Merge pull request #1491 from xchainjs/hippo/patch-form-data

Patch form data

Author: hippocampus-web3

.changeset/two-pets-mate.md

@@ -0,0 +1,43 @@
+---
+'@xchainjs/xchain-aggregator': patch
+'@xchainjs/xchain-arbitrum': patch
+'@xchainjs/xchain-avax': patch
+'@xchainjs/xchain-base': patch
+'@xchainjs/xchain-bitcoin': patch
+'@xchainjs/xchain-bitcoincash': patch
+'@xchainjs/xchain-bsc': patch
+'@xchainjs/xchain-cardano': patch
+'@xchainjs/xchain-client': patch
+'@xchainjs/xchain-cosmos': patch
+'@xchainjs/xchain-cosmos-sdk': patch
+'@xchainjs/xchain-crypto': patch
+'@xchainjs/xchain-dash': patch
+'@xchainjs/xchain-doge': patch
+'@xchainjs/xchain-ethereum': patch
+'@xchainjs/xchain-evm': patch
+'@xchainjs/xchain-evm-providers': patch
+'@xchainjs/xchain-kujira': patch
+'@xchainjs/xchain-litecoin': patch
+'@xchainjs/xchain-mayachain': patch
+'@xchainjs/xchain-mayachain-amm': patch
+'@xchainjs/xchain-mayachain-query': patch
+'@xchainjs/xchain-mayamidgard': patch
+'@xchainjs/xchain-mayamidgard-query': patch
+'@xchainjs/xchain-mayanode': patch
+'@xchainjs/xchain-midgard': patch
+'@xchainjs/xchain-midgard-query': patch
+'@xchainjs/xchain-radix': patch
+'@xchainjs/xchain-ripple': patch
+'@xchainjs/xchain-solana': patch
+'@xchainjs/xchain-thorchain': patch
+'@xchainjs/xchain-thorchain-amm': patch
+'@xchainjs/xchain-thorchain-query': patch
+'@xchainjs/xchain-thornode': patch
+'@xchainjs/xchain-util': patch
+'@xchainjs/xchain-utxo': patch
+'@xchainjs/xchain-utxo-providers': patch
+'@xchainjs/xchain-wallet': patch
+'@xchainjs/xchain-zcash': patch
+---
+
+Fix vulnerability form-data

package.json

@@ -41,7 +41,8 @@
     "cross-spawn": "7.0.5",
     "micromatch": "4.0.8",
     "word-wrap": "1.2.4",
-    "undici": "5.29.0"
+    "undici": "5.29.0",
+    "form-data": "4.0.4"
   },
   "devDependencies": {
     "@actions/core": "1.10.0",
@@ -73,7 +74,6 @@
     "tslib": "^2.5.0",
     "turbo": "1.13.0",
     "typescript": "^5.8.3",
-    "weighted": "^1.0.0",
-    "yarn-audit-ci": "^1.2.0"
+    "weighted": "^1.0.0"
   }
 }

yarn.lock

@@ -7410,14 +7410,16 @@ __metadata:
   languageName: node
   linkType: hard
 
-"form-data@npm:^4.0.0":
-  version: 4.0.0
-  resolution: "form-data@npm:4.0.0"
+"form-data@npm:4.0.4":
+  version: 4.0.4
+  resolution: "form-data@npm:4.0.4"
   dependencies:
     asynckit: "npm:^0.4.0"
     combined-stream: "npm:^1.0.8"
+    es-set-tostringtag: "npm:^2.1.0"
+    hasown: "npm:^2.0.2"
     mime-types: "npm:^2.1.12"
-  checksum: 10c0/cb6f3ac49180be03ff07ba3ff125f9eba2ff0b277fb33c7fc47569fc5e616882c5b1c69b9904c4c4187e97dd0419dd03b134174756f296dec62041e6527e2c6e
+  checksum: 10c0/373525a9a034b9d57073e55eab79e501a714ffac02e7a9b01be1c820780652b16e4101819785e1e18f8d98f0aee866cc654d660a435c378e16a72f2e7cac9695
   languageName: node
   linkType: hard
 
@@ -11388,7 +11390,6 @@ __metadata:
     turbo: "npm:1.13.0"
     typescript: "npm:^5.8.3"
     weighted: "npm:^1.0.0"
-    yarn-audit-ci: "npm:^1.2.0"
   languageName: unknown
   linkType: soft
 
@@ -13659,16 +13660,6 @@ __metadata:
   languageName: node
   linkType: hard
 
-"yarn-audit-ci@npm:^1.2.0":
-  version: 1.2.0
-  resolution: "yarn-audit-ci@npm:1.2.0"
-  bin:
-    yarn-audit-ci: bin/audit.js
-    yaudit: bin/audit.js
-  checksum: 10c0/56f6f827a942d4cd16569fc6bb70ea4a898e843c11b872ac5ca8719f8554a1e94310e614ce27997ddd7044c478f37cc89bd97f6cb9bd8031dd2cca8b6b1779d2
-  languageName: node
-  linkType: hard
-
 "yn@npm:3.1.1":
   version: 3.1.1
   resolution: "yn@npm:3.1.1"