From c15dd2778f56620aab8ab85d20c929fce64c6f66 Mon Sep 17 00:00:00 2001 From: Alejandro Busse Date: Mon, 12 Feb 2024 15:51:25 -0300 Subject: [PATCH] fix(root): bump proxy agent bumped proxy agent to fix vulnerability WP-1413 TICKET: WP-1413 --- examples/ts/http-proxy/package.json | 2 +- modules/sdk-api/package.json | 2 +- package.json | 1 + yarn.lock | 42 ++++++++++++++++++----------- 4 files changed, 29 insertions(+), 18 deletions(-) diff --git a/examples/ts/http-proxy/package.json b/examples/ts/http-proxy/package.json index f77ff12592..35544e08ef 100644 --- a/examples/ts/http-proxy/package.json +++ b/examples/ts/http-proxy/package.json @@ -13,7 +13,7 @@ "typescript": "^4.7.3", "typescript-cached-transpile": "^0.0.6", "superagent": "4.1", - "proxy-agent": "^6.3.1", + "proxy-agent": "6.4.0", "proxy": "2.1.1" } } diff --git a/modules/sdk-api/package.json b/modules/sdk-api/package.json index ddaa4f752f..5c42af3275 100644 --- a/modules/sdk-api/package.json +++ b/modules/sdk-api/package.json @@ -52,7 +52,7 @@ "debug": "3.1.0", "eol": "^0.5.0", "lodash": "^4.17.15", - "proxy-agent": "6.3.1", + "proxy-agent": "6.4.0", "sanitize-html": "^2.11", "secp256k1": "^4.0.2", "secrets.js-grempe": "^1.1.0", diff --git a/package.json b/package.json index 623341ed8f..fc5da751ca 100644 --- a/package.json +++ b/package.json @@ -88,6 +88,7 @@ "terser": "^5.14.2", "json5": "^2.2.2", "ua-parser-js": ">0.7.30 <0.8.0", + "pac-resolver": "7.0.1", "protobufjs": "^7.2.4" }, "workspaces": [ diff --git a/yarn.lock b/yarn.lock index 88a22309f4..7e957e8440 100644 --- a/yarn.lock +++ b/yarn.lock @@ -11617,6 +11617,14 @@ http-proxy-agent@^7.0.0: agent-base "^7.1.0" debug "^4.3.4" +http-proxy-agent@^7.0.1: + version "7.0.1" + resolved "https://registry.yarnpkg.com/http-proxy-agent/-/http-proxy-agent-7.0.1.tgz#f1c7df4bd6c30ba90f2c713fd4b60d3989d4b3d9" + integrity sha512-My1KCEPs6A0hb4qCVzYp8iEvA8j8YqcvXLZZH8C9OFuTYpYjHE7N2dtG3mRl1HMD4+VGXpF3XcDVcxGBT7yDZQ== + dependencies: + agent-base "^7.1.0" + debug "^4.3.4" + http-proxy-middleware@^2.0.3: version "2.0.6" resolved "https://registry.npmjs.org/http-proxy-middleware/-/http-proxy-middleware-2.0.6.tgz" @@ -11700,6 +11708,14 @@ https-proxy-agent@^7.0.2: agent-base "^7.0.2" debug "4" +https-proxy-agent@^7.0.3: + version "7.0.3" + resolved "https://registry.yarnpkg.com/https-proxy-agent/-/https-proxy-agent-7.0.3.tgz#93f115f0f106a746faf364d1301b2e561cdf70de" + integrity sha512-kCnwztfX0KZJSLOBrcL0emLeFako55NWMovvyPP2AjsghNk9RB1yjSI+jVumPHYZsNXegNoqupSW9IY3afSH8w== + dependencies: + agent-base "^7.0.2" + debug "4" + human-signals@^1.1.1: version "1.1.1" resolved "https://registry.npmjs.org/human-signals/-/human-signals-1.1.1.tgz" @@ -11957,11 +11973,6 @@ io-ts@2.0.1, io-ts@2.1.3: resolved "https://registry.yarnpkg.com/io-ts/-/io-ts-2.1.3.tgz#02c03c375d14079496f0c046ef8a9aad4fbaeb74" integrity sha512-QFMR2QEBSP6w1TPmkpfca6xkzBbXO+K7ubdbV26GlCGI7CP9LV59bfty422JYtWgbBITuL/zBb1+mziv9f5Wfg== -ip@^1.1.8: - version "1.1.8" - resolved "https://registry.yarnpkg.com/ip/-/ip-1.1.8.tgz#ae05948f6b075435ed3307acce04629da8cdbf48" - integrity sha512-PuExPYUiu6qMBQb4l06ecm6T6ujzhmh+MeJcW9wa89PoAz5pvd4zPgN5WJV104mb6S2T1AwNIAaB70JNrLQWhg== - ip@^2.0.0: version "2.0.0" resolved "https://registry.npmjs.org/ip/-/ip-2.0.0.tgz" @@ -14948,13 +14959,12 @@ pac-proxy-agent@^7.0.1: pac-resolver "^7.0.0" socks-proxy-agent "^8.0.2" -pac-resolver@^7.0.0: - version "7.0.0" - resolved "https://registry.yarnpkg.com/pac-resolver/-/pac-resolver-7.0.0.tgz#79376f1ca26baf245b96b34c339d79bff25e900c" - integrity sha512-Fd9lT9vJbHYRACT8OhCbZBbxr6KRSawSovFpy8nDGshaK99S/EBhVIHp9+crhxrsZOuvLpgL1n23iyPg6Rl2hg== +pac-resolver@7.0.1, pac-resolver@^7.0.0: + version "7.0.1" + resolved "https://registry.yarnpkg.com/pac-resolver/-/pac-resolver-7.0.1.tgz#54675558ea368b64d210fd9c92a640b5f3b8abb6" + integrity sha512-5NPgf87AT2STgwa2ntRMr45jTKrYBGkVU36yT0ig/n/GMAa3oPqhZfIQ2kMEimReg0+t9kZViDVZ83qfVUlckg== dependencies: degenerator "^5.0.0" - ip "^1.1.8" netmask "^2.0.2" package-hash@^4.0.0: @@ -15828,15 +15838,15 @@ proxy-addr@~2.0.7: forwarded "0.2.0" ipaddr.js "1.9.1" -proxy-agent@6.3.1: - version "6.3.1" - resolved "https://registry.yarnpkg.com/proxy-agent/-/proxy-agent-6.3.1.tgz#40e7b230552cf44fd23ffaf7c59024b692612687" - integrity sha512-Rb5RVBy1iyqOtNl15Cw/llpeLH8bsb37gM1FUfKQ+Wck6xHlbAhWGUFiTRHtkjqGTA5pSHz6+0hrPW/oECihPQ== +proxy-agent@6.4.0: + version "6.4.0" + resolved "https://registry.yarnpkg.com/proxy-agent/-/proxy-agent-6.4.0.tgz#b4e2dd51dee2b377748aef8d45604c2d7608652d" + integrity sha512-u0piLU+nCOHMgGjRbimiXmA9kM/L9EHh3zL81xCdp7m+Y2pHIsnmbdDoEDoAz5geaonNR6q6+yOPQs6n4T6sBQ== dependencies: agent-base "^7.0.2" debug "^4.3.4" - http-proxy-agent "^7.0.0" - https-proxy-agent "^7.0.2" + http-proxy-agent "^7.0.1" + https-proxy-agent "^7.0.3" lru-cache "^7.14.1" pac-proxy-agent "^7.0.1" proxy-from-env "^1.1.0"