Skip to content

Commit 75141fd

Browse files
bestbeforetodaybestbeforetoday
authored
Update Java dependencies to address CVE-2023-2976 (#611)
Also update dependencies for Go and Node implementation to stay current. Signed-off-by: Mark S. Lewis <[email protected]>
1 parent 51e2adb commit 75141fd

File tree

8 files changed

+67
-67
lines changed

8 files changed

+67
-67
lines changed

‎Makefile

+1-1
Original file line numberDiff line numberDiff line change
@@ -60,7 +60,7 @@ unit-test-go:
6060
.PHONEY: unit-test-go-pkcs11
6161
unit-test-go-pkcs11: setup-softhsm
6262
cd '$(base_dir)' && \
63-
go test -tags pkcs11 -race -timeout 10s -coverprofile=cover.out '$(go_dir)/...'
63+
go test -tags pkcs11 -timeout 10s -race -coverprofile=cover.out '$(go_dir)/...'
6464

6565
.PHONEY: unit-test-node
6666
unit-test-node: build-node

‎go.mod

+9-9
Original file line numberDiff line numberDiff line change
@@ -10,23 +10,23 @@ require (
1010
github.com/miekg/pkcs11 v1.1.1
1111
github.com/spf13/pflag v1.0.5
1212
github.com/stretchr/testify v1.8.4
13-
golang.org/x/crypto v0.10.0
14-
google.golang.org/grpc v1.56.0
15-
google.golang.org/protobuf v1.30.0
13+
golang.org/x/crypto v0.11.0
14+
google.golang.org/grpc v1.57.0
15+
google.golang.org/protobuf v1.31.0
1616
)
1717

1818
require (
1919
github.com/cucumber/gherkin-go/v19 v19.0.3 // indirect
2020
github.com/davecgh/go-spew v1.1.1 // indirect
21-
github.com/gofrs/uuid v4.4.0+incompatible // indirect
21+
github.com/gofrs/uuid v4.2.0+incompatible // indirect
2222
github.com/golang/protobuf v1.5.3 // indirect
2323
github.com/hashicorp/go-immutable-radix v1.3.1 // indirect
24-
github.com/hashicorp/go-memdb v1.3.4 // indirect
24+
github.com/hashicorp/go-memdb v1.3.2 // indirect
2525
github.com/hashicorp/golang-lru v0.5.4 // indirect
2626
github.com/pmezard/go-difflib v1.0.0 // indirect
27-
golang.org/x/net v0.11.0 // indirect
28-
golang.org/x/sys v0.9.0 // indirect
29-
golang.org/x/text v0.10.0 // indirect
30-
google.golang.org/genproto/googleapis/rpc v0.0.0-20230530153820-e85fd2cbaebc // indirect
27+
golang.org/x/net v0.13.0 // indirect
28+
golang.org/x/sys v0.10.0 // indirect
29+
golang.org/x/text v0.11.0 // indirect
30+
google.golang.org/genproto/googleapis/rpc v0.0.0-20230731193218-e0aa005b6bdf // indirect
3131
gopkg.in/yaml.v3 v3.0.1 // indirect
3232
)

