[Snyk] Upgrade: algosdk, web3-utils

[Mustafaovais]

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on

algosdk
from 1.19.1 to 1.24.1 | 8 versions ahead of your current version | 2 years ago
on 2022-12-15
web3-utils
from 1.7.5 to 1.10.4 | 17 versions ahead of your current version | 8 months ago
on 2024-02-05

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-COOKIEJAR-3149984	586	Proof of Concept
	Improper Verification of Cryptographic Signature SNYK-JS-ELLIPTIC-7577916	586	Proof of Concept
	Improper Verification of Cryptographic Signature SNYK-JS-ELLIPTIC-7577917	586	Proof of Concept
	Improper Verification of Cryptographic Signature SNYK-JS-ELLIPTIC-7577918	586	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	586	Proof of Concept

Release notes

Package name: algosdk

• 1.24.1 - 2022-12-15
  

  What's Changed

  Enhancements

  • Packaging: Improve source map and browser usage for external bundlers by @ jasonpaulos in #707

  Full Changelog: v1.24.0...v1.24.1

• 1.24.0 - 2022-12-05
  

  What's Changed

  Bugfixes

  • Bug-Fix: encode ABI string with non-ASCII characters by @ ahangsu in #700

  Enhancements

  • Tests: Migrate v1 algod dependencies to v2 in cucumber tests by @ algochoi in #693
  • REST API: Add KV counts to NodeStatusResponse by @ michaeldiamant in #696
  • Fix: createMultisigTransaction name in comments by @ nullun in #694
  • Enhancement: allowing zero-length static array by @ ahangsu in #698
  • ABI: Refactor ABI encoding test to round-trip by @ michaeldiamant in #701

  New Contributors

  • @ nullun made their first contribution in #694

  Full Changelog: v1.23.2...v1.24.0

• 1.23.2 - 2022-11-10
  

  What's Changed

  Bugfixes

  • SDK: Dryrun and transaction decoding fix for boxes by @ jasonpaulos in #690

  Full Changelog: v1.23.1...v1.23.2

• 1.23.1 - 2022-11-03
  

  What's Changed

  Bugfixes

  • fix: mergeMultisigTransactions logic error by @ AlgoDoggo in #675
  • CI: Remove unneeded dependency & update package-lock by @ jasonpaulos in #684

  New Features

  • Boxes: Add support for Boxes by @ algochoi in #604

  Enhancements

  • Enhancement: Code generation improvements by @ jasonpaulos in #663
  • Network: Replace superagent with fetch for HTTP requests by @ jasonpaulos in #676
  • API: Fix docs typo by @ PabloLION in #677
  • CI: Upgrade node.js from v12 to v14 by @ michaeldiamant in #680

  New Contributors

  • @ PabloLION made their first contribution in #677

  Full Changelog: v1.22.0...v1.23.1

• 1.22.0 - 2022-10-12
  

  What's Changed

  Bugfixes

  • Bug-Fix: Fix typo in documentation for searchAccounts currencyGreaterThan by @ fionnachan in #572

  Enhancements

  • REST API: Add algod block hash endpoint, add indexer block header-only param. by @ winder in #665

  Full Changelog: v1.21.0...v1.22.0

• 1.21.0 - 2022-09-19
  

  What's Changed

  Enhancements

  • Enhancement: Removing more unused steps by @ tzaffi in #637
  • Enhancement: Add deprecation tag to algod v1 client by @ algochoi in #642
  • enhancement: add unit test for ParticipationUpdates field by @ shiqizng in #652

  Full Changelog: v1.20.0...v1.21.0

• 1.20.0 - 2022-09-06
  

  What's Changed

  Bugfixes

  • Bug-Fix: Pass verbosity to the harness and sandbox by @ tzaffi in #630

  Enhancements

  • Enhancement: Use sandbox for SDK Testing and remove Indexer v1 steps by @ algochoi in #623
  • Tidy: Ignore algorand-sdk-testing test-harness dir by @ michaeldiamant in #634
  • Enhancement: Deprecating use of langspec by @ ahangsu in #632
  • enhancement: Initial stateproofs support by @ Eric-Warehime in #629

  Full Changelog: v1.19.1...v1.20.0

• 1.20.0-beta.1 - 2022-08-30
  

  What's Changed

  Bugfixes

  • Bug-Fix: Pass verbosity to the harness and sandbox by @ tzaffi in #630

  Enhancements

  • Enhancement: Use sandbox for SDK Testing and remove Indexer v1 steps by @ algochoi in #623
  • Tidy: Ignore algorand-sdk-testing test-harness dir by @ michaeldiamant in #634
  • Enhancement: Deprecating use of langspec by @ ahangsu in #632
  • enhancement: Initial stateproofs support by @ Eric-Warehime in #629

  New Contributors

  • @ ahangsu made their first contribution in #632

  Full Changelog: v1.19.1...v1.20.0-beta.1

• 1.19.1 - 2022-08-22
  

  What's Changed

  Enhancements

  • API: Support attaching signatures to standard and multisig transactions by @ jdtzmn in #595
  • AVM: Consolidate TEAL and AVM versions by @ michaeldiamant in #609
  • Testing: Use Dev mode network for cucumber tests by @ algochoi in #614

  Full Changelog: v1.19.0...v1.19.1

from algosdk GitHub release notes

Package name: web3-utils

• 1.10.4 - 2024-02-05
• 1.10.4-dev.0 - 2024-01-31
• 1.10.3 - 2023-10-18
• 1.10.3-dev.0 - 2023-10-16
• 1.10.2 - 2023-08-28
• 1.10.1 - 2023-08-14
• 1.10.1-rc.0 - 2023-08-08
• 1.10.0 - 2023-05-10
• 1.10.0-rc.0 - 2023-05-02
• 1.9.0 - 2023-03-20
• 1.9.0-rc.0 - 2023-03-07
• 1.8.2 - 2023-01-30
• 1.8.2-rc.0 - 2023-01-11
• 1.8.1 - 2022-11-10
• 1.8.1-rc.0 - 2022-10-28
• 1.8.0 - 2022-09-14
• 1.8.0-rc.0 - 2022-09-08
• 1.7.5 - 2022-08-01

from web3-utils GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs