Upgrade git dependencies to get vulnerability fixes - Githubissues

ChorusOne / eth-staking-smith

Ethereum 2.0 deposit CLI / library

Apache License 2.0

19 stars 6 forks source link

Upgrade git dependencies to get vulnerability fixes #29

Closed mksh closed 1 year ago

mksh commented 1 year ago

Update lighthouse zip build dependency versions (https://github.com/ChorusOne/lighthouse/commit/ef90a15aae791435a4180d7e6bc1d8e29ced6e2e) to get rid of https://github.com/ChorusOne/eth-staking-smith/security/dependabot/1
Upgrade lighthouse base version to 3.5.1 to get libsqlite3-sys 0.25.2 --> gets rid of https://github.com/ChorusOne/eth-staking-smith/security/dependabot/3

mksh commented 1 year ago

For the reference: fork contains vanilla 3.5.1 release of Lighthouse by Sigma Prime + single commit https://github.com/ChorusOne/lighthouse/commit/ef90a15aae791435a4180d7e6bc1d8e29ced6e2e which updates zip libraries (to the versions dependent on time 0.3 instead of time 0.1)