‎go.sum

+16-18
Original file line numberDiff line numberDiff line change
@@ -10,9 +10,8 @@ github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSs
1010
github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
1111
github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
1212
github.com/gofrs/uuid v4.0.0+incompatible/go.mod h1:b2aQJv3Z4Fp6yNu3cdSllBxTCLRxnplIgP/c0N/04lM=
13+
github.com/gofrs/uuid v4.2.0+incompatible h1:yyYWMnhkhrKwwr8gAOcOCYxOOscHgDS9yZgBrnJfGa0=
1314
github.com/gofrs/uuid v4.2.0+incompatible/go.mod h1:b2aQJv3Z4Fp6yNu3cdSllBxTCLRxnplIgP/c0N/04lM=
14-
github.com/gofrs/uuid v4.4.0+incompatible h1:3qXRTX8/NbyulANqlc0lchS1gqAVxRgsuW1YrTJupqA=
15-
github.com/gofrs/uuid v4.4.0+incompatible/go.mod h1:b2aQJv3Z4Fp6yNu3cdSllBxTCLRxnplIgP/c0N/04lM=
1615
github.com/golang/mock v1.6.0 h1:ErTB+efbowRARo13NNdxyJji2egdxLGQhRaY+DUumQc=
1716
github.com/golang/mock v1.6.0/go.mod h1:p6yTPP+5HYm5mzsMV8JkE6ZKdX+/wYM6Hr+LicevLPs=
1817
github.com/golang/protobuf v1.5.0/go.mod h1:FsONVRAS9T7sI+LIUmWTfcYkHO4aIWwzhcaSAoJOfIk=
@@ -25,9 +24,8 @@ github.com/gopherjs/gopherjs v0.0.0-20181017120253-0766667cb4d1/go.mod h1:wJfORR
2524
github.com/hashicorp/go-immutable-radix v1.3.0/go.mod h1:0y9vanUI8NX6FsYoO3zeMjhV/C5i9g4Q3DwcSNZ4P60=
2625
github.com/hashicorp/go-immutable-radix v1.3.1 h1:DKHmCUm2hRBK510BaiZlwvpD40f8bJFeZnpfm2KLowc=
2726
github.com/hashicorp/go-immutable-radix v1.3.1/go.mod h1:0y9vanUI8NX6FsYoO3zeMjhV/C5i9g4Q3DwcSNZ4P60=
27+
github.com/hashicorp/go-memdb v1.3.2 h1:RBKHOsnSszpU6vxq80LzC2BaQjuuvoyaQbkLTf7V7g8=
2828
github.com/hashicorp/go-memdb v1.3.2/go.mod h1:Mluclgwib3R93Hk5fxEfiRhB+6Dar64wWh71LpNSe3g=
29-
github.com/hashicorp/go-memdb v1.3.4 h1:XSL3NR682X/cVk2IeV0d70N4DZ9ljI885xAEU8IoK3c=
30-
github.com/hashicorp/go-memdb v1.3.4/go.mod h1:uBTr1oQbtuMgd1SSGoR8YV27eT3sBHbYiNm53bMpgSg=
3129
github.com/hashicorp/go-uuid v1.0.0/go.mod h1:6SBZvOh/SIDV7/2o3Jml5SYk/TvGqwFJ/bN7x4byOro=
3230
github.com/hashicorp/go-uuid v1.0.2 h1:cfejS+Tpcp13yd5nYHWDI6qVCny6wyX2Mt5SGur2IGE=
3331
github.com/hashicorp/go-uuid v1.0.2/go.mod h1:6SBZvOh/SIDV7/2o3Jml5SYk/TvGqwFJ/bN7x4byOro=
@@ -64,29 +62,29 @@ github.com/stretchr/testify v1.8.4/go.mod h1:sz/lmYIOXD/1dqDmKjjqLyZ2RngseejIcXl
6462
github.com/yuin/goldmark v1.3.5/go.mod h1:mwnBkeHKe2W/ZEtQ+71ViKU8L12m81fl3OWwC1Zlc8k=
6563
golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
6664
golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
67-
golang.org/x/crypto v0.10.0 h1:LKqV2xt9+kDzSTfOhx4FrkEBcMrAgHSYgzywV9zcGmM=
68-
golang.org/x/crypto v0.10.0/go.mod h1:o4eNf7Ede1fv+hwOwZsTHl9EsPFO6q6ZvYR8vYfY45I=
65+
golang.org/x/crypto v0.11.0 h1:6Ewdq3tDic1mg5xRO4milcWCfMVQhI4NkqWWvqejpuA=
66+
golang.org/x/crypto v0.11.0/go.mod h1:xgJhtzW8F9jGdVFWZESrid1U1bjeNy4zgy5cRr/CIio=
6967
golang.org/x/mod v0.4.2/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
7068
golang.org/x/net v0.0.0-20190311183353-d8887717615a/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
7169
golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
7270
golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
7371
golang.org/x/net v0.0.0-20210405180319-a5a99cb37ef4/go.mod h1:p54w0d4576C0XHj96bSt6lcn1PtDYWL6XObtHCRCNQM=
74-
golang.org/x/net v0.11.0 h1:Gi2tvZIJyBtO9SDr1q9h5hEQCp/4L2RQ+ar0qjx2oNU=
75-
golang.org/x/net v0.11.0/go.mod h1:2L/ixqYpgIVXmeoSA/4Lu7BzTG4KIyPIryS4IsOd1oQ=
72+
golang.org/x/net v0.13.0 h1:Nvo8UFsZ8X3BhAC9699Z1j7XQ3rsZnUUm7jfBEk1ueY=
73+
golang.org/x/net v0.13.0/go.mod h1:zEVYFnQC7m/vmpQFELhcD1EWkZlX69l4oqgmer6hfKA=
7674
golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
7775
golang.org/x/sync v0.0.0-20210220032951-036812b2e83c/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
7876
golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
7977
golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
8078
golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
8179
golang.org/x/sys v0.0.0-20210330210617-4fbd30eecc44/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
8280
golang.org/x/sys v0.0.0-20210510120138-977fb7262007/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
83-
golang.org/x/sys v0.9.0 h1:KS/R3tvhPqvJvwcKfnBHJwwthS11LRhmM5D59eEXa0s=
84-
golang.org/x/sys v0.9.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
81+
golang.org/x/sys v0.10.0 h1:SqMFp9UcQJZa+pmYuAKjd9xq1f0j5rLcDIk0mj4qAsA=
82+
golang.org/x/sys v0.10.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
8583
golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
8684
golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
8785
golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
88-
golang.org/x/text v0.10.0 h1:UpjohKhiEgNc0CSauXmwYftY1+LlaC75SJwh0SgCX58=
89-
golang.org/x/text v0.10.0/go.mod h1:TvPlkZtksWOMsz7fbANvkp4WM8x/WCo/om8BMLbz+aE=
86+
golang.org/x/text v0.11.0 h1:LAntKIrcmeSKERyiOh0XMV39LXS8IE9UL2yP7+f5ij4=
87+
golang.org/x/text v0.11.0/go.mod h1:TvPlkZtksWOMsz7fbANvkp4WM8x/WCo/om8BMLbz+aE=
9088
golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
9189
golang.org/x/tools v0.0.0-20190328211700-ab21143f2384/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs=
9290
golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
@@ -95,14 +93,14 @@ golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8T
9593
golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
9694
golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
9795
golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
98-
google.golang.org/genproto/googleapis/rpc v0.0.0-20230530153820-e85fd2cbaebc h1:XSJ8Vk1SWuNr8S18z1NZSziL0CPIXLCCMDOEFtHBOFc=
99-
google.golang.org/genproto/googleapis/rpc v0.0.0-20230530153820-e85fd2cbaebc/go.mod h1:66JfowdXAEgad5O9NnYcsNPLCPZJD++2L9X0PCMODrA=
100-
google.golang.org/grpc v1.56.0 h1:+y7Bs8rtMd07LeXmL3NxcTLn7mUkbKZqEpPhMNkwJEE=
101-
google.golang.org/grpc v1.56.0/go.mod h1:I9bI3vqKfayGqPUAwGdOSu7kt6oIJLixfffKrpXqQ9s=
96+
google.golang.org/genproto/googleapis/rpc v0.0.0-20230731193218-e0aa005b6bdf h1:guOdSPaeFgN+jEJwTo1dQ71hdBm+yKSCCKuTRkJzcVo=
97+
google.golang.org/genproto/googleapis/rpc v0.0.0-20230731193218-e0aa005b6bdf/go.mod h1:zBEcrKX2ZOcEkHWxBPAIvYUWOKKMIhYcmNiUIu2ji3I=
98+
google.golang.org/grpc v1.57.0 h1:kfzNeI/klCGD2YPMUlaGNT3pxvYfga7smW3Vth8Zsiw=
99+
google.golang.org/grpc v1.57.0/go.mod h1:Sd+9RMTACXwmub0zcNY2c4arhtrbBYD1AUHI/dt16Mo=
102100
google.golang.org/protobuf v1.26.0-rc.1/go.mod h1:jlhhOSvTdKEhbULTjvd4ARK9grFBp09yW+WbY/TyQbw=
103101
google.golang.org/protobuf v1.26.0/go.mod h1:9q0QmTI4eRPtz6boOQmLYwt+qCgq0jsYwAQnmE0givc=
104-
google.golang.org/protobuf v1.30.0 h1:kPPoIgf3TsEvrm0PFe15JQ+570QVxYzEvvHqChK+cng=
105-
google.golang.org/protobuf v1.30.0/go.mod h1:HV8QOd/L58Z+nl8r43ehVNZIU/HEI6OcFqwMG9pJV4I=
102+
google.golang.org/protobuf v1.31.0 h1:g0LDEJHgrBl9N9r17Ru3sqWhkIx2NB67okBHPwC7hs8=
103+
google.golang.org/protobuf v1.31.0/go.mod h1:HV8QOd/L58Z+nl8r43ehVNZIU/HEI6OcFqwMG9pJV4I=
106104
gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
107105
gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=
108106
gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EVd6muEfDQjcINNoR0C8j2r3qZ4Q=

