fix(security): upgrade fabric 2.x deps to 2.2.18

Also performed a snapshot upgrade where needed. Fixes hyperledger-cacti#2610 Signed-off-by: Peter Somogyvari <peter.somogyvari@accenture.com>
petermetz · Aug 12, 2023 · 9ffd220 · 9ffd220
1 parent 350b7b7
commit 9ffd220
Show file tree

Hide file tree

Showing 9 changed files with 17 additions and 17 deletions.
diff --git a/examples/cactus-example-carbon-accounting-backend/package.json b/examples/cactus-example-carbon-accounting-backend/package.json
@@ -65,7 +65,7 @@
     "@openzeppelin/contracts": "4.9.2",
     "@openzeppelin/contracts-upgradeable": "4.9.2",
     "async-exit-hook": "2.0.1",
-    "fabric-network": "2.2.10",
+    "fabric-network": "2.2.18",
     "fs-extra": "10.0.0",
     "openapi-types": "9.1.0",
     "typescript-optional": "2.0.1",

diff --git a/examples/cactus-example-electricity-trade/package.json b/examples/cactus-example-electricity-trade/package.json
@@ -24,8 +24,8 @@
     "ethereumjs-common": "1.5.2",
     "ethereumjs-tx": "2.1.2",
     "express": "4.16.4",
-    "fabric-ca-client": "2.2.10",
-    "fabric-network": "2.2.10",
+    "fabric-ca-client": "2.2.18",
+    "fabric-network": "2.2.18",
     "http-errors": "1.6.3",
     "js-yaml": "3.14.1",
     "jsonwebtoken": "9.0.0",

diff --git a/examples/cactus-example-supply-chain-backend/package.json b/examples/cactus-example-supply-chain-backend/package.json
@@ -68,7 +68,7 @@
     "dotenv": "16.0.0",
     "express": "4.17.3",
     "express-jwt": "8.4.1",
-    "fabric-network": "2.2.10",
+    "fabric-network": "2.2.18",
     "jose": "4.9.2",
     "openapi-types": "9.1.0",
     "solc": "0.8.6",

diff --git a/examples/cactus-example-tcs-huawei/package.json b/examples/cactus-example-tcs-huawei/package.json
@@ -22,8 +22,8 @@
     "ethereumjs-common": "1.5.2",
     "ethereumjs-tx": "2.1.2",
     "express": "4.16.4",
-    "fabric-ca-client": "2.2.10",
-    "fabric-network": "2.2.10",
+    "fabric-ca-client": "2.2.18",
+    "fabric-network": "2.2.18",
     "http-errors": "1.6.3",
     "js-yaml": "3.14.1",
     "jsonwebtoken": "8.5.1",

diff --git a/examples/test-run-transaction/package.json b/examples/test-run-transaction/package.json
@@ -21,8 +21,8 @@
     "ethereumjs-common": "1.5.2",
     "ethereumjs-tx": "2.1.2",
     "express": "4.16.4",
-    "fabric-ca-client": "2.2.10",
-    "fabric-network": "2.2.10",
+    "fabric-ca-client": "2.2.18",
+    "fabric-network": "2.2.18",
     "http-errors": "1.6.3",
     "jsonwebtoken": "8.5.1",
     "log4js": "6.4.0",

diff --git a/...cactus-plugin-ledger-connector-fabric-socketio/src/test/typescript/unit-test/package.json b/...cactus-plugin-ledger-connector-fabric-socketio/src/test/typescript/unit-test/package.json
@@ -13,8 +13,8 @@
     "config": "1.31.0",
     "socket.io-client": "4.5.4",
     "ts-node": "9.1.1",
-    "fabric-ca-client": "2.2.10",
-    "fabric-network": "2.2.10",
+    "fabric-ca-client": "2.2.18",
+    "fabric-network": "2.2.18",
     "shelljs": "0.8.5"
   },
   "devDependencies": {

diff --git a/packages/cactus-plugin-ledger-connector-fabric/package.json b/packages/cactus-plugin-ledger-connector-fabric/package.json
@@ -63,10 +63,10 @@
     "bl": "5.0.0",
     "bn.js": "4.12.0",
     "express": "4.17.3",
-    "fabric-ca-client": "2.5.0-snapshot.8",
-    "fabric-common": "2.5.0-snapshot.8",
-    "fabric-network": "2.5.0-snapshot.8",
-    "fabric-protos": "2.5.0-snapshot.8",
+    "fabric-ca-client": "2.5.0-snapshot.23",
+    "fabric-common": "2.5.0-snapshot.23",
+    "fabric-network": "2.5.0-snapshot.23",
+    "fabric-protos": "2.5.0-snapshot.23",
     "fast-safe-stringify": "2.1.1",
     "form-data": "4.0.0",
     "http-status-codes": "2.1.4",

diff --git a/packages/cactus-plugin-odap-hermes/package.json b/packages/cactus-plugin-odap-hermes/package.json
@@ -72,7 +72,7 @@
     "@types/express": "4.17.8",
     "@types/tape": "4.13.0",
     "crypto-js": "4.0.0",
-    "fabric-network": "2.2.10",
+    "fabric-network": "2.2.18",
     "ipfs-http-client": "51.0.1",
     "typescript": "4.9.5"
   },

diff --git a/packages/cactus-test-tooling/package.json b/packages/cactus-test-tooling/package.json
@@ -66,8 +66,8 @@
     "dockerode": "3.3.0",
     "elliptic": "6.5.4",
     "execa": "5.1.1",
-    "fabric-ca-client": "2.5.0-snapshot.8",
-    "fabric-network": "2.5.0-snapshot.8",
+    "fabric-ca-client": "2.5.0-snapshot.23",
+    "fabric-network": "2.5.0-snapshot.23",
     "fs-extra": "10.0.0",
     "internal-ip": "6.2.0",
     "is-port-reachable": "3.0.0",