[Snyk] Security upgrade bip32 from 2.0.6 to 3.0.0

[sohailgi]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	701/1000 Why? Recently disclosed, Has a fix available, CVSS 8.3	Improper Verification of Cryptographic Signature SNYK-JS-ELLIPTIC-8172694	Yes	No Known Exploit
	828/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 8.7	Improper Verification of Cryptographic Signature SNYK-JS-ELLIPTIC-8187303	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: bip32

The new version differs by 14 commits.

• e863a18 3.0.0
• 5db8c78 Merge pull request #51 from bitcoinjs/dependabot/npm_and_yarn/ansi-regex-5.0.1
• 902521e Merge pull request #49 from bitcoinjs/dependabot/npm_and_yarn/path-parse-1.0.7
• 6eec547 Merge pull request #48 from bitcoinjs/dependabot/npm_and_yarn/lodash-4.17.21
• 3e3619f Merge pull request #52 from bitcoinjs/feature/schnorr
• e9806c0 Simple sanity check on wrap
• c8dfd2c Add schnorr signing and verification
• 0a07dae Bump ansi-regex from 5.0.0 to 5.0.1
• f6b9b5b Merge pull request #50 from bitcoinjs/feature/modular
• 69653eb Make bip32 require an ecc library be passed in
• acae551 Bump path-parse from 1.0.6 to 1.0.7
• 3d727b9 Bump lodash from 4.17.19 to 4.17.21
• 73b9ab4 Merge pull request #46 from bitcoinjs/dependabot/npm_and_yarn/y18n-4.0.1
• fcd370b Bump y18n from 4.0.0 to 4.0.1

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.