From 1f447ed2d9c054a4bba1fd21ee7b0ddebf858585 Mon Sep 17 00:00:00 2001 From: Walden Raines Date: Wed, 10 Mar 2021 17:22:29 -0500 Subject: [PATCH] fix(deps): update unchained libs to latest version (#215) Update unchained-bitcoin and unchained-wallets to latest versions to patch vulnerability in elliptic. --- package-lock.json | 189 ++++++++++++++++++++++++++-------------------- package.json | 4 +- 2 files changed, 111 insertions(+), 82 deletions(-) diff --git a/package-lock.json b/package-lock.json index e5f850b2..a77e8b73 100644 --- a/package-lock.json +++ b/package-lock.json @@ -4506,37 +4506,59 @@ } }, "@ledgerhq/devices": { - "version": "5.38.0", - "resolved": "https://registry.npmjs.org/@ledgerhq/devices/-/devices-5.38.0.tgz", - "integrity": "sha512-1RZ+Dh+oVUDMeaPSCeQ56qzgiMHHy481dbkRCDUMRJEzkGqOLI3k34x7XdkVKy1NQdt8G8sYyobP/yixDry5ow==", + "version": "5.45.0", + "resolved": "https://registry.npmjs.org/@ledgerhq/devices/-/devices-5.45.0.tgz", + "integrity": "sha512-wAtm4kvQ8pAdqdIpDa/OqU9rhtqI0sTdwDGGp4vthHiWNdBwqwPFcKmEki+mUgPCfRqn3SifyqaPqvFpvu+oWw==", "requires": { - "@ledgerhq/errors": "^5.38.0", - "@ledgerhq/logs": "^5.38.0", - "rxjs": "^6.6.3" + "@ledgerhq/errors": "^5.43.0", + "@ledgerhq/logs": "^5.43.0", + "rxjs": "^6.6.6", + "semver": "^7.3.4" }, "dependencies": { + "lru-cache": { + "version": "6.0.0", + "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz", + "integrity": "sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==", + "requires": { + "yallist": "^4.0.0" + } + }, "rxjs": { - "version": "6.6.3", - "resolved": "https://registry.npmjs.org/rxjs/-/rxjs-6.6.3.tgz", - "integrity": "sha512-trsQc+xYYXZ3urjOiJOuCOa5N3jAZ3eiSpQB5hIT8zGlL2QfnHLJ2r7GMkBGuIausdJN1OneaI6gQlsqNHHmZQ==", + "version": "6.6.6", + "resolved": "https://registry.npmjs.org/rxjs/-/rxjs-6.6.6.tgz", + "integrity": "sha512-/oTwee4N4iWzAMAL9xdGKjkEHmIwupR3oXbQjCKywF1BeFohswF3vZdogbmEF6pZkOsXTzWkrZszrWpQTByYVg==", "requires": { "tslib": "^1.9.0" } + }, + "semver": { + "version": "7.3.4", + "resolved": "https://registry.npmjs.org/semver/-/semver-7.3.4.tgz", + "integrity": "sha512-tCfb2WLjqFAtXn4KEdxIhalnRtoKFN7nAwj0B3ZXCbQloV2tq5eDbcTmT68JJD3nRJq24/XgxtQKFIpQdtvmVw==", + "requires": { + "lru-cache": "^6.0.0" + } + }, + "yallist": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz", + "integrity": "sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==" } } }, "@ledgerhq/errors": { - "version": "5.38.0", - "resolved": "https://registry.npmjs.org/@ledgerhq/errors/-/errors-5.38.0.tgz", - "integrity": "sha512-d4gQzbOLNBoGIwDtEGFNSb0w0aYN10T5Y749e+vqiJoS3dWrB+5BCSQ/U/ALet0wi/UMIyFY