From 504cd5b848a4047ee488d451db2ce63546260eb2 Mon Sep 17 00:00:00 2001 From: Zach Pomerantz Date: Mon, 12 Dec 2022 11:21:22 -0500 Subject: [PATCH] build: bump widgets/universal-router-sdk (#5582) * build(deps): bump @uniswap/widgets from 2.22.0 to 2.22.2 Bumps [@uniswap/widgets](https://github.com/Uniswap/widgets) from 2.22.0 to 2.22.2. - [Release notes](https://github.com/Uniswap/widgets/releases) - [Changelog](https://github.com/Uniswap/widgets/blob/main/.releaserc.json) - [Commits](https://github.com/Uniswap/widgets/compare/v2.22.0...v2.22.2) --- updated-dependencies: - dependency-name: "@uniswap/widgets" dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] * build(deps): bump @uniswap/widgets to 2.22.5 * fix(snyk): ack oz vulns * build(deps): bump @uniswap/widgets to 2.22.9 Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .snyk | 25 +++++++++++++++++++++++++ package.json | 4 ++-- yarn.lock | 37 +++++++++++++++++++++++-------------- 3 files changed, 50 insertions(+), 16 deletions(-) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000000..4a86a3a89b --- /dev/null +++ b/.snyk @@ -0,0 +1,25 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.0 +# ignores vulnerabilities until expiry date; change duration by modifying expiry date +ignore: + SNYK-JS-OPENZEPPELINCONTRACTS-2964946: + - '*': + reason: None Given + expires: 2099-01-01T00:00:00.000Z + created: 2022-12-08T16:25:57.347Z + SNYK-JS-OPENZEPPELINCONTRACTS-2958047: + - '*': + reason: None Given + expires: 2099-01-01T00:00:00.000Z + created: 2022-12-08T16:26:09.720Z + SNYK-JS-OPENZEPPELINCONTRACTS-2958050: + - '*': + reason: None Given + expires: 2099-01-01T00:00:00.000Z + created: 2022-12-08T16:26:17.702Z + SNYK-JS-OPENZEPPELINCONTRACTS-2965580: + - '*': + reason: None Given + expires: 2099-01-01T00:00:00.000Z + created: 2022-12-08T16:26:34.283Z +patch: {} diff --git a/package.json b/package.json index 813c0f864d..1b9e7f585a 100644 --- a/package.json +++ b/package.json @@ -149,14 +149,14 @@ "@uniswap/sdk-core": "^3.0.1", "@uniswap/smart-order-router": "^2.10.0", "@uniswap/token-lists": "^1.0.0-beta.30", - "@uniswap/universal-router-sdk": "1.2.2", + "@uniswap/universal-router-sdk": "1.3.0", "@uniswap/v2-core": "1.0.0", "@uniswap/v2-periphery": "^1.1.0-beta.0", "@uniswap/v2-sdk": "^3.0.1", "@uniswap/v3-core": "1.0.0", "@uniswap/v3-periphery": "^1.1.1", "@uniswap/v3-sdk": "^3.9.0", - "@uniswap/widgets": "2.22.0", + "@uniswap/widgets": "2.22.9", "@vanilla-extract/css": "^1.7.2", "@vanilla-extract/css-utils": "^0.1.2", "@vanilla-extract/dynamic": "^2.0.2", diff --git a/yarn.lock b/yarn.lock index f044b4b440..f65e4fb408 100644 --- a/yarn.lock +++ b/yarn.lock @@ -2714,6 +2714,11 @@ resolved "https://registry.yarnpkg.com/@openzeppelin/contracts/-/contracts-3.4.2-solc-0.7.tgz#38f4dbab672631034076ccdf2f3201fab1726635" integrity sha512-W6QmqgkADuFcTLzHL8vVoNBtkwjvQRpYIAom7KiUNoLKghyx3FgH0GBjt8NRvigV1ZmMOBllvE1By1C+bi8WpA== +"@openzeppelin/contracts@4.7.0": + version "4.7.0" + resolved "https://registry.yarnpkg.com/@openzeppelin/contracts/-/contracts-4.7.0.tgz#3092d70ea60e3d1835466266b1d68ad47035a2d5" + integrity sha512-52Qb+A1DdOss8QvJrijYYPSf32GUg2pGaG/yCxtaA3cu4jduouTdg4XZSMLW9op54m1jH7J8hoajhHKOPsoJFw== + "@pedrouid/environment@^1.0.1": version "1.0.1" resolved "https://registry.yarnpkg.com/@pedrouid/environment/-/environment-1.0.1.tgz#858f0f8a057340e0b250398b75ead77d6f4342ec" @@ -4329,24 +4334,28 @@ resolved "https://registry.yarnpkg.com/@uniswap/token-lists/-/token-lists-1.0.0-beta.30.tgz#2103ca23b8007c59ec71718d34cdc97861c409e5" integrity sha512-HwY2VvkQ8lNR6ks5NqQfAtg+4IZqz3KV1T8d2DlI8emIn9uMmaoFbIOg0nzjqAVKKnZSbMTRRtUoAh6mmjRvog== -"@uniswap/universal-router-sdk@1.2.2", "@uniswap/universal-router-sdk@^1.2.1": - version "1.2.2" - resolved "https://registry.yarnpkg.com/@uniswap/universal-router-sdk/-/universal-router-sdk-1.2.2.tgz#26ece606279d1cd9823277b74cd43575caf160e9" - integrity sha512-L+MkvMiLyG1vfpEoLbe9xquSApSrfe1m0iLuIjgkZ4qR2Kb0NU8nZXNqeyTJmTZhNbYYIJA0AwRawAN+90NKIw== +"@uniswap/universal-router-sdk@1.3.0", "@uniswap/universal-router-sdk@^1.3.0": + version "1.3.0" + resolved "https://registry.yarnpkg.com/@uniswap/universal-router-sdk/-/universal-router-sdk-1.3.0.tgz#f44262eafe729651d383f46a647399658d45baf7" + integrity sha512-Q7/Gw059JQDO7exxV791QzghEOiWomdvxvqidozDvkiZE7paIlSWq1vDVF4H3zB2GYy5Hu7HM8krl2l0KS9X5g== dependencies: "@uniswap/permit2-sdk" "^1.2.0" "@uniswap/router-sdk" "^1.4.0" "@uniswap/sdk-core" "^3.1.0" - "@uniswap/universal-router" "1.1.1" + "@uniswap/universal-router" "1.2.1" "@uniswap/v2-sdk" "^3.0.1" "@uniswap/v3-sdk" "^3.9.0" bignumber.js "^9.0.2" ethers "^5.3.1" -"@uniswap/universal-router@1.1.1": - version "1.1.1" - resolved "https://registry.yarnpkg.com/@uniswap/universal-router/-/universal-router-1.1.1.tgz#9d197e20fe830aaccca468a1d7b178a6c4c30e26" - integrity sha512-bDdFuzKiuvatCH5RENEEQuS7IhD2TjAS6TEFtWGCF+uOTf23TJCQA0pA9PuPyN2qMPNsNNcQlHVdcyIUD+IkWg== +"@uniswap/universal-router@1.2.1": + version "1.2.1" + resolved "https://registry.yarnpkg.com/@uniswap/universal-router/-/universal-router-1.2.1.tgz#5fe4aa21d6bc89314d99f26407f28154f8e16f42" + integrity sha512-F3S1wKylncuvIG2qwC1ciXXc1z1QmKsalo4p6H2A90LSRylEEhNp7ITxs7qCcnfRh+ZNkGJ0yQ0zmuVJSBezOQ== + dependencies: + "@openzeppelin/contracts" "4.7.0" + "@uniswap/v2-core" "1.0.1" + "@uniswap/v3-core" "1.0.0" "@uniswap/v2-core@1.0.0": version "1.0.0" @@ -4429,10 +4438,10 @@ "@uniswap/v3-core" "1.0.0" "@uniswap/v3-periphery" "^1.0.1" -"@uniswap/widgets@2.22.0": - version "2.22.0" - resolved "https://registry.yarnpkg.com/@uniswap/widgets/-/widgets-2.22.0.tgz#dd2ba224c7c9ef3106b5eb66c3d49d24950b9560" - integrity sha512-mY3n0zRZMak4VHZ2kBqWUvIkFyYBk4SFcTlrKP3w3W5YbXdEH/xHWO8oIuwfSOig/kveVy6jjnjSa05FWJbDhg== +"@uniswap/widgets@2.22.9": + version "2.22.9" + resolved "https://registry.yarnpkg.com/@uniswap/widgets/-/widgets-2.22.9.tgz#59c3d59505f5ae14a04d425661a3f865a3e6679c" + integrity sha512-G6f+Tc870wa9FYtwO+QrpeD/2oSmb8DsrLGO9BMbqSQsD31euoQiE0lqg/a2kXEAaU4VVJ2xzzSatoYAN5GbkQ== dependencies: "@babel/runtime" ">=7.17.0" "@fontsource/ibm-plex-mono" "^4.5.1" @@ -4445,7 +4454,7 @@ "@uniswap/sdk-core" "^3.0.1" "@uniswap/smart-order-router" "^2.10.0" "@uniswap/token-lists" "^1.0.0-beta.30" - "@uniswap/universal-router-sdk" "^1.2.1" + "@uniswap/universal-router-sdk" "^1.3.0" "@uniswap/v2-sdk" "^3.0.1" "@uniswap/v3-sdk" "^3.8.2" "@web3-react/core" "8.0.35-beta.0"