Skip to content

Commit

Permalink
fix: package.json & yarn.lock to reduce vulnerabilities
Browse files Browse the repository at this point in the history
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-PROTOBUFJS-5756498
  • Loading branch information
snyk-bot committed Oct 23, 2023
1 parent 3d9d4a6 commit b6b471b
Show file tree
Hide file tree
Showing 2 changed files with 98 additions and 40 deletions.
2 changes: 1 addition & 1 deletion package.json
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,7 @@
"@cosmjs/ledger-amino": "^0.28.4",
"@cosmjs/math": "^0.28.4",
"@cosmjs/proto-signing": "^0.28.4",
"@cosmjs/stargate": "0.28.4",
"@cosmjs/stargate": "0.28.6",
"@hanchon/signature-to-pubkey": "^1.0.0",
"@intlify/vue-i18n-loader": "^2.1.2",
"@ledgerhq/hw-app-eth": "^6.28.2",
Expand Down
136 changes: 97 additions & 39 deletions yarn.lock
Original file line number Diff line number Diff line change
Expand Up @@ -985,6 +985,16 @@
"@cosmjs/math" "0.28.4"
"@cosmjs/utils" "0.28.4"

"@cosmjs/[email protected]":
version "0.28.6"
resolved "https://registry.yarnpkg.com/@cosmjs/amino/-/amino-0.28.6.tgz#519039d893186bad17b9e00a361d26329feb7c48"
integrity sha512-i25BgQI2por2j6IGQsd3OxJYauxDt/7mtyywLMfKqHYu30/V5niiXsWoPSrn6P4bbprY5pB9di4vWpk5lBAnqA==
dependencies:
"@cosmjs/crypto" "0.28.6"
"@cosmjs/encoding" "0.28.6"
"@cosmjs/math" "0.28.6"
"@cosmjs/utils" "0.28.6"

"@cosmjs/amino@^0.29.5":
version "0.29.5"
resolved "https://registry.yarnpkg.com/@cosmjs/amino/-/amino-0.29.5.tgz#053b4739a90b15b9e2b781ccd484faf64bd49aec"
Expand Down Expand Up @@ -1041,6 +1051,19 @@
elliptic "^6.5.3"
libsodium-wrappers "^0.7.6"

"@cosmjs/[email protected]":
version "0.28.6"
resolved "https://registry.yarnpkg.com/@cosmjs/crypto/-/crypto-0.28.6.tgz#66c54537fc2cbd8ac9644e9456acad2032632f84"
integrity sha512-7cKtPXZVRSeNkHJnahQ3jODWMG/5u2fTK2UZj0ouYD7TayjGs9fs1VnDY3aq7NMSwEN+UZlpp/tlYvK/MjPqig==
dependencies:
"@cosmjs/encoding" "0.28.6"
"@cosmjs/math" "0.28.6"
"@cosmjs/utils" "0.28.6"
"@noble/hashes" "^1"
bn.js "^5.2.0"
elliptic "^6.5.3"
libsodium-wrappers "^0.7.6"

"@cosmjs/crypto@^0.29.5":
version "0.29.5"
resolved "https://registry.yarnpkg.com/@cosmjs/crypto/-/crypto-0.29.5.tgz#ab99fc382b93d8a8db075780cf07487a0f9519fd"
Expand Down Expand Up @@ -1072,6 +1095,15 @@
bech32 "^1.1.4"
readonly-date "^1.0.0"

"@cosmjs/[email protected]":
version "0.28.6"
resolved "https://registry.yarnpkg.com/@cosmjs/encoding/-/encoding-0.28.6.tgz#e4778fffe1657fbbb5334454087d4f09a79c2f60"
integrity sha512-ELTMFZRrcT+fd3bs9a7YTgQIwurtq1jz7cmSITxCMLAiiasr4c72soNsVaw7QRfvW/Rweo4nQVhR+f9cJY6f2A==
dependencies:
base64-js "^1.3.0"
bech32 "^1.1.4"
readonly-date "^1.0.0"

