chore(release): publish v2.0.0-alpha-prerelease

chore: added weaver packages in lerna.json feat(weaver): added script to update weaver versions fix: fix go-gen-checksum to work with v2 or above versions fix(ci): go pre release test fix chore: make all package licenses Apache-2.0 Signed-off-by: Sandeep Nishad <sandeep.nishad1@ibm.com> Signed-off-by: Peter Somogyvari <peter.somogyvari@accenture.com> Co-authored-by: Peter Somogyvari <peter.somogyvari@accenture.com>
rwat17 · May 12, 2023 · 7abf3dd · 7abf3dd
1 parent 30101b9
commit 7abf3dd
Show file tree

Hide file tree

Showing 275 changed files with 8,733 additions and 1,118 deletions.
diff --git a/.github/workflows/test_weaver-pre-release.yaml b/.github/workflows/test_weaver-pre-release.yaml
@@ -64,6 +64,7 @@ jobs:
           # Strip "v" from version
           VERSION=$(echo $VERSION | sed -e 's/^v//')
           echo "VERSION=$VERSION" >> $GITHUB_ENV
+          echo $VERSION
 
       # Gradle
       - name: check weaver/common/protos-java-kt/gradle.properties
@@ -160,10 +161,21 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
-      - uses: actions/checkout@v3.1.0
+      - uses: actions/checkout@v3.5.2
+
+      - name: Get release verison from PR title
+        run: |
+          # Assuming release PR follows pattern: chore(release): publish vA.B.C
+          # Split PR title by space, and take 3rd word
+          VERSION=$(echo "${{ github.event.pull_request.title }}" | cut -d ' ' -f 3)
+          # Strip "v" from version
+          VERSION=$(echo $VERSION | sed -e 's/^v//')
+          echo "VERSION=$VERSION" >> $GITHUB_ENV
+          echo $VERSION
       
       - name: Update GO Checksum
-        run: sh go-gen-checksum.sh
+        run: ./go-gen-checksum.sh $VERSION
+        working-directory: tools
 
       - name: Check if changes are committed
         run: (git status | grep "nothing to commit, working tree clean") || (echo "go-gen-checksum not called before release commit" && exit 1)
diff --git a/.github/workflows/weaver_deploy_corda-pkgs.yml b/.github/workflows/weaver_deploy_corda-pkgs.yml
@@ -13,7 +13,6 @@ on:
     #   - 'core/network/corda-interop-app/gradle.properties'
     #   - 'sdks/corda/gradle.properties'
     #   - 'core/drivers/corda-driver/VERSION'
-    #   - 'common/protos-go/VERSION'
 
     tags:
       - v*

diff --git a/.github/workflows/weaver_deploy_go-pkgs.yml b/.github/workflows/weaver_deploy_go-pkgs.yml
@@ -27,7 +27,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
-      - uses: actions/checkout@v3.1.0
+      - uses: actions/checkout@v3.5.2
 
       - name: Set current date as env
         run: echo "RELEASE_DATE=$(date +%b\ %d,\ %Y)" >> $GITHUB_ENV
@@ -84,10 +84,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
-      - uses: actions/checkout@v3.1.0
+      - uses: actions/checkout@v3.5.2
 
       - name: Set up Go
-        uses: actions/setup-go@v2
+        uses: actions/setup-go@v4.0.0
         with:
           go-version: '1.20.2'
 
@@ -150,10 +150,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
-      - uses: actions/checkout@v3.1.0
+      - uses: actions/checkout@v3.5.2
 
       - name: Set up Go
-        uses: actions/setup-go@v2
+        uses: actions/setup-go@v4.0.0
         with:
           go-version: '1.20.2'
 
@@ -216,10 +216,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
-      - uses: actions/checkout@v3.1.0
+      - uses: actions/checkout@v3.5.2
 
       - name: Set up Go
-        uses: actions/setup-go@v2
+        uses: actions/setup-go@v4.0.0
         with:
           go-version: '1.20.2'
 
@@ -282,10 +282,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
-      - uses: actions/checkout@v3.1.0
+      - uses: actions/checkout@v3.5.2
 
       - name: Set up Go
-        uses: actions/setup-go@v2
+        uses: actions/setup-go@v4.0.0
         with:
           go-version: '1.20.2'
 
@@ -348,10 +348,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
-      - uses: actions/checkout@v3.1.0
+      - uses: actions/checkout@v3.5.2
 
       - name: Set up Go
-        uses: actions/setup-go@v2
+        uses: actions/setup-go@v4.0.0
         with:
           go-version: '1.20.2'
 
@@ -414,7 +414,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
-      - uses: actions/checkout@v3.1.0
+      - uses: actions/checkout@v3.5.2
 
