From 3af2d90742f0b30980c514c63367c89e43a5c563 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 29 Oct 2024 00:12:07 +0000 Subject: [PATCH 1/3] Bump elliptic from 6.5.7 to 6.6.0 Bumps [elliptic](https://github.com/indutny/elliptic) from 6.5.7 to 6.6.0. - [Commits](https://github.com/indutny/elliptic/compare/v6.5.7...v6.6.0) --- updated-dependencies: - dependency-name: elliptic dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- packages/credential-sdk/package.json | 2 +- packages/dock-blockchain-api/package.json | 2 +- yarn.lock | 21 ++++----------------- 3 files changed, 6 insertions(+), 19 deletions(-) diff --git a/packages/credential-sdk/package.json b/packages/credential-sdk/package.json index c3359b00f..e7bb03cff 100644 --- a/packages/credential-sdk/package.json +++ b/packages/credential-sdk/package.json @@ -36,7 +36,7 @@ "blakejs": "^1.2.1", "bs58": "^5.0.0", "deep-equal": "^2.2.3", - "elliptic": "6.5.7", + "elliptic": "6.6.0", "js-sha256": "^0.11.0", "json-canonicalize": "1.0.4", "json-stringify-deterministic": "^1.0.12", diff --git a/packages/dock-blockchain-api/package.json b/packages/dock-blockchain-api/package.json index b4b6c7c82..d6529bec1 100644 --- a/packages/dock-blockchain-api/package.json +++ b/packages/dock-blockchain-api/package.json @@ -95,7 +95,7 @@ "cross-fetch": "3.1.6", "deep-equal": "2.0.5", "dotenv": "16.0.1", - "elliptic": "6.5.7", + "elliptic": "6.6.0", "flat": "^5.0.2", "js-sha256": "0.9.0", "json-canonicalize": "1.0.4", diff --git a/yarn.lock b/yarn.lock index 4e60075ec..7c5ec9916 100644 --- a/yarn.lock +++ b/yarn.lock @@ -6978,23 +6978,10 @@ elliptic@6.5.4: minimalistic-assert "^1.0.1" minimalistic-crypto-utils "^1.0.1" -elliptic@6.5.7: - version "6.5.7" - resolved "https://registry.yarnpkg.com/elliptic/-/elliptic-6.5.7.tgz#8ec4da2cb2939926a1b9a73619d768207e647c8b" - integrity sha512-ESVCtTwiA+XhY3wyh24QqRGBoP3rEdDUl3EDUUo9tft074fi19IrdpH7hLCMMP3CIj7jb3W96rn8lt/BqIlt5Q== - dependencies: - bn.js "^4.11.9" - brorand "^1.1.0" - hash.js "^1.0.0" - hmac-drbg "^1.0.1" - inherits "^2.0.4" - minimalistic-assert "^1.0.1" - minimalistic-crypto-utils "^1.0.1" - -elliptic@^6.5.3, elliptic@^6.5.4: - version "6.5.6" - resolved "https://registry.yarnpkg.com/elliptic/-/elliptic-6.5.6.tgz#ee5f7c3a00b98a2144ac84d67d01f04d438fa53e" - integrity sha512-mpzdtpeCLuS3BmE3pO3Cpp5bbjlOPY2Q0PgoF+Od1XZrHLYI28Xe3ossCmYCQt11FQKEYd9+PF8jymTvtWJSHQ== +elliptic@6.6.0, elliptic@^6.5.3, elliptic@^6.5.4: + version "6.6.0" + resolved "https://registry.yarnpkg.com/elliptic/-/elliptic-6.6.0.tgz#5919ec723286c1edf28685aa89261d4761afa210" + integrity sha512-dpwoQcLc/2WLQvJvLRHKZ+f9FgOdjnq11rurqwekGQygGPsYSK29OMMD2WalatiqQ+XGFDglTNixpPfI+lpaAA== dependencies: bn.js "^4.11.9" brorand "^1.1.0" From 2f92afcb6e89ec3972d8bbb5629791b9942acc2e Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 29 Oct 2024 17:13:29 +0000 Subject: [PATCH 2/3] Bump rollup from 2.78.0 to 2.79.2 Bumps [rollup](https://github.com/rollup/rollup) from 2.78.0 to 2.79.2. - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](https://github.com/rollup/rollup/compare/v2.78.0...v2.79.2) --- updated-dependencies: - dependency-name: rollup dependency-type: direct:development ... Signed-off-by: dependabot[bot] --- packages/cheqd-blockchain-api/package.json | 2 +- packages/cheqd-blockchain-modules/package.json | 2 +- packages/credential-sdk/package.json | 2 +- yarn.lock | 7 ------- 4 files changed, 3 insertions(+), 10 deletions(-) diff --git a/packages/cheqd-blockchain-api/package.json b/packages/cheqd-blockchain-api/package.json index 0654d8e7b..65aca5dfd 100644 --- a/packages/cheqd-blockchain-api/package.json +++ b/packages/cheqd-blockchain-api/package.json @@ -66,7 +66,7 @@ "parity-scale-codec": "^0.5.3", "r1csfile": "0.0.41", "ramda": "^0.27.2", - "rollup": "2.78.0", + "rollup": "2.79.2", "rollup-plugin-copy": "^3.4.0", "rollup-plugin-multi-input": "^1.3.2", "rollup-plugin-node-polyfills": "^0.2.1", diff --git a/packages/cheqd-blockchain-modules/package.json b/packages/cheqd-blockchain-modules/package.json index 4b11805fe..73243de0c 100644 --- a/packages/cheqd-blockchain-modules/package.json +++ b/packages/cheqd-blockchain-modules/package.json @@ -59,7 +59,7 @@ "jest-environment-node": "^29.7.0", "jsdoc": "^3.6.3", "jsdoc-typeof-plugin": "^1.0.0", - "rollup": "2.78.0", + "rollup": "2.79.2", "rollup-plugin-copy": "^3.4.0", "rollup-plugin-multi-input": "^1.3.2", "rollup-plugin-node-polyfills": "^0.2.1", diff --git a/packages/credential-sdk/package.json b/packages/credential-sdk/package.json index e7bb03cff..f3cf43118 100644 --- a/packages/credential-sdk/package.json +++ b/packages/credential-sdk/package.json @@ -82,7 +82,7 @@ "jest-environment-node": "^29.7.0", "jsdoc": "^3.6.3", "jsdoc-typeof-plugin": "^1.0.0", - "rollup": "2.78.0", + "rollup": "2.79.2", "rollup-plugin-copy": "^3.4.0", "rollup-plugin-multi-input": "^1.3.2", "rollup-plugin-node-polyfills": "^0.2.1", diff --git a/yarn.lock b/yarn.lock index 7c5ec9916..0d4af7936 100644 --- a/yarn.lock +++ b/yarn.lock @@ -11168,13 +11168,6 @@ rollup-pluginutils@^2.8.1: dependencies: estree-walker "^0.6.1" -rollup@2.78.0: - version "2.78.0" - resolved "https://registry.yarnpkg.com/rollup/-/rollup-2.78.0.tgz#00995deae70c0f712ea79ad904d5f6b033209d9e" - integrity sha512-4+YfbQC9QEVvKTanHhIAFVUFSRsezvQF8vFOJwtGfb9Bb+r014S+qryr9PSmw8x6sMnPkmFBGAvIFVQxvJxjtg== - optionalDependencies: - fsevents "~2.3.2" - rollup@2.79.2: version "2.79.2" resolved "https://registry.yarnpkg.com/rollup/-/rollup-2.79.2.tgz#f150e4a5db4b121a21a747d762f701e5e9f49090" From 61c01a9c990ecf0775878cb2e7ba61477f58ff1e Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 29 Oct 2024 17:13:31 +0000 Subject: [PATCH 3/3] Bump secp256k1 from 4.0.3 to 4.0.4 Bumps [secp256k1](https://github.com/cryptocoinjs/secp256k1-node) from 4.0.3 to 4.0.4. - [Release notes](https://github.com/cryptocoinjs/secp256k1-node/releases) - [Commits](https://github.com/cryptocoinjs/secp256k1-node/compare/v4.0.3...v4.0.4) --- updated-dependencies: - dependency-name: secp256k1 dependency-type: indirect ... Signed-off-by: dependabot[bot] --- yarn.lock | 25 ++++++++++--------------- 1 file changed, 10 insertions(+), 15 deletions(-) diff --git a/yarn.lock b/yarn.lock index 7c5ec9916..0030e2700 100644 --- a/yarn.lock +++ b/yarn.lock @@ -6978,7 +6978,7 @@ elliptic@6.5.4: minimalistic-assert "^1.0.1" minimalistic-crypto-utils "^1.0.1" -elliptic@6.6.0, elliptic@^6.5.3, elliptic@^6.5.4: +elliptic@6.6.0, elliptic@^6.5.3, elliptic@^6.5.4, elliptic@^6.5.7: version "6.6.0" resolved "https://registry.yarnpkg.com/elliptic/-/elliptic-6.6.0.tgz#5919ec723286c1edf28685aa89261d4761afa210" integrity sha512-dpwoQcLc/2WLQvJvLRHKZ+f9FgOdjnq11rurqwekGQygGPsYSK29OMMD2WalatiqQ+XGFDglTNixpPfI+lpaAA== @@ -10109,11 +10109,6 @@ node-abi@^3.3.0: dependencies: semver "^7.3.5" -node-addon-api@^2.0.0: - version "2.0.2" - resolved "https://registry.yarnpkg.com/node-addon-api/-/node-addon-api-2.0.2.tgz#432cfa82962ce494b132e9d72a15b29f71ff5d32" - integrity sha512-Ntyt4AIXyaLIuMHF6IOoTakB3K+RWxwtsHNRxllEoA6vPwP9o4866g6YWDLUdnucilZhmkxiHwHr11gAENw+QA== - node-addon-api@^5.0.0: version "5.1.0" resolved "https://registry.yarnpkg.com/node-addon-api/-/node-addon-api-5.1.0.tgz#49da1ca055e109a23d537e9de43c09cca21eb762" @@ -11276,20 +11271,20 @@ scrypt-js@3.0.1: integrity sha512-cdwTTnqPu0Hyvf5in5asVdZocVDTNRmR7XEcJuIzMjJeSHybHl7vpB66AzwTaIg6CLSbtjcxc8fqcySfnTkccA== secp256k1@^4.0.2: - version "4.0.3" - resolved "https://registry.yarnpkg.com/secp256k1/-/secp256k1-4.0.3.tgz#c4559ecd1b8d3c1827ed2d1b94190d69ce267303" - integrity sha512-NLZVf+ROMxwtEj3Xa562qgv2BK5e2WNmXPiOdVIPLgs6lyTzMvBq0aWTYMI5XCP9jZMVKOcqZLw/Wc4vDkuxhA== + version "4.0.4" + resolved "https://registry.yarnpkg.com/secp256k1/-/secp256k1-4.0.4.tgz#58f0bfe1830fe777d9ca1ffc7574962a8189f8ab" + integrity sha512-6JfvwvjUOn8F/jUoBY2Q1v5WY5XS+rj8qSe0v8Y4ezH4InLgTEeOOPQsRll9OV429Pvo6BCHGavIyJfr3TAhsw== dependencies: - elliptic "^6.5.4" - node-addon-api "^2.0.0" + elliptic "^6.5.7" + node-addon-api "^5.0.0" node-gyp-build "^4.2.0" secp256k1@^5.0.0: - version "5.0.0" - resolved "https://registry.yarnpkg.com/secp256k1/-/secp256k1-5.0.0.tgz#be6f0c8c7722e2481e9773336d351de8cddd12f7" - integrity sha512-TKWX8xvoGHrxVdqbYeZM9w+izTF4b9z3NhSaDkdn81btvuh+ivbIMGT/zQvDtTFWhRlThpoz6LEYTr7n8A5GcA== + version "5.0.1" + resolved "https://registry.yarnpkg.com/secp256k1/-/secp256k1-5.0.1.tgz#dc2c86187d48ff2da756f0f7e96417ee03c414b1" + integrity sha512-lDFs9AAIaWP9UCdtWrotXWWF9t8PWgQDcxqgAnpM9rMqxb3Oaq2J0thzPVSxBwdJgyQtkU/sYtFtbM1RSt/iYA== dependencies: - elliptic "^6.5.4" + elliptic "^6.5.7" node-addon-api "^5.0.0" node-gyp-build "^4.2.0"