[Snyk] Security upgrade @agoric/cosmic-swingset from 0.19.0 to 0.34.2

[Kashuhackerone]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • packages/dapp-svelte-wallet/_agstate/agoric-servers/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	823/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 8.6	Server-side Request Forgery (SSRF) SNYK-JS-IP-6240864	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @agoric/cosmic-swingset

The new version differs by 250 commits.

• 3814fc7 Merge e6dfb2a into 999a269
• e6dfb2a ci(dev-canary): publish a `dev` NPM dist tag on every push
• 4a49f56 chore(wallet-backend): update package.json
• af8942a docs(MAINTAINERS): instructions for prereleases
• 01dfd67 feat(agoric-cli): use `install --dist-tag=beta` to select that SDK
• dd22da9 fix(agoric-cli): use CXXFLAGS for Node 16
• 999a269 Merge pull request build(cosmos): update Go dependencies to fix replay stall Agoric/agoric-sdk#4116 from Agoric/mfig-cosmic-swingset-crash-recovery
• 536d3d7 Merge branch 'master' into mfig-cosmic-swingset-crash-recovery
• 002e1bb fix: separate watch from non-watch testing
• a5ea90c Merge pull request ci: optimise integration test Agoric/agoric-sdk#4113 from Agoric/mfig-ci-optimise-integration-test
• 69fafb2 Merge branch 'master' into mfig-ci-optimise-integration-test
• 66fd145 feat(wallet): Misc feedback changes
• 8bbb950 Update docker-compose instructions (Update docker-compose instructions Agoric/agoric-sdk#4077)
• 502891e build(cosmos): update Go dependencies to fix replay stall
• e691645 Drop multipool autoswap (Drop multipool autoswap Agoric/agoric-sdk#4107)
• 831d209 ci(integration): reduce amount of test output to optimise
• 7087181 fix(solo): trim overlong message bodies in debug logs
• 33f13d5 Merge pull request ci(docker): fix schedule syntax Agoric/agoric-sdk#4112 from Agoric/mfig-schedule-update
• 68e30c8 ci(docker): fix `schedule` syntax
• 94e63e3 Merge pull request fix(agoric-cli): Docker support corrections Agoric/agoric-sdk#4110 from Agoric/mfig-agoric-cli-docker
• c767e7e ci(docker): build daily Docker images
• 9e18754 fix(agoric-cli): only use `docker -it` when connected to a terminal
• 956a934 feat(agoric-cli): allow `--no-sdk` to override `--sdk`
• 02e4f4f fix(deployment): adapt to new cosmic-swingset `install` target

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Server-side Request Forgery (SSRF)