[Snyk] Fix for 1 vulnerabilities

[matthewjablack]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	718/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 6.5	Information Exposure SNYK-JS-FOLLOWREDIRECTS-6444610	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @liquality/bitcoin-esplora-api-provider

The new version differs by 250 commits.

• de4ee76 tests: Increase tolerance for bitcoin fee
• 1b77713 v.0.8.0
• 51847b6 update ethereumjs-tx to 2.1.1
• f05e7a6 update package-lock
• 4883164 update package-lock
• 4d86b5c remove hoist from bootstrap command
• 1d2946c update babel deps to match across project
• 141a351 check for response type from rpc server
• a64956a process data instead of response.data
• f7a7b4c update package-lock files
• e196495 add clean command
• cd945a8 update error messages
• 5ec1651 resolve conflicts
• 351f81c use node-provider; remove unused deps
• 02b1c68 add node-provider
• 7b35622 Merge pull request #367 from liquality/rsk
• e18b88d workflow: apt-get update before install (2)
• 7ae0303 workflow: apt-get update before install
• 8bb2700 Fix tests based on block time + verify claim mined
• 193b056 Support ganache way of mining, erc20 tests fix
• 9afbc91 RSK network
• 8de528d throw new error when initiation transaction is not found
• ad767b2 bump version
• 885a0a7 return fee info from findAddressTransaction

See the full diff

Package name: @liquality/ethereum-rpc-provider

The new version differs by 250 commits.

• de4ee76 tests: Increase tolerance for bitcoin fee
• 1b77713 v.0.8.0
• 51847b6 update ethereumjs-tx to 2.1.1
• f05e7a6 update package-lock
• 4883164 update package-lock
• 4d86b5c remove hoist from bootstrap command
• 1d2946c update babel deps to match across project
• 141a351 check for response type from rpc server
• a64956a process data instead of response.data
• f7a7b4c update package-lock files
• e196495 add clean command
• cd945a8 update error messages
• 5ec1651 resolve conflicts
• 351f81c use node-provider; remove unused deps
• 02b1c68 add node-provider
• 7b35622 Merge pull request #367 from liquality/rsk
• e18b88d workflow: apt-get update before install (2)
• 7ae0303 workflow: apt-get update before install
• 8bb2700 Fix tests based on block time + verify claim mined
• 193b056 Support ganache way of mining, erc20 tests fix
• 9afbc91 RSK network
• 8de528d throw new error when initiation transaction is not found
• ad767b2 bump version
• 885a0a7 return fee info from findAddressTransaction

See the full diff

Package name: axios

The new version differs by 127 commits.

• a64050a Releasing 0.21.1
• d57cd97 Updating changelog for 0.21.1 release
• 8b0f373 Use different socket for Win32 test (#3375)
• e426910 Protocol not parsed when setting proxy config from env vars (#3070)
• c7329fe Hotfix: Prevent SSRF (#3410)
• f472e5d Adding a type guard for `AxiosError` (#2949)
• 7688255 Remove the skipping of the `socket` http test (#3364)
• 820fe6e Updating axios in types to be lower case (#2797)
• 94ca24b Releasing 0.21.0
• 2130a0c Updating changelog for 0.21.0 release
• fbdc150 Lock travis to not use node v15 (#3361)
• 3a8b87d Fixing an issue that type 'null' and 'undefined' is not assignable to validateStatus when typescript strict option is enabled (#3200)
• 9a78465 Revert "Fixing overwrite Blob/File type as Content-Type in browser. (#1773)" (#3289)
• 6d05b96 Fix typos (#3309)
• fa36737 fix axios.delete ignores config.data (#3282)
• b7e954e Fixing node types (#3237)
• 04d45f2 Fixing requestHeaders.Authorization (#3287)
• e8c6e19 docs: Fix simple typo, existant -> existent (#3252)
• 0d87655 Releasing 0.20.0
• cd27741 Updating changelog for 0.20.0 release
• ffea034 Releasing 0.20.0-0
• fe147fb Updating changlog for 0.20.0 beta release
• 16aa2ce Fixing response with utf-8 BOM can not parse to json (#2419)
• c4300a8 Adding support for URLSearchParams in node (#1900)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.