[Snyk] Upgrade gridplus-sdk from 2.2.7 to 2.6.0

[Douhgn]

Snyk has created this PR to upgrade gridplus-sdk from 2.2.7 to 2.6.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 11 versions ahead of your current version.

• The recommended version was released on 21 days ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Prototype Poisoning SNYK-JS-QS-3153490	586	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	586	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-COOKIEJAR-3149984	586	Proof of Concept

Release notes

Package name: gridplus-sdk

• 2.6.0 - 2024-07-10
  

  What's changed

  • chore: bump dependencies by @ legobeat in #535
  • devDeps: remove unused request-promise by @ legobeat in #536
  • Revert "deps: bs58check->^3.0.1" by @ legobeat in #537
  • Improves firmware flag error in btc tests by @ netbonus in #539
  • Runs prettier against entire codebase by @ netbonus in #540
  • adds fetchAddress by @ netbonus in #544
  • adds handling for fetching more than 10 addresses by @ netbonus in #545
  • adds forge test suite by @ netbonus in #551
  • updates docs to refer to functional API by @ netbonus in #553
  • deps: js-sha@^0.8.0->^0.9.3 by @ legobeat in #548
  • adds logging to signing request by @ netbonus in #555
  • fix vertex/blur tests by @ netbonus in #556
  • bumps package to 2.6.0 by @ netbonus in #554
  • improves solana address fetching by @ netbonus in #559
  • fixes bignumber cbor decoding by @ netbonus in #538
  • add solana tx version support by @ netbonus in #546
  • fix api tests by @ netbonus in #561
  • fix test pairing to use simpler deviceid, pw, appname system by @ netbonus in #562
  • v2.6.0 by @ netbonus in #557

  Full Changelog: v2.5.2...v2.6.0

• 2.5.2 - 2023-05-01
  

  Fixes:

  • (#533) Improves signed integer parsing for EIP712 messages
• 2.5.1 - 2023-03-08
  

  Misc.

  • #530 Updates @ ethereumjs/common and @ ethereumjs/tx to latest
• 2.5.0 - 2023-02-14
  

  Features

  • #525 - Adds Functional API
• 2.4.3 - 2022-12-20
  

  Fixes

  • #515 - Fixes issue with P2WSH bitcoin address types
• 2.4.2 - 2022-12-15
  

  Misc:

  • (#503) Fixes broken BTC signing tests
  • (#504) Add comments explaining how to generate non-exportable seeds for legacy tests
  • (#506) Add Celo chain info for ABI decoding
  • (#508) Removes redundant BLS tests (now moved to lattice-eth2-utils
  • (#511, #512) Updates docs
• 2.4.1 - 2022-12-07
  

  Misc:

  • (#501) Migrate ETH2 deposit utils to separate module to avoid adding WASM code to this repo
• 2.4.0 - 2022-12-02
  

  Features

  • (#494) Adds utils to generate ETH deposit data

  Misc

  • (#495) Update docs to better cover functionality
  • (#496) Add better dark mode for docs
  • (#497) Bump version
• 2.3.0 - 2022-11-28
  

  Features:

  • (#480) Adds support for BLS signing and pubkey export
  • (#481, #489, #490) Adds support for encrypted data export (starting with BLS private key export via EIP2335)

  Fixes:

  • (#483) Fixes edge case in canonical ABI tuple parser and adds more ABI decoding test vectors

  Misc:

  • (#474) Updates signing tests
  • (#477) Adds smart contract Solana tx tests
  • (#473) Updates wallet job structs to correspond to updated firmware (only relevant for tests)
  • (#478) Adds new ABI decoding vectors
  • (#485) Bump version
  • (#488) Removes cruft
  • (#491) Move ABI decoding lib out of devDependencies
• 2.2.9 - 2022-09-23
  

  Fixes

  • #471 Fixes issue with validators mishandling data
• 2.2.8 - 2022-09-23
• 2.2.7 - 2022-08-23

from gridplus-sdk GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs