From 362a641c97bf060add2dd0a1ed434892204f347a Mon Sep 17 00:00:00 2001 From: ignaciosantise <25931366+ignaciosantise@users.noreply.github.com> Date: Wed, 13 May 2026 09:58:43 -0400 Subject: [PATCH] chore(deps): consolidated dependabot security updates (minor/patch only) Bump transitive dependencies via overrides/resolutions to address open Dependabot security alerts. Skips major bumps (uuid 14.x) and packages without an upstream patch (elliptic, bigint-buffer, ip). Updates across all projects: - @xmldom/xmldom 0.8.12 -> 0.8.13 (XML injection/DoS advisories) - fast-xml-parser 5.5.7 -> 5.7.0 (XMLBuilder injection) - hono 4.12.12 -> 4.12.14 (JSX attribute HTML injection) - postcss -> 8.5.10 (XSS via unescaped ) - axios 1.15.0 -> 1.15.2 (rn_cli_wallet; prototype pollution suite) - ip-address 10.1.0 -> 10.2.0 (rn_cli_wallet; Address6 XSS) - follow-redirects 1.15.11 -> 1.16.0 (rn_cli_wallet; auth header leak) - uuid 13.0.0 -> 13.0.1 (pos-app, poc-pos-app; buffer bounds) - addressable 2.8.x -> 2.9.0 (4 Gemfile.lock; template ReDoS) POS app Vercel safety: kept the nested @vercel/node -> undici 5.29.0 override; verified `npm run web:build` succeeds for both pos-app and poc-pos-app. Co-Authored-By: Claude Opus 4.7 --- dapps/W3MEthers/Gemfile.lock | 4 +- dapps/W3MEthers/package.json | 6 +- dapps/W3MEthers/yarn.lock | 94 +++++++++++++---------- dapps/W3MEthers5/Gemfile.lock | 4 +- dapps/W3MEthers5/package.json | 4 +- dapps/W3MEthers5/yarn.lock | 60 +++++++++------ dapps/W3MWagmi/Gemfile.lock | 4 +- dapps/W3MWagmi/package.json | 7 +- dapps/W3MWagmi/yarn.lock | 94 +++++++++++++---------- dapps/appkit-expo-wagmi/package-lock.json | 20 ++--- dapps/appkit-expo-wagmi/package.json | 9 ++- dapps/poc-pos-app/package-lock.json | 22 +++--- dapps/poc-pos-app/package.json | 11 +-- dapps/pos-app/package-lock.json | 22 +++--- dapps/pos-app/package.json | 11 +-- wallets/expo-wallet/package-lock.json | 14 ++-- wallets/expo-wallet/package.json | 7 +- wallets/rn_cli_wallet/Gemfile.lock | 4 +- wallets/rn_cli_wallet/package.json | 8 +- wallets/rn_cli_wallet/yarn.lock | 88 ++++++++++++--------- 20 files changed, 279 insertions(+), 214 deletions(-) diff --git a/dapps/W3MEthers/Gemfile.lock b/dapps/W3MEthers/Gemfile.lock index 140356114..cba0dcda5 100644 --- a/dapps/W3MEthers/Gemfile.lock +++ b/dapps/W3MEthers/Gemfile.lock @@ -17,8 +17,8 @@ GEM minitest (>= 5.1, < 6) securerandom (>= 0.3) tzinfo (~> 2.0, >= 2.0.5) - addressable (2.8.7) - public_suffix (>= 2.0.2, < 7.0) + addressable (2.9.0) + public_suffix (>= 2.0.2, < 8.0) algoliasearch (1.27.5) httpclient (~> 2.8, >= 2.8.3) json (>= 1.5.1) diff --git a/dapps/W3MEthers/package.json b/dapps/W3MEthers/package.json index fc7eb39a3..d9ef4ab51 100644 --- a/dapps/W3MEthers/package.json +++ b/dapps/W3MEthers/package.json @@ -83,13 +83,15 @@ "js-yaml": "4.1.1", "h3": "1.15.9", "lodash": "4.18.1", - "fast-xml-parser": "5.5.7", + "fast-xml-parser": "5.7.0", "bn.js": "5.2.3", "minimatch": "9.0.9", "flatted": "3.4.2", "yaml": "2.8.3", "picomatch": "4.0.4", "defu": "6.1.5", - "ajv": "6.14.0" + "ajv": "6.14.0", + "@xmldom/xmldom": "0.8.13", + "postcss": "8.5.10" } } diff --git a/dapps/W3MEthers/yarn.lock b/dapps/W3MEthers/yarn.lock index 0592d3348..48fcf8518 100644 --- a/dapps/W3MEthers/yarn.lock +++ b/dapps/W3MEthers/yarn.lock @@ -2110,6 +2110,11 @@ resolved "https://registry.yarnpkg.com/@noble/hashes/-/hashes-1.8.0.tgz#cee43d801fcef9644b11b8194857695acd5f815a" integrity sha512-jCs9ldd7NwzpgXDIf6P3+NrHh9/sD6CQdxHyjQI+h/6rDNo88ypBxxz45UDuZHz9r3tNz7N/VInSVoVdtXEI4A== +"@nodable/entities@^2.1.0": + version "2.1.0" + resolved "https://registry.yarnpkg.com/@nodable/entities/-/entities-2.1.0.tgz#f543e5c6446720d4cf9e498a83019dd159973bc2" + integrity sha512-nyT7T3nbMyBI/lvr6L5TyWbFJAI9FTgVRakNoBqCD+PmID8DzFrrNdLLtHMwMszOtqZa8PAOV24ZqDnQrhQINA== + "@nodelib/fs.scandir@2.1.5": version "2.1.5" resolved "https://registry.yarnpkg.com/@nodelib/fs.scandir/-/fs.scandir-2.1.5.tgz#7619c2eb21b25483f6d167548b4cfd5a7488c3d5" @@ -3432,15 +3437,10 @@ "@walletconnect/window-getters" "^1.0.1" tslib "1.14.1" -"@xmldom/xmldom@^0.8.8": - version "0.8.10" - resolved "https://registry.yarnpkg.com/@xmldom/xmldom/-/xmldom-0.8.10.tgz#a1337ca426aa61cef9fe15b5b28e340a72f6fa99" - integrity sha512-2WALfTl4xo2SkGCYRt6rDTFfk9R1czmBvUQy12gK2KuRKIpWEhcbbzy8EZXtz/jkRqHX8bFEc6FC1HjX4TUWYw== - -"@xmldom/xmldom@~0.7.7": - version "0.7.13" - resolved "https://registry.yarnpkg.com/@xmldom/xmldom/-/xmldom-0.7.13.tgz#ff34942667a4e19a9f4a0996a76814daac364cf3" - integrity sha512-lm2GW5PkosIzccsaZIz7tp8cPADSIlIHWDFTR1N0SzfinhhYgeIQjFMz4rYzanCScr3DqQLeomUDArp6MWKm+g== +"@xmldom/xmldom@0.8.13", "@xmldom/xmldom@^0.8.8", "@xmldom/xmldom@~0.7.7": + version "0.8.13" + resolved "https://registry.yarnpkg.com/@xmldom/xmldom/-/xmldom-0.8.13.tgz#00d1dd940b218dff2e49309d410d8bb212159225" + integrity sha512-KRYzxepc14G/CEpEGc3Yn+JKaAeT63smlDr+vjB8jRfgTBBI9wRj/nkQEO+ucV8p8I9bfKLWp37uHgFrbntPvw== abitype@^1.0.9: version "1.1.1" @@ -5593,21 +5593,23 @@ fast-text-encoding@1.0.6: resolved "https://registry.yarnpkg.com/fast-text-encoding/-/fast-text-encoding-1.0.6.tgz#0aa25f7f638222e3396d72bf936afcf1d42d6867" integrity sha512-VhXlQgj9ioXCqGstD37E/HBeqEGV/qOD/kmbVG8h5xKBYvM1L3lR1Zn4555cQ8GkYbJa8aJSipLPndE1k6zK2w== -fast-xml-builder@^1.1.4: - version "1.1.4" - resolved "https://registry.yarnpkg.com/fast-xml-builder/-/fast-xml-builder-1.1.4.tgz#0c407a1d9d5996336c0cd76f7ff785cac6413017" - integrity sha512-f2jhpN4Eccy0/Uz9csxh3Nu6q4ErKxf0XIsasomfOihuSUa3/xw6w8dnOtCDgEItQFJG8KyXPzQXzcODDrrbOg== +fast-xml-builder@^1.1.5: + version "1.2.0" + resolved "https://registry.yarnpkg.com/fast-xml-builder/-/fast-xml-builder-1.2.0.tgz#abd2363145a7625d9789ad96da375fabe3cff28c" + integrity sha512-00aAWieqff+ZJhsXA4g1g7M8k+7AYoMUUHF+/zFb5U6Uv/P0Vl4QZo84/IcufzYalLuEj9928bXN9PbbFzMF0Q== dependencies: - path-expression-matcher "^1.1.3" + path-expression-matcher "^1.5.0" + xml-naming "^0.1.0" -fast-xml-parser@5.5.7, fast-xml-parser@^4.0.12, fast-xml-parser@^4.2.4: - version "5.5.7" - resolved "https://registry.yarnpkg.com/fast-xml-parser/-/fast-xml-parser-5.5.7.tgz#e1ddc86662d808450a19cf2fb6ccc9c3c9933c5d" - integrity sha512-LteOsISQ2GEiDHZch6L9hB0+MLoYVLToR7xotrzU0opCICBkxOPgHAy1HxAvtxfJNXDJpgAsQN30mkrfpO2Prg== +fast-xml-parser@5.7.0, fast-xml-parser@^4.0.12, fast-xml-parser@^4.2.4: + version "5.7.0" + resolved "https://registry.yarnpkg.com/fast-xml-parser/-/fast-xml-parser-5.7.0.tgz#b93e49a3d62a8824c5212d8fa099ac2e548d548a" + integrity sha512-MTcrUoRQ1GSQ9iG3QJzBGquYYYeA7piZaJoIWbPFGbRn6Jj6z7xgoAyi4DrZX4y2ZIQQBF59gc/zmvvejjgoFQ== dependencies: - fast-xml-builder "^1.1.4" - path-expression-matcher "^1.1.3" - strnum "^2.2.0" + "@nodable/entities" "^2.1.0" + fast-xml-builder "^1.1.5" + path-expression-matcher "^1.5.0" + strnum "^2.2.3" fastq@^1.6.0: version "1.17.1" @@ -7992,7 +7994,7 @@ mz@^2.7.0: object-assign "^4.0.1" thenify-all "^1.0.0" -nanoid@5.1.3, nanoid@^3.3.7: +nanoid@5.1.3, nanoid@^3.3.11: version "5.1.3" resolved "https://registry.yarnpkg.com/nanoid/-/nanoid-5.1.3.tgz#4ab91f7882148771526e3f0ffb87bb5af9fa71ac" integrity sha512-zAbEOEr7u2CbxwoMRlz/pNSpRP0FdAU4pRaYunCdEezWohXFs+a0Xw7RfkKaezMsmSM1vttcLthJtwRnVtOfHQ== @@ -8472,10 +8474,10 @@ path-exists@^4.0.0: resolved "https://registry.yarnpkg.com/path-exists/-/path-exists-4.0.0.tgz#513bdbe2d3b95d7762e8c1137efa195c6c61b5b3" integrity sha512-ak9Qy5Q7jYb2Wwcey5Fpvg2KoAc/ZIhLSLOSBmRmygPsGwkVVt0fZa0qrtMz+m6tJTAHfZQ8FnmB4MG4LWy7/w== -path-expression-matcher@^1.1.3: - version "1.2.0" - resolved "https://registry.yarnpkg.com/path-expression-matcher/-/path-expression-matcher-1.2.0.tgz#9bdae3787f43b0857b0269e9caaa586c12c8abee" - integrity sha512-DwmPWeFn+tq7TiyJ2CxezCAirXjFxvaiD03npak3cRjlP9+OjTmSy1EpIrEbh+l6JgUundniloMLDQ/6VTdhLQ== +path-expression-matcher@^1.5.0: + version "1.5.0" + resolved "https://registry.yarnpkg.com/path-expression-matcher/-/path-expression-matcher-1.5.0.tgz#3b98545dc88ffebb593e2d8458d0929da9275f4a" + integrity sha512-cbrerZV+6rvdQrrD+iGMcZFEiiSrbv9Tfdkvnusy6y0x0GKBXREFg/Y65GhIfm0tnLntThhzCnfKwp1WRjeCyQ== path-is-absolute@^1.0.0: version "1.0.1" @@ -8517,6 +8519,11 @@ picocolors@^1.0.0: resolved "https://registry.yarnpkg.com/picocolors/-/picocolors-1.0.0.tgz#cb5bdc74ff3f51892236eaf79d68bc44564ab81c" integrity sha512-1fygroTLlHu66zi26VoTDv8yRgm0Fccecssto+MhsZ0D/DGW2sm8E8AjW7NU5VVTRt5GxbeZ5qBuJr+HyLYkjQ== +picocolors@^1.1.1: + version "1.1.1" + resolved "https://registry.yarnpkg.com/picocolors/-/picocolors-1.1.1.tgz#3d321af3eab939b083c8f929a1d12cda81c26b6b" + integrity sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA== + picomatch@4.0.4, picomatch@^2.0.4, picomatch@^2.2.1, picomatch@^2.2.3, picomatch@^2.3.1, picomatch@^3.0.1: version "4.0.4" resolved "https://registry.yarnpkg.com/picomatch/-/picomatch-4.0.4.tgz#fd6f5e00a143086e074dffe4c924b8fb293b0589" @@ -8611,14 +8618,14 @@ polished@4.3.1: dependencies: "@babel/runtime" "^7.17.8" -postcss@~8.4.32: - version "8.4.34" - resolved "https://registry.yarnpkg.com/postcss/-/postcss-8.4.34.tgz#563276e86b4ff20dfa5eed0d394d4c53853b2051" - integrity sha512-4eLTO36woPSocqZ1zIrFD2K1v6wH7pY1uBh0JIM2KKfrVtGvPFiAku6aNOP0W1Wr9qwnaCsF0Z+CrVnryB2A8Q== +postcss@8.5.10, postcss@~8.4.32: + version "8.5.10" + resolved "https://registry.yarnpkg.com/postcss/-/postcss-8.5.10.tgz#8992d8c30acf3f12169e7c09514a12fed7e48356" + integrity sha512-pMMHxBOZKFU6HgAZ4eyGnwXF/EvPGGqUr0MnZ5+99485wwW41kW91A4LOGxSHhgugZmSChL5AlElNdwlNgcnLQ== dependencies: - nanoid "^3.3.7" - picocolors "^1.0.0" - source-map-js "^1.0.2" + nanoid "^3.3.11" + picocolors "^1.1.1" + source-map-js "^1.2.1" prelude-ls@^1.2.1: version "1.2.1" @@ -9435,10 +9442,10 @@ sonic-boom@^2.2.1: dependencies: atomic-sleep "^1.0.0" -source-map-js@^1.0.2: - version "1.0.2" - resolved "https://registry.yarnpkg.com/source-map-js/-/source-map-js-1.0.2.tgz#adbc361d9c62df380125e7f161f71c826f1e490c" - integrity sha512-R0XvVJ9WusLiqTCEiGCmICCMplcCkIwwR11mOSD9CR5u+IXYdiseeEuXCVAjS54zqwkLcPNnmU4OeJ6tUrWhDw== +source-map-js@^1.2.1: + version "1.2.1" + resolved "https://registry.yarnpkg.com/source-map-js/-/source-map-js-1.2.1.tgz#1ce5650fddd87abc099eda37dcff024c2667ae46" + integrity sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA== source-map-support@0.5.13: version "0.5.13" @@ -9673,10 +9680,10 @@ strip-json-comments@~2.0.1: resolved "https://registry.yarnpkg.com/strip-json-comments/-/strip-json-comments-2.0.1.tgz#3c531942e908c2697c0ec344858c286c7ca0a60a" integrity sha512-4gB8na07fecVVkOI6Rs4e7T6NOTki5EmL7TUduTs6bu3EdnSycntVJ4re8kgZA+wx9IueI2Y11bfbgwtzuE0KQ== -strnum@^2.2.0: - version "2.2.2" - resolved "https://registry.yarnpkg.com/strnum/-/strnum-2.2.2.tgz#f11fd94ab62b536ba2ecc615858f3747c2881b3f" - integrity sha512-DnR90I+jtXNSTXWdwrEy9FakW7UX+qUZg28gj5fk2vxxl7uS/3bpI4fjFYVmdK9etptYBPNkpahuQnEwhwECqA== +strnum@^2.2.3: + version "2.3.0" + resolved "https://registry.yarnpkg.com/strnum/-/strnum-2.3.0.tgz#81bfbfef53db8c3217ea62a98c026886ec4a2761" + integrity