Merge pull request #62 from evannetwork/feature/fix-critical-dependen…

…cy-updates

Update dependencies for vulnerabilities

.github/dependabot.yml

@@ -0,0 +1,22 @@
+version: 2
+updates:
+  - package-ecosystem: "cargo"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    # Raise pull requests for version updates
+    # to cargo against the `develop` branch
+    target-branch: "develop"
+    # Labels on pull requests for version updates only
+    labels:
+      - "cargo dependencies"
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    # Raise pull requests for version updates
+    # to cargo against the `develop` branch
+    target-branch: "develop"
+    # Labels on pull requests for version updates only
+    labels:
+      - "cargo dependencies"

Cargo.toml

@@ -110,7 +110,6 @@ optional = true
 [dependencies.vade-jwt-vc]
 git = "https://github.com/evannetwork/vade-jwt-vc.git"
 branch = "develop"
-version = "0.2.0"
 optional = true
 
 # signer
@@ -149,7 +148,6 @@ optional = true
 [dependencies.vade-evan-bbs]
 git = "https://github.com/evannetwork/vade-evan-bbs.git"
 branch = "develop"
-version = "0.4.0"
 optional = true
 default-features = false
 

VERSIONS.md

@@ -38,6 +38,7 @@
 - align key format for master secrets and public keys (no extra double quotes)
 - fix optional params for did_create
 - fix wasm release and `target-c-sdk` build options
+- update dependencies for critical vulnerabilities
 
 ### Deprecation
 

builds/wasm/package.json

@@ -1,38 +1,38 @@
 {
   "dependencies": {
-    "jose": "^4.11.4",
-    "node-fetch": "2.6.1",
+    "jose": "^4.14.4",
+    "node-fetch": "3.3.1",
     "node-localstorage": "^2.2.1"
   },
   "description": "VADE usage example for wasm",
   "devDependencies": {
-    "@babel/core": "^7.9.6",
-    "@babel/plugin-proposal-class-properties": "^7.8.3",
-    "@babel/plugin-proposal-decorators": "^7.8.3",
-    "@babel/preset-env": "^7.9.6",
-    "@babel/preset-typescript": "^7.9.0",
-    "@types/jest": "^23.0.0",
-    "@typescript-eslint/eslint-plugin": "^4.17.0",
-    "@typescript-eslint/parser": "^4.5.0",
-    "babel-jest": "^26.0.1",
+    "@babel/core": "^7.22.1",
+    "@babel/plugin-proposal-class-properties": "^7.18.6",
+    "@babel/plugin-proposal-decorators": "^7.22.3",
+    "@babel/preset-env": "^7.22.4",
+    "@babel/preset-typescript": "^7.21.5",
+    "@types/jest": "^29.5.1",
+    "@typescript-eslint/eslint-plugin": "^5.59.8",
+    "@typescript-eslint/parser": "^5.59.8",
+    "babel-jest": "^29.5.0",
     "babel-plugin-transform-typescript-metadata": "^0.3.0",
-    "eslint": "^7.0.0",
-    "eslint-config-airbnb-base": "^14.1.0",
-    "eslint-config-airbnb-typescript": "12",
-    "eslint-import-resolver-typescript": "^2.3.0",
-    "eslint-plugin-import": "^2.22.1",
-    "eslint-plugin-jest": "^23.18.0",
-    "fs-extra": "^9.0.1",
-    "glob": "^7.1.6",
-    "husky": "^4.3.0",
-    "jest": "^26.0.1",
-    "lint-staged": "^10.4.2",
-    "sinon": "^9.2.1",
-    "ts-jest": "^26.1.0",
-    "tsc-watch": "^4.2.9",
-    "tsconfig-paths": "^3.9.0",
+    "eslint": "^8.41.0",
+    "eslint-config-airbnb-base": "^15.0.0",
+    "eslint-config-airbnb-typescript": "17.0.0",
+    "eslint-import-resolver-typescript": "^3.5.5",
+    "eslint-plugin-import": "^2.27.5",
+    "eslint-plugin-jest": "^27.2.1",
+    "fs-extra": "^11.1.1",
+    "glob": "^10.2.6",
+    "husky": "^8.0.3",
+    "jest": "^29.5.0",
+    "lint-staged": "^13.2.2",
+    "sinon": "^15.1.0",
+    "ts-jest": "^29.1.0",
+    "tsc-watch": "^6.0.4",
+    "tsconfig-paths": "^4.0.0",
     "tscpaths": "^0.0.9",
-    "typescript": "4"
+    "typescript": "5.0.4"
   },
   "husky": {
     "hooks": {