"@cosmjs/encoding@^0.29.5":
version "0.29.5"
resolved "https://registry.yarnpkg.com/@cosmjs/encoding/-/encoding-0.29.5.tgz#009a4b1c596cdfd326f30ccfa79f5e56daa264f2"
Expand All @@ -1081,12 +1113,12 @@
bech32 "^1.1.4"
readonly-date "^1.0.0"

"@cosmjs/[email protected].4":
version "0.28.4"
resolved "https://registry.yarnpkg.com/@cosmjs/json-rpc/-/json-rpc-0.28.4.tgz#19bc38b895bbb74122832a22aea5b25087143636"
integrity sha512-An8ZQi9OKbnS8ew/MyHhF90zQpXBF8RTj2wdvIH+Hr8yA6QjynY8hxRpUwYUt3Skc5NeUnTZNuWCzlluHnoxVg==
"@cosmjs/[email protected].6":
version "0.28.6"
resolved "https://registry.yarnpkg.com/@cosmjs/json-rpc/-/json-rpc-0.28.6.tgz#2d3b03002ab68f7320008e889323117d9af72ca0"
integrity sha512-3nVDGiap57E+nvHyD3f0CiZT0rco3ouhlvIYyiHVUQsZAdwD8P158qOeI0Xjq7Ku5QX57qAbRYRZ/fyKYdZwvQ==
dependencies:
"@cosmjs/stream" "0.28.4"
"@cosmjs/stream" "0.28.6"
xstream "^11.14.0"

"@cosmjs/json-rpc@^0.29.5":
Expand Down Expand Up @@ -1137,14 +1169,35 @@
dependencies:
bn.js "^5.2.0"

"@cosmjs/[email protected]":
version "0.28.6"
resolved "https://registry.yarnpkg.com/@cosmjs/math/-/math-0.28.6.tgz#1fc8a48dc5b79dd7a3fc5405ef32e6b162b960c2"
integrity sha512-vk0g7f8UGXd2gj5IdeOqim/ZnMe9pJ9fxBISXkM1gJzJ+Tw09sdLA44Dp+yP6qyscb9mv5/CsIC+QA7+c27HkA==
dependencies:
bn.js "^5.2.0"

"@cosmjs/math@^0.29.5":
version "0.29.5"
resolved "https://registry.yarnpkg.com/@cosmjs/math/-/math-0.29.5.tgz#722c96e080d6c2b62215ce9f4c70da7625b241b6"
integrity sha512-2GjKcv+A9f86MAWYLUkjhw1/WpRl2R1BTb3m9qPG7lzMA7ioYff9jY5SPCfafKdxM4TIQGxXQlYGewQL16O68Q==
dependencies:
bn.js "^5.2.0"

"@cosmjs/[email protected]", "@cosmjs/proto-signing@^0.28.4":
"@cosmjs/[email protected]":
version "0.28.6"
resolved "https://registry.yarnpkg.com/@cosmjs/proto-signing/-/proto-signing-0.28.6.tgz#0962cd9af2ef797d4118a021acb4d881a0e43752"
integrity sha512-DOuUgmvC/x1tjMv2iC8mD6RnU6S3ffFRMpWvjPMLiHmlxaXlGjlI9apYcg28WEowxJUmLlgvAsKxsDm3OetiBw==
dependencies:
"@cosmjs/amino" "0.28.6"
"@cosmjs/crypto" "0.28.6"
"@cosmjs/encoding" "0.28.6"
"@cosmjs/math" "0.28.6"
"@cosmjs/utils" "0.28.6"
cosmjs-types "^0.4.0"
long "^4.0.0"
protobufjs "~6.11.3"

