From 9a88f60f9b30c5075d32ce092e866c7bbbef4436 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 22 Nov 2023 01:07:43 +0000
Subject: [PATCH] Bump crypto-js and merkletreejs

Bumps [crypto-js](https://github.com/brix/crypto-js) to 4.2.0 and updates ancestor dependency [merkletreejs](https://github.com/miguelmota/merkletreejs). These dependencies need to be updated together.


Updates `crypto-js` from 3.3.0 to 4.2.0
- [Commits](https://github.com/brix/crypto-js/compare/3.3.0...4.2.0)

Updates `merkletreejs` from 0.2.32 to 0.3.11
- [Commits](https://github.com/miguelmota/merkletreejs/commits)

---
updated-dependencies:
- dependency-name: crypto-js
  dependency-type: indirect
- dependency-name: merkletreejs
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .../openzeppelin-contracts/package-lock.json  | 30 +++++++++----------
 .../lib/openzeppelin-contracts/package.json   |  2 +-
 2 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/contracts/lib/reference/lib/openzeppelin-contracts/package-lock.json b/contracts/lib/reference/lib/openzeppelin-contracts/package-lock.json
index fdaa119..6f06d0c 100644
--- a/contracts/lib/reference/lib/openzeppelin-contracts/package-lock.json
+++ b/contracts/lib/reference/lib/openzeppelin-contracts/package-lock.json
@@ -35,7 +35,7 @@
         "keccak256": "^1.0.2",
         "lodash.startcase": "^4.4.0",
         "lodash.zip": "^4.2.0",
-        "merkletreejs": "^0.2.13",
+        "merkletreejs": "^0.3.11",
         "micromatch": "^4.0.2",
         "prettier": "^2.3.0",
         "prettier-plugin-solidity": "^1.0.0-beta.16",
@@ -5167,9 +5167,9 @@
       }
     },
     "node_modules/crypto-js": {
-      "version": "3.3.0",
-      "resolved": "https://registry.npmjs.org/crypto-js/-/crypto-js-3.3.0.tgz",
-      "integrity": "sha512-DIT51nX0dCfKltpRiXV+/TVZq+Qq2NgF4644+K7Ttnla7zEzqc+kjJyiB96BHNyUTBxyjzRcZYpUdZa+QAqi6Q==",
+      "version": "4.2.0",
+      "resolved": "https://registry.npmjs.org/crypto-js/-/crypto-js-4.2.0.tgz",
+      "integrity": "sha512-KALDyEYgpY+Rlob/iriUtjV6d5Eq+Y191A5g4UqLAi8CyGP9N1+FdVbkc1SxKc2r4YAYqG8JzO2KGL+AizD70Q==",
       "dev": true
     },
     "node_modules/css-select": {
@@ -10048,14 +10048,14 @@
       }
     },
     "node_modules/merkletreejs": {
-      "version": "0.2.32",
-      "resolved": "https://registry.npmjs.org/merkletreejs/-/merkletreejs-0.2.32.tgz",
-      "integrity": "sha512-TostQBiwYRIwSE5++jGmacu3ODcKAgqb0Y/pnIohXS7sWxh1gCkSptbmF1a43faehRDpcHf7J/kv0Ml2D/zblQ==",
+      "version": "0.3.11",
+      "resolved": "https://registry.npmjs.org/merkletreejs/-/merkletreejs-0.3.11.tgz",
+      "integrity": "sha512-LJKTl4iVNTndhL+3Uz/tfkjD0klIWsHlUzgtuNnNrsf7bAlXR30m+xYB7lHr5Z/l6e/yAIsr26Dabx6Buo4VGQ==",
       "dev": true,
       "dependencies": {
         "bignumber.js": "^9.0.1",
         "buffer-reverse": "^1.0.1",
-        "crypto-js": "^3.1.9-1",
+        "crypto-js": "^4.2.0",
         "treeify": "^1.1.0",
         "web3-utils": "^1.3.4"
       },
@@ -20077,9 +20077,9 @@
       }
     },
     "crypto-js": {
-      "version": "3.3.0",
-      "resolved": "https://registry.npmjs.org/crypto-js/-/crypto-js-3.3.0.tgz",
-      "integrity": "sha512-DIT51nX0dCfKltpRiXV+/TVZq+Qq2NgF4644+K7Ttnla7zEzqc+kjJyiB96BHNyUTBxyjzRcZYpUdZa+QAqi6Q==",
+      "version": "4.2.0",
+      "resolved": "https://registry.npmjs.org/crypto-js/-/crypto-js-4.2.0.tgz",
+      "integrity": "sha512-KALDyEYgpY+Rlob/iriUtjV6d5Eq+Y191A5g4UqLAi8CyGP9N1+FdVbkc1SxKc2r4YAYqG8JzO2KGL+AizD70Q==",
       "dev": true
     },
     "css-select": {
@@ -23912,14 +23912,14 @@
       "dev": true
     },
     "merkletreejs": {
-      "version": "0.2.32",
-      "resolved": "https://registry.npmjs.org/merkletreejs/-/merkletreejs-0.2.32.tgz",
-      "integrity": "sha512-TostQBiwYRIwSE5++jGmacu3ODcKAgqb0Y/pnIohXS7sWxh1gCkSptbmF1a43faehRDpcHf7J/kv0Ml2D/zblQ==",
+      "version": "0.3.11",
+      "resolved": "https://registry.npmjs.org/merkletreejs/-/merkletreejs-0.3.11.tgz",
+      "integrity": "sha512-LJKTl4iVNTndhL+3Uz/tfkjD0klIWsHlUzgtuNnNrsf7bAlXR30m+xYB7lHr5Z/l6e/yAIsr26Dabx6Buo4VGQ==",
       "dev": true,
       "requires": {
         "bignumber.js": "^9.0.1",
         "buffer-reverse": "^1.0.1",
-        "crypto-js": "^3.1.9-1",
+        "crypto-js": "^4.2.0",
         "treeify": "^1.1.0",
         "web3-utils": "^1.3.4"
       },
diff --git a/contracts/lib/reference/lib/openzeppelin-contracts/package.json b/contracts/lib/reference/lib/openzeppelin-contracts/package.json
index 374a205..f5f3bee 100644
--- a/contracts/lib/reference/lib/openzeppelin-contracts/package.json
+++ b/contracts/lib/reference/lib/openzeppelin-contracts/package.json
@@ -76,7 +76,7 @@
     "keccak256": "^1.0.2",
     "lodash.startcase": "^4.4.0",
     "lodash.zip": "^4.2.0",
-    "merkletreejs": "^0.2.13",
+    "merkletreejs": "^0.3.11",
     "micromatch": "^4.0.2",
     "prettier": "^2.3.0",
     "prettier-plugin-solidity": "^1.0.0-beta.16",