From 616d2532f22be709b90382970a8d42aef3bca2e1 Mon Sep 17 00:00:00 2001 From: "live-github-bot[bot]" <105061298+live-github-bot[bot]@users.noreply.github.com> Date: Fri, 6 Dec 2024 22:46:59 +0000 Subject: [PATCH] chore(deps): update dependency secp256k1 [security] --- apps/ledger-live-desktop/package.json | 2 +- .../packages/hw-app-exchange/package.json | 2 +- pnpm-lock.yaml | 158 +++++++++++------- 3 files changed, 100 insertions(+), 62 deletions(-) diff --git a/apps/ledger-live-desktop/package.json b/apps/ledger-live-desktop/package.json index cc9725b8cf65..da7b71f8d872 100644 --- a/apps/ledger-live-desktop/package.json +++ b/apps/ledger-live-desktop/package.json @@ -142,7 +142,7 @@ "reselect": "4.1.8", "rimraf": "4.4.1", "rxjs": "7.8.1", - "secp256k1": "4.0.3", + "secp256k1": "4.0.4", "semver": "7.5.4", "storyly-web": "3.6.7", "styled-components": "5.3.11", diff --git a/libs/ledgerjs/packages/hw-app-exchange/package.json b/libs/ledgerjs/packages/hw-app-exchange/package.json index 599d7292b778..0e283f4b7081 100644 --- a/libs/ledgerjs/packages/hw-app-exchange/package.json +++ b/libs/ledgerjs/packages/hw-app-exchange/package.json @@ -40,7 +40,7 @@ "bip32-path": "^0.4.2", "documentation": "14.0.2", "jest": "^29.7.0", - "secp256k1": "5.0.0", + "secp256k1": "5.0.1", "ts-jest": "^29.1.1", "ts-node": "^10.4.0" }, diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 6a1fe559d530..03609851895a 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -566,8 +566,8 @@ importers: specifier: 7.8.1 version: 7.8.1 secp256k1: - specifier: 4.0.3 - version: 4.0.3 + specifier: 4.0.4 + version: 5.0.1 semver: specifier: 7.5.4 version: 7.5.4 @@ -1937,7 +1937,7 @@ importers: version: 7.8.1 secp256k1: specifier: ^4.0.3 - version: 4.0.3 + version: 5.0.1 sha.js: specifier: ^2.4.11 version: 2.4.11 @@ -3679,7 +3679,7 @@ importers: version: 1.1.7 secp256k1: specifier: ^5.0.0 - version: 5.0.0 + version: 5.0.1 tiny-secp256k1: specifier: '1' version: 1.1.6 @@ -4113,7 +4113,7 @@ importers: version: 7.8.1 secp256k1: specifier: ^4.0.3 - version: 4.0.3 + version: 5.0.1 semver: specifier: ^7.3.5 version: 7.5.4 @@ -4906,8 +4906,8 @@ importers: specifier: ^29.7.0 version: 29.7.0(@types/node@20.12.12)(ts-node@10.9.2(@types/node@20.12.12)(typescript@5.4.3)) secp256k1: - specifier: 5.0.0 - version: 5.0.0 + specifier: 5.0.1 + version: 5.0.1 ts-jest: specifier: ^29.1.1 version: 29.1.5(jest@29.7.0(@types/node@20.12.12)(ts-node@10.9.2(@types/node@20.12.12)(typescript@5.4.3)))(typescript@5.4.3) @@ -14402,7 +14402,7 @@ packages: metro-react-native-babel-preset: '*' react: ^16.8.0 || ^17.0.0 || ^18.0.0 react-dom: ^16.8.0 || ^17.0.0 || ^18.0.0 - webpack: '*' + webpack: '5' peerDependenciesMeta: react: optional: true @@ -16378,9 +16378,11 @@ packages: abstract-leveldown@0.12.4: resolution: {integrity: sha512-TOod9d5RDExo6STLMGa+04HGkl+TlMfbDnTyN93/ETJ9DpQ0DaYLqcMZlbXvdc4W3vVo1Qrl+WhSp8zvDsJ+jA==} + deprecated: Superseded by abstract-level (https://github.com/Level/community#faq) abstract-leveldown@2.6.1: resolution: {integrity: sha512-z3y8+/Y5i90z+viZGYIg7Tu+muVO4qGHAeug7QQ7oQcMaS1RY+3ccwHTISI/vkVAK9r7snv8lMICNdmrYM/LkA==} + deprecated: Superseded by abstract-level (https://github.com/Level/community#faq) accepts@1.3.8: resolution: {integrity: sha512-PYAthTa2m2VKxuvSD3DPC/Gy+U+sOA1LAuT8mkmRuvw+NACSaeXEQ+NHcVF7rONl6qcaxV3Uuemwawk+7+SJLw==} @@ -16581,7 +16583,7 @@ packages: resolution: {integrity: sha512-/FQM1EDkTsf63Ub2C6O7GuYFDsSXUwsaZDurV0np41ocwq0jthUAYCmhBX9f+KwlaCgIuWyr/4WlUQUBfKfZog==} engines: {node: '>=6'} peerDependencies: - rxjs: '*' + rxjs: ^5.5.10 zenObservable: '*' peerDependenciesMeta: rxjs: @@ -17246,6 +17248,9 @@ packages: bn.js@4.12.0: resolution: {integrity: sha512-c98Bf3tPniI+scsdk237ku1Dc3ujXQTSgyiPUDEOe7tRkhrqridvh8klBv0HCEso1OLOYcHuCv/cS6DNxKH+ZA==} + bn.js@4.12.1: + resolution: {integrity: sha512-k8TVBiPkPJT9uHLdOKfFpqcfprwBFOAAXXozRubr7R7PfIuKvQlzcI4M0pALeqXN09vdaMbUdUj+pass+uULAg==} + bn.js@5.2.1: resolution: {integrity: sha512-eXRvHzWyYPBuB4NBy0cmYQjGitUrtqwbvlzP3G6VFnNRbsZQIxQ10PbKKHt8gZ/HW/D/747aDl+QkDqg3KQLMQ==} @@ -18858,6 +18863,7 @@ packages: deferred-leveldown@0.2.0: resolution: {integrity: sha512-+WCbb4+ez/SZ77Sdy1iadagFiVzMB89IKOBhglgnUkVxOxRWmmFsz8UDSNWh4Rhq+3wr/vMFlYj+rdEwWUDdng==} + deprecated: Superseded by abstract-level (https://github.com/Level/community#faq) define-data-property@1.1.4: resolution: {integrity: sha512-rBMvIzlpA8v6E+SJZoo++HAYqsLrkg7MSfIinMPFhmkorw7X+dOXVJQs+QT69zGkzMyfDnIMN2Wid1+NbL3T+A==} @@ -19283,6 +19289,9 @@ packages: elliptic@6.5.5: resolution: {integrity: sha512-7EjbcmUm17NQFu4Pmgmq2olYMj8nwMnpcddByChSUjArp8F5DQWcIcpriwO4ZToLNAJig0yiyjswfyGNje/ixw==} + elliptic@6.6.1: + resolution: {integrity: sha512-RaddvvMatK2LJHqFJ+YA4WysVN5Ita9E35botqIYspQ4TkRAlCicdzKOjlyv/1Za5RyTNn7di//eEV0uTAfe3g==} + embla-carousel-autoplay@8.4.0: resolution: {integrity: sha512-AJHXrnaY+Tf4tb/+oItmJSpz4P0WvS62GrW5Z4iFY3zsH0mkKcijzd04LIkj0P4DkTazIBEuXple+nUVmuMsrQ==} peerDependencies: @@ -19646,7 +19655,7 @@ packages: peerDependencies: '@typescript-eslint/eslint-plugin': ^4.0.0 || ^5.0.0 eslint: ^6.0.0 || ^7.0.0 || ^8.0.0 - jest: '*' + jest: ^27.0.0 peerDependenciesMeta: '@typescript-eslint/eslint-plugin': optional: true @@ -20390,8 +20399,8 @@ packages: hasBin: true peerDependencies: expo-modules-core: '*' - react: '*' - react-native: '*' + react: 18.2.0 + react-native: 0.72.10 peerDependenciesMeta: expo-modules-core: optional: true @@ -20406,8 +20415,8 @@ packages: peerDependencies: expo-modules-autolinking: '*' expo-modules-core: '*' - react: '*' - react-native: '*' + react: 18.2.0 + react-native: 0.74.5 peerDependenciesMeta: expo-modules-autolinking: optional: true @@ -23179,6 +23188,7 @@ packages: levelup@0.18.6: resolution: {integrity: sha512-uB0auyRqIVXx+hrpIUtol4VAPhLRcnxcOsd2i2m6rbFIDarO5dnrupLOStYYpEcu8ZT087Z9HEuYw1wjr6RL6Q==} + deprecated: Superseded by abstract-level (https://github.com/Level/community#faq) leven@2.1.0: resolution: {integrity: sha512-nvVPLpIHUxCUoRLrFqTgSxXJ614d8AgQoWl7zPe/2VadE8+1dpU3LBhowRuBAcuwruWtOdD8oYC9jDNJjXDPyA==} @@ -24591,6 +24601,10 @@ packages: resolution: {integrity: sha512-u6fs2AEUljNho3EYTJNBfImO5QTo/J/1Etd+NVdCj7qWKUSN/bSLkZwhDv7I+w/MSC6qJ4cknepkAYykDdK8og==} hasBin: true + node-gyp-build@4.8.4: + resolution: {integrity: sha512-LA4ZjwlnUblHVgq0oBF3Jl/6h/Nvs5fzBLwdEF4nuxnFdsfajde4WfxtJr3CaiH+F6ewcIB/q4jQ4UzPyid+CQ==} + hasBin: true + node-hid@2.1.2: resolution: {integrity: sha512-qhCyQqrPpP93F/6Wc/xUR7L8mAJW0Z6R7HMQV8jCHHksAxNDe/4z4Un/H9CpLOT+5K39OPyt9tIQlavxWES3lg==} engines: {node: '>=10'} @@ -26264,7 +26278,7 @@ packages: resolution: {integrity: sha512-kBGxI+MIZGBf4wZhNCWwHkMcVP+kbpmrLWH/SkO0qCKc7D7eSPcxQbfpsmsCo8v2KCBYjuGSou+xTqK44D/jMg==} engines: {npm: ^3.0.0} peerDependencies: - prop-types: '*' + prop-types: ^15.6.1 react: '>=15.0.0' peerDependenciesMeta: prop-types: @@ -26288,8 +26302,8 @@ packages: react-native-animatable@1.3.3: resolution: {integrity: sha512-2ckIxZQAsvWn25Ho+DK3d1mXIgj7tITkrS4pYDvx96WyOttSvzzFeQnM2od0+FUMzILbdHDsDEqZvnz1DYNQ1w==} peerDependencies: - react: '*' - react-native: '*' + react: 16.9.0 + react-native: 0.61.2 peerDependenciesMeta: react: optional: true @@ -26299,8 +26313,8 @@ packages: react-native-animatable@1.4.0: resolution: {integrity: sha512-DZwaDVWm2NBvBxf7I0wXKXLKb/TxDnkV53sWhCvei1pRyTX3MVFpkvdYBknNBqPrxYuAIlPxEp7gJOidIauUkw==} peerDependencies: - react: '*' - react-native: '*' + react: 18.2.0 + react-native: 0.72.6 peerDependenciesMeta: react: optional: true @@ -27365,14 +27379,18 @@ packages: resolution: {integrity: sha512-UDar4sKvWAksIlfX3xIaQReADn+WFnHvbVujpcbr+9Sf/69odMwy2MUsz5CKLQgX9nsIyrjuxL2imVyoNHa3fg==} engines: {node: '>=10.0.0'} - secp256k1@4.0.3: - resolution: {integrity: sha512-NLZVf+ROMxwtEj3Xa562qgv2BK5e2WNmXPiOdVIPLgs6lyTzMvBq0aWTYMI5XCP9jZMVKOcqZLw/Wc4vDkuxhA==} - engines: {node: '>=10.0.0'} + secp256k1@4.0.4: + resolution: {integrity: sha512-6JfvwvjUOn8F/jUoBY2Q1v5WY5XS+rj8qSe0v8Y4ezH4InLgTEeOOPQsRll9OV429Pvo6BCHGavIyJfr3TAhsw==} + engines: {node: '>=18.0.0'} secp256k1@5.0.0: resolution: {integrity: sha512-TKWX8xvoGHrxVdqbYeZM9w+izTF4b9z3NhSaDkdn81btvuh+ivbIMGT/zQvDtTFWhRlThpoz6LEYTr7n8A5GcA==} engines: {node: '>=14.0.0'} + secp256k1@5.0.1: + resolution: {integrity: sha512-lDFs9AAIaWP9UCdtWrotXWWF9t8PWgQDcxqgAnpM9rMqxb3Oaq2J0thzPVSxBwdJgyQtkU/sYtFtbM1RSt/iYA==} + engines: {node: '>=18.0.0'} + secretjs@0.17.8: resolution: {integrity: sha512-PD/GUF52GjysBo8dDVK8KZXRXON1iPXkkyBNWIBVsaap3A1nZPbqynx/VUOjSpFx103KdjvzeA4+O0+EdWWWmw==} deprecated: deprecated @@ -33183,8 +33201,8 @@ snapshots: '@cosmjs/math': 0.24.1 '@cosmjs/utils': 0.24.1 bip39: 3.1.0 - bn.js: 4.12.0 - elliptic: 6.5.5 + bn.js: 4.12.1 + elliptic: 6.6.1 js-sha3: 0.8.0 libsodium-wrappers: 0.7.13 pbkdf2: 3.1.2 @@ -33198,8 +33216,8 @@ snapshots: '@cosmjs/math': 0.25.6 '@cosmjs/utils': 0.25.6 bip39: 3.1.0 - bn.js: 4.12.0 - elliptic: 6.5.5 + bn.js: 4.12.1 + elliptic: 6.6.1 js-sha3: 0.8.0 libsodium-wrappers: 0.7.13 ripemd160: 2.0.2 @@ -33212,7 +33230,7 @@ snapshots: '@cosmjs/utils': 0.26.8 '@noble/hashes': 1.5.0 bn.js: 5.2.1 - elliptic: 6.5.5 + elliptic: 6.6.1 libsodium-wrappers: 0.7.13 '@cosmjs/crypto@0.31.3': @@ -33280,11 +33298,11 @@ snapshots: '@cosmjs/math@0.24.1': dependencies: - bn.js: 4.12.0 + bn.js: 4.12.1 '@cosmjs/math@0.25.6': dependencies: - bn.js: 4.12.0 + bn.js: 4.12.1 '@cosmjs/math@0.26.8': dependencies: @@ -35470,7 +35488,7 @@ snapshots: dependencies: bignumber.js: 9.1.2 crypto-js: 4.2.0 - elliptic: 6.5.5 + elliptic: 6.6.1 expo-crypto: 10.2.0 expo-random: 12.3.0 js-base64: 3.7.7 @@ -35579,8 +35597,8 @@ snapshots: dependencies: '@iov/encoding': 2.1.0 bip39: 3.1.0 - bn.js: 4.12.0 - elliptic: 6.5.5 + bn.js: 4.12.1 + elliptic: 6.6.1 js-sha3: 0.8.0 libsodium-wrappers: 0.7.13 pbkdf2: 3.1.2 @@ -35593,7 +35611,7 @@ snapshots: dependencies: base64-js: 1.5.1 bech32: 1.1.4 - bn.js: 4.12.0 + bn.js: 4.12.1 readonly-date: 1.0.0 '@iov/utils@2.0.2': {} @@ -36492,7 +36510,7 @@ snapshots: bip39: 3.1.0 buffer: 6.0.3(patch_hash=2xnca52oxhztvr7iaoovwclcze) crypto-js: 4.2.0 - elliptic: 6.5.5 + elliptic: 6.6.1 sha.js: 2.4.11 '@keplr-wallet/proto-types@0.12.89': @@ -45648,7 +45666,7 @@ snapshots: asn1.js@4.10.1: dependencies: - bn.js: 4.12.0 + bn.js: 4.12.1 inherits: 2.0.4 minimalistic-assert: 1.0.1 @@ -46408,6 +46426,8 @@ snapshots: bn.js@4.12.0: {} + bn.js@4.12.1: {} + bn.js@5.2.1: {} body-parser@1.20.2: @@ -46548,7 +46568,7 @@ snapshots: browserify-rsa: 4.1.0 create-hash: 1.2.0 create-hmac: 1.1.7 - elliptic: 6.5.5 + elliptic: 6.6.1 hash-base: 3.0.4 inherits: 2.0.4 parse-asn1: 5.1.7 @@ -47617,8 +47637,8 @@ snapshots: create-ecdh@4.0.4: dependencies: - bn.js: 4.12.0 - elliptic: 6.5.5 + bn.js: 4.12.1 + elliptic: 6.6.1 create-hash@1.2.0: dependencies: @@ -48503,7 +48523,7 @@ snapshots: diffie-hellman@5.0.3: dependencies: - bn.js: 4.12.0 + bn.js: 4.12.1 miller-rabin: 4.0.1 randombytes: 2.1.0 @@ -48886,6 +48906,16 @@ snapshots: minimalistic-assert: 1.0.1 minimalistic-crypto-utils: 1.0.1 + elliptic@6.6.1: + dependencies: + bn.js: 4.12.1 + brorand: 