Merge pull request #2157 from input-output-hk/jpraynaud/2124-upgrade-dependencies-distribution-2448

Chore: update dependencies for distribution `2450`

Author: jpraynaud

Cargo.lock

@@ -1,6 +1,6 @@
 [package]
 name = "mithrildemo"
-version = "0.1.44"
+version = "0.1.45"
 authors = { workspace = true }
 edition = { workspace = true }
 documentation = { workspace = true }
@@ -11,15 +11,15 @@ repository = { workspace = true }
 [dependencies]
 base64 = "0.22.1"
 blake2 = "0.10.6"
-clap = { version = "4.5.20", features = ["derive"] }
+clap = { version = "4.5.23", features = ["derive"] }
 hex = "0.4.3"
 log = "0.4.22"
 mithril-common = { path = "../../mithril-common", features = ["fs"] }
 mithril-doc = { path = "../../internal/mithril-doc" }
 rand_chacha = "0.3.1"
 rand_core = "0.6.4"
-serde = { version = "1.0.214", features = ["derive"] }
-serde_json = "1.0.132"
+serde = { version = "1.0.215", features = ["derive"] }
+serde_json = "1.0.133"
 
 [target.'cfg(not(windows))'.dependencies]
 # non-windows: use default rug backend

demo/protocol-demo/Cargo.toml

@@ -8,10 +8,10 @@ This devbook provides step-by-step instructions to upgrade the dependencies in t
 
 The `update_dependencies.sh` script allows you to update dependencies performing all the steps described in the next chapter.
 
-It requires having `cargo-edit` installed, which can be done with the following command:
+It requires having `cargo-edit` and `cargo-audit` installed, which can be done with the following command:
 
 ```
-cargo install cargo-edit
+cargo install cargo-edit cargo-audit
 ```
 
 To start the update, execute the command below from the root of the repository:
@@ -176,8 +176,8 @@ Create a dedicated commit, e.g.:
 chore: bump javascript packages versions
 
 By running:
-- 'make www-install' command in 'mithril-client-wasm'.
-- 'make www-test-install' command in 'mithril-client-wasm'.
+- 'make install' command in 'examples/client-wasm-web'.
+- 'make install' command in 'examples/client-wasm-nodejs'.
 - 'make install' command in 'mithril-explorer'.
 - 'make install' command in 'docs/website'.
 ```
@@ -195,3 +195,9 @@ chore: update nix flake dependencies
 
 By running 'nix flake update' command.
 ```
+
+### Run a security audit on the Rust dependencies:
+
+```bash
+cargo audit
+```

docs/devbook/upgrade-repository-dependencies/README.md

@@ -72,8 +72,8 @@ make -C docs/website install
 git commit -am "chore: bump javascript packages versions
 
 By running:
-- 'make www-install' command in 'mithril-client-wasm'.
-- 'make www-test-install' command in 'mithril-client-wasm'.
+- 'make install' command in 'examples/client-wasm-web'.
+- 'make install' command in 'examples/client-wasm-nodejs'.
 - 'make install' command in 'mithril-explorer'.
 - 'make install' command in 'docs/website'."
 
@@ -92,3 +92,6 @@ nix --extra-experimental-features 'nix-command flakes' flake update" > "$TMP_SCR
  git commit -am "chore: update nix flake dependencies
 
  By running 'nix flake update' command."
+
+# Audit Rust dependencies
+cargo audit

docs/devbook/upgrade-repository-dependencies/upgrade_dependencies.sh

@@ -19,13 +19,16 @@ clean:
 	rm package-lock.json || true
 
 upgrade: clean install
+	# Update to the latest version of react and react-dom when it is supported and does not create dependency conflicts
 	npm install \
 	@docusaurus/core@latest \
+	@docusaurus/plugin-client-redirects@latest \
+	@docusaurus/plugin-sitemap@latest \
 	@docusaurus/preset-classic@latest \
 	@docusaurus/theme-mermaid@latest \
 	clsx@latest \
-	react@latest \
-	react-dom@latest \
+	react@^18.3.1 \
+	react-dom@^18.3.1 \
 	redocusaurus@latest
 
 update-current: