diff --git a/docs/reference/stack-facts.md b/docs/reference/stack-facts.md index 9973b9b38..5ea538d66 100644 --- a/docs/reference/stack-facts.md +++ b/docs/reference/stack-facts.md @@ -77,13 +77,13 @@ the separately released and verified image digest. | Service | Package | Manifest version | Node engine | Runtime targets | Release | Source | | --- | --- | --- | --- | --- | --- | --- | -| BSV Chaintracks Server | `chaintracks-server` | `1.1.15` | `>=24 <25` | node, linux/amd64 | ghcr-keyless | [infra/chaintracks-server](https://github.com/bsv-blockchain/ts-stack/tree/main/infra/chaintracks-server) | -| BSV Message Box Server | `@bsv/messagebox-server` | `1.1.39` | `>=24 <25` | node, linux/amd64 | ghcr-keyless | [infra/message-box-server](https://github.com/bsv-blockchain/ts-stack/tree/main/infra/message-box-server) | +| BSV Chaintracks Server | `chaintracks-server` | `1.1.16` | `>=24 <25` | node, linux/amd64 | ghcr-keyless | [infra/chaintracks-server](https://github.com/bsv-blockchain/ts-stack/tree/main/infra/chaintracks-server) | +| BSV Message Box Server | `@bsv/messagebox-server` | `1.1.40` | `>=24 <25` | node, linux/amd64 | ghcr-keyless | [infra/message-box-server](https://github.com/bsv-blockchain/ts-stack/tree/main/infra/message-box-server) | | BSV Overlay Server | `@bsv/overlay-express-examples` | `2.1.34` | `>=24 <25` | node, linux/amd64 | ghcr-keyless | [infra/overlay-server](https://github.com/bsv-blockchain/ts-stack/tree/main/infra/overlay-server) | -| BSV UHRP Basic Server | `@bsv/uhrp-lite` | `0.1.34` | `>=24 <25` | node, linux/amd64 | ghcr-keyless | [infra/uhrp-server-basic](https://github.com/bsv-blockchain/ts-stack/tree/main/infra/uhrp-server-basic) | -| BSV UHRP Cloud Bucket Server | `@bsv/uhrp-storage-server` | `0.2.36` | `>=24 <25` | node, linux/amd64 | ghcr-keyless | [infra/uhrp-server-cloud-bucket](https://github.com/bsv-blockchain/ts-stack/tree/main/infra/uhrp-server-cloud-bucket) | -| Wallet Authentication Backend | `@bsv/wab-server` | `1.5.3` | `>=24 <25` | node, linux/amd64 | ghcr-and-aws-marketplace-keyless | [infra/wab](https://github.com/bsv-blockchain/ts-stack/tree/main/infra/wab) | -| BSV Wallet Infrastructure | `@bsv/wallet-infra` | `2.0.37` | `>=24 <25` | node, linux/amd64 | ghcr-keyless | [infra/wallet-infra](https://github.com/bsv-blockchain/ts-stack/tree/main/infra/wallet-infra) | +| BSV UHRP Basic Server | `@bsv/uhrp-lite` | `0.1.35` | `>=24 <25` | node, linux/amd64 | ghcr-keyless | [infra/uhrp-server-basic](https://github.com/bsv-blockchain/ts-stack/tree/main/infra/uhrp-server-basic) | +| BSV UHRP Cloud Bucket Server | `@bsv/uhrp-storage-server` | `0.2.37` | `>=24 <25` | node, linux/amd64 | ghcr-keyless | [infra/uhrp-server-cloud-bucket](https://github.com/bsv-blockchain/ts-stack/tree/main/infra/uhrp-server-cloud-bucket) | +| Wallet Authentication Backend | `@bsv/wab-server` | `1.5.4` | `>=24 <25` | node, linux/amd64 | ghcr-and-aws-marketplace-keyless | [infra/wab](https://github.com/bsv-blockchain/ts-stack/tree/main/infra/wab) | +| BSV Wallet Infrastructure | `@bsv/wallet-infra` | `2.0.38` | `>=24 <25` | node, linux/amd64 | ghcr-keyless | [infra/wallet-infra](https://github.com/bsv-blockchain/ts-stack/tree/main/infra/wallet-infra) | ## Governed project and release inventory diff --git a/infra/chaintracks-server/Dockerfile b/infra/chaintracks-server/Dockerfile index 6ea500030..b61a942af 100644 --- a/infra/chaintracks-server/Dockerfile +++ b/infra/chaintracks-server/Dockerfile @@ -29,9 +29,11 @@ FROM node@sha256:a0b9bf06e4e6193cf7a0f58816cc935ff8c2a908f81e6f1a95432d679c54fbf WORKDIR /app # Install better-sqlite3 native build tools (see builder stage). The pinned -# base is refreshed by reviewed Dependabot changes instead of mutating it with -# a time-dependent apk upgrade. The toolchain is removed after npm ci below. -RUN apk add --no-cache --virtual .build-deps g++ make python3 +# base contains OpenSSL 3.5.7-r0, so install the reviewed 3.5.8-r0 fix for +# CVE-2026-14456 alongside the disposable toolchain. The toolchain is removed +# after npm ci below while the fixed runtime libraries remain. +RUN apk add --no-cache --virtual .build-deps g++ make python3 \ + && apk add --no-cache libcrypto3=3.5.8-r0 libssl3=3.5.8-r0 # Copy package files COPY package*.json ./ diff --git a/infra/chaintracks-server/package-lock.json b/infra/chaintracks-server/package-lock.json index b6a40ce1a..b1ad5d007 100644 --- a/infra/chaintracks-server/package-lock.json +++ b/infra/chaintracks-server/package-lock.json @@ -1,15 +1,15 @@ { "name": "chaintracks-server", - "version": "1.1.15", + "version": "1.1.16", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "chaintracks-server", - "version": "1.1.15", + "version": "1.1.16", "license": "SEE LICENSE IN LICENSE.txt", "dependencies": { - "@bsv/wallet-toolbox": "^2.10.2", + "@bsv/wallet-toolbox": "^2.10.3", "@opentelemetry/api": "^1.9.1", "@opentelemetry/api-logs": "^0.221.0", "@opentelemetry/auto-instrumentations-node": "^0.79.0", @@ -106,9 +106,9 @@ } }, "node_modules/@bsv/wallet-toolbox": { - "version": "2.10.2", - "resolved": "https://registry.npmjs.org/@bsv/wallet-toolbox/-/wallet-toolbox-2.10.2.tgz", - "integrity": "sha512-5uVGSPtz0ZYyCS/rMkLlmTHoFWeBny6GcjoWsTlFYhxfI14QOUUV+7eiYsa/PL1kCuT+tfTSG5cBArgQbA8W1A==", + "version": "2.10.3", + "resolved": "https://registry.npmjs.org/@bsv/wallet-toolbox/-/wallet-toolbox-2.10.3.tgz", + "integrity": "sha512-ol++TS1R/8zbfDeGHazP7E8NQ/r3WFAqAjEGii0UiHO7BxoIwCou84PpYXP7Ap6aXXmL8j+eR0t3XpIeBONIQQ==", "license": "SEE LICENSE IN LICENSE.txt", "dependencies": { "@bsv/auth-express-middleware": "^2.2.2", diff --git