build(deps): bump the npm_and_yarn group across 3 directories with 7 …

…updates

Bumps the npm_and_yarn group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [webpack](https://github.com/webpack/webpack) | `5.94.0` | `5.95.0` |
| [@grpc/grpc-js](https://github.com/grpc/grpc-node) | `1.11.2` | `1.11.3` |
| [axios](https://github.com/axios/axios) | `1.7.2` | `1.7.4` |
| [express](https://github.com/expressjs/express) | `4.20.0` | `4.21.0` |
| [bl](https://github.com/rvagg/bl) | `6.0.14` | `6.0.15` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `5.3.3` | `5.3.6` |
| [find-my-way](https://github.com/delvedor/find-my-way) | `8.1.0` | `8.2.2` |

Updates `webpack` from 5.94.0 to 5.95.0
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v5.94.0...v5.95.0)

Updates `@grpc/grpc-js` from 1.11.2 to 1.11.3
- [Release notes](https://github.com/grpc/grpc-node/releases)
- [Commits](https://github.com/grpc/grpc-node/compare/@grpc/[email protected]...@grpc/[email protected])

Updates `axios` from 1.7.2 to 1.7.4
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.7.2...v1.7.4)

Updates `express` from 4.20.0 to 4.21.0
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.21.0/History.md)
- [Commits](expressjs/express@4.20.0...4.21.0)

Updates `bl` from 6.0.14 to 6.0.15
- [Release notes](https://github.com/rvagg/bl/releases)
- [Changelog](https://github.com/rvagg/bl/blob/master/CHANGELOG.md)
- [Commits](rvagg/bl@v6.0.14...v6.0.15)

Updates `vite` from 5.3.3 to 5.3.6
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v5.3.6/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v5.3.6/packages/vite)

Updates `find-my-way` from 8.1.0 to 8.2.2
- [Release notes](https://github.com/delvedor/find-my-way/releases)
- [Commits](delvedor/find-my-way@v8.1.0...v8.2.2)

Updates `vite` from 5.1.7 to 5.1.8
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v5.3.6/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v5.3.6/packages/vite)

Updates `@grpc/grpc-js` from 1.11.2 to 1.11.3
- [Release notes](https://github.com/grpc/grpc-node/releases)
- [Commits](https://github.com/grpc/grpc-node/compare/@grpc/[email protected]...@grpc/[email protected])

Updates `express` from 4.20.0 to 4.21.0
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.21.0/History.md)
- [Commits](expressjs/express@4.20.0...4.21.0)

---
updated-dependencies:
- dependency-name: webpack
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: "@grpc/grpc-js"
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: axios
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: express
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: bl
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: vite
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: find-my-way
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: vite
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: "@grpc/grpc-js"
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: express
  dependency-type: direct:production
  dependency-group: npm_and_yarn
...

Co-authored-by: Peter Somogyvari <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: Peter Somogyvari <[email protected]>

.github/workflows/.dast-nuclei-cmd-api-server.yaml

@@ -74,15 +74,6 @@ jobs:
           echo https://localhost:4000/api/v1/plugins/@hyperledger/cactus-plugin-ledger-connector-besu/get-besu-record
           } >> urls.txt
 
-      - name: Show file content
-        run: |
-          pwd
-          ls -la
-          cat urls.txt
-
-      # TODO: Clean up comments
-      # TODO: Remove --debug flag
-
       - run: yarn generate-api-server-config
 
       - run: jq '.authorizationProtocol = "NONE"' .config.json > .config2.json && mv .config2.json .config.json
@@ -104,20 +95,14 @@ jobs:
           docker run -d -p 0.0.0.0:8545:8545/tcp  -p 0.0.0.0:8546:8546/tcp  -p 0.0.0.0:8888:8888/tcp  -p 0.0.0.0:9001:9001/tcp  -p 0.0.0.0:9545:9545/tcp ghcr.io/hyperledger/cactus-besu-all-in-one:2022-04-14-dda3f00
           until curl --fail -X POST --data '{"jsonrpc":"2.0","method":"eth_chainId","params":[],"id":1}' localhost:8545; do sleep 5;  done
 