‎java/pom.xml

+11-11
Original file line numberDiff line numberDiff line change
@@ -38,9 +38,9 @@
3838
<properties>
3939
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
4040
<javaVersion>8</javaVersion>
41-
<grpcVersion>1.56.0</grpcVersion>
41+
<grpcVersion>1.57.1</grpcVersion>
4242
<enforceJavaVersion>1.8</enforceJavaVersion> <!-- this is overridden in the release profile -->
43-
<bouncyCastleVersion>1.74</bouncyCastleVersion>
43+
<bouncyCastleVersion>1.76</bouncyCastleVersion>
4444
<skipUnitTests>${skipTests}</skipUnitTests>
4545
</properties>
4646

@@ -49,14 +49,14 @@
4949
<dependency>
5050
<groupId>io.cucumber</groupId>
5151
<artifactId>cucumber-bom</artifactId>
52-
<version>7.12.1</version>
52+
<version>7.13.0</version>
5353
<type>pom</type>
5454
<scope>import</scope>
5555
</dependency>
5656
<dependency>
5757
<groupId>org.junit</groupId>
5858
<artifactId>junit-bom</artifactId>
59-
<version>5.9.3</version>
59+
<version>5.10.0</version>
6060
<type>pom</type>
6161
<scope>import</scope>
6262
</dependency>
@@ -150,7 +150,7 @@
150150
<plugin>
151151
<groupId>org.apache.maven.plugins</groupId>
152152
<artifactId>maven-enforcer-plugin</artifactId>
153-
<version>3.2.1</version>
153+
<version>3.3.0</version>
154154
<executions>
155155
<execution>
156156
<id>enforce-version</id>
@@ -201,7 +201,7 @@
201201
</plugin>
202202
<plugin>
203203
<artifactId>maven-surefire-plugin</artifactId>
204-
<version>3.1.0</version>
204+
<version>3.1.2</version>
205205
<dependencies>
206206
<dependency>
207207
<groupId>me.fabriciorby</groupId>
@@ -342,7 +342,7 @@
342342
<plugin>
343343
<groupId>org.apache.maven.plugins</groupId>
344344
<artifactId>maven-checkstyle-plugin</artifactId>
345-
<version>3.2.1</version>
345+
<version>3.3.0</version>
346346
<configuration>
347347
<configLocation>checkstyle.xml</configLocation>
348348
<consoleOutput>true</consoleOutput>
@@ -362,7 +362,7 @@
362362
<dependency>
363363
<groupId>com.puppycrawl.tools</groupId>
364364
<artifactId>checkstyle</artifactId>
365-
<version>10.12.0</version>
365+
<version>10.12.2</version>
366366
</dependency>
367367
</dependencies>
368368
</plugin>
@@ -377,7 +377,7 @@
377377
<plugin>
378378
<groupId>org.owasp</groupId>
379379
<artifactId>dependency-check-maven</artifactId>
380-
<version>8.2.1</version>
380+
<version>8.3.1</version>
381381
<configuration>
382382
<skipProvidedScope>true</skipProvidedScope>
383383
<skipTestScope>true</skipTestScope>
@@ -434,7 +434,7 @@
434434
<plugins>
435435
<plugin>
436436
<artifactId>maven-assembly-plugin</artifactId>
437-
<version>3.5.0</version>
437+
<version>3.6.0</version>
438438
<configuration>
439439
<descriptorRefs>
440440
<descriptorRef>jar-with-dependencies</descriptorRef>
@@ -452,7 +452,7 @@
452452
<plugin>
453453
<groupId>org.apache.maven.plugins</groupId>
454454
<artifactId>maven-gpg-plugin</artifactId>
455-
<version>3.0.1</version>
455+
<version>3.1.0</version>
456456
<executions>
457457
<execution>
458458
<id>sign-artifacts</id>