a/infra/chaintracks-server/package.json b/infra/chaintracks-server/package.json index 1453c9c81..578b508c1 100644 --- a/infra/chaintracks-server/package.json +++ b/infra/chaintracks-server/package.json @@ -1,6 +1,6 @@ { "name": "chaintracks-server", - "version": "1.1.15", + "version": "1.1.16", "overrides": { "gaxios": "7.3.0" }, @@ -35,7 +35,7 @@ "author": "", "license": "SEE LICENSE IN LICENSE.txt", "dependencies": { - "@bsv/wallet-toolbox": "^2.10.2", + "@bsv/wallet-toolbox": "^2.10.3", "@opentelemetry/api": "^1.9.1", "@opentelemetry/api-logs": "^0.221.0", "@opentelemetry/auto-instrumentations-node": "^0.79.0", diff --git a/infra/message-box-server/Dockerfile b/infra/message-box-server/Dockerfile index a9e2b7e38..e725d98eb 100644 --- a/infra/message-box-server/Dockerfile +++ b/infra/message-box-server/Dockerfile @@ -34,9 +34,11 @@ WORKDIR /app # Copy package files and install production deps only. # better-sqlite3 compiles from source on Alpine; add the toolchain just for the -# install, then remove it in the same layer to keep the image slim. +# install, then remove it in the same layer to keep the image slim. Keep the +# fixed OpenSSL runtime packages after removing the disposable toolchain. COPY --chown=root:root --chmod=0444 package*.json ./ RUN apk add --no-cache --virtual .build-deps g++ make python3 \ + && apk add --no-cache libcrypto3=3.5.8-r0 libssl3=3.5.8-r0 \ && npm ci --omit=dev --ignore-scripts \ && npm rebuild better-sqlite3 \ && apk del .build-deps \ diff --git a/infra/message-box-server/package-lock.json b/infra/message-box-server/package-lock.json index bd3283a9e..f6b614777 100644 --- a/infra/message-box-server/package-lock.json +++ b/infra/message-box-server/package-lock.json @@ -1,19 +1,19 @@ { "name": "@bsv/messagebox-server", - "version": "1.1.39", + "version": "1.1.40", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "@bsv/messagebox-server", - "version": "1.1.39", + "version": "1.1.40", "license": "SEE LICENSE IN LICENSE.txt", "dependencies": { "@bsv/auth-express-middleware": "^2.2.2", "@bsv/authsocket": "^2.1.6", "@bsv/payment-express-middleware": "^2.1.5", "@bsv/sdk": "^2.4.1", - "@bsv/wallet-toolbox": "^2.10.2", + "@bsv/wallet-toolbox": "^2.10.3", "@opentelemetry/api": "^1.9.1", "@opentelemetry/api-logs": "^0.221.0", "@opentelemetry/auto-instrumentations-node": "^0.79.0", @@ -765,9 +765,9 @@ } }, "node_modules/@bsv/wallet-toolbox": { - "version": "2.10.2", - "resolved": "https://registry.npmjs.org/@bsv/wallet-toolbox/-/wallet-toolbox-2.10.2.tgz", - "integrity": "sha512-5uVGSPtz0ZYyCS/rMkLlmTHoFWeBny6GcjoWsTlFYhxfI14QOUUV+7eiYsa/PL1kCuT+tfTSG5cBArgQbA8W1A==", + "version": "2.10.3", + "resolved": "https://registry.npmjs.org/@bsv/wallet-toolbox/-/wallet-toolbox-2.10.3.tgz", + "integrity": "sha512-ol++TS1R/8zbfDeGHazP7E8NQ/r3WFAqAjEGii0UiHO7BxoIwCou84PpYXP7Ap6aXXmL8j+eR0t3XpIeBONIQQ==", "license": "SEE LICENSE IN LICENSE.txt", "dependencies": { "@bsv/auth-express-middleware": "^2.2.2", diff --git a/infra/message-box-server/package.json b/infra/message-box-server/package.json index 434931bb5..fd9e18bf7 100644 --- a/infra/message-box-server/package.json +++ b/infra/message-box-server/package.json @@ -1,7 +1,7 @@ { "name": "@bsv/messagebox-server", "private": true, - "version": "1.1.39", + "version": "1.1.40", "overrides": { "brace-expansion": "5.0.9", "gaxios": "7.3.0", @@ -70,7 +70,7 @@ "@bsv/authsocket": "^2.1.6", "@bsv/payment-express-middleware": "^2.1.5", "@bsv/sdk": "^2.4.1", - "@bsv/wallet-toolbox": "^2.10.2", + "@bsv/wallet-toolbox": "^2.10.3", "@opentelemetry/api": "^1.9.1", "@opentelemetry/api-logs": "^0.221.0", "@opentelemetry/auto-instrumentations-node": "^0.79.0", diff --git a/infra/uhrp-server-basic/package-lock.json b/infra/uhrp-server-basic/package-lock.json index 45ea9247a..0b7beb211 100644 --- a/infra/uhrp-server-basic/package-lock.json +++ b/infra/uhrp-server-basic/package-lock.json @@ -1,18 +1,18 @@ { "name": "@bsv/uhrp-lite", - "version": "0.1.34", + "version": "0.1.35", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "@bsv/uhrp-lite", - "version": "0.1.34", + "version": "0.1.35", "license": "SEE LICENSE IN LICENSE.txt", "dependencies": { "@bsv/auth-express-middleware": "^2.2.2", "@bsv/payment-express-middleware": "^2.1.5", "@bsv/sdk": "^2.4.1", - "@bsv/wallet-toolbox-client": "^2.10.2", + "@bsv/wallet-toolbox-client": "^2.10.3", "@opentelemetry/api": "^1.9.1", "@opentelemetry/api-logs": "^0.221.0", "@opentelemetry/auto-instrumentations-node": "^0.79.0", @@ -610,9 +610,9 @@ } }, "node_modules/@bsv/wallet-toolbox-client": { - "version": "2.10.2", - "resolved": "https://registry.npmjs.org/@bsv/wallet-toolbox-client/-/wallet-toolbox-client-2.10.2.tgz", - "integrity": "sha512-c6AcIC/diGnI/TJc/ihatB2jfmnk3Y8I2n8V48rvgqGiF4I4KQrpNF/uJnsbLiDIMfqsQkcGWvTYU4M2/OfN0w==", + "version": "2.10.3", + "resolved": "https://registry.npmjs.org/@bsv/wallet-toolbox-client/-/wallet-toolbox-client-2.10.3.tgz", + "integrity": "sha512-XEUCziFu6zDjdCcclFaJx5y8t7YSSvaMMeRrim74NeJQdKN2VLTb7lwVlNq+kkaz8Xc88R6peMA0Lf2jQI7rVQ==", "license": "SEE LICENSE IN LICENSE.txt", "dependencies": { "hash-wasm": "^4.12.0", diff --git a/infra/uhrp-server-basic/package.json b/infra/uhrp-server-basic/package.json index bf09dbd16..066cc0aab 100644 --- a/infra/uhrp-server-basic/package.json +++ b/infra/uhrp-server-basic/package.json @@ -1,6 +1,6 @@ { "name": "@bsv/uhrp-lite", - "version": "0.1.34", + "version": "0.1.35", "overrides": { "brace-expansion": "5.0.9", "gaxios": "7.3.0" @@ -31,7 +31,7 @@ "@bsv/auth-express-middleware": "^2.2.2", "@bsv/payment-express-middleware": "^2.1.5", "@bsv/sdk": "^2.4.1", - "@bsv/wallet-toolbox-client": "^2.10.2", + "@bsv/wallet-toolbox-client": "^2.10.3", "@opentelemetry/api": "^1.9.1", "@opentelemetry/api-logs": "^0.221.0", "@opentelemetry/auto-instrumentations-node": "^0.79.0", diff --git a/infra/uhrp-server-cloud-bucket/package-lock.json b/infra/uhrp-server-cloud-bucket/package-lock.json index 6433fccdf..88c3db6af 100644 --- a/infra/uhrp-server-cloud-bucket/package-lock.json +++ b/infra/uhrp-server-cloud-bucket/package-lock.json @@ -1,19 +1,19 @@ { "name": "@bsv/uhrp-storage-server", - "version": "0.2.36", + "version": "0.2.37", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "@bsv/uhrp-storage-server", - "version": "0.2.36", + "version": "0.2.37", "license": "SEE LICENSE IN LICENSE.txt", "dependencies": { "@bsv/auth-express-middleware": "^2.2.2", "@bsv/payment-express-middleware": "^2.1.5", "@bsv/sdk": "^2.4.1", - "@bsv/wallet-toolbox": "^2.10.2", - "@bsv/wallet-toolbox-client": "^2.10.2", + "@bsv/wallet-toolbox": "^2.10.3", + "@bsv/wallet-toolbox-client": "^2.10.3", "@bugsnag/js": "^8.10.0", "@bugsnag/plugin-express": "^8.9.0", "@google-cloud/storage": "^7.21.0", @@ -690,9 +690,9 @@ } }, "node_modules/@bsv/wallet-toolbox": { - "version": "2.10.2", - "resolved": "https://registry.npmjs.org/@bsv/wallet-toolbox/-/wallet-toolbox-2.10.2.tgz", - "integrity": "sha512-5uVGSPtz0ZYyCS/rMkLlmTHoFWeBny6GcjoWsTlFYhxfI14QOUUV+7eiYsa/PL1kCuT+tfTSG5cBArgQbA8W1A==", + "version": "2.10.3", + "resolved": "https://registry.npmjs.org/@bsv/wallet-toolbox/-/wallet-toolbox-2.10.3.tgz", + "integrity": "sha512-ol++TS1R/8zbfDeGHazP7E8NQ/r3WFAqAjEGii0UiHO7BxoIwCou84PpYXP7Ap6aXXmL8j+eR0t3XpIeBONIQQ==", "license": "SEE LICENSE IN LICENSE.txt", "dependencies": { "@bsv/auth-express-middleware": "^2.2.2", @@ -722,9 +722,9 @@ } }, "node_modules/@bsv/wallet-toolbox-client": { - "version": "2.10.2", - "resolved": "https://registry.npmjs.org/@bsv/wallet-toolbox-client/-/wallet-toolbox-client-2.10.2.tgz", - "integrity": "sha512-c6AcIC/diGnI/TJc/ihatB2jfmnk3Y8I2n8V48rvgqGiF4I4KQrpNF/uJnsbLiDIMfqsQkcGWvTYU4M2/OfN0w==", + "version": "2.10.3", + "resolved": "https://registry.npmjs.org/@bsv/wallet-toolbox-client/-/wallet-toolbox-client-2.10.3.tgz", + "integrity": "sha512-XEUCziFu6zDjdCcclFaJx5y8t7YSSvaMMeRrim74NeJQdKN2VLTb7lwVlNq+kkaz8Xc88R6peMA0Lf2jQI7rVQ==", "license": "SEE LICENSE IN LICENSE.txt", "dependencies": { "hash-wasm": "^4.12.0", diff --git a/infra/uhrp-server-cloud-bucket/package.json b/infra/uhrp-server-cloud-bucket/package.json index 92a703392..4962c0eb6 100644 --- a/infra/uhrp-server-cloud-bucket/package.json +++ b/infra/uhrp-server-cloud-bucket/package.json @@ -1,6 +1,6 @@ { "name": "@bsv/uhrp-storage-server", - "version": "0.2.36", + "version": "0.2.37", "overrides": { "brace-expansion": "5.0.9", "gaxios": "7.3.0", @@ -32,8 +32,8 @@ "@bsv/auth-express-middleware": "^2.2.2", "@bsv/payment-express-middleware": "^2.1.5", "@bsv/sdk": "^2.4.1", - "@bsv/wallet-toolbox": "^2.10.2", - "@bsv/wallet-toolbox-client": "^2.10.2", + "@bsv/wallet-toolbox": "^2.10.3", + "@bsv/wallet-toolbox-client": "^2.10.3", "@bugsnag/js": "^8.10.0", "@bugsnag/plugin-express": "^8.9.0", "@google-cloud/storage": "^7.21.0", diff --git a/infra/wab/Dockerfile b/infra/wab/Dockerfile index 96617b58e..48d12d9a9 100644 --- a/infra/wab/Dockerfile +++ b/infra/wab/Dockerfile @@ -29,8 +29,10 @@ FROM public.ecr.aws/docker/library/node@sha256:a0b9bf06e4e6193cf7a0f58816cc935ff # Strip npm from the runtime image: the app runs via `node` (see CMD) and # node:24-alpine's bundled npm ships its own HIGH-CVE deps (picomatch/undici) -# that we don't need at runtime. -RUN rm -rf /usr/local/lib/node_modules/npm /usr/local/bin/npm /usr/local/bin/npx +# that we don't need at runtime. The pinned base contains OpenSSL 3.5.7-r0; +# retain the reviewed 3.5.8-r0 fix for CVE-2026-14456. +RUN apk add --no-cache libcrypto3=3.5.8-r0 libssl3=3.5.8-r0 \ + && rm -rf /usr/local/lib/node_modules/npm /usr/local/bin/npm /usr/local/bin/npx WORKDIR /app diff --git a/infra/wab/package-lock.json b/infra/wab/package-lock.json index ed431602b..7500acc2c 100644 --- a/infra/wab/package-lock.json +++ b/infra/wab/package-lock.json @@ -1,16 +1,16 @@ { "name": "@bsv/wab-server", - "version": "1.5.3", + "version": "1.5.4", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "@bsv/wab-server", - "version": "1.5.3", + "version": "1.5.4", "license": "SEE LICENSE IN LICENSE.txt", "dependencies": { "@bsv/sdk": "^2.4.1", - "@bsv/wallet-toolbox": "^2.10.2", + "@bsv/wallet-toolbox": "^2.10.3", "@opentelemetry/api": "^1.9.1", "@opentelemetry/api-logs": "^0.221.0", "@opentelemetry/auto-instrumentations-node": "^0.79.0", @@ -638,9 +638,9 @@ } }, "node_modules/@bsv/wallet-toolbox": { - "version": "2.10.2", - "resolved": "https://registry.npmjs.org/@bsv/wallet-toolbox/-/wallet-toolbox-2.10.2.tgz", - "integrity": "sha512-5uVGSPtz0ZYyCS/rMkLlmTHoFWeBny6GcjoWsTlFYhxfI14QOUUV+7eiYsa/PL1kCuT+tfTSG5cBArgQbA8W1A==", + "version": "2.10.3", + "resolved": "https://registry.npmjs.org/@bsv/wallet-toolbox/-/wallet-toolbox-2.10.3.tgz", + "integrity": "sha512-ol++TS1R/8zbfDeGHazP7E8NQ/r3WFAqAjEGii0UiHO7BxoIwCou84PpYXP7Ap6aXXmL8j+eR0t3XpIeBONIQQ==", "license": "SEE LICENSE IN LICENSE.txt", "dependencies": { "@bsv/auth-express-middleware": "^2.2.2", diff --git a/infra/wab/package.json b/infra/wab/package.json index 1c4064292..add9ed252 100644 --- a/infra/wab/package.json +++ b/infra/wab/package.json @@ -1,7 +1,7 @@ { "name": "@bsv/wab-server", "private": true, - "version": "1.5.3", + "version": "1.5.4", "overrides": { "brace-expansion": "5.0.9", "gaxios": "7.3.0" @@ -23,7 +23,7 @@ }, "dependencies": { "@bsv/sdk": "^2.4.1", - "@bsv/wallet-toolbox": "^2.10.2", + "@bsv/wallet-toolbox": "^2.10.3", "@opentelemetry/api": "^1.9.1", "@opentelemetry/api-logs": "^0.221.0", "@opentelemetry/auto-instrumentations-node": "^0.79.0", diff --git a/infra/wallet-infra/Dockerfile b/infra/wallet-infra/Dockerfile index 0aacd7b07..56f11122a 100644 --- a/infra/wallet-infra/Dockerfile +++ b/infra/wallet-infra/Dockerfile @@ -16,7 +16,9 @@ RUN npm run build \ FROM node@sha256:a0b9bf06e4e6193cf7a0f58816cc935ff8c2a908f81e6f1a95432d679c54fbfd -RUN apk add --no-cache nginx \ +# The pinned base contains OpenSSL 3.5.7-r0. Install the reviewed 3.5.8-r0 +# runtime fix for CVE-2026-14456 together with nginx. +RUN apk add --no-cache libcrypto3=3.5.8-r0 libssl3=3.5.8-r0 nginx \ && chown -R node:node /var/lib/nginx COPY ./nginx.conf /etc/nginx/nginx.conf diff --git a/infra/wallet-infra/package-lock.json b/infra/wallet-infra/package-lock.json index ecf27e894..296276c7d 100644 --- a/infra/wallet-infra/package-lock.json +++ b/infra/wallet-infra/package-lock.json @@ -1,17 +1,17 @@ { "name": "@bsv/wallet-infra", - "version": "2.0.37", + "version": "2.0.38", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "@bsv/wallet-infra", - "version": "2.0.37", + "version": "2.0.38", "license": "SEE LICENSE IN LICENSE.txt", "dependencies": { "@bsv/payment-express-middleware": "^2.1.5", "@bsv/sdk": "^2.4.1", - "@bsv/wallet-toolbox": "^2.10.2", + "@bsv/wallet-toolbox": "^2.10.3", "@opentelemetry/api": "^1.9.1", "@opentelemetry/api-logs": "^0.221.0", "@opentelemetry/auto-instrumentations-node": "^0.79.0", @@ -110,9 +110,9 @@ } }, "node_modules/@bsv/wallet-toolbox": { - "version": "2.10.2", - "resolved": "https://registry.npmjs.org/@bsv/wallet-toolbox/-/wallet-toolbox-2.10.2.tgz", - "integrity": "sha512-5uVGSPtz0ZYyCS/rMkLlmTHoFWeBny6GcjoWsTlFYhxfI14QOUUV+7eiYsa/PL1kCuT+tfTSG5cBArgQbA8W1A==", + "version": "2.10.3", + "resolved": "https://registry.npmjs.org/@bsv/wallet-toolbox/-/wallet-toolbox-2.10.3.tgz", + "integrity": "sha512-ol++TS1R/8zbfDeGHazP7E8NQ/r3WFAqAjEGii0UiHO7BxoIwCou84PpYXP7Ap6aXXmL8j+eR0t3XpIeBONIQQ==", "license": "SEE LICENSE IN LICENSE.txt", "dependencies": { "@bsv/auth-express-middleware": "^2.2.2", diff --git a/infra/wallet-infra/package.json b/infra/wallet-infra/package.json index 1a873becf..df346e5b0 100644 --- a/infra/wallet-infra/package.json +++ b/infra/wallet-infra/package.json @@ -1,7 +1,7 @@ { "name": "@bsv/wallet-infra", "private": true, - "version": "2.0.37", + "version": "2.0.38", "overrides": { "gaxios": "7.3.0" }, @@ -56,7 +56,7 @@ "dependencies": { "@bsv/payment-express-middleware": "^2.1.5", "@bsv/sdk": "^2.4.1", - "@bsv/wallet-toolbox": "^2.10.2", + "@bsv/wallet-toolbox": "^2.10.3", "@opentelemetry/api": "^1.9.1", "@opentelemetry/api-logs": "^0.221.0", "@opentelemetry/auto-instrumentations-node": "^0.79.0",