sha512-ums3KNd42PGyx5xaoVTO1mjU1bH3NpY4vsrVlnv9PNGqQj8wd7rJ6nEypLrJ7z5vxK5RP0yMLo6J/Gsm62DI5Q== structured-headers@^0.4.1: version "0.4.1" @@ -10471,6 +10478,11 @@ xcode@^3.0.1: simple-plist "^1.1.0" uuid "^7.0.3" +xml-naming@^0.1.0: + version "0.1.0" + resolved "https://registry.yarnpkg.com/xml-naming/-/xml-naming-0.1.0.tgz#8ab7106c5b8d23caa2fabac1cadf17136379fbd8" + integrity sha512-k8KO9hrMyNk6tUWqUfkTEZbezRRpONVOzUTnc97VnCvyj6Tf9lyUR9EDAIeiVLv56jsMcoXEwjW8Kv5yPY52lw== + xml2js@0.6.0: version "0.6.0" resolved "https://registry.yarnpkg.com/xml2js/-/xml2js-0.6.0.tgz#07afc447a97d2bd6507a1f76eeadddb09f7a8282" diff --git a/dapps/W3MEthers5/Gemfile.lock b/dapps/W3MEthers5/Gemfile.lock index 140356114..cba0dcda5 100644 --- a/dapps/W3MEthers5/Gemfile.lock +++ b/dapps/W3MEthers5/Gemfile.lock @@ -17,8 +17,8 @@ GEM minitest (>= 5.1, < 6) securerandom (>= 0.3) tzinfo (~> 2.0, >= 2.0.5) - addressable (2.8.7) - public_suffix (>= 2.0.2, < 7.0) + addressable (2.9.0) + public_suffix (>= 2.0.2, < 8.0) algoliasearch (1.27.5) httpclient (~> 2.8, >= 2.8.3) json (>= 1.5.1) diff --git a/dapps/W3MEthers5/package.json b/dapps/W3MEthers5/package.json index 5de061b97..5b58c1642 100644 --- a/dapps/W3MEthers5/package.json +++ b/dapps/W3MEthers5/package.json @@ -72,7 +72,7 @@ "h3": "1.15.9", "lodash": "4.18.1", "tar": "7.5.11", - "fast-xml-parser": "5.5.7", + "fast-xml-parser": "5.7.0", "bn.js": "5.2.3", "minimatch": "9.0.9", "flatted": "3.4.2", @@ -81,6 +81,6 @@ "defu": "6.1.5", "ajv": "6.14.0", "undici": "6.24.1", - "@xmldom/xmldom": "0.8.12" + "@xmldom/xmldom": "0.8.13" } } diff --git a/dapps/W3MEthers5/yarn.lock b/dapps/W3MEthers5/yarn.lock index 6ffebe625..6fad708ac 100644 --- a/dapps/W3MEthers5/yarn.lock +++ b/dapps/W3MEthers5/yarn.lock @@ -2002,6 +2002,11 @@ resolved "https://registry.yarnpkg.com/@noble/hashes/-/hashes-1.8.0.tgz#cee43d801fcef9644b11b8194857695acd5f815a" integrity sha512-jCs9ldd7NwzpgXDIf6P3+NrHh9/sD6CQdxHyjQI+h/6rDNo88ypBxxz45UDuZHz9r3tNz7N/VInSVoVdtXEI4A== +"@nodable/entities@^2.1.0": + version "2.1.0" + resolved "https://registry.yarnpkg.com/@nodable/entities/-/entities-2.1.0.tgz#f543e5c6446720d4cf9e498a83019dd159973bc2" + integrity sha512-nyT7T3nbMyBI/lvr6L5TyWbFJAI9FTgVRakNoBqCD+PmID8DzFrrNdLLtHMwMszOtqZa8PAOV24ZqDnQrhQINA== + "@nodelib/fs.scandir@2.1.5": version "2.1.5" resolved "https://registry.yarnpkg.com/@nodelib/fs.scandir/-/fs.scandir-2.1.5.tgz#7619c2eb21b25483f6d167548b4cfd5a7488c3d5" @@ -3264,10 +3269,10 @@ "@walletconnect/window-getters" "^1.0.1" tslib "1.14.1" -"@xmldom/xmldom@0.8.12": - version "0.8.12" - resolved "https://registry.yarnpkg.com/@xmldom/xmldom/-/xmldom-0.8.12.tgz#cf488a5435fa06c7374ad1449c69cea0f823624b" - integrity sha512-9k/gHF6n/pAi/9tqr3m3aqkuiNosYTurLLUtc7xQ9sxB/wm7WPygCv8GYa6mS0fLJEHhqMC1ATYhz++U/lRHqg== +"@xmldom/xmldom@0.8.13": + version "0.8.13" + resolved "https://registry.yarnpkg.com/@xmldom/xmldom/-/xmldom-0.8.13.tgz#00d1dd940b218dff2e49309d410d8bb212159225" + integrity sha512-KRYzxepc14G/CEpEGc3Yn+JKaAeT63smlDr+vjB8jRfgTBBI9wRj/nkQEO+ucV8p8I9bfKLWp37uHgFrbntPvw== abitype@^1.0.9: version "1.1.1" @@ -4945,21 +4950,23 @@ fast-text-encoding@1.0.6: resolved "https://registry.yarnpkg.com/fast-text-encoding/-/fast-text-encoding-1.0.6.tgz#0aa25f7f638222e3396d72bf936afcf1d42d6867" integrity sha512-VhXlQgj9ioXCqGstD37E/HBeqEGV/qOD/kmbVG8h5xKBYvM1L3lR1Zn4555cQ8GkYbJa8aJSipLPndE1k6zK2w== -fast-xml-builder@^1.1.4: - version "1.1.4" - resolved "https://registry.yarnpkg.com/fast-xml-builder/-/fast-xml-builder-1.1.4.tgz#0c407a1d9d5996336c0cd76f7ff785cac6413017" - integrity sha512-f2jhpN4Eccy0/Uz9csxh3Nu6q4ErKxf0XIsasomfOihuSUa3/xw6w8dnOtCDgEItQFJG8KyXPzQXzcODDrrbOg== +fast-xml-builder@^1.1.5: + version "1.2.0" + resolved "https://registry.yarnpkg.com/fast-xml-builder/-/fast-xml-builder-1.2.0.tgz#abd2363145a7625d9789ad96da375fabe3cff28c" + integrity sha512-00aAWieqff+ZJhsXA4g1g7M8k+7AYoMUUHF+/zFb5U6Uv/P0Vl4QZo84/IcufzYalLuEj9928bXN9PbbFzMF0Q== dependencies: - path-expression-matcher "^1.1.3" + path-expression-matcher "^1.5.0" + xml-naming "^0.1.0" -fast-xml-parser@5.5.7, fast-xml-parser@^4.0.12, fast-xml-parser@^4.2.4: - version "5.5.7" - resolved "https://registry.yarnpkg.com/fast-xml-parser/-/fast-xml-parser-5.5.7.tgz#e1ddc86662d808450a19cf2fb6ccc9c3c9933c5d" - integrity sha512-LteOsISQ2GEiDHZch6L9hB0+MLoYVLToR7xotrzU0opCICBkxOPgHAy1HxAvtxfJNXDJpgAsQN30mkrfpO2Prg== +fast-xml-parser@5.7.0, fast-xml-parser@^4.0.12, fast-xml-parser@^4.2.4: + version "5.7.0" + resolved "https://registry.yarnpkg.com/fast-xml-parser/-/fast-xml-parser-5.7.0.tgz#b93e49a3d62a8824c5212d8fa099ac2e548d548a" + integrity sha512-MTcrUoRQ1GSQ9iG3QJzBGquYYYeA7piZaJoIWbPFGbRn6Jj6z7xgoAyi4DrZX4y2ZIQQBF59gc/zmvvejjgoFQ== dependencies: - fast-xml-builder "^1.1.4" - path-expression-matcher "^1.1.3" - strnum "^2.2.0" + "@nodable/entities" "^2.1.0" + fast-xml-builder "^1.1.5" + path-expression-matcher "^1.5.0" + strnum "^2.2.3" fastq@^1.6.0: version "1.17.0" @@ -7275,10 +7282,10 @@ path-exists@^4.0.0: resolved "https://registry.yarnpkg.com/path-exists/-/path-exists-4.0.0.tgz#513bdbe2d3b95d7762e8c1137efa195c6c61b5b3" integrity sha512-ak9Qy5Q7jYb2Wwcey5Fpvg2KoAc/ZIhLSLOSBmRmygPsGwkVVt0fZa0qrtMz+m6tJTAHfZQ8FnmB4MG4LWy7/w== -path-expression-matcher@^1.1.3: - version "1.2.0" - resolved "https://registry.yarnpkg.com/path-expression-matcher/-/path-expression-matcher-1.2.0.tgz#9bdae3787f43b0857b0269e9caaa586c12c8abee" - integrity