🔒️ (dependencies) [NO-ISSUE]: Update dependencies + pnpm overrides on…

… security issues (#544)
LedgerHQ · Dec 9, 2024 · ad4c3f5 · ad4c3f5
2 parents 5c52bdf + 515a114
commit ad4c3f5
Show file tree

Hide file tree

Showing 20 changed files with 961 additions and 993 deletions.
diff --git a/apps/docs/package.json b/apps/docs/package.json
@@ -24,14 +24,14 @@
     "postcss": "^8.4.35",
     "react": "^18.3.1",
     "react-dom": "^18.3.1",
-    "tailwindcss": "^3.4.1"
+    "tailwindcss": "^3.4.16"
   },
   "devDependencies": {
     "@ledgerhq/eslint-config-dsdk": "workspace:*",
     "@ledgerhq/prettier-config-dsdk": "workspace:*",
     "@ledgerhq/tsconfig-dsdk": "workspace:*",
-    "@types/node": "^22.9.0",
+    "@types/node": "^22.10.1",
     "@types/react": "^18.3.12",
-    "globals": "15.12.0"
+    "globals": "15.13.0"
   }
 }
diff --git a/apps/sample/package.json b/apps/sample/package.json
@@ -24,14 +24,14 @@
     "@ledgerhq/device-transport-kit-mockserver": "workspace:*",
     "@ledgerhq/device-transport-kit-web-ble": "workspace:*",
     "@ledgerhq/device-transport-kit-web-hid": "workspace:*",
-    "@ledgerhq/react-ui": "^0.16.2",
-    "@playwright/test": "^1.48.2",
-    "@sentry/nextjs": "^8.32.0",
-    "ethers": "^6.13.2",
+    "@ledgerhq/react-ui": "^0.17.0",
+    "@playwright/test": "^1.49.0",
+    "@sentry/nextjs": "^8.42.0",
+    "ethers": "6.13.4",
     "next": "14.2.13",
     "react": "^18.3.1",
     "react-dom": "^18.3.1",
-    "react-lottie": "^1.2.4",
+    "react-lottie": "^1.2.10",
     "rxjs": "^7.8.1",
     "styled-components": "^5.3.11"
   },
@@ -43,7 +43,7 @@
     "@types/react-lottie": "^1.2.10",
     "@types/styled-components": "^5.1.25",
     "autoprefixer": "^10.4.20",
-    "globals": "15.12.0",
+    "globals": "15.13.0",
     "postcss": "^8.4.47"
   }
 }
diff --git a/package.json b/package.json
@@ -45,27 +45,42 @@
   },
   "devDependencies": {
     "@changesets/changelog-github": "^0.5.0",
-    "@changesets/cli": "^2.27.9",
+    "@changesets/cli": "^2.27.10",
     "@types/jest": "^29.5.14",
-    "@types/node": "^22.9.0",
+    "@types/node": "^22.10.1",
     "concurrently": "^9.1.0",
     "danger": "^12.3.3",
     "esbuild": "^0.24.0",
     "esbuild-node-externals": "^1.14.0",
-    "eslint": "9.14.0",
+    "eslint": "9.16.0",
     "gitmoji-cli": "^9.5.0",
     "hygen": "^6.2.11",
     "jest": "^29.7.0",
-    "prettier": "^3.3.3",
+    "prettier": "^3.4.2",
