@mojaloop/central-ledger 17.7.1 → 17.7.3

package/CHANGELOG.md

@@ -2,6 +2,20 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+### [17.7.3](https://github.com/mojaloop/central-ledger/compare/v17.7.2...v17.7.3) (2024-06-05)
+
+
+### Chore
+
+* dependency upgrades and one migration  ([#1045](https://github.com/mojaloop/central-ledger/issues/1045)) ([3a94cdf](https://github.com/mojaloop/central-ledger/commit/3a94cdf0eafc6e9b53d796357b68c6d82eaa5277))
+
+### [17.7.2](https://github.com/mojaloop/central-ledger/compare/v17.7.1...v17.7.2) (2024-06-04)
+
+
+### Chore
+
+* dependency updates to address dependabot alerts ([#1044](https://github.com/mojaloop/central-ledger/issues/1044)) ([d6bb4b9](https://github.com/mojaloop/central-ledger/commit/d6bb4b912d24f07f21822cc8079338146e0f0be6))
+
 ### [17.7.1](https://github.com/mojaloop/central-ledger/compare/v17.7.0...v17.7.1) (2024-06-04)
 
 

package/LICENSE.md

@@ -1,6 +1,6 @@
 # LICENSE
 
-Copyright © 2020 Mojaloop Foundation
+Copyright © 2020-2024 Mojaloop Foundation
 
 The Mojaloop files are made available by the Mojaloop Foundation under the Apache License, Version 2.0
 (the "License") and you may not use these files except in compliance with the [License](http://www.apache.org/licenses/LICENSE-2.0). 

package/audit-ci.jsonc

@@ -5,9 +5,7 @@
   "moderate": true,
   "allowlist": [ // NOTE: Please add as much information as possible to any items added to the allowList
   "GHSA-v88g-cgmw-v5xw", // widdershins>swagger2openapi>oas-validator>ajv
-  "GHSA-mg85-8mv5-ffjr", // hapi-auth-basic>hapi>ammo
   "GHSA-phwq-j96m-2c2q", // @mojaloop/central-services-shared>shins>ejs
-  "GHSA-7hx8-2rxv-66xv", // hapi-auth-basic>hapi
   "GHSA-c429-5p7v-vgjp", // hapi>boom>hoek
   "GHSA-282f-qqgm-c34q", // widdershins>swagger2openapi>better-ajv-errors>jsonpointer
   "GHSA-8cf7-32gw-wr33", // @now-ims/hapi-now-auth>jsonwebtoken
@@ -18,9 +16,6 @@
   "GHSA-mjxr-4v3x-q3m4", // @mojaloop/central-services-shared>shins>sanitize-html
   "GHSA-rjqq-98f6-6j3r", // @mojaloop/central-services-shared>shins>sanitize-html
   "GHSA-rm97-x556-q36h", // @mojaloop/central-services-shared>shins>sanitize-html
-  "GHSA-g64q-3vg8-8f93", // hapi-auth-basic>hapi>subtext
-  "GHSA-5854-jvxx-2cg9", // hapi-auth-basic>hapi>subtext
-  "GHSA-2mvq-xp48-4c77", // hapi-auth-basic>hapi>subtext
   "GHSA-w5p7-h5w8-2hfq", // tap-spec>tap-out>trim
   "GHSA-p9pc-299p-vxgp", // widdershins>yargs>yargs-parser
   "GHSA-ghr5-ch3p-vcr6", // https://github.com/advisories/GHSA-ghr5-ch3p-vcr6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mojaloop/central-ledger",
-  "version": "17.7.1",
+  "version": "17.7.3",
   "description": "Central ledger hosted by a scheme to record and settle transfers",
   "license": "Apache-2.0",
   "author": "ModusBox",
@@ -81,6 +81,7 @@
   "dependencies": {
     "@hapi/good": "9.0.1",
     "@hapi/hapi": "21.3.9",
+    "@hapi/basic": "7.0.2",
     "@hapi/inert": "7.1.0",
     "@hapi/joi": "17.1.1",
     "@hapi/vision": "7.0.3",
@@ -96,7 +97,7 @@
     "@mojaloop/ml-number": "11.2.4",
     "@mojaloop/object-store-lib": "12.0.3",
     "@now-ims/hapi-now-auth": "2.1.0",
-    "ajv": "8.14.0",
+    "ajv": "8.16.0",
     "ajv-keywords": "5.1.0",
     "base64url": "3.0.1",
     "blipp": "4.0.2",
@@ -107,7 +108,6 @@
     "event-stream": "4.0.1",
     "five-bells-condition": "5.0.1",
     "glob": "10.4.1",
-    "hapi-auth-basic": "5.0.0",
     "hapi-auth-bearer-token": "8.0.0",
     "hapi-swagger": "17.2.1",
     "ilp-packet": "2.2.0",
@@ -141,6 +141,14 @@
     "tape": "4.16.2",
     "tapes": "4.1.0"
   },
+  "overrides": {
+    "shins": {
+      "ejs": "^3.1.10",
+      "sanitize-html": "^2.12.1",
+      "jsonpointer": "^5.0.0",
+      "jsonwebtoken": "^9.0.0"
+    }
+  },
   "config": {
     "knex": "--knexfile ./config/knexfile.js",
     "images": {

package/src/shared/plugins.js

@@ -28,7 +28,7 @@ const registerPlugins = async (server) => {
   })
 
   await server.register({
-    plugin: require('hapi-auth-basic')
+    plugin: require('@hapi/basic')
   })
 
   await server.register({