From c5dfdb08849bf67c0b70761ef9a22511a1ed9d35 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Thu, 24 Oct 2024 00:51:55 +0000
Subject: [PATCH] fix: package.json to reduce vulnerabilities
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8187303
---
package.json | 20 ++++++++++----------
1 file changed, 10 insertions(+), 10 deletions(-)
diff --git a/package.json b/package.json
index dcd9edfceb..dcecf408e7 100644
--- a/package.json
+++ b/package.json
@@ -107,22 +107,22 @@
"ipfs-block": "~0.6.0",
"ipfs-block-service": "~0.12.0",
"ipfs-multipart": "~0.1.0",
- "ipfs-repo": "~0.17.0",
+ "ipfs-repo": "~0.24.0",
"ipfs-unixfs": "~0.1.13",
- "ipfs-unixfs-engine": "~0.22.5",
- "ipld-resolver": "~0.13.2",
+ "ipfs-unixfs-engine": "~0.24.4",
+ "ipld-resolver": "~0.14.1",
"is-ipfs": "^0.3.2",
"is-stream": "^1.1.0",
"joi": "^10.6.0",
- "libp2p": "~0.12.4",
- "libp2p-floodsub": "~0.11.1",
- "libp2p-kad-dht": "~0.5.1",
- "libp2p-mdns": "~0.9.1",
+ "libp2p": "~0.29.0",
+ "libp2p-floodsub": "~0.19.0",
+ "libp2p-kad-dht": "~0.20.0",
+ "libp2p-mdns": "~0.14.2",
"libp2p-multiplex": "~0.5.0",
"libp2p-railing": "~0.7.1",
- "libp2p-secio": "~0.8.1",
+ "libp2p-secio": "~0.13.0",
"libp2p-tcp": "~0.11.0",
- "libp2p-webrtc-star": "~0.13.2",
+ "libp2p-webrtc-star": "~0.19.0",
"libp2p-websockets": "~0.10.1",
"lodash.flatmap": "^4.5.0",
"lodash.get": "^4.4.2",
@@ -136,7 +136,7 @@
"once": "^1.4.0",
"path-exists": "^3.0.0",
"peer-book": "~0.5.1",
- "peer-id": "~0.10.1",
+ "peer-id": "~0.13.13",
"peer-info": "~0.11.0",
"promisify-es6": "^1.0.3",
"pull-file": "^1.0.0",