1.1.0 + hash.js: 1.1.7 + hmac-drbg: 1.0.1 + inherits: 2.0.4 + minimalistic-assert: 1.0.1 + minimalistic-crypto-utils: 1.0.1 + embla-carousel-autoplay@8.4.0(embla-carousel@8.0.0-rc17): dependencies: embla-carousel: 8.0.0-rc17 @@ -49818,8 +49848,8 @@ snapshots: eth-lib@0.1.29: dependencies: - bn.js: 4.12.0 - elliptic: 6.5.5 + bn.js: 4.12.1 + elliptic: 6.6.1 nano-json-stream-parser: 0.1.2 servify: 0.1.12 ws: 3.3.3 @@ -49831,8 +49861,8 @@ snapshots: eth-lib@0.2.8: dependencies: - bn.js: 4.12.0 - elliptic: 6.5.5 + bn.js: 4.12.1 + elliptic: 6.6.1 xhr-request-promise: 0.1.3 ethereum-bloom-filters@1.0.10: @@ -49854,7 +49884,7 @@ snapshots: randombytes: 2.1.0 safe-buffer: 5.2.1 scrypt-js: 3.0.1 - secp256k1: 4.0.3 + secp256k1: 4.0.4 setimmediate: 1.0.5 ethereum-cryptography@1.2.0: @@ -54948,13 +54978,13 @@ snapshots: keccak@3.0.2: dependencies: node-addon-api: 2.0.2 - node-gyp-build: 4.8.0 + node-gyp-build: 4.8.4 readable-stream: 3.6.2 keccak@3.0.4: dependencies: node-addon-api: 2.0.2 - node-gyp-build: 4.8.0 + node-gyp-build: 4.8.4 readable-stream: 3.6.2 key-encoder@2.0.3: @@ -54962,7 +54992,7 @@ snapshots: '@types/elliptic': 6.4.18 asn1.js: 5.4.1 bn.js: 4.12.0 - elliptic: 6.5.5 + elliptic: 6.6.1 keygrip@1.1.0: dependencies: @@ -56627,7 +56657,7 @@ snapshots: miller-rabin@4.0.1: dependencies: - bn.js: 4.12.0 + bn.js: 4.12.1 brorand: 1.1.0 mime-db@1.33.0: {} @@ -57119,6 +57149,8 @@ snapshots: node-gyp-build@4.8.0: {} + node-gyp-build@4.8.4: {} + node-hid@2.1.2: dependencies: bindings: 1.5.0 @@ -58693,7 +58725,7 @@ snapshots: public-encrypt@4.0.3: dependencies: - bn.js: 4.12.0 + bn.js: 4.12.1 browserify-rsa: 4.1.0 create-hash: 1.2.0 parse-asn1: 5.1.7 @@ -60614,21 +60646,27 @@ snapshots: secp256k1@4.0.2: dependencies: - elliptic: 6.5.5 + elliptic: 6.6.1 node-addon-api: 2.0.2 - node-gyp-build: 4.8.0 + node-gyp-build: 4.8.4 - secp256k1@4.0.3: + secp256k1@4.0.4: dependencies: - elliptic: 6.5.5 - node-addon-api: 2.0.2 - node-gyp-build: 4.8.0 + elliptic: 6.6.1 + node-addon-api: 5.1.0 + node-gyp-build: 4.8.4 secp256k1@5.0.0: dependencies: - elliptic: 6.5.5 + elliptic: 6.6.1 node-addon-api: 5.1.0 - node-gyp-build: 4.8.0 + node-gyp-build: 4.8.4 + + secp256k1@5.0.1: + dependencies: + elliptic: 6.6.1 + node-addon-api: 5.1.0 + node-gyp-build: 4.8.4 secretjs@0.17.8: dependencies: @@ -60979,7 +61017,7 @@ snapshots: sodium-native@4.1.1: dependencies: - node-gyp-build: 4.8.0 + node-gyp-build: 4.8.4 optional: true sonic-boom@4.0.1: @@ -63354,7 +63392,7 @@ snapshots: utf-8-validate@5.0.10: dependencies: - node-gyp-build: 4.8.0 + node-gyp-build: 4.8.4 utf-8-validate@6.0.3: dependencies: @@ -63912,7 +63950,7 @@ snapshots: web3-eth-iban@1.5.2: dependencies: - bn.js: 4.12.0 + bn.js: 4.12.1 web3-utils: 1.5.2 web3-eth-personal@1.10.4: