chore: reduce high severity yarn audit findings

Author: forge0x

package.json

@@ -35,9 +35,9 @@
   "dependencies": {
     "@aws-sdk/client-s3": "^3.968.0",
     "@aws-sdk/s3-request-presigner": "^3.968.0",
-    "@google-cloud/storage": "^7.1.0",
+    "@google-cloud/storage": "^7.19.0",
     "@grpc/grpc-js": "^1.9.3",
-    "@grpc/proto-loader": "^0.7.9",
+    "@grpc/proto-loader": "^0.8.1",
     "@opentelemetry/api": "^1.6.0",
     "@opentelemetry/core": "^1.17.0",
     "@opentelemetry/exporter-trace-otlp-http": "^0.43.0",
@@ -55,26 +55,26 @@
     "@ory/client": "^1.2.6",
     "@sendgrid/mail": "^8.1.5",
     "@t3-oss/env-core": "^0.6.1",
-    "ajv": "^8.12.0",
+    "ajv": "^8.18.0",
     "api": "^6.1.1",
     "apollo-server-core": "^3.12.1",
     "apollo-server-errors": "^3.3.1",
     "apollo-server-express": "^3.12.1",
-    "axios": "^1.5.0",
+    "axios": "^1.16.0",
     "basic-auth": "^2.0.1",
     "bip32": "^4.0.0",
     "bitcoin-cli-ts": "^24.0.3",
     "bitcoinjs-lib": "^6.1.4",
-    "body-parser": "^1.20.1",
+    "body-parser": "^1.20.3",
     "bolt11": "^1.4.1",
-    "cookie": "^0.5.0",
+    "cookie": "^0.7.0",
     "cookie-parser": "^1.4.6",
     "cors": "^2.8.5",
     "csv-writer": "^1.6.0",
     "dataloader": "^2.2.2",
     "dedent": "^1.5.1",
     "dotenv": "^16.3.1",
-    "express": "^4.18.2",
+    "express": "^4.21.2",
     "express-jwt": "^8.4.1",
     "firebase-admin": "^11.9.0",
     "form-data": "^4.0.2",
@@ -95,8 +95,8 @@
     "ioredis": "^5.3.2",
     "ioredis-cache": "^2.0.0",
     "ipaddr.js": "^2.1.0",
-    "js-yaml": "^4.1.0",
-    "jsonwebtoken": "^9.0.2",
+    "js-yaml": "^4.1.1",
+    "jsonwebtoken": "^9.0.3",
     "jwks-rsa": "^3.0.1",
     "knex": "^2.5.1",
     "libphonenumber-js": "^1.10.44",
@@ -109,8 +109,8 @@
     "lodash.mergewith": "^4.6.2",
     "lodash.sortby": "^4.7.0",
     "lodash.sumby": "^4.6.0",
-    "medici": "^6.2.0",
-    "mongoose": "^7.8.4",
+    "medici": "^7.2.0",
+    "mongoose": "^7.8.9",
     "node-cache": "^5.1.2",
     "nostr-tools": "^2.17.0",
     "pg": "^8.11.3",
@@ -124,7 +124,7 @@
     "svix": "^1.12.0",
     "twilio": "^4.17.0",
     "uuid-by-string": "^4.0.0",
-    "ws": "^8.14.1",
+    "ws": "^8.17.1",
     "yargs": "^17.7.2",
     "zod": "^3.22.2"
   },
@@ -203,10 +203,39 @@
     "zen-observable-ts": "^1.1.0"
   },
   "resolutions": {
-    "protobufjs": "7.2.5",
+    "protobufjs": "7.5.5",
     "http-cache-semantics": "4.1.1",
     "import-in-the-middle": "1.4.2",
-    "**/**/mongoose": "~7.5.1"
+    "**/protobufjs": "7.5.5",
+    "**/fast-xml-parser": "5.7.3",
+    "**/jws": "4.0.1",
+    "**/node-forge": "1.4.0",
+    "**/path-to-regexp": "0.1.13",
+    "**/qs": "6.15.1",
+    "**/tar": "7.5.11",
+    "**/picomatch": "2.3.2",
+    "**/follow-redirects": "1.16.0",
+    "**/js-yaml": "4.1.1",
+    "**/mongoose": "7.8.9",
+    "**/axios": "1.16.0",
+    "**/body-parser": "1.20.3",
+    "**/ws": "8.20.0",
+    "**/handlebars": "4.7.9",
+    "**/immutable": "5.1.5",
+    "**/fast-uri": "3.1.2",
+    "**/glob": "10.5.0",
+    "**/flatted": "3.4.2",
+    "**/jsonpath": "1.3.0",
+    "**/sjcl": "1.0.9",
+    "**/undici": "6.24.0",
+    "**/lodash": "4.18.1",
+    "**/lodash-es": "4.18.1",
+    "**/@babel/plugin-transform-modules-systemjs": "7.29.4",
+    "**/underscore": "1.13.8",
+    "**/@typescript-eslint/typescript-estree/minimatch": "9.0.9",
+    "**/editorconfig/minimatch": "9.0.9",
+    "**/grunt/minimatch": "3.1.4",
+    "**/globule/minimatch": "3.1.4"
   },
   "private": true
 }

src/services/kratos/tests-but-not-prod.ts

@@ -1,4 +1,4 @@
-import { IdentityState } from "@ory/client"
+import { IdentityStateEnum } from "@ory/client"
 
 import { baseLogger } from "@services/logger"
 
@@ -19,7 +19,7 @@ export const activateUser = async (kratosUserId: UserId): Promise<void | KratosE
       id: kratosUserId,
       updateIdentityBody: {
         ...identity,
-        state: IdentityState.Active,
+        state: IdentityStateEnum.Active,
       },
     })
   } catch (err) {
@@ -44,7 +44,7 @@ export const deactivateUser = async (
       id: kratosUserId,
       updateIdentityBody: {
         ...identity,
-        state: IdentityState.Inactive,
+        state: IdentityStateEnum.Inactive,
       },
     })