(eslint@8.38.0)(typescript@4.9.5))(eslint@8.38.0)(typescript@4.9.5) - jest: 28.1.3(@types/node@16.18.24)(ts-node@10.9.1(@swc/core@1.4.1)(@types/node@16.18.24)(typescript@4.9.5)) + jest: 29.5.0(@types/node@16.18.24)(ts-node@10.9.1(@swc/core@1.4.1)(@types/node@16.18.24)(typescript@4.9.5)) transitivePeerDependencies: - supports-color - typescript @@ -12709,7 +12702,7 @@ snapshots: trim-newlines@3.0.1: {} - ts-jest@28.0.8(@babel/core@7.21.4)(@jest/types@28.1.3)(babel-jest@28.1.3(@babel/core@7.21.4))(jest@28.1.3(@types/node@16.18.24)(ts-node@10.9.1(@swc/core@1.4.1)(@types/node@16.18.24)(typescript@4.9.5)))(typescript@4.9.5): + ts-jest@28.0.8(@babel/core@7.21.4)(@jest/types@29.5.0)(babel-jest@29.5.0(@babel/core@7.21.4))(jest@28.1.3(@types/node@16.18.24)(ts-node@10.9.1(@swc/core@1.4.1)(@types/node@16.18.24)(typescript@4.9.5)))(typescript@4.9.5): dependencies: bs-logger: 0.2.6 fast-json-stable-stringify: 2.1.0 @@ -12723,8 +12716,8 @@ snapshots: yargs-parser: 21.1.1 optionalDependencies: '@babel/core': 7.21.4 - '@jest/types': 28.1.3 - babel-jest: 28.1.3(@babel/core@7.21.4) + '@jest/types': 29.5.0 + babel-jest: 29.5.0(@babel/core@7.21.4) ts-jest@29.1.0(@babel/core@7.21.4)(@jest/types@29.5.0)(babel-jest@29.5.0(@babel/core@7.21.4))(jest@29.5.0(@types/node@16.18.24)(ts-node@10.9.1(@swc/core@1.4.1)(@types/node@16.18.24)(typescript@4.9.5)))(typescript@4.9.5): dependencies: @@ -13133,7 +13126,7 @@ snapshots: imurmurhash: 0.1.4 signal-exit: 3.0.7 - ws@7.5.9: {} + ws@7.5.10: {} y18n@4.0.3: {}