Merge pull request #87 from getamis/ASL-4845/fix-vulnerabilities

[ASL-4845] Fixed High Vulnerabilities

package.json

@@ -8,7 +8,8 @@
     "examples/*"
   ],
   "dependencies": {
-    "husky": "^8.0.1"
+    "husky": "^8.0.1",
+    "patch-package": "^8.0.0"
   },
   "devDependencies": {
     "@babel/core": "^7.20.5",
@@ -21,7 +22,7 @@
     "eslint-config-airbnb": "^18.2.0",
     "eslint-config-preact": "^1.3.0",
     "eslint-config-prettier": "^8.5.0",
-    "eslint-plugin-import": "^2.22.0",
+    "eslint-plugin-import": "^2.29.0",
     "eslint-plugin-jsx-a11y": "^6.3.1",
     "eslint-plugin-react-hooks": "^4.2.0",
     "lerna": "^5.1.8",
@@ -35,7 +36,8 @@
     "release": "npm run build && lerna publish --force-publish",
     "prepare": "husky install",
     "test": "echo \"Error: no test specified\" && exit 1",
-    "lint:tsc": "yarn workspace @qubic-connect/redirect tsc && yarn workspace @qubic-connect/detect-iab tsc && yarn workspace @qubic-connect/core tsc"
+    "lint:tsc": "yarn workspace @qubic-connect/redirect tsc && yarn workspace @qubic-connect/detect-iab tsc && yarn workspace @qubic-connect/core tsc",
+    "postinstall": "patch-package"
   },
   "repository": {
     "type": "git",
@@ -47,4 +49,4 @@
     "url": "https://github.com/getamis/qubic-creator-sdk/issues"
   },
   "homepage": "https://github.com/getamis/qubic-creator-sdk#readme"
-}
+}

packages/core/package.json

@@ -46,8 +46,8 @@
     "@qubic-js/detect-inapp": "^1.4.1",
     "bignumber.js": "^9.0.2",
     "cross-fetch": "^3.1.5",
-    "crypto-js": "^4.1.1",
-    "graphql": "^16.5.0",
+    "crypto-js": "^4.2.0",
+    "graphql": "^16.8.1",
     "graphql-request": "^4.3.0",
     "query-string": "^7.1.1",
     "uuid": "^8.3.2"
@@ -56,4 +56,4 @@
     "access": "public"
   },
   "gitHead": "0cd20c37e03fa4e168cf4dc781981a4424ad9901"
-}
+}

patches/graphql+16.8.1.patch

@@ -0,0 +1,16 @@
+diff --git a/node_modules/graphql/jsutils/instanceOf.mjs b/node_modules/graphql/jsutils/instanceOf.mjs
+index 0f05267..8f16476 100644
+--- a/node_modules/graphql/jsutils/instanceOf.mjs
++++ b/node_modules/graphql/jsutils/instanceOf.mjs
+@@ -7,9 +7,8 @@ import { inspect } from './inspect.mjs';
+  */
+
+ export const instanceOf =
+-  /* c8 ignore next 6 */
+-  // FIXME: https://github.com/graphql/graphql-js/issues/2317
+-  globalThis.process && globalThis.process.env.NODE_ENV === 'production'
++  // patch from https://github.com/graphql/graphql-js/pull/3927/files#diff-1f3e6be6d17434bcb14ae2d7a2a0641dce0e7d7133ea0fffec42109932c32623R11
++  globalThis.process !== undefined && process.env.NODE_ENV === 'production'
+     ? function instanceOf(value, constructor) {
+         return value instanceof constructor;
+       }