[Snyk] Security upgrade @govtechsg/open-attestation from 4.5.0 to 5.1.1

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	484/1000 Why? Has a fix available, CVSS 5.4	XML External Entity (XXE) Injection SNYK-JS-XMLDOM-1084960	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @govtechsg/open-attestation

The new version differs by 9 commits.

• 4ca5a65 fix: jsonld security issue (Verifying did identity with V3 does not seem to support custom RPC provider #162)
• d0b95d3 feat: util get obfuscated (Feat/dnsdid did revocation #159)
• 673b193 fix: better type guards
• f131e3e fix: throw error get issuer address (Feat/oav3 dnsdid did revocation #158)
• f55ae0d fix: use root dir to get rid of src extra folder in dist/types
• abaab60 fix: export sign types
• 55e0796 feat: allow ethers signer
• d2de7b9 feat: add oa-did-sign into the codebase
• d79cb49 feat: add getMerkleRoot (feat: oav3 document store #152)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic