@contrast/agent-bundle 5.42.0 → 5.46.0

package/node_modules/@contrast/core/lib/sensitive-data-masking/index.js

@@ -22,29 +22,44 @@ module.exports = function(core) {
   const idMap = new Map();
   const keywordSets = [];
 
-  function getRedactedText(key) {
+  function getRedactedText(key, value) {
     key = StringPrototypeToLowerCase.call(key);
     for (const set of keywordSets) {
       if (set.has(key)) {
         return `${CONTRAST_REDACTED}-${idMap.get(set)}`;
       }
     }
+    return value;
   }
 
-  function traverseAndMask(target, unmasked) {
+  function traverseAndMask1(target, unmasked) {
     let redactedText;
     if (!target) return;
 
     traverseKeys(target, (path, type, value, obj) => {
       redactedText = getRedactedText(value);
       if (redactedText) {
-        if (unmasked) unmasked.add(obj[value]);
+        unmasked?.add?.(obj[value]);
         obj[value] = redactedText;
         redactedText = undefined;
       }
     });
   }
 
+  function traverseAndMask2(target, masker) {
+    if (!target) return;
+    traverseKeys(target, (path, type, key, obj) => {
+      obj[key] = masker.getMaskedValue(key, obj[key]);
+    });
+  }
+
+  function traverseAndMask(target, param) {
+    if (param instanceof Masker) {
+      return traverseAndMask2(target, param);
+    }
+    return traverseAndMask1(target, param);
+  }
+
   const sensitiveDataMasking = core.sensitiveDataMasking = {
     policy: {
       idMap,
@@ -53,11 +68,24 @@ module.exports = function(core) {
       maskAttackVector: false,
     },
     getRedactedText,
-    traverseAndMask
+    traverseAndMask,
+    createMasker() {
+      return new Masker();
+    },
   };
 
+  class Masker {
+    getMaskedValue(key, value) {
+      const redacted = getRedactedText(key, value);
+      if (value !== redacted) {
+        !this.unmasked && (this.unmasked = new Set());
+        this.unmasked.add(value);
+      }
+      return redacted;
+    }
+  }
+
   require('./server-settings-listener')(core);
-  require('./protect-listener')(core);
 
   return sensitiveDataMasking;
 };

package/node_modules/@contrast/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contrast/core",
-  "version": "1.55.0",
+  "version": "1.58.0",
   "description": "Preconfigured Contrast agent core services and models",
   "license": "SEE LICENSE IN LICENSE",
   "author": "Contrast Security <nodejs@contrastsecurity.com> (https://www.contrastsecurity.com)",
@@ -13,21 +13,22 @@
   "types": "lib/index.d.ts",
   "engines": {
     "npm": ">=6.13.7 <7 || >= 8.3.1",
-    "node": ">= 16.9.1"
+    "node": ">= 18.7.0"
   },
   "scripts": {
     "test": "bash ../scripts/test.sh"
   },
   "dependencies": {
-    "@contrast/common": "1.35.0",
-    "@contrast/config": "1.50.0",
+    "@contrast/common": "1.37.0",
+    "@contrast/config": "1.53.0",
     "@contrast/find-package-json": "^1.1.0",
-    "@contrast/fn-inspect": "^4.3.0",
-    "@contrast/logger": "1.28.0",
-    "@contrast/patcher": "1.27.0",
-    "@contrast/perf": "1.3.1",
+    "@contrast/fn-inspect": "^5.0.2",
+    "@contrast/logger": "1.31.0",
+    "@contrast/patcher": "1.30.0",
+    "@contrast/perf": "1.4.0",
     "@tsxper/crc32": "^2.1.3",
-    "axios": "^1.11.0",
+    "axios": "^1.12.2",
+    "minimatch": "^9.0.5",
     "semver": "^7.6.0"
   }
 }

package/node_modules/@contrast/deadzones/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contrast/deadzones",
-  "version": "1.27.0",
+  "version": "1.30.0",
   "description": "Configures Contrast agent services and instrumentation within an application",
   "license": "SEE LICENSE IN LICENSE",
   "author": "Contrast Security <nodejs@contrastsecurity.com> (https://www.contrastsecurity.com)",
@@ -14,15 +14,15 @@
   "types": "lib/index.d.ts",
   "engines": {
     "npm": ">=6.13.7 <7 || >= 8.3.1",
-    "node": ">= 16.9.1"
+    "node": ">= 18.7.0"
   },
   "scripts": {
     "test": "bash ../scripts/test.sh"
   },
   "dependencies": {
-    "@contrast/common": "1.35.0",
-    "@contrast/dep-hooks": "1.24.0",
-    "@contrast/patcher": "1.27.0",
-    "@contrast/scopes": "1.25.0"
+    "@contrast/common": "1.37.0",
+    "@contrast/dep-hooks": "1.27.0",
+    "@contrast/patcher": "1.30.0",
+    "@contrast/scopes": "1.28.0"
   }
 }

package/node_modules/@contrast/dep-hooks/lib/export-handler-registry.d.ts

@@ -18,15 +18,19 @@ declare class ExportHandlerRegistry {
      * @param {Object} core
      * @param {import('pino').Logger} core.logger
      * @param {import('@contrast/common').Messages} core.messages
+     * @param {import('@contrast/common').AppInfo} core.appInfo
      */
-    constructor({ logger, messages }: {
-        logger: import('pino').Logger;
-        messages: import('@contrast/common').Messages;
+    constructor({ logger, messages, appInfo }: {
+        logger: import("pino").Logger;
+        messages: import("@contrast/common").Messages;
+        appInfo: import("@contrast/common").AppInfo;
     });
     /** @type {import('pino').Logger} */
-    logger: import('pino').Logger;
+    logger: import("pino").Logger;
     /** @type {import('@contrast/common').Messages} */
-    messages: import('@contrast/common').Messages;
+    messages: import("@contrast/common").Messages;
+    /** @type {string} */
+    nodeModulesDir: string;
     /**
      * Contains all registered hooks that have been added by `.update()`
      * Keyed by `shortname`.
@@ -63,7 +67,7 @@ declare class ExportHandlerRegistry {
      * @param {ExportHookDescriptor<T>} info
      * @returns {ExportHookDescriptor<T>[]}
      */
-    update<T extends Object>(info: import("./export-hook-descriptor")<T>): import("./export-hook-descriptor")<T>[];
+    update<T extends Object>(info: ExportHookDescriptor<T>): ExportHookDescriptor<T>[];
     /**
      * Defined as a class method to allow easy stubbing in tests.
      * @param {string} request the string passed to require()
@@ -86,7 +90,7 @@ declare class ExportHandlerRegistry {
      * @param {PackageFinder.Metadata} metadata module metadata
      * @param {ExportHookDescriptor<T>[]} registered list of registered hooks
      */
-    buildFromRegistry<T_1 extends Object>(metadata: PackageFinder.Metadata, registered: import("./export-hook-descriptor")<T_1>[]): void;
+    buildFromRegistry<T extends Object>(metadata: PackageFinder.Metadata, registered: ExportHookDescriptor<T>[]): void;
     /**
      * Returns registered handlers and the module metadata for a module that has
      * registration for the version that is being required.
@@ -94,7 +98,7 @@ declare class ExportHandlerRegistry {
      * @param {PackageFinder.Metadata} metadata module metadata
      * @return {HandlerData<T>=}
      */
-    findModuleHandlerData<T_2 extends Object>(metadata: PackageFinder.Metadata): HandlerData<T_2> | undefined;
+    findModuleHandlerData<T extends Object>(metadata: PackageFinder.Metadata): HandlerData<T> | undefined;
     /**
      * When an export is returned from a `require`, we want to resolve the name
      * used as the param, e.g. "http" in `require('http')`, to a set of
@@ -105,17 +109,17 @@ declare class ExportHandlerRegistry {
      * @param {boolean} isMain indicates whether the module executing require() is the entry point
      * @return {HandlerData<T>=}
      */
-    query<T_3 extends Object>(request: string, parent: Module, isMain: boolean): HandlerData<T_3> | undefined;
+    query<T extends Object>(request: string, parent: Module, isMain: boolean): HandlerData<T> | undefined;
 }
 declare namespace ExportHandlerRegistry {
     export { ExportHookDescriptor, Handler, HandlerData };
 }
-type ExportHookDescriptor<T extends Object> = import('./export-hook-descriptor')<T>;
+import Module = require("module");
+import PackageFinder = require("./package-finder");
+type ExportHookDescriptor<T extends Object> = import("./export-hook-descriptor")<T>;
+type Handler<T extends Object> = import("./export-hook-descriptor").Handler<T>;
 type HandlerData<T extends Object> = {
     handlers: Handler<T>[];
     metadata: PackageFinder.Metadata;
 };
-import Module = require("module");
-import PackageFinder = require("./package-finder");
-type Handler<T extends Object> = import('./export-hook-descriptor').Handler<T>;
 //# sourceMappingURL=export-handler-registry.d.ts.map

package/node_modules/@contrast/dep-hooks/lib/export-handler-registry.js

@@ -14,9 +14,9 @@
  */
 // @ts-check
 'use strict';
-Object.defineProperty(exports, "__esModule", { value: true });
-const Module = require('node:module');
+const path = require('path');
 const semver = require('semver');
+const Module = require('node:module');
 const { Event } = require('@contrast/common');
 const PackageFinder = require('./package-finder');
 /**
@@ -38,12 +38,15 @@ class ExportHandlerRegistry {
      * @param {Object} core
      * @param {import('pino').Logger} core.logger
      * @param {import('@contrast/common').Messages} core.messages
+     * @param {import('@contrast/common').AppInfo} core.appInfo
      */
-    constructor({ logger, messages }) {
+    constructor({ logger, messages, appInfo }) {
         /** @type {import('pino').Logger} */
         this.logger = logger;
         /** @type {import('@contrast/common').Messages} */
         this.messages = messages;
+        /** @type {string} */
+        this.nodeModulesDir = path.resolve(appInfo.app_dir, 'node_modules');
         /**
          * Contains all registered hooks that have been added by `.update()`
          * Keyed by `shortname`.
@@ -117,7 +120,16 @@ class ExportHandlerRegistry {
      * @returns {PackageFinder.Metadata?}
      */
     resolveMetadata(filename) {
-        return PackageFinder.resolveMetadata(filename, this.logger);
+        let metadata = PackageFinder.resolveMetadata(filename, this.nodeModulesDir, this.logger);
+        // See NODE-3859
+        // In rare cases, a library can be structured in such a way that require()-able sub-directories
+        // also contain a package.json with little metadata which is resolved first and then
+        // instrumentation will fail because it doesn't match the target library
+        if (!metadata?.name || !metadata?.version) {
+            this.logger?.debug('incomplete info found in %s; searching in parent directories', filename);
+            metadata = PackageFinder.resolveMetadata(path.resolve(filename, '..'), this.nodeModulesDir, this.logger);
+        }
+        return metadata;
     }
     /**
      * Iterates all descriptors pertaining to the currently-loading export. It

package/node_modules/@contrast/dep-hooks/lib/export-hook-descriptor.d.ts

@@ -50,11 +50,11 @@ declare class ExportHookDescriptor<T extends Object = any> {
 declare namespace ExportHookDescriptor {
     export { Metadata, HookControls, Handler, Descriptor };
 }
-type Handler<T extends Object> = (mod: T, metadata: Metadata & HookControls) => T | void;
-type Metadata = import('./package-finder').Metadata;
+type Metadata = import("./package-finder").Metadata;
 type HookControls = {
     rerun: () => void;
 };
+type Handler<T extends Object> = (mod: T, metadata: Metadata & HookControls) => T | void;
 type Descriptor = {
     /**
      * module name, as passed to `require`, to handle.

package/node_modules/@contrast/dep-hooks/lib/export-hook-descriptor.js

@@ -14,10 +14,9 @@
  */
 // @ts-check
 'use strict';
-Object.defineProperty(exports, "__esModule", { value: true });
 const path = require('node:path');
 const semver = require('semver');
-const { isBuiltin } = require('./helpers');
+const Module = require('node:module');
 const { primordials: { StringPrototypeReplace } } = require('@contrast/common');
 /** @typedef {import('./package-finder').Metadata} Metadata */
 /**
@@ -50,7 +49,7 @@ class ExportHookDescriptor {
     constructor({ name, file, version }, handlers) {
         /** @type {string} */
         // @ts-ignore ts does not handle method overloads well
-        this.name = isBuiltin(name) ? StringPrototypeReplace.call(name, /^(node:)?/, 'node:') : name;
+        this.name = Module.isBuiltin(name) ? StringPrototypeReplace.call(name, /^(node:)?/, 'node:') : name;
         /** @type {string=} */
         // @ts-ignore ts does not handle method overloads well
         this.file = file ? StringPrototypeReplace.call(file, /\/?(index)?(\.js)?$/, '') : undefined;

package/node_modules/@contrast/dep-hooks/lib/handler-invoker.d.ts

@@ -8,9 +8,9 @@ declare class HandlerInvoker {
     /**
      * @param {import('pino').Logger} logger
      */
-    constructor(logger: import('pino').Logger);
+    constructor(logger: import("pino").Logger);
     /** @type {import('pino').Logger} */
-    logger: import('pino').Logger;
+    logger: import("pino").Logger;
     /** @type {WeakMap<Object, WeakSet<Handler<any>>>} */
     seen: WeakMap<Object, WeakSet<Handler<any>>>;
     /**
@@ -31,16 +31,16 @@ declare class HandlerInvoker {
      * @param {Metadata} metadata Export metadata to pass to the handlers
      * @returns {T}
      */
-    invoke<T_1 extends Object>(xport: T_1, handlers: Handler<T_1>[], metadata: Metadata): T_1;
+    invoke<T extends Object>(xport: T, handlers: Handler<T>[], metadata: Metadata): T;
     /**
      * @template {Object} T
      * @param {T} xport The exported module
      */
-    reset<T_2 extends Object>(xport: T_2): void;
+    reset<T extends Object>(xport: T): void;
 }
 declare namespace HandlerInvoker {
     export { Handler, Metadata };
 }
-type Handler<T extends Object> = import('./export-hook-descriptor').Handler<T>;
-type Metadata = import('./package-finder').Metadata;
+type Handler<T extends Object> = import("./export-hook-descriptor").Handler<T>;
+type Metadata = import("./package-finder").Metadata;
 //# sourceMappingURL=handler-invoker.d.ts.map

package/node_modules/@contrast/dep-hooks/lib/handler-invoker.js

@@ -14,7 +14,6 @@
  */
 // @ts-check
 'use strict';
-Object.defineProperty(exports, "__esModule", { value: true });
 /**
  * @template {Object} T
  * @typedef {import('./export-hook-descriptor').Handler<T>} Handler

package/node_modules/@contrast/dep-hooks/lib/helpers.d.ts

@@ -18,11 +18,4 @@ export function getShortname({ name, packageDir, file, main }: {
     file: string;
     main?: string;
 }): string;
-/**
- * polyfill for `module.isBuiltin` prior to Node v16.17.0
- * see: https://nodejs.org/docs/latest-v16.x/api/module.html#moduleisbuiltinmodulename
- * @param {string} name
- * @returns {boolean}
- */
-export function isBuiltin(name: string): boolean;
 //# sourceMappingURL=helpers.d.ts.map

package/node_modules/@contrast/dep-hooks/lib/helpers.js

@@ -13,10 +13,8 @@
  * way not consistent with the End User License Agreement.
  */
 'use strict';
-Object.defineProperty(exports, "__esModule", { value: true });
-const Module = require('node:module');
 const path = require('node:path');
-const { isString, primordials: { StringPrototypeReplace, StringPrototypeSubstring, RegExpPrototypeTest } } = require('@contrast/common');
+const { isString, primordials: { StringPrototypeReplace, RegExpPrototypeTest } } = require('@contrast/common');
 const pathSepRegex = new RegExp(`\\${path.sep}`, 'g');
 /**
  * Shortens a fully resolved filename to a short path that would be respected by
@@ -46,21 +44,7 @@ function getShortname({ name, packageDir, file, main }) {
         return normalizedFilename;
     }
 }
-/**
- * polyfill for `module.isBuiltin` prior to Node v16.17.0
- * see: https://nodejs.org/docs/latest-v16.x/api/module.html#moduleisbuiltinmodulename
- * @param {string} name
- * @returns {boolean}
- */
-function isBuiltin(name) {
-    if (name.startsWith('node:')) {
-        name = StringPrototypeSubstring.call(name, 5);
-    }
-    // @ts-expect-error we've set the node version to 14 before this was added.
-    return Module.isBuiltin?.(name) ?? Module.builtinModules.includes(name);
-}
 module.exports = {
-    getShortname,
-    isBuiltin,
+    getShortname
 };
 //# sourceMappingURL=helpers.js.map

package/node_modules/@contrast/dep-hooks/lib/index.d.ts

@@ -1,18 +1,21 @@
+declare namespace _exports {
+    export { LoadArgs, Metadata };
+}
 declare function _exports(core: {
-    readonly logger: import('@contrast/logger').Logger;
-    readonly messages: import('@contrast/common').Messages;
+    readonly logger: import("@contrast/logger").Logger;
+    readonly messages: import("@contrast/common").Messages;
+    readonly appInfo: import("@contrast/common").AppInfo;
     depHooks: DepHooks;
 }): DepHooks;
 declare namespace _exports {
     export { DepHooks };
-    export { LoadArgs, Metadata };
 }
 export = _exports;
-export type LoadArgs = {
+type LoadArgs = {
     request: string;
     parent: Module;
 };
-export type Metadata = import('./package-finder').Metadata;
+type Metadata = import("./package-finder").Metadata;
 /**
  * @typedef {Object} LoadArgs
  * @property {string} request
@@ -28,15 +31,17 @@ declare class DepHooks {
      * @param {Object} opts
      * @param {import('pino').Logger} opts.logger
      * @param {import('@contrast/common').Messages} opts.messages
+     * @param {import('@contrast/common').AppInfo} opts.appInfo
      */
-    constructor({ logger, messages }: {
-        logger: import('pino').Logger;
-        messages: import('@contrast/common').Messages;
+    constructor({ logger, messages, appInfo }: {
+        logger: import("pino").Logger;
+        messages: import("@contrast/common").Messages;
+        appInfo: import("@contrast/common").AppInfo;
     });
     /** @type {import('pino').Logger} */
-    logger: import('pino').Logger;
+    logger: import("pino").Logger;
     /** @type {import('@contrast/common').Messages} */
-    messages: import('@contrast/common').Messages;
+    messages: import("@contrast/common").Messages;
     /** @type {HandlerInvoker} */
     invoker: HandlerInvoker;
     /** @type {ExportHandlerRegistry} */
@@ -63,7 +68,7 @@ declare class DepHooks {
      * @param {Metadata} metadata the export's metadata
      * @returns {T}
      */
-    runRequireHandlers<T_1 extends Object>(xport: T_1, handlers: ExportHookDescriptor.Handler<T_1>[], metadata: Metadata): T_1;
+    runRequireHandlers<T extends Object>(xport: T, handlers: ExportHookDescriptor.Handler<T>[], metadata: Metadata): T;
     /**
      * Checks if module name exists in resets set. If so, it will remove it from
      * the  set as well as remove it from the invoker WeakMap. This will force
@@ -73,7 +78,7 @@ declare class DepHooks {
      * @param {string} request the string passed to require()
      * @param {T} xport the exported value of a required module
      */
-    maybeClearHandlers<T_2 extends Object>(request: string, xport: T_2): void;
+    maybeClearHandlers<T extends Object>(request: string, xport: T): void;
     /**
      * Instruments the Module._load method (invoked by require) to run registered handlers _after_ the modules
      * have loaded/compiled. Any value returned by the handlers will replace the return value of Module._load

package/node_modules/@contrast/dep-hooks/lib/index.js

@@ -14,7 +14,6 @@
  */
 // @ts-check
 'use strict';
-Object.defineProperty(exports, "__esModule", { value: true });
 const Module = require('node:module');
 const ExportHandlerRegistry = require('./export-handler-registry');
 const ExportHookDescriptor = require('./export-hook-descriptor');
@@ -34,8 +33,9 @@ class DepHooks {
      * @param {Object} opts
      * @param {import('pino').Logger} opts.logger
      * @param {import('@contrast/common').Messages} opts.messages
+     * @param {import('@contrast/common').AppInfo} opts.appInfo
      */
-    constructor({ logger, messages }) {
+    constructor({ logger, messages, appInfo }) {
         /** Alias for `DepHooks#resolve` */
         this.resolve = this.register;
         /** @type {import('pino').Logger} */
@@ -45,7 +45,7 @@ class DepHooks {
         /** @type {HandlerInvoker} */
         this.invoker = new HandlerInvoker(logger);
         /** @type {ExportHandlerRegistry} */
-        this.registry = new ExportHandlerRegistry({ logger, messages });
+        this.registry = new ExportHandlerRegistry({ logger, messages, appInfo });
         /** @type {WeakMap<Object, Object>} */
         this.requiredModules = new WeakMap();
         /** @type {Set<string>} */
@@ -193,6 +193,7 @@ class DepHooks {
  * @param {{
  *  readonly logger: import('@contrast/logger').Logger;
  *  readonly messages: import('@contrast/common').Messages;
+ *  readonly appInfo: import('@contrast/common').AppInfo;
  *  depHooks: DepHooks;
  * }} core
  * @returns {DepHooks}
@@ -201,6 +202,7 @@ module.exports = function init(core) {
     core.depHooks = new DepHooks({
         logger: core.logger.child({ name: 'contrast:dep-hooks' }),
         messages: core.messages,
+        appInfo: core.appInfo
     });
     return core.depHooks;
 };

package/node_modules/@contrast/dep-hooks/lib/package-finder.d.ts

@@ -36,8 +36,9 @@ export type Metadata = {
 /**
  * Resolves the metadata of a package given it's resolved name.
  * @param {string=} file Absolute path to the module file
+ * @param {string=} file Absolute path to the node_modules directory
  * @param {import('pino').Logger=} logger
  * @returns {Metadata?}
  */
-export function resolveMetadata(file?: string | undefined, logger?: import('pino').Logger | undefined): Metadata | null;
+export function resolveMetadata(file?: string | undefined, nodeModulesDir: any, logger?: import("pino").Logger | undefined): Metadata | null;
 //# sourceMappingURL=package-finder.d.ts.map

package/node_modules/@contrast/dep-hooks/lib/package-finder.js

@@ -12,12 +12,11 @@
  * engineered, modified, repackaged, sold, redistributed or otherwise used in a
  * way not consistent with the End User License Agreement.
  */
-// @ts-check
 'use strict';
-Object.defineProperty(exports, "__esModule", { value: true });
 const path = require('node:path');
+const Module = require('node:module');
 const { findPackageJsonSync } = require('@contrast/find-package-json');
-const { getShortname, isBuiltin } = require('./helpers');
+const { getShortname } = require('./helpers');
 const { primordials: { StringPrototypeReplace, StringPrototypeSubstring, JSONParse, FsReadFileSync } } = require('@contrast/common');
 /**
  * @typedef {Object} Metadata
@@ -31,14 +30,15 @@ const { primordials: { StringPrototypeReplace, StringPrototypeSubstring, JSONPar
 /**
  * Resolves the metadata of a package given it's resolved name.
  * @param {string=} file Absolute path to the module file
+ * @param {string=} file Absolute path to the node_modules directory
  * @param {import('pino').Logger=} logger
  * @returns {Metadata?}
  */
-function resolveMetadata(file, logger) {
+function resolveMetadata(file, nodeModulesDir, logger) {
     if (!file) {
         return null;
     }
-    if (isBuiltin(file)) {
+    if (Module.isBuiltin(file)) {
         // @ts-ignore ts does not handle method overloads well
         file = StringPrototypeReplace.call(file, /^(node:)?/, 'node:');
         return {
@@ -50,7 +50,7 @@ function resolveMetadata(file, logger) {
         };
     }
     const resolved = path.dirname(file);
-    const pdj = findPackageJsonSync({ cwd: resolved });
+    const pdj = findPackageJsonSync({ cwd: resolved, stopAt: nodeModulesDir });
     if (!pdj) {
         logger?.error('unable to find package.json for %s', file);
         return null;

package/node_modules/@contrast/dep-hooks/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contrast/dep-hooks",
-  "version": "1.24.0",
+  "version": "1.27.0",
   "description": "Post hooks for Module.prototype.require",
   "license": "SEE LICENSE IN LICENSE",
   "author": "Contrast Security <nodejs@contrastsecurity.com> (https://www.contrastsecurity.com)",
@@ -21,9 +21,10 @@
     "test": "bash ../scripts/test.sh"
   },
   "dependencies": {
-    "@contrast/common": "1.35.0",
+    "@contrast/common": "1.37.0",
+    "@contrast/core": "1.58.0",
     "@contrast/find-package-json": "^1.1.0",
-    "@contrast/logger": "1.28.0",
+    "@contrast/logger": "1.31.0",
     "semver": "^7.6.3"
   }
 }

package/node_modules/@contrast/distringuish/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contrast/distringuish",
-  "version": "5.1.0",
+  "version": "6.0.2",
   "description": "Contrast Security",
   "author": "Contrast Security",
   "license": "SEE LICENSE IN LICENSE",
@@ -12,15 +12,16 @@
   "main": "index.js",
   "types": "index.d.ts",
   "engines": {
-    "node": ">=16.9.1"
+    "node": ">=18.7.0"
   },
   "dependencies": {
-    "nan": "^2.19.0",
-    "node-addon-api": "^7.1.1",
-    "node-gyp-build": "^4.8.1"
+    "nan": "^2.23.0",
+    "node-addon-api": "^8.5.0",
+    "node-gyp-build": "^4.8.4"
   },
   "overrides": {
     "debug": "^4.3.4",
-    "trim-newlines": "^3.0.1"
+    "trim-newlines": "^3.0.1",
+    "node-abi": "^4.12.0"
   }
 }