‎node/package.json

+14-14
Original file line numberDiff line numberDiff line change
@@ -31,29 +31,29 @@
3131
},
3232
"license": "Apache-2.0",
3333
"dependencies": {
34-
"@grpc/grpc-js": "^1.8.7",
34+
"@grpc/grpc-js": "^1.9.0",
3535
"@hyperledger/fabric-protos": "^0.2.0",
3636
"@noble/curves": "^1.1.0",
37-
"google-protobuf": "^3.21.2"
37+
"google-protobuf": "^3.21.0"
3838
},
3939
"optionalDependencies": {
4040
"pkcs11js": "^1.3.0"
4141
},
4242
"devDependencies": {
43-
"@cyclonedx/cyclonedx-npm": "^1.12.1",
44-
"@tsconfig/node16": "^1.0.3",
45-
"@types/google-protobuf": "^3.15.5",
46-
"@types/jest": "^29.2.0",
47-
"@types/node": "^16.18.25",
48-
"@typescript-eslint/eslint-plugin": "^5.59.11",
49-
"@typescript-eslint/parser": "^5.59.11",
50-
"eslint": "^8.42.0",
51-
"eslint-plugin-jest": "^27.2.1",
43+
"@cyclonedx/cyclonedx-npm": "^1.13.0",
44+
"@tsconfig/node16": "^16.1.0",
45+
"@types/google-protobuf": "^3.15.6",
46+
"@types/jest": "^29.5.3",
47+
"@types/node": "^16.18.39",
48+
"@typescript-eslint/eslint-plugin": "^6.2.1",
49+
"@typescript-eslint/parser": "^6.2.1",
50+
"eslint": "^8.46.0",
51+
"eslint-plugin-jest": "^27.2.3",
5252
"eslint-plugin-tsdoc": "^0.2.17",
53-
"jest": "^29.5.0",
53+
"jest": "^29.6.2",
5454
"npm-run-all": "^4.1.5",
55-
"ts-jest": "^29.0.3",
55+
"ts-jest": "^29.1.1",
5656
"typedoc": "^0.24.8",
57-
"typescript": "~5.0.4"
57+
"typescript": "~5.1.6"
5858
}
5959
}

‎node/src/dependency.test.ts

+4-2
Original file line numberDiff line numberDiff line change
@@ -5,19 +5,21 @@
55
*/
66

77
import { generateKeyPairSync } from 'crypto';
8+
import type { signers as SignersType } from '.';
89

910
function isLoaded(moduleName: string): boolean {
1011
const moduleFile = require.resolve(moduleName);
1112
return !!Object.values(require.cache).find(m => m?.filename === moduleFile);
1213
}
1314

1415
describe('optional pkcs11js dependency', () => {
15-
it('not loaded when accessing private key signer', async () => {
16+
it('not loaded when accessing private key signer', () => {
1617
jest.resetModules();
1718
expect(isLoaded('pkcs11js')).toBe(false);
1819

1920
const { privateKey } = generateKeyPairSync('ec', { namedCurve: 'P-256' });
20-
const { signers } = await import('.');
21+
// eslint-disable-next-line @typescript-eslint/no-var-requires
22+
const { signers } = require('.') as { signers: typeof SignersType };
2123
signers.newPrivateKeySigner(privateKey);
2224

2325
expect(isLoaded('pkcs11js')).toBe(false);

‎node/src/identity/signers.ts

+2-2
Original file line numberDiff line numberDiff line change
@@ -5,9 +5,9 @@
55
*/
66

77
import { KeyObject, sign } from 'crypto';
8-
import { HSMSignerFactory, HSMSignerFactoryImpl as HSMSignerFactoryImplType } from './hsmsigner';
9-
import { Signer } from './signer';
108
import { newECPrivateKeySigner } from './ecdsa';
9+
import { HSMSignerFactory, type HSMSignerFactoryImpl as HSMSignerFactoryImplType } from './hsmsigner';
10+
import { Signer } from './signer';
1111

1212
/**
1313
* Create a new signing implementation that uses the supplied private key to sign messages.

‎scenario/node/package.json

+10-10
Original file line numberDiff line numberDiff line change
@@ -23,17 +23,17 @@
2323
"@hyperledger/fabric-protos": "^0.2.0"
2424
},
2525
"devDependencies": {
26-
"@cucumber/cucumber": "^9.1.0",
27-
"@tsconfig/node16": "^1.0.3",
28-
"@types/jsrsasign": "^10.5.1",
29-
"@types/node": "^16.18.25",
30-
"@typescript-eslint/eslint-plugin": "^5.59.11",
31-
"@typescript-eslint/parser": "^5.59.11",
26+
"@cucumber/cucumber": "^9.3.0",
27+
"@tsconfig/node16": "^16.1.0",
28+
"@types/jsrsasign": "^10.5.8",
29+
"@types/node": "^16.18.39",
30+
"@typescript-eslint/eslint-plugin": "^6.2.1",
31+
"@typescript-eslint/parser": "^6.2.1",
3232
"cucumber-console-formatter": "^1.0.0",
33-
"eslint": "^8.42.0",
34-
"expect": "^29.3.1",
35-
"jsrsasign": "^10.4.0",
33+
"eslint": "^8.46.0",
34+
"expect": "^29.6.2",
35+
"jsrsasign": "^10.8.6",
3636
"npm-run-all": "^4.1.5",
37-
"typescript": "~5.0.4"
37+
"typescript": "~5.1.6"
3838
}
3939
}

0 commit comments

Comments
 (0)