chore: Pin sensitive dependencies to specific versions (#2169)

* chore: Pin sensitive dependencies to specific versions

* chore: format

* chore: format

.changeset/hot-mice-unite.md

@@ -0,0 +1,13 @@
+---
+"@kadena/dev-wallet-desktop": patch
+"@kadena/cryptography-utils": patch
+"@kadena/client-utils": patch
+"@kadena/kadena-cli": patch
+"@kadena/pactjs-cli": patch
+"@kadena/dev-wallet": patch
+"@kadena/hd-wallet": patch
+"@kadena/client": patch
+"@kadena/graph": patch
+---
+
+Pin sensitive dependencies to specific versions

packages/apps/dev-wallet/package.json

@@ -25,11 +25,11 @@
     "@kadena/pactjs-generator": "workspace:*",
     "@kadena/react-icons": "workspace:*",
     "@kadena/react-ui": "workspace:*",
-    "@scure/bip39": "^1.2.1",
+    "@scure/bip39": "1.2.1",
     "@tauri-apps/api": "^1.4.0",
     "@vanilla-extract/css": "1.14.2",
     "chrome-types": "^0.1.248",
-    "ed25519-keygen": "^0.4.8",
+    "ed25519-keygen": "0.4.8",
     "react": "^18.2.0",
     "react-dom": "^18.2.0",
     "react-hook-form": "^7.45.4",
@@ -60,4 +60,4 @@
     "vite-tsconfig-paths": "^4.2.1",
     "vitest": "^1.6.0"
   }
-}
+}

packages/apps/graph/package.json

@@ -64,7 +64,7 @@
     "cli-highlight": "^2.1.11",
     "commander": "^11.0.0",
     "dataloader": "^2.2.2",
-    "debug": "~4.3.4",
+    "debug": "4.3.4",
     "dotenv": "~16.4.5",
     "eslint": "^8.45.0",
     "graphql": "~16.8.1",

packages/apps/tools/package.json

@@ -80,7 +80,7 @@
     "@vitest/coverage-v8": "^1.6.0",
     "@walletconnect/types": "~2.8.1",
     "@webpro/next-translate-plugin": "^2.6.3",
-    "debug": "~4.3.4",
+    "debug": "4.3.4",
     "eslint": "^8.45.0",
     "eslint-config-next": "13.4.5",
     "happy-dom": "^12.9.1",

packages/libs/client-utils/package.json

@@ -125,7 +125,7 @@
     "@kadena/pactjs": "workspace:*",
     "@kadena/pactjs-cli": "workspace:*",
     "@kadena/types": "workspace:*",
-    "debug": "~4.3.4",
+    "debug": "4.3.4",
     "js-yaml": "~4.1.0",
     "ramda": "^0.29.0"
   },

packages/libs/client/package.json

@@ -45,7 +45,7 @@
     "@kadena/pactjs": "workspace:*",
     "@walletconnect/sign-client": "~2.8.1",
     "cross-fetch": "~3.1.5",
-    "debug": "~4.3.4"
+    "debug": "4.3.4"
   },
   "devDependencies": {
     "@kadena-dev/eslint-config": "workspace:*",

packages/libs/cryptography-utils/package.json

@@ -44,7 +44,7 @@
   },
   "dependencies": {
     "blakejs": "^1.2.1",
-    "buffer": "^6.0.3",
+    "buffer": "6.0.3",
     "tweetnacl": "^1.0.3"
   },
   "devDependencies": {

packages/libs/hd-wallet/package.json

@@ -53,11 +53,11 @@
   },
   "dependencies": {
     "@kadena/cryptography-utils": "workspace:*",
-    "@scure/bip39": "^1.2.1",
-    "buffer": "^6.0.3",
-    "buffer-from": "^1.1.2",
-    "debug": "~4.3.4",
-    "ed25519-keygen": "^0.4.8"
+    "@scure/bip39": "1.2.1",
+    "buffer": "6.0.3",
+    "buffer-from": "1.1.2",
+    "debug": "4.3.4",
+    "ed25519-keygen": "0.4.8"
   },
   "devDependencies": {
     "@kadena-dev/eslint-config": "workspace:*",

packages/tools/kadena-cli/package.json

@@ -62,7 +62,7 @@
     "@kadena/pactjs": "workspace:*",
     "@kadena/pactjs-cli": "workspace:^",
     "@kadena/pactjs-generator": "workspace:*",
-    "@scure/bip39": "^1.2.1",
+    "@scure/bip39": "1.2.1",
     "chalk": "^5.2.0",
     "cli-table3": "0.6.4",
     "commander": "^11.0.0",
@@ -99,4 +99,4 @@
     "typescript": "5.4.5",
     "vitest": "^1.6.0"
   }
-}
+}

packages/tools/kadena-cli/src/utils/helpers.ts

@@ -102,8 +102,8 @@ export const passwordPromptTransform =
       useStdin === true && (passwordFile === '-' || passwordFile === undefined)
         ? (args.stdin as string | null)
         : typeof passwordFile === 'string'
-        ? await services.filesystem.readFile(passwordFile)
-        : passwordFile._password;
+          ? await services.filesystem.readFile(passwordFile)
+          : passwordFile._password;
 
     if (password === null) {
       throw new CommandError({
@@ -142,8 +142,8 @@ export const mnemonicPromptTransform =
       filepath === '-' || filepath === undefined
         ? (args.stdin as string | null)
         : typeof filepath === 'string'
-        ? await services.filesystem.readFile(filepath)
-        : filepath._secret;
+          ? await services.filesystem.readFile(filepath)
+          : filepath._secret;
 
     if (content === null) {
       throw new CommandError({

packages/tools/pactjs-cli/package.json

@@ -39,7 +39,7 @@
     "@kadena/pactjs-generator": "workspace:*",
     "commander": "^11.0.0",
     "cross-fetch": "~3.1.5",
-    "debug": "~4.3.4",
+    "debug": "4.3.4",
     "mkdirp": "~1.0.4",
     "prettier": "~3.2.5",
     "rimraf": "~5.0.1",