     "rimraf": "^6.0.1",
     "ts-jest": "^29.2.5",
     "tsc-alias": "^1.8.10",
-    "turbo": "^2.3.0",
+    "turbo": "^2.3.3",
     "typescript": "^5.6.3",
-    "zx": "^8.2.2"
+    "zx": "^8.2.4"
   },
   "engines": {
     "node": ">=20"
   },
-  "packageManager": "[email protected]"
+  "packageManager": "[email protected]",
+  "pnpm": {
+    "overrides": {
+      "ejs@<3.1.10": ">=3.1.10",
+      "ws@>=7.0.0 <7.5.10": ">=7.5.10",
+      "elliptic@>=4.0.0 <=6.5.6": ">=6.5.7",
+      "elliptic@>=2.0.0 <=6.5.6": ">=6.5.7",
+      "elliptic@>=5.2.1 <=6.5.6": ">=6.5.7",
+      "micromatch@<4.0.8": ">=4.0.8",
+      "webpack@>=5.0.0-alpha.0 <5.94.0": ">=5.94.0",
+      "elliptic@<6.5.6": ">=6.5.6",
+      "elliptic@<6.6.0": ">=6.6.0",
+      "cross-spawn@<6.0.6": ">=6.0.6",
+      "cross-spawn@>=7.0.0 <7.0.5": ">=7.0.5"
+    }
+  }
 }
diff --git a/packages/config/eslint/package.json b/packages/config/eslint/package.json
@@ -10,15 +10,15 @@
   ],
   "type": "module",
   "devDependencies": {
-    "@eslint/compat": "^1.2.3",
-    "@eslint/core": "^0.9.0",
-    "@eslint/js": "9.15.0",
+    "@eslint/compat": "^1.2.4",
+    "@eslint/core": "^0.9.1",
+    "@eslint/js": "9.16.0",
     "@types/eslint__js": "^8.42.3",
     "eslint-plugin-prettier": "^5.2.1",
     "eslint-plugin-react": "^7.37.2",
-    "eslint-plugin-react-hooks": "^5.0.0",
+    "eslint-plugin-react-hooks": "^5.1.0",
     "eslint-plugin-simple-import-sort": "12.1.1",
-    "globals": "15.12.0",
-    "typescript-eslint": "8.14.0"
+    "globals": "15.13.0",
+    "typescript-eslint": "8.17.0"
   }
 }
diff --git a/packages/config/prettier/package.json b/packages/config/prettier/package.json
@@ -7,6 +7,6 @@
     "index.js"
   ],
   "devDependencies": {
-    "prettier": "^3.3.3"
+    "prettier": "^3.4.2"
   }
 }
diff --git a/packages/device-management-kit/package.json b/packages/device-management-kit/package.json
@@ -39,14 +39,14 @@
     "@ledgerhq/device-mockserver-client": "workspace:*",
     "@sentry/minimal": "^6.19.7",
     "@statelyai/inspect": "^0.4.0",
-    "axios": "^1.7.7",
-    "inversify": "^6.0.3",
+    "axios": "^1.7.9",
+    "inversify": "^6.1.6",
     "inversify-logger-middleware": "^3.1.0",
     "purify-ts": "^2.1.0",
     "reflect-metadata": "^0.2.2",
     "semver": "^7.6.3",
-    "uuid": "^10.0.0",
-    "xstate": "^5.18.2"
+    "uuid": "^11.0.3",
+    "xstate": "^5.19.0"
   },
   "peerDependencies": {
     "rxjs": "^7.8.1"

diff --git a/...ice-management-kit/src/internal/device-session/service/DefaultApduReceiverService.test.ts b/...ice-management-kit/src/internal/device-session/service/DefaultApduReceiverService.test.ts
@@ -1,4 +1,3 @@
-import * as uuid from "uuid";
 jest.mock("uuid");
 
 import { Just, Left, type Maybe, Nothing, Right } from "purify-ts";
@@ -59,7 +58,9 @@ describe("DefaultApduReceiverService", () => {
   let service: ApduReceiverService;
 
   beforeAll(() => {
-    jest.spyOn(uuid, "v4").mockReturnValue("42");
+    jest.mock("uuid", () => ({
+      v4: jest.fn().mockReturnValue("42"),
+    }));
   });
 
   describe("without dataSize", () => {

diff --git a/...evice-management-kit/src/internal/device-session/service/DefaultApduSenderService.test.ts b/...evice-management-kit/src/internal/device-session/service/DefaultApduSenderService.test.ts
@@ -1,5 +1,6 @@
-import * as uuid from "uuid";
-jest.mock("uuid");
+jest.mock("uuid", () => ({
+  v4: jest.fn().mockReturnValue("42"),
+}));
 
 import { Maybe } from "purify-ts";
 
@@ -12,10 +13,6 @@ import { DefaultApduSenderService } from "./DefaultApduSenderService";
 const loggerService = new DefaultLoggerPublisherService([], "frame");
 
 describe("DefaultApduSenderService", () => {
-  beforeAll(() => {
-    jest.spyOn(uuid, "v4").mockReturnValue("42");
-  });
-
   describe("[USB] With padding and channel", () => {
     it("should return 1 frame", () => {
       // given

diff --git a/packages/device-management-kit/src/internal/discovery/use-case/ConnectUseCase.test.ts b/packages/device-management-kit/src/internal/discovery/use-case/ConnectUseCase.test.ts
@@ -1,6 +1,4 @@
 import { Left, Maybe, Right } from "purify-ts";
-import * as uuid from "uuid";
-jest.mock("uuid");
 
 import { type DeviceModel } from "@api/device/DeviceModel";
 import { type LoggerPublisherService } from "@api/logger-publisher/service/LoggerPublisherService";
@@ -21,6 +19,10 @@ import { type TransportService } from "@internal/transport/service/TransportServ
 
 import { ConnectUseCase } from "./ConnectUseCase";
 
+jest.mock("uuid", () => ({
+  v4: jest.fn().mockReturnValue("fakeSessionId"),
+}));
+
 jest.mock("@internal/manager-api/data/AxiosManagerApiDataSource");
 jest.mock("@internal/transport/service/DefaultTransportService");
 
@@ -33,7 +35,6 @@ let sessionService: DeviceSessionService;
 let managerApi: ManagerApiService;
 let managerApiDataSource: ManagerApiDataSource;
 const fakeSessionId = "fakeSessionId";
-
 describe("ConnectUseCase", () => {
   const stubDiscoveredDevice: DiscoveredDevice = {
     id: "",
@@ -45,7 +46,6 @@ describe("ConnectUseCase", () => {
 
   beforeAll(() => {
     logger = new DefaultLoggerPublisherService([], tag);
-    jest.spyOn(uuid, "v4").mockReturnValue(fakeSessionId);
     transport = new TransportMock();
     sessionService = new DefaultDeviceSessionService(() => logger);
     managerApiDataSource = new AxiosManagerApiDataSource({

diff --git a/packages/signer/context-module/package.json b/packages/signer/context-module/package.json
@@ -34,8 +34,8 @@
     "typecheck": "tsc --noEmit"
   },
   "devDependencies": {
-    "@ledgerhq/esbuild-tools": "workspace:*",
     "@ledgerhq/device-management-kit": "workspace:*",
+    "@ledgerhq/esbuild-tools": "workspace:*",
     "@ledgerhq/eslint-config-dsdk": "workspace:*",
     "@ledgerhq/jest-config-dsdk": "workspace:*",
     "@ledgerhq/prettier-config-dsdk": "workspace:*",
@@ -44,10 +44,10 @@
     "ts-node": "^10.9.2"
   },
   "dependencies": {
-    "axios": "^1.7.7",
+    "axios": "^1.7.9",
     "crypto-js": "^4.2.0",
-    "ethers": "^6.13.2",
-    "inversify": "^6.0.3",
+    "ethers": "6.13.4",
+    "inversify": "^6.1.6",
     "purify-ts": "^2.1.0",
     "reflect-metadata": "^0.2.2"
   },

diff --git a/packages/signer/signer-btc/package.json b/packages/signer/signer-btc/package.json
@@ -38,15 +38,15 @@
   "dependencies": {
     "@types/crypto-js": "^4.2.2",
     "crypto-js": "^4.2.0",
-    "inversify": "^6.0.3",
+    "inversify": "^6.1.6",
     "inversify-logger-middleware": "^3.1.0",
     "purify-ts": "^2.1.0",
     "reflect-metadata": "^0.2.2",
-    "xstate": "^5.18.2"
+    "xstate": "^5.19.0"
   },
   "devDependencies": {
-    "@ledgerhq/esbuild-tools": "workspace:*",
     "@ledgerhq/device-management-kit": "workspace:*",
+    "@ledgerhq/esbuild-tools": "workspace:*",
     "@ledgerhq/eslint-config-dsdk": "workspace:*",
     "@ledgerhq/jest-config-dsdk": "workspace:*",
     "@ledgerhq/prettier-config-dsdk": "workspace:*",

