security: fix high and critical vulnerabilities

.github/workflows/main.yml

@@ -62,6 +62,9 @@ jobs:
       - name: Run linting
         run: yarn lint
 
+      - name: Build all packages
+        run: yarn build
+
       - name: Build rust-dlc-cli for compatibility tests
         run: |
           if [ -d "rust-dlc-cli" ]; then

.gitignore

@@ -59,6 +59,9 @@ typings/
 .rts2_cache_es/
 .rts2_cache_umd/
 
+# Nx cache
+.nx/
+
 # Optional REPL history
 .node_repl_history
 

nx.json

@@ -0,0 +1,19 @@
+{
+  "$schema": "./node_modules/nx/schemas/nx-schema.json",
+  "tasksRunnerOptions": {
+    "default": {
+      "runner": "nx/tasks-runners/default",
+      "options": {
+        "cacheableOperations": ["build", "lint"]
+      }
+    }
+  },
+  "targetDefaults": {
+    "build": {
+      "dependsOn": ["^build"]
+    },
+    "test": {
+      "cache": false
+    }
+  }
+}

package.json

@@ -1,18 +1,19 @@
 {
   "name": "@node-dlc/main",
+  "private": true,
   "description": "Toolkit for Bitcoin DLCs",
   "scripts": {
     "start": "cd packages/daemon; npm run start",
-    "bootstrap": "lerna bootstrap",
+    "bootstrap": "yarn install",
     "format": "prettier --check \"packages/**\"",
     "format:fix": "lerna run lint:fix && prettier --write \"packages/**\"",
     "lint": "lerna run lint",
     "lint:fix": "lerna run lint:fix",
     "clean": "lerna clean",
     "test": "lerna run test",
     "build": "lerna run build",
-    "bootstrap:ci": "lerna bootstrap --hoist",
-    "new:version": "lerna version --no-push --no-git-tag-version && lerna clean --yes && lerna bootstrap",
+    "bootstrap:ci": "yarn install --frozen-lockfile",
+    "new:version": "lerna version --no-push --no-git-tag-version",
     "publish:all": "lerna publish from-package",
     "prepublishOnly": "npm run build",
     "update-dlcspecs-vectors": "./scripts/update-dlcspecs-vectors.sh"
@@ -31,7 +32,7 @@
   "author": "Atomic Finance <info@atomic.finance>",
   "license": "MIT",
   "devDependencies": {
-    "@babel/runtime": "^7.24.0",
+    "@babel/runtime": "^7.28.6",
     "@istanbuljs/nyc-config-typescript": "^1.0.1",
     "@types/bn.js": "^4.11.6",
     "@types/chai": "^4.2.11",
@@ -45,26 +46,49 @@
     "chai": "^4.3.4",
     "chai-as-promised": "^7.1.1",
     "chai-exclude": "2.0.2",
-    "chai-http": "4.3.0",
+    "chai-http": "^5.1.2",
     "chai-like": "1.1.1",
     "chai-things": "0.2.0",
-    "coveralls": "^3.1.0",
-    "eslint": "^8.57.0",
+    "coveralls": "^3.1.1",
+    "eslint": "^8.57.1",
     "eslint-config-prettier": "^9.1.0",
     "eslint-plugin-prettier": "^5.1.3",
     "eslint-plugin-simple-import-sort": "^10.0.0",
-    "lerna": "^4.0.0",
-    "mocha": "^8.3.2",
-    "nodemon": "^2.0.4",
-    "nyc": "^15.1.0",
+    "lerna": "^8.0.0",
+    "mocha": "^11.7.5",
+    "nodemon": "^3.1.11",
+    "nyc": "^17.0.0",
     "pre-commit": "^1.2.2",
     "prettier": "^2.2.1",
-    "sinon": "^7.5.0",
+    "sinon": "^21.0.1",
     "source-map-support": "^0.5.19",
-    "ts-node": "^8.10.2",
+    "ts-node": "^10.9.2",
     "typescript": "^4.9.5"
   },
   "dependencies": {
     "json-bigint": "^1.0.0"
+  },
+  "workspaces": [
+    "packages/*"
+  ],
+  "resolutions": {
+    "js-yaml": "^4.1.1",
+    "ansi-regex": "^5.0.1",
+    "form-data": "^4.0.0",
+    "request": "^2.88.2",
+    "front-matter": "^4.0.2",
+    "get-func-name": "^2.0.1",
+    "semver": "^7.0.0",
+    "qs": "^6.14.1",
+    "cross-spawn": "^7.0.6",
+    "braces": "^3.0.3",
+    "strip-bom": "^4.0.0",
+    "path-to-regexp": "^1.9.0",
+    "json-schema": "^0.4.0",
+    "tough-cookie": "^4.1.3",
+    "@babel/runtime": "^7.26.10",
+    "secp256k1": "^5.0.1",
+    "bitcoin-networks": "npm:bitcoin-network@0.1.0",
+    "sha.js": "^2.4.12"
   }
 }

packages/core/__tests__/dlc/CoinSelect.spec.ts

@@ -84,8 +84,7 @@ describe('CoinSelect', () => {
 
       utxos.push({
         address: 'bcrt1qjzut0906d9sk4hml4k6sz6cssljktf4c7yl80f',
-        txid:
-          'c7bf12ac16aba1cf6c7769117294853453f7da3006363dfe4e8979847e32f7e1',
+        txid: 'c7bf12ac16aba1cf6c7769117294853453f7da3006363dfe4e8979847e32f7e1',
         value: 10000,
         vout: Math.floor(Math.random() * 11), // random integer between 0 and 10
       });