Restructure the folder; Replace vis/ndbr/mix with a react node to address the Dec and finiteness limit in hiding; Start to model Cardano networks etc.
* mithril-aggregator-client from `0.2.2` to `0.2.3` * mithril-aggregator-discovery from `0.1.8` to `0.1.9` * mithril-protocol-config from `0.1.9` to `0.1.10` * mithril-aggregator from `0.9.9` to `0.9.10` * mithril-client-cli from `0.13.16` to `0.13.17` * mithril-common from `0.7.7` to `0.7.8` * mithril-end-to-end from `0.5.1` to `0.5.2` * openapi.yaml from `0.1.66` to `0.1.67`
There is a chance that incompatible ordering functions may be passed to the `verifyCert`. And we need to catch this problem sooner and prevent from building incorrect cert with mismatched amount of votes, so we add a check that the size of the deduplicated voters and certs is the same. See https://github.com/tweag/cardano-peras/issues/240 for the deeper discussion.
added: * github:input-output-hk/mithril/d1d2daecaf866293e1544a6b84caa25bb0d3648f#mithril-client-cli * github:input-output-hk/mithril/d1d2daecaf866293e1544a6b84caa25bb0d3648f#mithril-signer removed: * github:input-output-hk/mithril/5b335c5e8fc109f8ca63c06ab281501d53e2f8d0#mithril-client-cli * github:input-output-hk/mithril/5b335c5e8fc109f8ca63c06ab281501d53e2f8d0#mithril-signer
Prevent `TxInfo` translation failure for `LegacyMode`
mock-browser (last published 2022) pulled an ancient chain mock-browser -> [email protected] -> [email protected] -> [email protected], the source of the form-data unsafe-random-boundary alert (GHSA-fjxv-7rqg-78g4) that the ~2.3.2 range could not relock past. - Removed the unused mock-browser devDependency from e2e and wallet. - Replaced its single real use in dapp-connector's injectGlobal test with a minimal inline window stub (injectGlobal only touches window.cardano; the test only reads window.location.hostname) and dropped the module .d.ts shim. Result: mock-browser, jsdom@9, request and [email protected] are all removed; the only remaining form-data is the patched 4.0.6. dapp-connector tests green (44/44); full build green. Resolves #1703. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
Replaces the early-2020 artillery prerelease pin in packages/e2e with the current 2.0.33 release. This drops the legacy libhoney → superagent-proxy → proxy-agent@5 → pac-resolver@5 → degenerator@3 → vm2 chain entirely, and moves jsonpath-plus and fast-xml-parser onto patched lines. Result (yarn.lock): - vm2: REMOVED from the tree (closes the ~18 critical + high/medium vm2 alerts) - jsonpath-plus: 7.2.0 → 10.4.0 (RCE advisory, GHSA-pppg-cpfq-h7wr et al.) - fast-xml-parser: 4.2.5 → 5.x (entity-injection advisories) artillery is a dev/e2e-only load-testing tool (not imported by SDK code). Validated: `yarn build` green across all 21 workspaces; artillery CLI loads. The e2e artillery scripts (artillery:stake-pool-query, artillery:wallet-restoration) should be exercised in CI/e2e against a running stack. Resolves #1702. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?v=4&s=80)
Bumps the security-updates group with 2 updates in the / directory: [axios](https://github.com/axios/axios) and [vm2](https://github.com/patriksimek/vm2). Updates `axios` from 1.11.0 to 1.16.0 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](https://github.com/axios/axios/compare/v1.11.0...v1.16.0) Updates `vm2` from 3.9.18 to 3.11.5 - [Release notes](https://github.com/patriksimek/vm2/releases) - [Changelog](https://github.com/patriksimek/vm2/blob/main/CHANGELOG.md) - [Commits](https://github.com/patriksimek/vm2/compare/3.9.18...v3.11.5) --- updated-dependencies: - dependency-name: axios dependency-version: 1.16.0 dependency-type: direct:production dependency-group: security-updates - dependency-name: vm2 dependency-version: 3.11.5 dependency-type: indirect dependency-group: security-updates ... Signed-off-by: dependabot[bot] <[email protected]>
Bumps the npm_and_yarn group with 1 update in the /packages/cardano-services directory: [uuid](https://github.com/uuidjs/uuid). Bumps the npm_and_yarn group with 1 update in the /packages/core directory: [ip-address](https://github.com/beaugunderson/ip-address). Bumps the npm_and_yarn group with 1 update in the /packages/e2e directory: [uuid](https://github.com/uuidjs/uuid). Bumps the npm_and_yarn group with 1 update in the /packages/projection-typeorm directory: [uuid](https://github.com/uuidjs/uuid). Bumps the npm_and_yarn group with 1 update in the /packages/wallet directory: [uuid](https://github.com/uuidjs/uuid). Bumps the npm_and_yarn group with 1 update in the /packages/web-extension directory: [uuid](https://github.com/uuidjs/uuid). Updates `uuid` from 10.0.0 to 14.0.0 - [Release notes](https://github.com/uuidjs/uuid/releases) - [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md) - [Commits](https://github.com/uuidjs/uuid/compare/v10.0.0...v14.0.0) Updates `ip-address` from 9.0.5 to 10.2.0 - [Commits](https://github.com/beaugunderson/ip-address/compare/v9.0.5...v10.2.0) Updates `uuid` from 8.3.2 to 14.0.0 - [Release notes](https://github.com/uuidjs/uuid/releases) - [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md) - [Commits](https://github.com/uuidjs/uuid/compare/v10.0.0...v14.0.0) Updates `uuid` from 9.0.1 to 14.0.0 - [Release notes](https://github.com/uuidjs/uuid/releases) - [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md) - [Commits](https://github.com/uuidjs/uuid/compare/v10.0.0...v14.0.0) Updates `uuid` from 8.3.2 to 14.0.0 - [Release notes](https://github.com/uuidjs/uuid/releases) - [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md) - [Commits](https://github.com/uuidjs/uuid/compare/v10.0.0...v14.0.0) Updates `uuid` from 8.3.2 to 14.0.0 - [Release notes](https://github.com/uuidjs/uuid/releases) - [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md) - [Commits](https://github.com/uuidjs/uuid/compare/v10.0.0...v14.0.0) --- updated-dependencies: - dependency-name: uuid dependency-version: 14.0.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: ip-address dependency-version: 10.2.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: uuid dependency-version: 14.0.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: uuid dependency-version: 14.0.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: uuid dependency-version: 14.0.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: uuid dependency-version: 14.0.0 dependency-type: direct:production dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>