Update dependencies to address security vulnerabilities

Signed-off-by: Mark S. Lewis <mark_lewis@uk.ibm.com>
hyperledger · May 18, 2021 · 9212aa0 · 9212aa0
1 parent 738539b
commit 9212aa0
Show file tree

Hide file tree

Showing 9 changed files with 49 additions and 1,997 deletions.
diff --git a/.gitignore b/.gitignore
@@ -18,6 +18,7 @@ tmp
 *.heapsnapshot
 .scannerwork/*
 sonar-project.properties
+**/package-lock.json
 
 #test files
 test/temp/**

diff --git a/fabric-ca-client/package.json b/fabric-ca-client/package.json
@@ -21,9 +21,9 @@
   "types": "./types/index.d.ts",
   "dependencies": {
     "fabric-common": "file:../fabric-common",
-    "jsrsasign": "^8.0.20",
+    "jsrsasign": "^8.0.24",
     "url": "^0.11.0",
-    "winston": "^2.4.0"
+    "winston": "^2.4.5"
   },
   "license": "Apache-2.0",
   "licenses": [

diff --git a/fabric-common/package.json b/fabric-common/package.json
@@ -25,17 +25,17 @@
 	},
 	"types": "./types/index.d.ts",
 	"dependencies": {
+		"callsite": "^1.0.0",
 		"elliptic": "^6.5.4",
 		"fabric-protos": "file:../fabric-protos",
-		"js-sha3": "^0.7.0",
-		"jsrsasign": "^8.0.20",
+		"js-sha3": "^0.8.0",
+		"jsrsasign": "^8.0.24",
 		"long": "^4.0.0",
-		"nconf": "^0.10.0",
+		"nconf": "^0.11.2",
 		"promise-settle": "^0.3.0",
-		"sjcl": "1.0.7",
-		"winston": "^2.4.0",
-		"yn": "^3.1.0",
-		"callsite": "^1.0.0"
+		"sjcl": "^1.0.8",
+		"winston": "^2.4.5",
+		"yn": "^4.0.0"
 	},
 	"optionalDependencies": {
 		"pkcs11js": "^1.0.6"

diff --git a/fabric-network/package.json b/fabric-network/package.json
@@ -25,10 +25,10 @@
   },
   "types": "./types/index.d.ts",
   "dependencies": {
-	"fabric-common": "file:../fabric-common",
-	"fabric-protos": "file:../fabric-protos",
+    "fabric-common": "file:../fabric-common",
+    "fabric-protos": "file:../fabric-protos",
     "long": "^4.0.0",
-    "nano": "^8.2.2"
+    "nano": "^9.0.3"
   },
   "nyc": {
     "exclude": [