"@cosmjs/proto-signing@^0.28.4":
version "0.28.4"
resolved "https://registry.yarnpkg.com/@cosmjs/proto-signing/-/proto-signing-0.28.4.tgz#7007651042bd05b3eee7e1c8562417bbed630198"
integrity sha512-4vgCLK9gOsdWzD78V5XbAsupSSyntPEzokWYhgRQNwgVTcKX1kg0eKZqUvF5ua5iL9x6MevfH/sgwPyiYleMBw==
Expand All @@ -1171,12 +1224,12 @@
cosmjs-types "^0.5.2"
long "^4.0.0"

"@cosmjs/[email protected].4":
version "0.28.4"
resolved "https://registry.yarnpkg.com/@cosmjs/socket/-/socket-0.28.4.tgz#f2c337bee18c631739ba6c2357fe564dbf17df45"
integrity sha512-jAEL3Ri+s8XuBM3mqgO4yvmeQu+R+704V37lGROC1B6kAbGxWRyOWrMdOOiFJzCZ35sSMB7L+xKjpE8ug0vJjg==
"@cosmjs/[email protected].6":
version "0.28.6"
resolved "https://registry.yarnpkg.com/@cosmjs/socket/-/socket-0.28.6.tgz#09d170d3d0c86738e18f75bb61e3774918e48a75"
integrity sha512-p1AhkfcI7bOuPSS/BSVavsGBBCi+fDveR3vJfDtf4WI13seRk0MNzBDyVMUCTjr4A/wn25YOwmkQGCRlJDdswA==
dependencies:
"@cosmjs/stream" "0.28.4"
"@cosmjs/stream" "0.28.6"
isomorphic-ws "^4.0.1"
ws "^7"
xstream "^11.14.0"
Expand All @@ -1191,22 +1244,22 @@
ws "^7"
xstream "^11.14.0"

"@cosmjs/[email protected].4":
version "0.28.4"
resolved "https://registry.yarnpkg.com/@cosmjs/stargate/-/stargate-0.28.4.tgz#a5acbaa3451f7c853739064f799dec21097a06df"
integrity sha512-tdwudilP5iLNwDm4TOMBjWuL5YehLPqGlC5/7hjJM/kVHyzLFo4Lzt0dVEwr5YegH+RsRXH/VtFLQz+NYlCobw==
"@cosmjs/[email protected].6":
version "0.28.6"
resolved "https://registry.yarnpkg.com/@cosmjs/stargate/-/stargate-0.28.6.tgz#29dd674dca146aefba8f48886ec5aae0baa641a0"
integrity sha512-72A/qGCt7+1Ce+R53U3SGYllTyJ0JWgewZV/HVcQosVLA+vIf1Pb1Dmd8vd6K2sbb4qdRWaqPHvtjhPUmyrZPQ==
dependencies:
"@confio/ics23" "^0.6.8"
"@cosmjs/amino" "0.28.4"
"@cosmjs/encoding" "0.28.4"
"@cosmjs/math" "0.28.4"
"@cosmjs/proto-signing" "0.28.4"
"@cosmjs/stream" "0.28.4"
"@cosmjs/tendermint-rpc" "0.28.4"
"@cosmjs/utils" "0.28.4"
"@cosmjs/amino" "0.28.6"
"@cosmjs/encoding" "0.28.6"
"@cosmjs/math" "0.28.6"
"@cosmjs/proto-signing" "0.28.6"
"@cosmjs/stream" "0.28.6"
"@cosmjs/tendermint-rpc" "0.28.6"
"@cosmjs/utils" "0.28.6"
cosmjs-types "^0.4.0"
long "^4.0.0"
protobufjs "~6.10.2"
protobufjs "~6.11.3"
xstream "^11.14.0"

"@cosmjs/stargate@^0.29.5":
Expand All @@ -1227,10 +1280,10 @@
protobufjs "~6.11.3"
xstream "^11.14.0"