sha512-DwmPWeFn+tq7TiyJ2CxezCAirXjFxvaiD03npak3cRjlP9+OjTmSy1EpIrEbh+l6JgUundniloMLDQ/6VTdhLQ== +path-expression-matcher@^1.5.0: + version "1.5.0" + resolved "https://registry.yarnpkg.com/path-expression-matcher/-/path-expression-matcher-1.5.0.tgz#3b98545dc88ffebb593e2d8458d0929da9275f4a" + integrity sha512-cbrerZV+6rvdQrrD+iGMcZFEiiSrbv9Tfdkvnusy6y0x0GKBXREFg/Y65GhIfm0tnLntThhzCnfKwp1WRjeCyQ== path-is-absolute@^1.0.0: version "1.0.1" @@ -8294,10 +8301,10 @@ strip-json-comments@^3.1.1: resolved "https://registry.yarnpkg.com/strip-json-comments/-/strip-json-comments-3.1.1.tgz#31f1281b3832630434831c310c01cccda8cbe006" integrity sha512-6fPc+R4ihwqP6N/aIv2f1gMH8lOVtWQHoqC4yK6oSDVVocumAsfCqjkXnqiYMhmMwS/mEHLp7Vehlt3ql6lEig== -strnum@^2.2.0: - version "2.2.2" - resolved "https://registry.yarnpkg.com/strnum/-/strnum-2.2.2.tgz#f11fd94ab62b536ba2ecc615858f3747c2881b3f" - integrity sha512-DnR90I+jtXNSTXWdwrEy9FakW7UX+qUZg28gj5fk2vxxl7uS/3bpI4fjFYVmdK9etptYBPNkpahuQnEwhwECqA== +strnum@^2.2.3: + version "2.3.0" + resolved "https://registry.yarnpkg.com/strnum/-/strnum-2.3.0.tgz#81bfbfef53db8c3217ea62a98c026886ec4a2761" + integrity sha512-ums3KNd42PGyx5xaoVTO1mjU1bH3NpY4vsrVlnv9PNGqQj8wd7rJ6nEypLrJ7z5vxK5RP0yMLo6J/Gsm62DI5Q== sudo-prompt@^9.0.0: version "9.2.1" @@ -8864,6 +8871,11 @@ ws@7.4.6, ws@8.18.1, ws@^6.2.2, ws@^7, ws@^7.5.1, ws@^7.5.10, ws@^8.5.0: resolved "https://registry.yarnpkg.com/ws/-/ws-8.18.1.tgz#ea131d3784e1dfdff91adb0a4a116b127515e3cb" integrity sha512-RKW2aJZMXeMxVpnZ6bck+RswznaxmzdULiBr6KY7XkTnW8uvt0iT9H5DkHUChXrc+uurzwa0rVI16n/Xzjdz1w== +xml-naming@^0.1.0: + version "0.1.0" + resolved "https://registry.yarnpkg.com/xml-naming/-/xml-naming-0.1.0.tgz#8ab7106c5b8d23caa2fabac1cadf17136379fbd8" + integrity sha512-k8KO9hrMyNk6tUWqUfkTEZbezRRpONVOzUTnc97VnCvyj6Tf9lyUR9EDAIeiVLv56jsMcoXEwjW8Kv5yPY52lw== + xtend@~4.0.1: version "4.0.2" resolved "https://registry.yarnpkg.com/xtend/-/xtend-4.0.2.tgz#bb72779f5fa465186b1f438f674fa347fdb5db54" diff --git a/dapps/W3MWagmi/Gemfile.lock b/dapps/W3MWagmi/Gemfile.lock index e0f27aa63..57cd563ef 100644 --- a/dapps/W3MWagmi/Gemfile.lock +++ b/dapps/W3MWagmi/Gemfile.lock @@ -15,8 +15,8 @@ GEM minitest (>= 5.1, < 6) securerandom (>= 0.3) tzinfo (~> 2.0, >= 2.0.5) - addressable (2.8.5) - public_suffix (>= 2.0.2, < 6.0) + addressable (2.9.0) + public_suffix (>= 2.0.2, < 8.0) algoliasearch (1.27.5) httpclient (~> 2.8, >= 2.8.3) json (>= 1.5.1) diff --git a/dapps/W3MWagmi/package.json b/dapps/W3MWagmi/package.json index e6eb5b99c..22083c744 100644 --- a/dapps/W3MWagmi/package.json +++ b/dapps/W3MWagmi/package.json @@ -99,7 +99,7 @@ "tmp": "0.2.4", "on-headers": "1.1.0", "fast-redact": "3.5.0", - "hono": "4.12.12", + "hono": "4.12.14", "qs": "6.14.2", "ws": "8.18.1", "node-forge": "1.4.0", @@ -109,7 +109,7 @@ "js-yaml": "4.1.1", "h3": "1.15.9", "lodash": "4.18.1", - "fast-xml-parser": "5.5.7", + "fast-xml-parser": "5.7.0", "bn.js": "5.2.3", "minimatch": "9.0.9", "flatted": "3.4.2", @@ -119,6 +119,7 @@ "defu": "6.1.5", "ajv": "6.14.0", "elliptic": "6.6.1", - "@xmldom/xmldom": "0.8.12" + "@xmldom/xmldom": "0.8.13", + "postcss": "8.5.10" } } diff --git a/dapps/W3MWagmi/yarn.lock b/dapps/W3MWagmi/yarn.lock index 6b2dd05d4..0e5d73a7c 100644 --- a/dapps/W3MWagmi/yarn.lock +++ b/dapps/W3MWagmi/yarn.lock @@ -3475,6 +3475,13 @@ __metadata: languageName: node linkType: hard +"@nodable/entities@npm:^2.1.0": + version: 2.1.0 + resolution: "@nodable/entities@npm:2.1.0" + checksum: ae5a432a665d210bb28b3a9dbe8caf49f46be65fdc626bd14febe8f150b735182efb6967fe12f8c8f39d22e572b8b9361b4915aec094f8cea5e01f683191cf80 + languageName: node + linkType: hard + "@nodelib/fs.scandir@npm:2.1.5": version: 2.1.5 resolution: "@nodelib/fs.scandir@npm:2.1.5" @@ -6112,10 +6119,10 @@ __metadata: languageName: node linkType: hard -"@xmldom/xmldom@npm:0.8.12": - version: 0.8.12 - resolution: "@xmldom/xmldom@npm:0.8.12" - checksum: 609bbcd6f31fa24023f5cc836e804d49c60e3df83ca73f744da9caff7fed516221dcf2f23de44e5289d715951781ec35fa90adf57008c3eae944a7550c39e325 +"@xmldom/xmldom@npm:0.8.13": + version: 0.8.13 + resolution: "@xmldom/xmldom@npm:0.8.13" + checksum: b5568a3dee6306c4c6256c94f27d74f904d7cc923607f0dcaa37998e370361ce37a6e99aa55e8e725f07079e619a6f8b3a7de218e76b522ba2b1aca3ada5265c languageName: node linkType: hard @@ -9142,25 +9149,27 @@ __metadata: languageName: node linkType: hard -"fast-xml-builder@npm:^1.1.4": - version: 1.1.4 - resolution: "fast-xml-builder@npm:1.1.4" +"fast-xml-builder@npm:^1.1.5": + version: 1.2.0 + resolution: "fast-xml-builder@npm:1.2.0" dependencies: - path-expression-matcher: ^1.1.3 - checksum: 90b019ed6f52cb30342a58d4bf8726a7723b4110cb9c0fd3fa2031e87506e8b18740fd349472926c9e2925d22ca6637b6d46a20eda537473cf63366970db4d7b + path-expression-matcher: ^1.5.0 + xml-naming: ^0.1.0 + checksum: 3bf38faf65dee87d213b4fc096b57141d68248d6c7e64f24879fce646f2e681f1ad2669e17eebc75abc8c6147a1c84001c1b8c4d9cb3c0fea21650b74c230c7d languageName: node linkType: hard -"fast-xml-parser@npm:5.5.7": - version: 5.5.7 - resolution: "fast-xml-parser@npm:5.5.7" +"fast-xml-parser@npm:5.7.0": + version: 5.7.0 + resolution: "fast-xml-parser@npm:5.7.0" dependencies: - fast-xml-builder: ^1.1.4 - path-expression-matcher: ^1.1.3 - strnum: ^2.2.0 + "@nodable/entities": ^2.1.0 + fast-xml-builder: ^1.1.5 + path-expression-matcher: ^1.5.0 + strnum: ^2.2.3 bin: fxparser: src/cli/cli.js - checksum: decac5d8cd603cb0a1037b632c1a7e267a5420da430ac3420e8a2aee4da7d044553ff80524cda8ed54741fea38202372c84959a52eee61a3a2b61e3233dd5ca5 + checksum: b3c941d5ef41e504cee82b3bbce8224154d58b5018efd2fea695683cda7a4fe5c6c15d435ea1f6cb7e69aa1b27710ddb68db8c2be648647a7b6082663586f8bb languageName: node linkType: hard @@ -9775,10 +9784,10 @@ __metadata: languageName: node linkType: hard -"hono@npm:4.12.12": - version: 4.12.12 - resolution: "hono@npm:4.12.12" - checksum: 1f8fda5adc9de6c604ab6a29ed5817ab969cb10a8548afe5dfbf38ff3b642721a362c64038a5ba3fe5d6f4810eef91d6d008901dbc6d4dec4717f860839d0876 +"hono@npm:4.12.14": + version: 4.12.14 + resolution: "hono@npm:4.12.14" + checksum: 7e0d6913a7cc2b40b83371ee3e29f2d51ac367643fc9b4fe6f874217b71c8a5f10e606f0a13a4dc248d9a5fb712f71e4c27c93ffb526491595c7bd575b5e3a7a languageName: node linkType: hard @@ -13101,10 +13110,10 @@ __metadata: languageName: node linkType: hard -"path-expression-matcher@npm:^1.1.3": - version: 1.2.0 - resolution: "path-expression-matcher@npm:1.2.0" - checksum: 2811aab3269c288893aef09e5127124d3c434bfc7e1352fea6b7dd81ed20260001b072ff60bdcaaa393d50a4333725290dbad47bb612d95f5448e499b4ac887f +"path-expression-matcher@npm:^1.5.0": + version: 1.5.0 + resolution: "path-expression-matcher@npm:1.5.0" + checksum: 52f0491a88f728f2eefb83a5c4f84f1185a8572e34ba41a72f88e270d5796c966ec1fe78e978599c490ccac0656a4cc55d75485538393873d32a4ef096a8dda6 languageName: node linkType: hard @@ -13332,14 +13341,14 @@ __metadata: languageName: node linkType: hard -"postcss@npm:~8.4.32": - version: 8.4.35 - resolution: "postcss@npm:8.4.35" +"postcss@npm:8.5.10": + version: 8.5.10 + resolution: "postcss@npm:8.5.10" dependencies: - nanoid: ^3.3.7 - picocolors: ^1.0.0 - source-map-js: ^1.0.2 - checksum: cf3c3124d3912a507603f6d9a49b3783f741075e9aa73eb592a6dd9194f9edab9d20a8875d16d137d4f779fe7b6fbd1f5727e39bfd1c3003724980ee4995e1da + nanoid: ^3.3.11 + picocolors: ^1.1.1 + source-map-js: ^1.2.1 + checksum: 9af9cd7f2f0d4b8456f6710e48d586328433509b695911fda942c24ac4db4e62c6fed8c6c6d8c8258326285f669494c2c36a4ff84aa160f0586eb545e5258bf5 languageName: node linkType: hard @@ -14911,10 +14920,10 @@ __metadata: languageName: node linkType: hard -"source-map-js@npm:^1.0.2": - version: 1.0.2 - resolution: "source-map-js@npm:1.0.2" - checksum: c049a7fc4deb9a7e9b481ae3d424cc793cb4845daa690bc5a05d428bf41bf231ced49b4cf0c9e77f9d42fdb3d20d6187619fc586605f5eabe995a316da8d377c +"source-map-js@npm:^1.2.1": + version: 1.2.1 + resolution: "source-map-js@npm:1.2.1" + checksum: 4eb0cd997cdf228bc253bcaff9340afeb706176e64868ecd20efbe6efea931465f43955612346d6b7318789e5265bdc419bc7669c1cebe3db0eb255f57efa76b languageName: node linkType: hard @@ -15237,10 +15246,10 @@ __metadata: languageName: node linkType: hard -"strnum@npm:^2.2.0": - version: 2.2.2 - resolution: "strnum@npm:2.2.2" - checksum: 9142f1188b12041661353f8d8b658c495fa7b56a0f15d3bb6af38b3473c623ba31eead97aba0ea70956bcde1061fb4802e917a95b825aa939132e18d6320a8fb +"strnum@npm:^2.2.3": + version: 2.3.0 + resolution: "strnum@npm:2.3.0" + checksum: 4d397aab0751e7cdc755dbc7d64f29dd445c849c9b0f3f1d316c6a1d24b99af860ebb0c4e15299565296894d1558ab7bc1603e5094fc45b17d741d6d37daadb7 languageName: node linkType: hard @@ -16420,6 +16429,13 @@ __metadata: languageName: node linkType: hard +"xml-naming@npm:^0.1.0": + version: 0.1.0 + resolution: "xml-naming@npm:0.1.0" + checksum: 8d1b5b84430f688a95f02ae1e13557d481242eed6de945569c444a6ec1553a0065afe39a1536aeffee3a787cb3cf99432e61d9fbbaa6d8d64555d550e6b4b13d + languageName: node + linkType: hard + "xml-parser-xo@npm:^4.1.2": version: 4.1.2 resolution: "xml-parser-xo@npm:4.1.2" diff --git a/dapps/appkit-expo-wagmi/package-lock.json b/dapps/appkit-expo-wagmi/package-lock.json index 93f2bd5ff..04a85a148 100644 --- a/dapps/appkit-expo-wagmi/package-lock.json +++ b/dapps/appkit-expo-wagmi/package-lock.json @@ -7218,9 +7218,9 @@ } }, "node_modules/@xmldom/xmldom": { - "version": "0.8.12", - "resolved": "https://registry.npmjs.org/@xmldom/xmldom/-/xmldom-0.8.12.tgz", - "integrity": "sha512-9k/gHF6n/pAi/9tqr3m3aqkuiNosYTurLLUtc7xQ9sxB/wm7WPygCv8GYa6mS0fLJEHhqMC1ATYhz++U/lRHqg==", + "version": "0.8.13", + "resolved": "https://registry.npmjs.org/@xmldom/xmldom/-/xmldom-0.8.13.tgz", + "integrity": "sha512-KRYzxepc14G/CEpEGc3Yn+JKaAeT63smlDr+vjB8jRfgTBBI9wRj/nkQEO+ucV8p8I9bfKLWp37uHgFrbntPvw==", "license": "MIT", "engines": { "node": ">=10.0.0" @@ -11084,9 +11084,9 @@ } }, "node_modules/hono": { - "version": "4.12.12", - "resolved": "https://registry.npmjs.org/hono/-/hono-4.12.12.tgz", - "integrity": "sha512-p1JfQMKaceuCbpJKAPKVqyqviZdS0eUxH9v82oWo1kb9xjQ5wA6iP3FNVAPDFlz5/p7d45lO+BpSk1tuSZMF4Q==", + "version": "4.12.14", + "resolved": "https://registry.npmjs.org/hono/-/hono-4.12.14.tgz", + "integrity": "sha512-am5zfg3yu6sqn5yjKBNqhnTX7Cv+m00ox+7jbaKkrLMRJ4rAdldd1xPd/JzbBWspqaQv6RSTrgFN95EsfhC+7w==", "license": "MIT", "engines": { "node": ">=16.9.0" @@ -13952,9 +13952,9 @@ } }, "node_modules/postcss": { - "version": "8.4.49", - "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.4.49.tgz", - "integrity": "sha512-OCVPnIObs4N29kxTjzLfUryOkvZEq+pf8jTF0lg8E7uETuWHA+v7j3c/xJmiqpX450191LlmZfUKkXxkTry7nA==", + "version": "8.5.10", + "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.10.tgz", + "integrity": "sha512-pMMHxBOZKFU6HgAZ4eyGnwXF/EvPGGqUr0MnZ5+99485wwW41kW91A4LOGxSHhgugZmSChL5AlElNdwlNgcnLQ==", "funding": [ { "type": "opencollective", @@ -13971,7 +13971,7 @@ ], "license": "MIT", "dependencies": { - "nanoid": "^3.3.7", + "nanoid": "^3.3.11", "picocolors": "^1.1.1", "source-map-js": "^1.2.1" }, diff --git a/dapps/appkit-expo-wagmi/package.json b/dapps/appkit-expo-wagmi/package.json index 25f95eda3..391f02fba 100644 --- a/dapps/appkit-expo-wagmi/package.json +++ b/dapps/appkit-expo-wagmi/package.json @@ -66,7 +66,7 @@ "valtio": "2.1.8", "viem": "2.38.5", "fast-redact": "3.5.0", - "hono": "4.12.12", + "hono": "4.12.14", "node-forge": "1.4.0", "glob": "10.5.0", "tar": "7.5.11", @@ -76,15 +76,16 @@ "lodash": "4.18.1", "bn.js": "5.2.3", "minimatch": "9.0.9", - "fast-xml-parser": "5.5.7", + "fast-xml-parser": "5.7.0", "flatted": "3.4.2", "socket.io-parser": "4.2.6", "picomatch": "4.0.4", "yaml": "2.8.3", "defu": "6.1.5", "ajv": "6.14.0", - "@xmldom/xmldom": "0.8.12", - "cross-spawn": "7.0.6" + "@xmldom/xmldom": "0.8.13", + "cross-spawn": "7.0.6", + "postcss": "8.5.10" }, "private": true } diff --git a/dapps/poc-pos-app/package-lock.json b/dapps/poc-pos-app/package-lock.json index 70d0ff81a..9a05ac2f4 100644 --- a/dapps/poc-pos-app/package-lock.json +++ b/dapps/poc-pos-app/package-lock.json @@ -49,7 +49,7 @@ "react-native-toast-message": "2.3.3", "react-native-web": "0.21.2", "react-native-worklets": "0.6.1", - "uuid": "13.0.0", + "uuid": "13.0.1", "zustand": "5.0.8" }, "devDependencies": { @@ -4600,9 +4600,9 @@ "license": "BSD-3-Clause" }, "node_modules/@xmldom/xmldom": { - "version": "0.8.12", - "resolved": "https://registry.npmjs.org/@xmldom/xmldom/-/xmldom-0.8.12.tgz", - "integrity": "sha512-9k/gHF6n/pAi/9tqr3m3aqkuiNosYTurLLUtc7xQ9sxB/wm7WPygCv8GYa6mS0fLJEHhqMC1ATYhz++U/lRHqg==", + "version": "0.8.13", + "resolved": "https://registry.npmjs.org/@xmldom/xmldom/-/xmldom-0.8.13.tgz", + "integrity": "sha512-KRYzxepc14G/CEpEGc3Yn+JKaAeT63smlDr+vjB8jRfgTBBI9wRj/nkQEO+ucV8p8I9bfKLWp37uHgFrbntPvw==", "license": "MIT", "engines": { "node": ">=10.0.0" @@ -11904,9 +11904,9 @@ } }, "node_modules/postcss": { - "version": "8.4.49", - "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.4.49.tgz", - "integrity": "sha512-OCVPnIObs4N29kxTjzLfUryOkvZEq+pf8jTF0lg8E7uETuWHA+v7j3c/xJmiqpX450191LlmZfUKkXxkTry7nA==", + "version": "8.5.10", + "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.10.tgz", + "integrity": "sha512-pMMHxBOZKFU6HgAZ4eyGnwXF/EvPGGqUr0MnZ5+99485wwW41kW91A4LOGxSHhgugZmSChL5AlElNdwlNgcnLQ==", "funding": [ { "type": "opencollective", @@ -11923,7 +11923,7 @@ ], "license": "MIT", "dependencies": { - "nanoid": "^3.3.7", + "nanoid": "^3.3.11", "picocolors": "^1.1.1", "source-map-js": "^1.2.1" }, @@ -14807,9 +14807,9 @@ } }, "node_modules/uuid": { - "version": "13.0.0", - "resolved": "https://registry.npmjs.org/uuid/-/uuid-13.0.0.tgz", - "integrity": "sha512-XQegIaBTVUjSHliKqcnFqYypAd4S+WCYt5NIeRs6w/UAry7z8Y9j5ZwRRL4kzq9U3sD6v+85er9FvkEaBpji2w==", + "version": "13.0.1", + "resolved": "https://registry.npmjs.org/uuid/-/uuid-13.0.1.tgz", + "integrity": "sha512-9ezox2roIft6ExBVTVqibSd5dc5/47Sw/uY6b4SjQUT2TzQ0tltNquWA46y4xPQmdZYqvnio22SgWd41M86+jw==", "funding": [ "https://github.com/sponsors/broofa", "https://github.com/sponsors/ctavan" diff --git a/dapps/poc-pos-app/package.json b/dapps/poc-pos-app/package.json index b6df7b29f..67d60d9e0 100644 --- a/dapps/poc-pos-app/package.json +++ b/dapps/poc-pos-app/package.json @@ -59,7 +59,7 @@ "react-native-toast-message": "2.3.3", "react-native-web": "0.21.2", "react-native-worklets": "0.6.1", - "uuid": "13.0.0", + "uuid": "13.0.1", "zustand": "5.0.8" }, "devDependencies": { @@ -76,7 +76,7 @@ "typescript": "5.9.3" }, "overrides": { - "hono": "4.12.12", + "hono": "4.12.14", "tar": "7.5.11", "node-forge": "1.4.0", "glob": "10.5.0", @@ -84,15 +84,16 @@ "undici": "6.24.1", "h3": "1.15.9", "minimatch": "9.0.9", - "fast-xml-parser": "5.5.7", + "fast-xml-parser": "5.7.0", "flatted": "3.4.2", "picomatch": "4.0.4", "yaml": "2.8.3", - "@xmldom/xmldom": "0.8.12", + "@xmldom/xmldom": "0.8.13", "cross-spawn": "7.0.6", "lodash": "4.18.1", "ajv": "6.14.0", - "defu": "6.1.5" + "defu": "6.1.5", + "postcss": "8.5.10" }, "private": true } diff --git a/dapps/pos-app/package-lock.json b/dapps/pos-app/package-lock.json index 64a0462fb..583ebd8e4 100644 --- a/dapps/pos-app/package-lock.json +++ b/dapps/pos-app/package-lock.json @@ -51,7 +51,7 @@ "react-native-toast-message": "2.3.3", "react-native-web": "0.21.2", "react-native-worklets": "0.7.2", - "uuid": "13.0.0", + "uuid": "13.0.1", "zustand": "5.0.8" }, "devDependencies": { @@ -5694,9 +5694,9 @@ "license": "BSD-3-Clause" }, "node_modules/@xmldom/xmldom": { - "version": "0.8.12", - "resolved": "https://registry.npmjs.org/@xmldom/xmldom/-/xmldom-0.8.12.tgz", - "integrity": "sha512-9k/gHF6n/pAi/9tqr3m3aqkuiNosYTurLLUtc7xQ9sxB/wm7WPygCv8GYa6mS0fLJEHhqMC1ATYhz++U/lRHqg==", + "version": "0.8.13", + "resolved": "https://registry.npmjs.org/@xmldom/xmldom/-/xmldom-0.8.13.tgz", + "integrity": "sha512-KRYzxepc14G/CEpEGc3Yn+JKaAeT63smlDr+vjB8jRfgTBBI9wRj/nkQEO+ucV8p8I9bfKLWp37uHgFrbntPvw==", "license": "MIT", "engines": { "node": ">=10.0.0" @@ -13374,9 +13374,9 @@ } }, "node_modules/postcss": { - "version": "8.4.49", - "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.4.49.tgz", - "integrity": "sha512-OCVPnIObs4N29kxTjzLfUryOkvZEq+pf8jTF0lg8E7uETuWHA+v7j3c/xJmiqpX450191LlmZfUKkXxkTry7nA==", + "version": "8.5.10", + "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.10.tgz", + "integrity": "sha512-pMMHxBOZKFU6HgAZ4eyGnwXF/EvPGGqUr0MnZ5+99485wwW41kW91A4LOGxSHhgugZmSChL5AlElNdwlNgcnLQ==", "funding": [ { "type": "opencollective", @@ -13393,7 +13393,7 @@ ], "license": "MIT", "dependencies": { - "nanoid": "^3.3.7", + "nanoid": "^3.3.11", "picocolors": "^1.1.1", "source-map-js": "^1.2.1" }, @@ -16277,9 +16277,9 @@ } }, "node_modules/uuid": { - "version": "13.0.0", - "resolved": "https://registry.npmjs.org/uuid/-/uuid-13.0.0.tgz", - "integrity": "sha512-XQegIaBTVUjSHliKqcnFqYypAd4S+WCYt5NIeRs6w/UAry7z8Y9j5ZwRRL4kzq9U3sD6v+85er9FvkEaBpji2w==", + "version": "13.0.1", + "resolved": "https://registry.npmjs.org/uuid/-/uuid-13.0.1.tgz", + "integrity": "sha512-9ezox2roIft6ExBVTVqibSd5dc5/47Sw/uY6b4SjQUT2TzQ0tltNquWA46y4xPQmdZYqvnio22SgWd41M86+jw==", "funding": [ "https://github.com/sponsors/broofa", "https://github.com/sponsors/ctavan" diff --git a/dapps/pos-app/package.json b/dapps/pos-app/package.json index 8962253cc..853a7e844 100644 --- a/dapps/pos-app/package.json +++ b/dapps/pos-app/package.json @@ -63,7 +63,7 @@ "react-native-toast-message": "2.3.3", "react-native-web": "0.21.2", "react-native-worklets": "0.7.2", - "uuid": "13.0.0", + "uuid": "13.0.1", "zustand": "5.0.8" }, "devDependencies": { @@ -83,7 +83,7 @@ "typescript": "5.9.3" }, "overrides": { - "hono": "4.12.12", + "hono": "4.12.14", "tar": "7.5.11", "node-forge": "1.4.0", "glob": "10.5.0", @@ -94,17 +94,18 @@ }, "minimatch": "9.0.9", "h3": "1.15.9", - "fast-xml-parser": "5.5.7", + "fast-xml-parser": "5.7.0", "flatted": "3.4.2", "picomatch": "4.0.4", "yaml": "2.8.3", - "@xmldom/xmldom": "0.8.12", + "@xmldom/xmldom": "0.8.13", "cross-spawn": "7.0.6", "diff": "4.0.4", "path-to-regexp": "6.3.0", "lodash": "4.18.1", "defu": "6.1.5", - "undici": "6.24.1" + "undici": "6.24.1", + "postcss": "8.5.10" }, "private": true } diff --git a/wallets/expo-wallet/package-lock.json b/wallets/expo-wallet/package-lock.json index a8a4b085a..a3ea0c4e5 100644 --- a/wallets/expo-wallet/package-lock.json +++ b/wallets/expo-wallet/package-lock.json @@ -4698,9 +4698,9 @@ "license": "0BSD" }, "node_modules/@xmldom/xmldom": { - "version": "0.8.12", - "resolved": "https://registry.npmjs.org/@xmldom/xmldom/-/xmldom-0.8.12.tgz", - "integrity": "sha512-9k/gHF6n/pAi/9tqr3m3aqkuiNosYTurLLUtc7xQ9sxB/wm7WPygCv8GYa6mS0fLJEHhqMC1ATYhz++U/lRHqg==", + "version": "0.8.13", + "resolved": "https://registry.npmjs.org/@xmldom/xmldom/-/xmldom-0.8.13.tgz", + "integrity": "sha512-KRYzxepc14G/CEpEGc3Yn+JKaAeT63smlDr+vjB8jRfgTBBI9wRj/nkQEO+ucV8p8I9bfKLWp37uHgFrbntPvw==", "license": "MIT", "engines": { "node": ">=10.0.0" @@ -11647,9 +11647,9 @@ } }, "node_modules/postcss": { - "version": "8.4.49", - "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.4.49.tgz", - "integrity": "sha512-OCVPnIObs4N29kxTjzLfUryOkvZEq+pf8jTF0lg8E7uETuWHA+v7j3c/xJmiqpX450191LlmZfUKkXxkTry7nA==", + "version": "8.5.10", + "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.10.tgz", + "integrity": "sha512-pMMHxBOZKFU6HgAZ4eyGnwXF/EvPGGqUr0MnZ5+99485wwW41kW91A4LOGxSHhgugZmSChL5AlElNdwlNgcnLQ==", "funding": [ { "type": "opencollective", @@ -11666,7 +11666,7 @@ ], "license": "MIT", "dependencies": { - "nanoid": "^3.3.7", + "nanoid": "^3.3.11", "picocolors": "^1.1.1", "source-map-js": "^1.2.1" }, diff --git a/wallets/expo-wallet/package.json b/wallets/expo-wallet/package.json index f5d1b98c8..f435f12ad 100644 --- a/wallets/expo-wallet/package.json +++ b/wallets/expo-wallet/package.json @@ -79,16 +79,17 @@ "undici": "6.24.1", "tar": "7.5.11", "minimatch": "9.0.9", - "fast-xml-parser": "5.5.7", + "fast-xml-parser": "5.7.0", "flatted": "3.4.2", "yaml": "2.8.3", "picomatch": "4.0.4", "defu": "6.1.5", "ajv": "6.14.0", - "@xmldom/xmldom": "0.8.12", + "@xmldom/xmldom": "0.8.13", "cross-spawn": "7.0.6", "lodash": "4.18.1", - "hono": "4.12.12" + "hono": "4.12.14", + "postcss": "8.5.10" }, "private": true } diff --git a/wallets/rn_cli_wallet/Gemfile.lock b/wallets/rn_cli_wallet/Gemfile.lock index 18869c3c2..7fb86ca66 100644 --- a/wallets/rn_cli_wallet/Gemfile.lock +++ b/wallets/rn_cli_wallet/Gemfile.lock @@ -17,8 +17,8 @@ GEM minitest (>= 5.1, < 6) securerandom (>= 0.3) tzinfo (~> 2.0, >= 2.0.5) - addressable (2.8.7) - public_suffix (>= 2.0.2, < 7.0) + addressable (2.9.0) + public_suffix (>= 2.0.2, < 8.0) algoliasearch (1.27.5) httpclient (~> 2.8, >= 2.8.3) json (>= 1.5.1) diff --git a/wallets/rn_cli_wallet/package.json b/wallets/rn_cli_wallet/package.json index 26d94f93f..d13477645 100644 --- a/wallets/rn_cli_wallet/package.json +++ b/wallets/rn_cli_wallet/package.json @@ -110,7 +110,7 @@ "elliptic": "6.6.1", "cross-spawn": "7.0.6", "nanoid": "3.3.8", - "fast-xml-parser": "5.5.7", + "fast-xml-parser": "5.7.0", "sha.js": "2.4.12", "tmp": "0.2.4", "on-headers": "1.1.0", @@ -125,7 +125,9 @@ "js-yaml": "4.1.1", "lodash": "4.18.1", "qs": "6.14.2", - "axios": "1.15.0", + "axios": "1.15.2", + "ip-address": "10.2.0", + "follow-redirects": "1.16.0", "bn.js": "5.2.3", "minimatch": "9.0.9", "h3": "1.15.9", @@ -134,7 +136,7 @@ "picomatch": "4.0.4", "defu": "6.1.5", "ajv": "6.14.0", - "@xmldom/xmldom": "0.8.12", + "@xmldom/xmldom": "0.8.13", "node-forge": "1.4.0", "undici": "6.24.1" }, diff --git a/wallets/rn_cli_wallet/yarn.lock b/wallets/rn_cli_wallet/yarn.lock index a77516c5c..6381bd055 100644 --- a/wallets/rn_cli_wallet/yarn.lock +++ b/wallets/rn_cli_wallet/yarn.lock @@ -2807,6 +2807,13 @@ __metadata: languageName: node linkType: hard +"@nodable/entities@npm:^2.1.0": + version: 2.1.0 + resolution: "@nodable/entities@npm:2.1.0" + checksum: ae5a432a665d210bb28b3a9dbe8caf49f46be65fdc626bd14febe8f150b735182efb6967fe12f8c8f39d22e572b8b9361b4915aec094f8cea5e01f683191cf80 + languageName: node + linkType: hard + "@nodelib/fs.scandir@npm:2.1.5": version: 2.1.5 resolution: "@nodelib/fs.scandir@npm:2.1.5" @@ -4530,10 +4537,10 @@ __metadata: languageName: node linkType: hard -"@xmldom/xmldom@npm:0.8.12": - version: 0.8.12 - resolution: "@xmldom/xmldom@npm:0.8.12" - checksum: 609bbcd6f31fa24023f5cc836e804d49c60e3df83ca73f744da9caff7fed516221dcf2f23de44e5289d715951781ec35fa90adf57008c3eae944a7550c39e325 +"@xmldom/xmldom@npm:0.8.13": + version: 0.8.13 + resolution: "@xmldom/xmldom@npm:0.8.13" + checksum: b5568a3dee6306c4c6256c94f27d74f904d7cc923607f0dcaa37998e370361ce37a6e99aa55e8e725f07079e619a6f8b3a7de218e76b522ba2b1aca3ada5265c languageName: node linkType: hard @@ -4975,14 +4982,14 @@ __metadata: languageName: node linkType: hard -"axios@npm:1.15.0": - version: 1.15.0 - resolution: "axios@npm:1.15.0" +"axios@npm:1.15.2": + version: 1.15.2 + resolution: "axios@npm:1.15.2" dependencies: follow-redirects: ^1.15.11 form-data: ^4.0.5 proxy-from-env: ^2.1.0 - checksum: 95a8455554867a083ab3772fcadba42a22ec4bb546dccc66011556d837a07e544ae006675a30a5c43453f3e37e7c0982e934cec482c06b75abead2a2c157448a + checksum: e7d208b751959c7c6936417b870d6286979e0dff17784ae230d3988e754b6322682cb136e25669b534072b6f44c08715801ab961227eb8cc075323d9fda8ad43 languageName: node linkType: hard @@ -7027,25 +7034,27 @@ __metadata: languageName: node linkType: hard -"fast-xml-builder@npm:^1.1.4": - version: 1.1.4 - resolution: "fast-xml-builder@npm:1.1.4" +"fast-xml-builder@npm:^1.1.5": + version: 1.2.0 + resolution: "fast-xml-builder@npm:1.2.0" dependencies: - path-expression-matcher: ^1.1.3 - checksum: 90b019ed6f52cb30342a58d4bf8726a7723b4110cb9c0fd3fa2031e87506e8b18740fd349472926c9e2925d22ca6637b6d46a20eda537473cf63366970db4d7b + path-expression-matcher: ^1.5.0 + xml-naming: ^0.1.0 + checksum: 3bf38faf65dee87d213b4fc096b57141d68248d6c7e64f24879fce646f2e681f1ad2669e17eebc75abc8c6147a1c84001c1b8c4d9cb3c0fea21650b74c230c7d languageName: node linkType: hard -"fast-xml-parser@npm:5.5.7": - version: 5.5.7 - resolution: "fast-xml-parser@npm:5.5.7" +"fast-xml-parser@npm:5.7.0": + version: 5.7.0 + resolution: "fast-xml-parser@npm:5.7.0" dependencies: - fast-xml-builder: ^1.1.4 - path-expression-matcher: ^1.1.3 - strnum: ^2.2.0 + "@nodable/entities": ^2.1.0 + fast-xml-builder: ^1.1.5 + path-expression-matcher: ^1.5.0 + strnum: ^2.2.3 bin: fxparser: src/cli/cli.js - checksum: decac5d8cd603cb0a1037b632c1a7e267a5420da430ac3420e8a2aee4da7d044553ff80524cda8ed54741fea38202372c84959a52eee61a3a2b61e3233dd5ca5 + checksum: b3c941d5ef41e504cee82b3bbce8224154d58b5018efd2fea695683cda7a4fe5c6c15d435ea1f6cb7e69aa1b27710ddb68db8c2be648647a7b6082663586f8bb languageName: node linkType: hard @@ -7191,13 +7200,13 @@ __metadata: languageName: node linkType: hard -"follow-redirects@npm:^1.15.11": - version: 1.15.11 - resolution: "follow-redirects@npm:1.15.11" +"follow-redirects@npm:1.16.0": + version: 1.16.0 + resolution: "follow-redirects@npm:1.16.0" peerDependenciesMeta: debug: optional: true - checksum: 20bf55e9504f59e6cc3743ba27edb2ebf41edea1baab34799408f2c050f73f0c612728db21c691276296d2795ea8a812dc532a98e8793619fcab91abe06d017f + checksum: e90dce4607b1f6b8b9883287f912585573c19088209ad82341d550a795b4ba514522b73b1b340cf618279df27975cd46504d09149be60291ba6767384c1fd8f8 languageName: node linkType: hard @@ -7857,10 +7866,10 @@ __metadata: languageName: node linkType: hard -"ip-address@npm:^10.0.1": - version: 10.1.0 - resolution: "ip-address@npm:10.1.0" - checksum: 76b1abcdf52a32e2e05ca1f202f3a8ab8547e5651a9233781b330271bd7f1a741067748d71c4cbb9d9906d9f1fa69e7ddc8b4a11130db4534fdab0e908c84e0d +"ip-address@npm:10.2.0": + version: 10.2.0 + resolution: "ip-address@npm:10.2.0" + checksum: 3ffba04dc4cdaf81ed2ed6edc47eee1494bb97550ef73f1918ca28405d175c03efa416b8337e868123b08c2cc677e3a07c5ce03eda3b1aeb2741c149bd37ddf9 languageName: node linkType: hard @@ -10162,10 +10171,10 @@ __metadata: languageName: node linkType: hard -"path-expression-matcher@npm:^1.1.3": - version: 1.2.0 - resolution: "path-expression-matcher@npm:1.2.0" - checksum: 2811aab3269c288893aef09e5127124d3c434bfc7e1352fea6b7dd81ed20260001b072ff60bdcaaa393d50a4333725290dbad47bb612d95f5448e499b4ac887f +"path-expression-matcher@npm:^1.5.0": + version: 1.5.0 + resolution: "path-expression-matcher@npm:1.5.0" + checksum: 52f0491a88f728f2eefb83a5c4f84f1185a8572e34ba41a72f88e270d5796c966ec1fe78e978599c490ccac0656a4cc55d75485538393873d32a4ef096a8dda6 languageName: node linkType: hard @@ -12053,10 +12062,10 @@ __metadata: languageName: node linkType: hard -"strnum@npm:^2.2.0": - version: 2.2.2 - resolution: "strnum@npm:2.2.2" - checksum: 9142f1188b12041661353f8d8b658c495fa7b56a0f15d3bb6af38b3473c623ba31eead97aba0ea70956bcde1061fb4802e917a95b825aa939132e18d6320a8fb +"strnum@npm:^2.2.3": + version: 2.3.0 + resolution: "strnum@npm:2.3.0" + checksum: 4d397aab0751e7cdc755dbc7d64f29dd445c849c9b0f3f1d316c6a1d24b99af860ebb0c4e15299565296894d1558ab7bc1603e5094fc45b17d741d6d37daadb7 languageName: node linkType: hard @@ -13048,6 +13057,13 @@ __metadata: languageName: node linkType: hard +"xml-naming@npm:^0.1.0": + version: 0.1.0 + resolution: "xml-naming@npm:0.1.0" + checksum: 8d1b5b84430f688a95f02ae1e13557d481242eed6de945569c444a6ec1553a0065afe39a1536aeffee3a787cb3cf99432e61d9fbbaa6d8d64555d550e6b4b13d + languageName: node + linkType: hard + "xml-parser-xo@npm:^4.1.5": version: 4.1.5 resolution: "xml-parser-xo@npm:4.1.5"