fix: vulnerabilities and upgrade dependencies

OpenZeppelin · Dec 13, 2024 · 05101ab · 05101ab
1 parent 6b0bada
commit 05101ab
Show file tree

Hide file tree

Showing 17 changed files with 179 additions and 235 deletions.
diff --git a/e2e/package.json b/e2e/package.json
@@ -13,7 +13,7 @@
   "license": "ISC",
   "devDependencies": {
     "@types/jest": "^29.5.12",
-    "axios": "^1.7.2",
+    "axios": "^1.7.4",
     "jest": "^29.7.0",
     "ts-jest": "^29.1.2"
   },

diff --git a/package.json b/package.json
@@ -5,7 +5,7 @@
   "description": "The OpenZeppelin Defender Software Development Kit",
   "dependencies": {
     "@actions/exec": "^1.1.1",
-    "axios": "^1.7.2",
+    "axios": "^1.7.4",
     "lodash": "^4.17.21"
   },
   "devDependencies": {
@@ -76,6 +76,10 @@
     "semver": "^7.6.2",
     "tough-cookie": "^4.0.0",
     "tar": "^6.2.1",
-    "cookie": "^0.4.2"
+    "cookie": "^0.7.2",
+    "cross-spawn": "^7.0.5",
+    "elliptic": "^6.6.0",
+    "rollup": "4.22.4",
+    "micromatch": "^4.0.8"
   }
-}
+}
diff --git a/packages/account/package.json b/packages/account/package.json
@@ -25,7 +25,7 @@
   "license": "MIT",
   "dependencies": {
     "@openzeppelin/defender-sdk-base-client": "^1.15.2",
-    "axios": "^1.7.2",
+    "axios": "^1.7.4",
     "lodash": "^4.17.21"
   },
   "publishConfig": {

diff --git a/packages/action/package.json b/packages/action/package.json
@@ -30,7 +30,7 @@
   "dependencies": {
     "jszip": "^3.10.1",
     "@openzeppelin/defender-sdk-base-client": "^1.15.2",
-    "axios": "^1.7.2",
+    "axios": "^1.7.4",
     "lodash": "^4.17.21",
     "glob": "^11.0.0",
     "dotenv": "^16.3.1"

diff --git a/packages/approval-process/package.json b/packages/approval-process/package.json
@@ -25,7 +25,7 @@
   "license": "MIT",
   "dependencies": {
     "@openzeppelin/defender-sdk-base-client": "^1.15.2",
-    "axios": "^1.6.7",
+    "axios": "^1.7.4",
     "lodash": "^4.17.21"
   },
   "publishConfig": {

diff --git a/packages/base/src/utils/network.ts b/packages/base/src/utils/network.ts
@@ -20,8 +20,8 @@ export type PublicNetwork =
   | 'fantomtest'
   | 'fuji'
   | 'fuse'
-  | 'geist-polter'
   | 'geist-mainnet'
+  | 'geist-polter'
   | 'hedera'
   | 'hederatest'
   | 'holesky'
@@ -73,8 +73,8 @@ export const Networks: Network[] = [
   'fantomtest',
   'fuji',
   'fuse',
-  'geist-polter',
   'geist-mainnet',
+  'geist-polter',
   'hedera',
   'hederatest',
   'holesky',
@@ -140,8 +140,8 @@ export const chainIds: { [key in Network]: number } = {
   'fantomtest': 4002,
   'fuji': 43113,
   'fuse': 122,
-  'geist-polter': 631571,
   'geist-mainnet': 63157,
+  'geist-polter': 631571,
   'hedera': 295,
   'hederatest': 296,
   'holesky': 17000,

diff --git a/packages/deploy/package.json b/packages/deploy/package.json
@@ -27,7 +27,7 @@
   "license": "MIT",
   "dependencies": {
     "@openzeppelin/defender-sdk-base-client": "^1.15.2",
-    "axios": "^1.7.2",
+    "axios": "^1.7.4",
     "lodash": "^4.17.21"
   },
   "publishConfig": {

diff --git a/packages/kvstore/package.json b/packages/kvstore/package.json
@@ -25,7 +25,7 @@
   "license": "MIT",
   "dependencies": {
     "@openzeppelin/defender-sdk-base-client": "^1.15.2",
-    "axios": "^1.7.2",
+    "axios": "^1.7.4",
     "lodash": "^4.17.21",
     "fs-extra": "^11.2.0"
   },

diff --git a/packages/monitor/package.json b/packages/monitor/package.json
@@ -26,7 +26,7 @@
   "dependencies": {
     "ethers": "^6.9.0",
     "@openzeppelin/defender-sdk-base-client": "^1.15.2",
-    "axios": "^1.7.2",
+    "axios": "^1.7.4",
     "lodash": "^4.17.21"
   },
   "publishConfig": {

diff --git a/packages/network/package.json b/packages/network/package.json
@@ -25,7 +25,7 @@
   "license": "MIT",
   "dependencies": {
     "@openzeppelin/defender-sdk-base-client": "^1.15.2",
-    "axios": "^1.7.2",
+    "axios": "^1.7.4",
     "lodash": "^4.17.21"
   },
   "publishConfig": {

diff --git a/packages/notification-channel/package.json b/packages/notification-channel/package.json
@@ -25,7 +25,7 @@
   "license": "MIT",
   "dependencies": {
     "@openzeppelin/defender-sdk-base-client": "^1.15.2",
-    "axios": "^1.7.2",
+    "axios": "^1.7.4",
     "lodash": "^4.17.21"
   },
   "publishConfig": {

diff --git a/packages/proposal/package.json b/packages/proposal/package.json
@@ -25,7 +25,7 @@
   "license": "MIT",
   "dependencies": {
     "@openzeppelin/defender-sdk-base-client": "^1.15.2",
-    "axios": "^1.7.2",
+    "axios": "^1.7.4",
     "ethers": "^6.9.0",
     "lodash": "^4.17.21"
   },

diff --git a/packages/proposal/src/models/simulation.ts b/packages/proposal/src/models/simulation.ts
@@ -1,6 +1,5 @@
 // Copied from openzeppelin/defender/models/src/types/simulation.res.d.ts
 
-
 export type BigUInt = string | number;
 
 export interface SimulationRequest {
@@ -19,7 +18,6 @@ export interface Transaction {
   maxPriorityFeePerGas?: number;
 }
 
-
 export interface SimulationResponse {
   summary: {
     network: string;

diff --git a/packages/relay-group/package.json b/packages/relay-group/package.json
@@ -25,7 +25,7 @@
   "license": "MIT",
   "dependencies": {
     "@openzeppelin/defender-sdk-base-client": "^1.15.2",
-    "axios": "^1.7.2",
+    "axios": "^1.7.4",
     "lodash": "^4.17.21"
   },
   "publishConfig": {

diff --git a/packages/relay-signer/package.json b/packages/relay-signer/package.json
@@ -40,7 +40,7 @@
     "@ethersproject/logger": "^5.7.0",
     "@openzeppelin/defender-sdk-base-client": "^1.15.2",
     "amazon-cognito-identity-js": "^6.3.6",
-    "axios": "^1.7.2",
+    "axios": "^1.7.4",
     "ethers": "^6.9.0",
     "lodash": "^4.17.21"
   },

diff --git a/packages/relay/package.json b/packages/relay/package.json
@@ -25,7 +25,7 @@
   "license": "MIT",
   "dependencies": {
     "@openzeppelin/defender-sdk-base-client": "^1.15.2",
-    "axios": "^1.7.2",
+    "axios": "^1.7.4",
     "lodash": "^4.17.21"
   },
   "publishConfig": {