[Snyk] Fix for 5 vulnerabilities

[baby636]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • demos/tx/javascript-demo/theta-tx-demo/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-GLOBPARENT-1016905	Yes	Proof of Concept
	506/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 3.7	Validation Bypass SNYK-JS-KINDOF-537849	Yes	Proof of Concept
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	No	No Known Exploit
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	Yes	Proof of Concept
	506/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 3.7	Regular Expression Denial of Service (ReDoS) npm:braces:20180219	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: rollup-plugin-commonjs

The new version differs by 46 commits.

• 12a11c2 10.1.0
• 82ca3a2 Update changelog
• fcd9826 Normalize ids before looking up in named export map (#406)
• e431c29 Update README.md with note on symlinks (#405)
• de40daa 10.0.2
• e741130 Update changelog
• 8f91234 Support preserveSymlinks: false (fixes #400) (#401)
• 1bc5896 10.0.1
• 504ec54 Update changelog
• 668d888 Update dependencies
• 99d1ff5 Handle builins appropriately for resolve 1.11.0. Fixes #394. (#395)
• 3bf824b Update changelog
• 29cfe83 Make tests run with Node 6 again and update dependencies (#389)
• a2f3ff4 10.0.0
• 1fd9168 Update changelog
• c8fabd7 Use new context functions, fix issue when resolveId returns an object (#387)
• 851ed8e 9.3.4
• 2c447af Update changelog
• 5cb3b2d set same typing to include and exclude properties (#385)
• 456a223 make "extensions" optional (#384)
• 3921f28 9.3.3
• 28421a0 Update changelog
• e63e57f fix: remove colon from module prefixes (#371)
• a34ebbc 9.3.2

See the full diff

Package name: rollup-plugin-json

The new version differs by 3 commits.

• 476dc4c 4.0.0
• c4045b4 Update changelog
• 68ac0b5 Pass all data to dataToEsm and fix array formatting in compact mode (Bump async from 2.6.2 to 2.6.4 in /demos/api/javascript-nodejs-demo thetatoken/theta-mainnet-integration-guide#53)

See the full diff

Package name: rollup-plugin-replace

The new version differs by 10 commits.

• 3f01b48 2.2.0
• 9170a54 Update changelog
• e296da0 Update and fix dependencies
• 8fec857 Add types ([Snyk] Security upgrade jest from 23.6.0 to 28.0.0 #31)
• 1d18852 2.1.1
• 24a90af Update changelog
• 2489f7b Update dependencies ([Snyk] Security upgrade jest from 23.6.0 to 24.0.0 #30)
• ff75198 Update changelog
• de24cb5 fix: update rollup-pluginutils to fix npm audit ([Snyk] Security upgrade jest from 23.6.0 to 25.0.0 #29)
• 39afa1c Add a version badge ([Snyk] Fix for 2 vulnerabilities #28)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)
🦉 Validation Bypass