"@cosmjs/[email protected].4":
version "0.28.4"
resolved "https://registry.yarnpkg.com/@cosmjs/stream/-/stream-0.28.4.tgz#88a294c2404107327f8e293b952db047ab182179"
integrity sha512-BDwDdFOrOgRx/Wm5nknb9YCV9HHIUcsOxykTDZqdArCUsn4QJBq79QIjp919G05Z8UemkoHwiUCUNB2BfoKmFw==
"@cosmjs/[email protected].6":
version "0.28.6"
resolved "https://registry.yarnpkg.com/@cosmjs/stream/-/stream-0.28.6.tgz#6cafa4675f69c31b126fa09b80c5cc2a9d0b7fcd"
integrity sha512-I8/AAbV6Ax4PEFtx6Lr8rj/0Vl0be6OozlefOJ2WJxA7yk5n1lCGfc8nIDb5b7sdk/wif5H/Xpm/IOV1SIWLqA==
dependencies:
xstream "^11.14.0"

Expand All @@ -1241,18 +1294,18 @@
dependencies:
xstream "^11.14.0"

"@cosmjs/[email protected].4":
version "0.28.4"
resolved "https://registry.yarnpkg.com/@cosmjs/tendermint-rpc/-/tendermint-rpc-0.28.4.tgz#78835fdc8126baa3122c8b2b396c1d7d290c7167"
integrity sha512-iz6p4UW2QUZNh55WeJy9wHbMdqM8COo0AJdrGU4Ikb/xU0/H6b0dFPoEK+i6ngR0cSizh+hpTMzh3AA7ySUKlA==
dependencies:
"@cosmjs/crypto" "0.28.4"
"@cosmjs/encoding" "0.28.4"
"@cosmjs/json-rpc" "0.28.4"
"@cosmjs/math" "0.28.4"
"@cosmjs/socket" "0.28.4"
"@cosmjs/stream" "0.28.4"
"@cosmjs/utils" "0.28.4"
"@cosmjs/[email protected].6":
version "0.28.6"
resolved "https://registry.yarnpkg.com/@cosmjs/tendermint-rpc/-/tendermint-rpc-0.28.6.tgz#067e5fab42874881858438ea1e6add52303f9c92"
integrity sha512-vyUym5AbYUitBZwl72URXXoFbXvhsuMUBi/x1ZSzubFifAlU6+WsTEFpC0HYlGeHNQfd8zwI2sO8dnfsiRS/pw==
dependencies:
"@cosmjs/crypto" "0.28.6"
"@cosmjs/encoding" "0.28.6"
"@cosmjs/json-rpc" "0.28.6"
"@cosmjs/math" "0.28.6"
"@cosmjs/socket" "0.28.6"
"@cosmjs/stream" "0.28.6"
"@cosmjs/utils" "0.28.6"
axios "^0.21.2"
readonly-date "^1.0.0"
xstream "^11.14.0"
Expand Down Expand Up @@ -1283,6 +1336,11 @@
resolved "https://registry.yarnpkg.com/@cosmjs/utils/-/utils-0.28.4.tgz#ecbc72458cdaffa6eeef572bc691502b3151330f"
integrity sha512-lb3TU6833arPoPZF8HTeG9V418CpurvqH5Aa/ls0I0wYdPDEMO6622+PQNQhQ8Vw8Az2MXoSyc8jsqrgawT84Q==

"@cosmjs/[email protected]":
version "0.28.6"
resolved "https://registry.yarnpkg.com/@cosmjs/utils/-/utils-0.28.6.tgz#3cb967cce55ef341229c755a7703e7c25b0f0164"
integrity sha512-ct5JPjCo+uI7O2Z7Xb8BxPYK39N0ykNhVsCG6I31z6ns6cGHD8Q3J5iVvSKkkJGRuBSrRk7yO8YY5etws3pinw==

"@cosmjs/utils@^0.29.5":
version "0.29.5"
resolved "https://registry.yarnpkg.com/@cosmjs/utils/-/utils-0.29.5.tgz#3fed1b3528ae8c5f1eb5d29b68755bebfd3294ee"
Expand Down

0 comments on commit b6b471b

Please sign in to comment.