-      # - run: |
-      #     touch ~/nuclei-github-config.yaml \
-      #     && echo -e "severity: critical,high" >> ~/nuclei-github-config.yaml \
-      #     && echo -e "github:" >> ~/nuclei-github-config.yaml \
-      #     && echo -e "  username: \"$GITHUB_ACTOR\"" >> ~/nuclei-github-config.yaml \
-      #     && echo -e "  owner: \"${GITHUB_REPOSITORY%%/*}\"" >> ~/nuclei-github-config.yaml \
-      #     && echo -e "  token: \"${{ inputs.github-token }}\"" >> ~/nuclei-github-config.yaml \
-      #     && echo -e "  project-name: \"${GITHUB_REPOSITORY#*/}\"" >> ~/nuclei-github-config.yaml \
-      #     && echo -e "  issue-label: \"Nuclei\"" >> ~/nuclei-github-config.yaml \
-      #     && echo "githubconfig=-rc ~/nuclei-github-config.yaml" >> $GITHUB_ENV
+      - name: Print API Server Config File - ./.config.json
+        run: cat .config.json
 
-      #   shell: bash
+      - name: Print Nuclei Config File - ./.nuclei-config.yaml
+        run: cat .nuclei-config.yaml
 
-      # - run: ls -alt
+      - name: Print Nuclei URL List File - ./urls.txt
+        run: cat urls.txt
 
       - name: Start API Server & Run DAST
         uses: BerniWittmann/[email protected]
@@ -130,21 +115,13 @@ jobs:
           build: yarn --version
           start: yarn start:api-server
           command: "nuclei -update-templates --config=.nuclei-config.yaml --list=urls.txt --sarif-export ~/nuclei.sarif --output nuclei.log"
+          command-windows: echo "The project build is not supported on the Windows operating system. Please use Linux or macOS"
           wait-on: "https://localhost:4000/api/v1/api-server/healthcheck"
           # wait for 10 minutes for the server to respond
           wait-on-timeout: 120
 
-      - run: pwd
-
-      - run: ls -alt
-
       - name: GitHub Workflow artifacts
         uses: actions/[email protected]
         with:
           name: nuclei.log
           path: nuclei.log
-
-      # - name: GitHub Security Dashboard Alerts update
-      #   uses: github/codeql-action/upload-sarif@v1
-      #   with:
-      #     sarif_file: ~/nuclei.sarif

examples/cactus-common-example-server/package.json

@@ -52,7 +52,7 @@
     "escape-html": "1.0.3",
     "ethereumjs-common": "1.5.2",
     "ethereumjs-tx": "2.1.2",
-    "express": "4.20.0",
+    "express": "4.21.0",
     "fabric-network": "2.2.20",
     "http-errors": "1.6.3",
     "js-yaml": "3.14.1",
@@ -71,7 +71,7 @@
     "@types/cookie-parser": "1.4.5",
     "@types/debug": "4.1.8",
     "@types/escape-html": "1.0.1",
-    "@types/express": "4.17.21",
+    "@types/express": "5.0.0",
     "@types/http-errors": "1.6.3",
     "@types/js-yaml": "4.0.5",
     "@types/jsonwebtoken": "9.0.6",

examples/cactus-example-carbon-accounting-backend/package.json

@@ -74,7 +74,7 @@
     "web3-utils": "1.6.1"
   },
   "devDependencies": {
-    "@types/express": "4.17.21",
+    "@types/express": "5.0.0",
     "@types/fs-extra": "11.0.4",
     "@types/json-stable-stringify": "1.0.34",
     "@types/qs": "6.9.14",

examples/cactus-example-carbon-accounting-business-logic-plugin/package.json

@@ -65,13 +65,13 @@
     "@hyperledger/cactus-plugin-ledger-connector-xdai": "2.0.0-rc.7",
     "async-exit-hook": "2.0.1",
     "axios": "1.7.7",
-    "express": "4.20.0",
+    "express": "4.21.0",
     "openapi-types": "12.1.3",
     "typescript-optional": "2.0.1",
     "uuid": "10.0.0"
   },
   "devDependencies": {
-    "@types/express": "4.17.21",
+    "@types/express": "5.0.0",
     "@types/ssh2": "0.5.47",
     "@types/uuid": "10.0.0"
   },

