@benji-money/connect-sdk 1.1.0 → 1.1.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -110,7 +110,7 @@ var ConnectSDK = (() => {
110
110
  // src/utils/config.ts
111
111
  var buildContext = () => ({
112
112
  namespace: "benji-connect-sdk" ? "benji-connect-sdk" : "benji-connect-sdk",
113
- version: "1.1.0" ? String("1.1.0") : "0.0.0"
113
+ version: "1.1.1" ? String("1.1.1") : "0.0.0"
114
114
  });
115
115
  function isBenjiConnectEnvironment(environment) {
116
116
  return environment === "local" /* LOCAL */ || environment === "development" /* DEVELOPMENT */ || environment === "sandbox" /* SANDBOX */ || environment === "production" /* PRODUCTION */;
package/dist/index.cjs CHANGED
@@ -169,7 +169,7 @@ function getEnvironment() {
169
169
  // src/utils/config.ts
170
170
  var buildContext = () => ({
171
171
  namespace: "benji-connect-sdk" ? "benji-connect-sdk" : "benji-connect-sdk",
172
- version: "1.1.0" ? String("1.1.0") : "0.0.0"
172
+ version: "1.1.1" ? String("1.1.1") : "0.0.0"
173
173
  });
174
174
  function isBenjiConnectEnvironment(environment) {
175
175
  return environment === "local" /* LOCAL */ || environment === "development" /* DEVELOPMENT */ || environment === "sandbox" /* SANDBOX */ || environment === "production" /* PRODUCTION */;
package/dist/index.js CHANGED
@@ -140,7 +140,7 @@ function getEnvironment() {
140
140
  // src/utils/config.ts
141
141
  var buildContext = () => ({
142
142
  namespace: "benji-connect-sdk" ? "benji-connect-sdk" : "benji-connect-sdk",
143
- version: "1.1.0" ? String("1.1.0") : "0.0.0"
143
+ version: "1.1.1" ? String("1.1.1") : "0.0.0"
144
144
  });
145
145
  function isBenjiConnectEnvironment(environment) {
146
146
  return environment === "local" /* LOCAL */ || environment === "development" /* DEVELOPMENT */ || environment === "sandbox" /* SANDBOX */ || environment === "production" /* PRODUCTION */;
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@benji-money/connect-sdk",
3
- "version": "1.1.0",
3
+ "version": "1.1.1",
4
4
  "description": "Benji Connect SDK for authentication and verification",
5
5
  "type": "module",
6
6
  "main": "dist/index.cjs",
@@ -51,6 +51,9 @@
51
51
  "// 1) rimraf → glob → minimatch": "CVE-2026-26996 (ReDos): Scoped override forces minimatch ^10.2.1 for rimraf->glob only (dev). Blanket override breaks npm-packlist (minimatch v3 API vs v10).",
52
52
  "// 2) tsup → rollup": "CVE-2026-27606 (GHSA-mw96-cpmx-2vgc): Arbitrary file write via path traversal. >=4.59.0 fixes. Transitive via tsup.",
53
53
  "// 3) tsup → sucrase → glob": "CVE-2025-64756 (GHSA-5j98-mcp5-4vw2): glob CLI command injection via -c/--cmd. >=10.5.0 fixes. Scoped to sucrase only; blanket would break npm-packlist (glob 7.x).",
54
+ "// 4) @changesets/cli → picomatch": "CVE picomatch <=2.3.1 / 4.0.0-4.0.3 (GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj): Method Injection + ReDoS. >=2.3.2 / >=4.0.4 fixes.",
55
+ "// 5) @changesets/cli → js-yaml": "CVE js-yaml <3.15.0 (GHSA-h67p-54hq-rp68): Quadratic-complexity DoS on merge keys. >=3.15.0 fixes.",
56
+ "// 6) rimraf/sucrase → brace-expansion": "CVE brace-expansion 4.0.0-5.0.5 (GHSA-f886-m6hf-6m8v, GHSA-jxxr-4gwj-5jf2): Zero-step hang + large range DoS. >=5.0.6 fixes.",
54
57
  "overrides": {
55
58
  "rimraf": {
56
59
  "glob": {
@@ -61,8 +64,14 @@
61
64
  "rollup": "^4.59.0",
62
65
  "sucrase": {
63
66
  "glob": "^10.5.0"
64
- }
65
- }
67
+ },
68
+ "picomatch": "^4.0.4"
69
+ },
70
+ "@changesets/cli": {
71
+ "js-yaml": "^3.15.0",
72
+ "picomatch": "^2.3.2"
73
+ },
74
+ "brace-expansion@>=4.0.0 <5.0.6": "^5.0.6"
66
75
  },
67
76
  "bugs": {
68
77
  "url": "https://github.com/benji-money/benji-connect-sdk/issues"