diff --git a/packages/signer/signer-eth/package.json b/packages/signer/signer-eth/package.json
@@ -36,13 +36,13 @@
   },
   "dependencies": {
     "ethers-v5": "npm:ethers@^5.7.2",
-    "ethers-v6": "npm:ethers@^6.13.2",
-    "inversify": "^6.0.3",
+    "ethers-v6": "npm:[email protected].4",
+    "inversify": "^6.1.6",
     "inversify-logger-middleware": "^3.1.0",
     "purify-ts": "^2.1.0",
     "reflect-metadata": "^0.2.2",
     "semver": "^7.6.3",
-    "xstate": "^5.18.2"
+    "xstate": "^5.19.0"
   },
   "devDependencies": {
     "@ledgerhq/context-module": "workspace:*",

diff --git a/packages/signer/signer-eth/src/internal/app-binder/command/SignTransactionCommand.ts b/packages/signer/signer-eth/src/internal/app-binder/command/SignTransactionCommand.ts
@@ -36,8 +36,7 @@ export type SignTransactionCommandArgs = {
 };
 
 export class SignTransactionCommand
-  implements
-    Command<SignTransactionCommandResponse, SignTransactionCommandArgs>
+  implements Command<SignTransactionCommandResponse, SignTransactionCommandArgs>
 {
   args: SignTransactionCommandArgs;
 

diff --git a/packages/signer/signer-solana/package.json b/packages/signer/signer-solana/package.json
@@ -36,11 +36,11 @@
   "dependencies": {
     "@ledgerhq/signer-utils": "workspace:*",
     "bs58": "^6.0.0",
-    "inversify": "^6.0.3",
+    "inversify": "^6.1.6",
     "inversify-logger-middleware": "^3.1.0",
     "purify-ts": "^2.1.0",
     "reflect-metadata": "^0.2.2",
-    "xstate": "^5.18.2"
+    "xstate": "^5.19.0"
   },
   "devDependencies": {
     "@ledgerhq/device-management-kit": "workspace:*",

diff --git a/packages/signer/signer-solana/src/internal/app-binder/command/SignTransactionCommand.ts b/packages/signer/signer-solana/src/internal/app-binder/command/SignTransactionCommand.ts
@@ -32,8 +32,7 @@ export type SignTransactionCommandArgs = {
 };
 
 export class SignTransactionCommand
-  implements
-    Command<SignTransactionCommandResponse, SignTransactionCommandArgs>
+  implements Command<SignTransactionCommandResponse, SignTransactionCommandArgs>
 {
   args: SignTransactionCommandArgs;
 

diff --git a/packages/transport/web-ble/package.json b/packages/transport/web-ble/package.json
@@ -37,7 +37,7 @@
   "dependencies": {
     "@sentry/minimal": "^6.19.7",
     "purify-ts": "^2.1.0",
-    "uuid": "^10.0.0"
+    "uuid": "^11.0.3"
   },
   "devDependencies": {
     "@ledgerhq/device-management-kit": "workspace:*",

diff --git a/packages/transport/web-hid/package.json b/packages/transport/web-hid/package.json
@@ -37,7 +37,7 @@
   "dependencies": {
     "@sentry/minimal": "^6.19.7",
     "purify-ts": "^2.1.0",
-    "uuid": "^10.0.0"
+    "uuid": "^11.0.3"
   },
   "devDependencies": {
     "@ledgerhq/device-management-kit": "workspace:*",

diff --git a/packages/trusted-apps/package.json b/packages/trusted-apps/package.json
@@ -34,7 +34,7 @@
     "test:coverage": "pnpm test -- --coverage"
   },
   "dependencies": {
-    "inversify": "^6.0.3",
+    "inversify": "^6.1.6",
     "reflect-metadata": "^0.2.2"
   },
   "devDependencies": {

diff --git a/packages/ui/package.json b/packages/ui/package.json
@@ -34,7 +34,7 @@
     "test:coverage": "pnpm test -- --coverage"
   },
   "dependencies": {
-    "inversify": "^6.0.3",
+    "inversify": "^6.1.6",
     "reflect-metadata": "^0.2.2"
   },
   "devDependencies": {