chore: clean up deps to address security vulnerabilities

apps/storybook/package.json

@@ -26,7 +26,7 @@
 		"@noble/hashes": "^1.6.1",
 		"@noble/secp256k1": "^2.1.0",
 		"@openzeppelin/merkle-tree": "^1.0.7",
-		"@privy-io/react-auth": "^1.95.2",
+		"@privy-io/react-auth": "^2.8.3",
 		"@radix-ui/colors": "^3.0.0",
 		"@radix-ui/react-accessible-icon": "^1.0.3",
 		"@radix-ui/react-accordion": "^1.2.0",
@@ -89,7 +89,6 @@
 		"react-dom": "^18.3.1",
 		"react-dropzone": "^14.2.9",
 		"react-hook-form": "^7.53.0",
-		"sha256": "link:@noble/hashes/sha256",
 		"stream-browserify": "^3.0.0",
 		"tailwind-merge": "^2.5.2",
 		"tailwindcss": "^3.4.13",
@@ -116,7 +115,7 @@
 		"@storybook/test": "^8.6.12",
 		"@storybook/test-runner": "^0.22.0",
 		"@testing-library/jest-dom": "^6.6.3",
-		"@testing-library/react": "^16.0.1",
+		"@testing-library/react": "^16.3.0",
 		"@testing-library/react-hooks": "^8.0.1",
 		"@types/react": "^18.3.12",
 		"@types/react-dom": "^18.3.1",

package.json

@@ -11,6 +11,7 @@
 	},
 	"pnpm": {
 		"overrides": {
+			"ethers@5": ">=5.8.0",
 			"@noble/ed25519": "2.1.0",
 			"@geist/ddev": "link:packages/ddev"
 		}
@@ -24,7 +25,6 @@
 		"@graphql-codegen/introspection": "^4.0.3",
 		"@graphql-codegen/schema-ast": "^4.1.0",
 		"@parcel/watcher": "^2.4.1",
-		"cross-env": "^7.0.3",
 		"husky": "^9.1.6",
 		"prettier": "^3.2.5",
 		"shadcn": "^2.4.0",
@@ -39,7 +39,7 @@
 	"packageManager": "pnpm@10.7.1",
 	"dependencies": {
 		"@testing-library/jest-dom": "^6.6.3",
-		"@testing-library/react": "^16.0.1",
+		"@testing-library/react": "^16.3.0",
 		"@vitejs/plugin-react": "^4.3.2",
 		"tsx": "^4.1.4",
 		"vite": "^5.4.1",

packages/ddev/package.json

@@ -25,8 +25,8 @@
 		"build": "tsup",
 		"typecheck": "tsc --noEmit",
 		"clean": "rimraf dist && rimraf components",
-		"start:dev": "cross-env REGISTRY_URL=http://localhost:3333/r node dist/index.js",
-		"start:prod": "cross-env REGISTRY_URL=https://ddev.geist.network/r node dist/index.js",
+		"start:dev": "REGISTRY_URL=http://localhost:3333/r node dist/index.js",
+		"start:prod": "REGISTRY_URL=https://ddev.geist.network/r node dist/index.js",
 		"start": "node dist/index.js",
 		"format:write": "prettier --write \"**/*.{ts,tsx,mdx}\" --cache",
 		"format:check": "prettier --check \"**/*.{ts,tsx,mdx}\" --cache",

packages/domain/package.json

@@ -34,7 +34,7 @@
 		"@noble/hashes": "^1.6.1",
 		"@noble/secp256k1": "^2.1.0",
 		"@openzeppelin/merkle-tree": "^1.0.7",
-		"@privy-io/react-auth": "^1.95.2",
+		"@privy-io/react-auth": "^2.8.3",
 		"@geist/graphql": "workspace:*",
 		"@scure/base": "^1.1.9",
 		"@storybook/components": "^8.3.6",
@@ -58,7 +58,6 @@
 		"micro-eth-signer": "^0.12.0",
 		"micro-packed": "^0.6.3",
 		"multiformats": "^13.3.0",
-		"sha256": "link:@noble/hashes/sha256",
 		"stream-browserify": "^3.0.0",
 		"viem": "^2.26.2",
 		"zod": "^3.23.8"

packages/ui-react/package.json

@@ -23,7 +23,7 @@
 		"@faker-js/faker": "^8.2.0",
 		"@geist/typescript-config": "workspace:*",
 		"@testing-library/jest-dom": "^6.6.3",
-		"@testing-library/react": "^16.0.1",
+		"@testing-library/react": "^16.3.0",
 		"@testing-library/react-hooks": "^8.0.1",
 		"@turbo/gen": "^1.12.4",
 		"@types/node": "^22.10.2",
@@ -54,7 +54,7 @@
 		"@noble/hashes": "^1.6.1",
 		"@noble/secp256k1": "^2.1.0",
 		"@openzeppelin/merkle-tree": "^1.0.7",
-		"@privy-io/react-auth": "^1.95.2",
+		"@privy-io/react-auth": "^2.8.3",
 		"@radix-ui/colors": "^3.0.0",
 		"@radix-ui/react-accessible-icon": "^1.0.3",
 		"@radix-ui/react-accordion": "^1.2.0",
@@ -99,7 +99,7 @@
 		"@ucanto/interface": "^10.0.1",
 		"@ucanto/transport": "^9.1.1",
 		"@wagmi/connectors": "^5.7.12",
-		"@wagmi/core": "^2.13.8",
+		"@wagmi/core": "^2.16.7",
 		"@web3-storage/w3up-client": "^16.5.1",
 		"autoprefixer": "10.4.20",
 		"class-variance-authority": "^0.7.0",
@@ -113,7 +113,6 @@
 		"jsdom": "^25.0.1",
 		"ky": "^1.7.2",
 		"lodash": "^4.17.21",
-		"lodash.template": "^4.5.0",
 		"lucide-react": "^0.446.0",
 		"micro-eth-signer": "^0.12.0",
 		"micro-packed": "^0.6.3",
@@ -125,7 +124,6 @@
 		"react-dropzone": "^14.2.9",
 		"react-hook-form": "^7.53.0",
 		"recharts": "^2.15.0",
-		"sha256": "link:@noble/hashes/sha256",
 		"shadcn": "2.4.0",
 		"stream-browserify": "^3.0.0",
 		"tailwind-merge": "^2.5.2",

packages/ui-react/src/hooks/eas/sdk/use-attestation.ts

@@ -1,5 +1,5 @@
 import { SchemaEncoder } from "@ethereum-attestation-service/eas-sdk";
-import { type Signer, ZeroHash } from "ethers";
+import type { Signer } from "ethers";
 import { useMemo } from "react";
 import {
 	type Account,
@@ -45,7 +45,7 @@ export const useAttestationEasSdk = (params: UseAttestationEasSdkParams) => {
 			recipient,
 			revocable = false,
 			expirationTime = NO_EXPIRATION,
-			refUID = ZeroHash,
+			refUID = zeroHash,
 			data,
 			salt,
 		} = requestParams;
@@ -70,7 +70,7 @@ export const useAttestationEasSdk = (params: UseAttestationEasSdkParams) => {
 					data: encodedData,
 					salt,
 				},
-				signer,
+				signer as any,
 			);
 
 			const { uid } = attestation;