/xmgd1gPaPB3Hw==" + "version": "5.43.0", + "resolved": "https://registry.npmjs.org/@ledgerhq/errors/-/errors-5.43.0.tgz", + "integrity": "sha512-ZjKlUQbIn/DHXAefW3Y1VyDrlVhVqqGnXzrqbOXuDbZ2OAIfSe/A1mrlCbWt98jP/8EJQBuCzBOtnmpXIL/nYg==" }, "@ledgerhq/hw-app-btc": { - "version": "5.38.0", - "resolved": "https://registry.npmjs.org/@ledgerhq/hw-app-btc/-/hw-app-btc-5.38.0.tgz", - "integrity": "sha512-EpowZiXfy3qUaitoBM1gSawNcwk7yJj/1SoaG2jLV4FCNEi5sB2i7nUXUmae66jQ2JEFqRK1AOF8gt8sS4AAOQ==", + "version": "5.45.0", + "resolved": "https://registry.npmjs.org/@ledgerhq/hw-app-btc/-/hw-app-btc-5.45.0.tgz", + "integrity": "sha512-qIr8L1kbxOUHdy+c1pCrzOScyHvZJpClRx+ejfe9IuhnxxuYEhu4+0GkTkFvooUpNvTugnR6pyXa4X3uknEiIg==", "requires": { - "@ledgerhq/hw-transport": "^5.38.0", - "@ledgerhq/logs": "^5.38.0", + "@ledgerhq/hw-transport": "^5.45.0", + "@ledgerhq/logs": "^5.43.0", "bip32-path": "^0.4.2", "invariant": "^2.2.4", "ripemd160": "2", @@ -4568,46 +4590,53 @@ } }, "@ledgerhq/hw-transport": { - "version": "5.38.0", - "resolved": "https://registry.npmjs.org/@ledgerhq/hw-transport/-/hw-transport-5.38.0.tgz", - "integrity": "sha512-CAxvHukCcp+RqaEsSltmBw4Lb1yW42fiF/LTYN7JvCkZyLIQhvkndLDVCgp4hpMdtLK4bkf7RJRElqbN0vRoAQ==", + "version": "5.45.0", + "resolved": "https://registry.npmjs.org/@ledgerhq/hw-transport/-/hw-transport-5.45.0.tgz", + "integrity": "sha512-YDkPQ2u5BJaMk2rJ8jcSucCv1JRUhmlaWUOvZ+Q7I8VNnvBM+N5yc9nqRX8TuHRlbPyiFm8xjEkPktVejuTAvQ==", "requires": { - "@ledgerhq/devices": "^5.38.0", - "@ledgerhq/errors": "^5.38.0", - "events": "^3.2.0" + "@ledgerhq/devices": "^5.45.0", + "@ledgerhq/errors": "^5.43.0", + "events": "^3.3.0" + }, + "dependencies": { + "events": { + "version": "3.3.0", + "resolved": "https://registry.npmjs.org/events/-/events-3.3.0.tgz", + "integrity": "sha512-mQw+2fkQbALzQ7V0MY0IqdnXNOeTtP4r0lN9z7AAawCXgqea7bDii20AYrIBrFd/Hx0M2Ocz6S111CaFkUcb0Q==" + } } }, "@ledgerhq/hw-transport-node-hid": { - "version": "5.38.0", - "resolved": "https://registry.npmjs.org/@ledgerhq/hw-transport-node-hid/-/hw-transport-node-hid-5.38.0.tgz", - "integrity": "sha512-Daya0ra2NVflHj9ChxhSvf3dJEdxGEWA/qgGA/U/61jJZ5JpvQbzQR6ANSFuXg0IDwWgDea0hsMCviYxd0641A==", - "requires": { - "@ledgerhq/devices": "^5.38.0", - "@ledgerhq/errors": "^5.38.0", - "@ledgerhq/hw-transport": "^5.38.0", - "@ledgerhq/hw-transport-node-hid-noevents": "^5.38.0", - "@ledgerhq/logs": "^5.38.0", - "lodash": "^4.17.20", + "version": "5.45.0", + "resolved": "https://registry.npmjs.org/@ledgerhq/hw-transport-node-hid/-/hw-transport-node-hid-5.45.0.tgz", + "integrity": "sha512-DfzY1qJ1oWclV2AAYYc6kDyYmZLMOUrvGtO5FB+0oWoY6tSdsJIwdmXzq9TuqidQUuLt5yKHaJzDAmVdpj3scg==", + "requires": { + "@ledgerhq/devices": "^5.45.0", + "@ledgerhq/errors": "^5.43.0", + "@ledgerhq/hw-transport": "^5.45.0", + "@ledgerhq/hw-transport-node-hid-noevents": "^5.45.0", + "@ledgerhq/logs": "^5.43.0", + "lodash": "^4.17.21", "node-hid": "2.1.1", - "usb": "^1.6.3" + "usb": "^1.6.5" }, "dependencies": { "lodash": { - "version": "4.17.20", - "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.20.tgz", - "integrity": "sha512-PlhdFcillOINfeV7Ni6oF1TAEayyZBoZ8bcshTHqOYJYlrqzRK5hagpagky5o4HfCzzd1TRkXPMFq6cKk9rGmA==" + "version": "4.17.21", + "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz", + "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==" } } }, "@ledgerhq/hw-transport-node-hid-noevents": { - "version": "5.38.0", - "resolved": "https://registry.npmjs.org/@ledgerhq/hw-transport-node-hid-noevents/-/hw-transport-node-hid-noevents-5.38.0.tgz", - "integrity": "sha512-zuxN3gWfCuN+pbK3BKc8z3VCulKI7zee1N3xhCWua9TiwL3leBTBs25Bvm22fmiLJYhzszccbF673/bpnnIQAA==", - "requires": { - "@ledgerhq/devices": "^5.38.0", - "@ledgerhq/errors": "^5.38.0", - "@ledgerhq/hw-transport": "^5.38.0", - "@ledgerhq/logs": "^5.38.0", + "version": "5.45.0", + "resolved": "https://registry.npmjs.org/@ledgerhq/hw-transport-node-hid-noevents/-/hw-transport-node-hid-noevents-5.45.0.tgz", + "integrity": "sha512-f0c1FKAo9r/bU8fbASAEP2uuU7hbbX7AfyrETu7Lx5yx6GmWzq/IL+FhnmWJyiwlwqH7HR71ivVYoEoM4veWCQ==", + "requires": { + "@ledgerhq/devices": "^5.45.0", + "@ledgerhq/errors": "^5.43.0", + "@ledgerhq/hw-transport": "^5.45.0", + "@ledgerhq/logs": "^5.43.0", "node-hid": "2.1.1" } }, @@ -4623,20 +4652,20 @@ } }, "@ledgerhq/hw-transport-webusb": { - "version": "5.38.0", - "resolved": "https://registry.npmjs.org/@ledgerhq/hw-transport-webusb/-/hw-transport-webusb-5.38.0.tgz", - "integrity": "sha512-u91CS829M+/VYGs/jUE0/zNJhma9yvz0qtxl4HcgnOYLtYk/TvK9g0e5jbyFUW9vfndHwBNNC+77crPtotqicg==", + "version": "5.45.0", + "resolved": "https://registry.npmjs.org/@ledgerhq/hw-transport-webusb/-/hw-transport-webusb-5.45.0.tgz", + "integrity": "sha512-YGiiy2/A8270tw4J2MYdBsYhHFveCytZwaieWA44QTjFgRBjmBoGtdBu9MAQyn2MMb+pXe5bkzDU6HacqrtQ/g==", "requires": { - "@ledgerhq/devices": "^5.38.0", - "@ledgerhq/errors": "^5.38.0", - "@ledgerhq/hw-transport": "^5.38.0", - "@ledgerhq/logs": "^5.38.0" + "@ledgerhq/devices": "^5.45.0", + "@ledgerhq/errors": "^5.43.0", + "@ledgerhq/hw-transport": "^5.45.0", + "@ledgerhq/logs": "^5.43.0" } }, "@ledgerhq/logs": { - "version": "5.38.0", - "resolved": "https://registry.npmjs.org/@ledgerhq/logs/-/logs-5.38.0.tgz", - "integrity": "sha512-i87Yn89Cq2D9Y0KmrEzCm62XHzI2edeOTBENKH6vAyzESGzyF+SBoqtZNwrjJcKup3/9dNn/zHjpicY7ev94Vw==" + "version": "5.43.0", + "resolved": "https://registry.npmjs.org/@ledgerhq/logs/-/logs-5.43.0.tgz", + "integrity": "sha512-QWfQjea3ekh9ZU+JeL2tJC9cTKLZ/JrcS0JGatLejpRYxQajvnHvHfh0dbHOKXEaXfCskEPTZ3f1kzuts742GA==" }, "@material-ui/core": { "version": "4.9.13", @@ -7259,9 +7288,9 @@ } }, "bl": { - "version": "4.0.3", - "resolved": "https://registry.npmjs.org/bl/-/bl-4.0.3.tgz", - "integrity": "sha512-fs4G6/Hu4/EE+F75J8DuN/0IpQqNjAdC7aEQv7Qt8MHGUH7Ckv2MwTEEeN9QehD0pfIDkMI1bkHYkKy7xHyKIg==", + "version": "4.1.0", + "resolved": "https://registry.npmjs.org/bl/-/bl-4.1.0.tgz", + "integrity": "sha512-1W07cM9gS6DcLperZfFSj+bWLtaPGSOHWhPiGzXmvVJbRLdG82sH/Kn8EtW1VqWVA54AKf2h5k5BbnIbwF3h6w==", "requires": { "buffer": "^5.5.0", "inherits": "^2.0.4", @@ -17691,9 +17720,9 @@ } }, "node-abi": { - "version": "2.19.3", - "resolved": "https://registry.npmjs.org/node-abi/-/node-abi-2.19.3.tgz", - "integrity": "sha512-9xZrlyfvKhWme2EXFKQhZRp1yNWT/uI1luYPr3sFl+H4keYY4xR+1jO7mvTTijIsHf1M+QDe9uWuKeEpLInIlg==", + "version": "2.21.0", + "resolved": "https://registry.npmjs.org/node-abi/-/node-abi-2.21.0.tgz", + "integrity": "sha512-smhrivuPqEM3H5LmnY3KU6HfYv0u4QklgAxfFyRNujKUzbUcYZ+Jc2EhukB9SRcD2VpqhxM7n/MIcp1Ua1/JMg==", "requires": { "semver": "^5.4.1" } @@ -19619,9 +19648,9 @@ } }, "prebuild-install": { - "version": "6.0.0", - "resolved": "https://registry.npmjs.org/prebuild-install/-/prebuild-install-6.0.0.tgz", - "integrity": "sha512-h2ZJ1PXHKWZpp1caLw0oX9sagVpL2YTk+ZwInQbQ3QqNd4J03O6MpFNmMTJlkfgPENWqe5kP0WjQLqz5OjLfsw==", + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/prebuild-install/-/prebuild-install-6.0.1.tgz", + "integrity": "sha512-7GOJrLuow8yeiyv75rmvZyeMGzl8mdEX5gY69d6a6bHWmiPevwqFw+tQavhK0EYMaSg3/KD24cWqeQv1EWsqDQ==", "requires": { "detect-libc": "^1.0.3", "expand-template": "^2.0.3", @@ -23213,9 +23242,9 @@ } }, "trezor-connect": { - "version": "8.1.19", - "resolved": "https://registry.npmjs.org/trezor-connect/-/trezor-connect-8.1.19.tgz", - "integrity": "sha512-JU4qTkOhvq9EFdsbcNnECN9b13A7dFaPJiU4YAB9+zmlPHUjtswsSQN60aFR08pAovNVjPN5YbYuWYWYHVy/4w==", + "version": "8.1.25", + "resolved": "https://registry.npmjs.org/trezor-connect/-/trezor-connect-8.1.25.tgz", + "integrity": "sha512-tHx4igwt7F5JR5t4hXjJ3J2p8n/wjPjd+w/syEP8ibHJvomeZ5Qx7oCvZp+GILFT5lVPAxQDLlAm7vggliBZDQ==", "requires": { "@babel/runtime": "^7.12.5", "events": "^3.2.0", @@ -23223,9 +23252,9 @@ }, "dependencies": { "@babel/runtime": { - "version": "7.12.5", - "resolved": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.12.5.tgz", - "integrity": "sha512-plcc+hbExy3McchJCEQG3knOsuh3HH+Prx1P6cLIkET/0dLuQDEnrT+s27Axgc9bqfsmNUNHfscgMUdBpC9xfg==", + "version": "7.13.10", + "resolved": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.13.10.tgz", + "integrity": "sha512-4QPkjJq6Ns3V/RgpEahRk+AGfL0eO6RHHtTWoNNr5mO49G6B5+X6d6THgWEAvTrznU5xYpbAlVKRYcsCgh/Akw==", "requires": { "regenerator-runtime": "^0.13.4" } @@ -23352,9 +23381,9 @@ "optional": true }, "unchained-bitcoin": { - "version": "0.1.3", - "resolved": "https://registry.npmjs.org/unchained-bitcoin/-/unchained-bitcoin-0.1.3.tgz", - "integrity": "sha512-6y/ieRdx330391Gk5rlYh28xsU7abUCsa77FtbT/3hlGBHGdBi1Y4n/Vp2eRAyAYrV6seZvds7Asi98q7EMo5A==", + "version": "0.1.4", + "resolved": "https://registry.npmjs.org/unchained-bitcoin/-/unchained-bitcoin-0.1.4.tgz", + "integrity": "sha512-wA+IB+UjaIsW3cnU/R8yqUSQQj3GOLDrX4aJffKDGW+VvrGKOA/MKqqghV5lCZ3b7pIPXmIQcXoi5V3nI9g3Tg==", "requires": { "@babel/polyfill": "^7.7.0", "bignumber.js": "^8.1.1", @@ -23419,9 +23448,9 @@ } }, "unchained-wallets": { - "version": "0.1.15", - "resolved": "https://registry.npmjs.org/unchained-wallets/-/unchained-wallets-0.1.15.tgz", - "integrity": "sha512-ksKOHqzFvie5Io/2ip35qM8q9d7dUyxUyydznfElhX+9MDM8tgny0z4vcWrxZlGKiHcBKJZIQY1sm8QXNmKMhA==", + "version": "0.1.17", + "resolved": "https://registry.npmjs.org/unchained-wallets/-/unchained-wallets-0.1.17.tgz", + "integrity": "sha512-4MpQJbUA/pn/+EwNDs21RqF+fmuheB5f9KGMkj4T/v4qpjGaebNX1JUrY2sPM8R4ajV8WCY7NWNNnzIx/2d12w==", "requires": { "@babel/polyfill": "^7.7.0", "@ledgerhq/hw-app-btc": "^5.34.1", @@ -23436,7 +23465,7 @@ "pako": "^1.0.10", "punycode": "^2.1.1", "trezor-connect": "^8.1.19", - "unchained-bitcoin": "^0.1.0" + "unchained-bitcoin": "^0.1.3" }, "dependencies": { "bignumber.js": { @@ -23664,9 +23693,9 @@ } }, "usb": { - "version": "1.6.3", - "resolved": "https://registry.npmjs.org/usb/-/usb-1.6.3.tgz", - "integrity": "sha512-23KYMjaWydACd8wgGKMQ4MNwFspAT6Xeim4/9Onqe5Rz/nMb4TM/WHL+qPT0KNFxzNKzAs63n1xQWGEtgaQ2uw==", + "version": "1.6.5", + "resolved": "https://registry.npmjs.org/usb/-/usb-1.6.5.tgz", + "integrity": "sha512-gLVrerQce+F+TSkWgzXACV07nOw+uBlv0gT3svsqTWWxNDe3ESQBIhss3qonIDArMvWPJp6z3I4hXEDYTmPlHQ==", "requires": { "bindings": "^1.4.0", "nan": "2.13.2", diff --git a/package.json b/package.json index 713bf908..6d474efb 100644 --- a/package.json +++ b/package.json @@ -119,7 +119,7 @@ "redux-promise": "^0.6.0", "redux-thunk": "^2.3.0", "reselect": "^4.0.0", - "unchained-bitcoin": "^0.1.3", - "unchained-wallets": "^0.1.15" + "unchained-bitcoin": "^0.1.4", + "unchained-wallets": "^0.1.17" } }