examples/cactus-example-cbdc-bridging-backend/package.json

@@ -88,7 +88,7 @@
   "devDependencies": {
     "@types/crypto-js": "4.1.1",
     "@types/cucumber": "4.0.4",
-    "@types/express": "4.17.21",
+    "@types/express": "5.0.0",
     "@types/express-jwt": "6.0.2",
     "@types/fs-extra": "11.0.4",
     "@types/node": "18.11.9",

examples/cactus-example-discounted-asset-trade/package.json

@@ -31,7 +31,7 @@
     "escape-html": "1.0.3",
     "ethereumjs-common": "1.5.2",
     "ethereumjs-tx": "2.1.2",
-    "express": "4.20.0",
+    "express": "4.21.0",
     "fabric-ca-client": "2.2.20",
     "fabric-network": "2.2.20",
     "http-errors": "1.6.3",
@@ -50,7 +50,7 @@
   "devDependencies": {
     "@types/elliptic": "6.4.14",
     "@types/escape-html": "1.0.1",
-    "@types/express": "4.17.21",
+    "@types/express": "5.0.0",
     "@types/jsonwebtoken": "9.0.6",
     "@types/jsrsasign": "10.5.8",
     "@types/uuid": "10.0.0"

examples/cactus-example-electricity-trade/package.json

@@ -28,7 +28,7 @@
     "escape-html": "1.0.3",
     "ethereumjs-common": "1.5.2",
     "ethereumjs-tx": "2.1.2",
-    "express": "4.20.0",
+    "express": "4.21.0",
     "fabric-ca-client": "2.2.20",
     "fabric-network": "2.2.20",
     "http-errors": "1.6.3",
@@ -45,7 +45,7 @@
   },
   "devDependencies": {
     "@types/escape-html": "1.0.1",
-    "@types/express": "4.17.21",
+    "@types/express": "5.0.0",
     "@types/uuid": "10.0.0"
   },
   "engines": {

examples/cactus-example-supply-chain-backend/package.json

@@ -68,7 +68,7 @@
     "async-exit-hook": "2.0.1",
     "axios": "1.7.7",
     "dotenv": "16.0.0",
-    "express": "4.20.0",
+    "express": "4.21.0",
     "express-jwt": "8.4.1",
     "fabric-network": "2.2.20",
     "jose": "4.15.5",
@@ -79,7 +79,7 @@
     "web3-core": "1.6.1"
   },
   "devDependencies": {
-    "@types/express": "4.17.21",
+    "@types/express": "5.0.0",
     "@types/uuid": "10.0.0"
   },
   "engines": {

examples/cactus-example-supply-chain-business-logic-plugin/package.json

@@ -66,14 +66,14 @@
     "@hyperledger/cactus-plugin-ledger-connector-xdai": "2.0.0-rc.7",
     "async-exit-hook": "2.0.1",
     "axios": "1.7.7",
-    "express": "4.20.0",
+    "express": "4.21.0",
     "openapi-types": "12.1.3",
     "run-time-error-cjs": "1.4.0",
     "typescript-optional": "2.0.1",
     "uuid": "10.0.0"
   },
   "devDependencies": {
-    "@types/express": "4.17.21",
+    "@types/express": "5.0.0",
     "@types/ssh2": "0.5.47",
     "@types/uuid": "10.0.0"
   },

extensions/cactus-plugin-htlc-coordinator-besu/package.json

@@ -79,9 +79,9 @@
   "devDependencies": {
     "@hyperledger/cactus-plugin-keychain-memory": "2.0.0-rc.7",
     "@hyperledger/cactus-test-tooling": "2.0.0-rc.7",
-    "@types/express": "4.17.21",
+    "@types/express": "5.0.0",
     "@types/uuid": "10.0.0",
-    "express": "4.20.0",
+    "express": "4.21.0",
     "socket.io": "4.6.2",
     "web3-eth-abi": "4.2.1",
     "web3-utils": "4.2.1"

extensions/cactus-plugin-object-store-ipfs/package.json

@@ -68,9 +68,9 @@
     "@hyperledger/cactus-test-tooling": "2.0.0-rc.7",
     "@multiformats/multiaddr": "11.6.1",
     "@types/body-parser": "1.19.4",
-    "@types/express": "4.17.21",
+    "@types/express": "5.0.0",
     "body-parser": "1.20.3",
-    "express": "4.20.0",
+    "express": "4.21.0",
     "ipfs-core-types": "0.14.1",
     "ipfs-unixfs": "9.0.1",
     "kubo-rpc-client": "3.0.1",

package.json

@@ -214,7 +214,7 @@
     "web3-core": "4.1.1",
     "web3-eth": "4.1.1",
     "web3-utils": "4.3.0",
-    "webpack": "5.94.0",
+    "webpack": "5.95.0",
     "webpack-cli": "4.10.0",
     "wget-improved": "3.4.0",
     "yargs": "17.7.2"

packages/cacti-ledger-browser/package.json

@@ -74,7 +74,7 @@
     "@types/react-dom": "18.2.17",
     "@vitejs/plugin-react": "4.2.1",
     "typescript": "5.5.2",
-    "vite": "5.1.7"
+    "vite": "5.4.8"
   },
   "engines": {
     "node": ">=18",

packages/cacti-plugin-consortium-static/package.json

@@ -60,7 +60,7 @@
     "@hyperledger/cactus-core-api": "2.0.0-rc.7",
     "axios": "1.7.7",
     "body-parser": "1.20.3",
-    "express": "4.20.0",
+    "express": "4.21.0",
     "http-errors-enhanced-cjs": "2.0.1",
     "jose": "4.15.5",
     "merkletreejs": "0.4.0",
@@ -74,7 +74,7 @@
     "@hyperledger/cactus-cmd-api-server": "2.0.0-rc.7",
     "@hyperledger/cactus-plugin-ledger-connector-besu": "2.0.0-rc.7",
     "@hyperledger/cactus-test-tooling": "2.0.0-rc.7",
-    "@types/express": "4.17.21",
+    "@types/express": "5.0.0",
     "@types/json-stable-stringify": "1.0.33",
     "@types/uuid": "10.0.0",
     "web3": "1.6.1"

packages/cacti-plugin-ledger-connector-stellar/package.json

@@ -63,7 +63,7 @@
     "@hyperledger/cactus-core": "2.0.0-rc.7",
     "@hyperledger/cactus-core-api": "2.0.0-rc.7",
     "axios": "1.7.7",
-    "express": "4.20.0",
+    "express": "4.21.0",
     "http-errors-enhanced-cjs": "2.0.1",
     "joi": "17.13.3",
     "openapi-types": "12.1.3",
@@ -78,7 +78,7 @@
     "@hyperledger/cactus-plugin-keychain-memory": "2.0.0-rc.7",
     "@hyperledger/cactus-test-tooling": "2.0.0-rc.7",
     "@types/body-parser": "1.19.4",
-    "@types/express": "4.17.21",
+    "@types/express": "5.0.0",
     "@types/http-errors": "2.0.4",
     "@types/uuid": "10.0.0",
     "body-parser": "1.20.3",

packages/cactus-cmd-api-server/package.json

@@ -67,7 +67,7 @@
     "@connectrpc/connect-express": "1.4.0",
     "@connectrpc/connect-fastify": "1.4.0",
     "@connectrpc/connect-node": "1.4.0",
-    "@grpc/grpc-js": "1.11.2",
+    "@grpc/grpc-js": "1.11.3",
     "@grpc/proto-loader": "0.7.13",
     "@hyperledger/cactus-common": "2.0.0-rc.7",
     "@hyperledger/cactus-core": "2.0.0-rc.7",
@@ -81,12 +81,12 @@
     "convict": "6.2.4",
     "convict-format-with-validator": "6.2.0",
     "cors": "2.8.5",
-    "express": "4.20.0",
+    "express": "4.21.0",
     "express-http-proxy": "1.6.2",
     "express-jwt": "8.4.1",
     "express-openapi-validator": "5.2.0",
     "express-rate-limit": "6.7.0",
-    "fastify": "4.26.2",
+    "fastify": "4.28.1",
     "fs-extra": "11.2.0",
     "google-protobuf": "3.21.4",
     "jose": "4.15.5",
@@ -115,7 +115,7 @@
     "@types/compression": "1.7.4",
     "@types/convict": "6.1.1",
     "@types/cors": "2.8.12",
-    "@types/express": "4.17.21",
+    "@types/express": "5.0.0",
     "@types/express-http-proxy": "1.6.2",
     "@types/google-protobuf": "3.15.5",
     "@types/json-stable-stringify": "1.0.34",

packages/cactus-cmd-api-server/src/main/typescript/api-server.ts

@@ -727,7 +727,7 @@ export class ApiServer {
 
     const crpcMiddlewareHandler = expressConnectMiddleware({
       routes: crpcRoutesHandler,
-    });
+    }) as unknown as RequestHandler; // FIXME this cast is not safe
 
     return { svcCount, crpcMiddlewareHandler };
   }

packages/cactus-common/package.json

@@ -66,7 +66,7 @@
     "sha3": "2.1.4"
   },
   "devDependencies": {
-    "@grpc/grpc-js": "1.11.2",
+    "@grpc/grpc-js": "1.11.3",
     "@types/json-stable-stringify": "1.0.33",
     "@types/sanitize-html": "2.9.5",
     "@types/secp256k1": "4.0.3",

packages/cactus-core-api/package.json

@@ -60,7 +60,7 @@
     "webpack:dev:web": "webpack --env=dev --target=web --config ../../webpack.config.js"
   },
   "dependencies": {
-    "@grpc/grpc-js": "1.11.2",
+    "@grpc/grpc-js": "1.11.3",
     "@hyperledger/cactus-common": "2.0.0-rc.7",
     "ajv": "8.17.1",
     "ajv-draft-04": "1.0.0",
@@ -72,7 +72,7 @@
     "@bufbuild/protobuf": "1.10.0",
     "@connectrpc/connect": "1.4.0",
     "@grpc/proto-loader": "0.7.13",
-    "@types/express": "4.17.21",
+    "@types/express": "5.0.0",
     "@types/google-protobuf": "3.15.5",
     "grpc-tools": "1.12.4",
     "grpc_tools_node_protoc_ts": "5.3.3",

packages/cactus-core/package.json

@@ -53,7 +53,7 @@
     "@hyperledger/cactus-common": "2.0.0-rc.7",
     "@hyperledger/cactus-core-api": "2.0.0-rc.7",
     "body-parser": "1.20.3",
-    "express": "4.20.0",
+    "express": "4.21.0",
     "express-jwt-authz": "2.4.1",
     "express-openapi-validator": "5.2.0",
     "http-errors": "2.0.0",
@@ -64,7 +64,7 @@
   },
   "devDependencies": {
     "@types/body-parser": "1.19.4",
-    "@types/express": "4.17.21",
+    "@types/express": "5.0.0",
     "@types/http-errors": "2.0.2",
     "node-mocks-http": "1.14.0",
     "uuid": "10.0.0"

packages/cactus-plugin-bungee-hermes/package.json

@@ -82,11 +82,11 @@
     "@hyperledger/cactus-test-tooling": "2.0.0-rc.7",
     "@types/body-parser": "1.19.4",
     "@types/crypto-js": "4.0.1",
-    "@types/express": "4.17.21",
+    "@types/express": "5.0.0",
     "@types/fs-extra": "11.0.4",
     "@types/tape": "4.13.4",
     "@types/uuid": "10.0.0",
-    "express": "4.20.0",
+    "express": "4.21.0",
     "fabric-network": "2.2.20",
     "socket.io": "4.6.2"
   },

packages/cactus-plugin-consortium-manual/package.json

@@ -61,15 +61,15 @@
     "@hyperledger/cactus-core-api": "2.0.0-rc.7",
     "axios": "1.7.7",
     "body-parser": "1.20.3",
-    "express": "4.20.0",
+    "express": "4.21.0",
     "jose": "4.15.5",
     "json-stable-stringify": "1.0.1",
     "prom-client": "15.1.3",
     "typescript-optional": "2.0.1",
     "uuid": "10.0.0"
   },
   "devDependencies": {
-    "@types/express": "4.17.21",
+    "@types/express": "5.0.0",
     "@types/json-stable-stringify": "1.0.33",
     "@types/uuid": "10.0.0"
   },