       - name: Login to GitHub Container Registry
         uses: docker/login-action@v1

diff --git a/.github/workflows/weaver_deploy_relay-server.yml b/.github/workflows/weaver_deploy_relay-server.yml
@@ -43,7 +43,7 @@ jobs:
             [[ "${{ github.ref }}" == "refs/tags/"* ]] && VERSION=$(echo $VERSION | sed -e 's/^v//')
             echo $VERSION
             if [[ $VERSION =~ ^[0-9]+\.[0-9]+\.[0-9]+[A-Za-z\-]*$ ]]; then
-              sed -i "s#^version\s*=.*#version = ${VERSION}#g" Cargo.toml
+              sed -i "s#^version\ *=.*#version = ${VERSION}#g" Cargo.toml
             fi
             head -4 Cargo.toml
           working-directory: weaver/common/protos-rs/pkg

diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -3,6 +3,30 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# [2.0.0-alpha-prerelease](https://github.com/hyperledger/cacti/compare/v1.2.0...v2.0.0-alpha-prerelease) (2023-05-11)
+
+### Bug Fixes
+
+* **cactus-example-supply-chain-app:** mitigate CVE-2022-24434 and CVE-2022-24999 ([d28d5e8](https://github.com/hyperledger/cacti/commit/d28d5e8f3ed5dff1aa049c8f1bccce79aa21e948)), closes [#2041](https://github.com/hyperledger/cacti/issues/2041)
+* **cmd-api-server:** mitigate CVE-2022-24434 and CVE-2022-24999 [#2039](https://github.com/hyperledger/cacti/issues/2039) ([1cc9667](https://github.com/hyperledger/cacti/commit/1cc9667e2432d1d27c2647b86e42707a2e78e4c3)), closes [#2241](https://github.com/hyperledger/cacti/issues/2241)
+* **interopcc:** build failing after golang.org/x/crypto bump to v0.1.0 ([6b76f6a](https://github.com/hyperledger/cacti/commit/6b76f6a919689320a62fa2a89b5fc1a80c85e6c9))
+* **iroha2-connector:** fix flaky tests to solve [#2370](https://github.com/hyperledger/cacti/issues/2370) and [#2373](https://github.com/hyperledger/cacti/issues/2373) ([669b51f](https://github.com/hyperledger/cacti/commit/669b51f188536fd5de0c970fcb4fca8fe1337b08))
+* **keychain-memory-wasm:** wee_alloc is Unmaintained GHSA-rc23-xxgq-x27g ([89d5102](https://github.com/hyperledger/cacti/commit/89d5102496adfe98a542a373e805dc38ecb8f269)), closes [#2352](https://github.com/hyperledger/cacti/issues/2352)
+* **relay:** rust build fails after tokio bump from 0.2.25 to 1.18.5 ([187f26e](https://github.com/hyperledger/cacti/commit/187f26e39d8dbbc7860fba13a0317ef842cadebe))
+* **security:** upgrade express-jwt to v8.4.1 ([e251168](https://github.com/hyperledger/cacti/commit/e251168fb4067a8036a5168709e57154c0c02fe4)), closes [#2231](https://github.com/hyperledger/cacti/issues/2231)
+* **security:** vulnerabilities found in fabric-all-in-one ([91c0187](https://github.com/hyperledger/cacti/commit/91c0187febf8532caf41b4a27c64adf14c1cb3cc)), closes [#2056](https://github.com/hyperledger/cacti/issues/2056)
+* **security:** vulnerabilities found in quorum-multi-party-all-in-one ([59cc831](https://github.com/hyperledger/cacti/commit/59cc83198ee2f957644f224138fc10730e7b192c)), closes [#2060](https://github.com/hyperledger/cacti/issues/2060)
+* **tools/quorum-all-in-one:** address CVE-2021-36159 and CVE-2022-28391 ([df6be48](https://github.com/hyperledger/cacti/commit/df6be489efa13901d0d83950e372725e16691564)), closes [ConsenSys/quorum#1513](https://github.com/ConsenSys/quorum/issues/1513) [#2059](https://github.com/hyperledger/cacti/issues/2059)
+* **weaver:** address vulnerability CVE-2020-28477 and many others ([5fcfea3](https://github.com/hyperledger/cacti/commit/5fcfea35858ef0296dd26383481b39cb5634267d))
+* **weaversdk:** ecies decrypt bug when z is less than 32Bytes ([b9066a9](https://github.com/hyperledger/cacti/commit/b9066a9c1bb5582d70cdfd701cae654853ca9c42))
+
+### Features
+
+* **cactus-plugin-persistence-ethereum:** add new persistence plugin ([617c4d3](https://github.com/hyperledger/cacti/commit/617c4d38981b450de3777dfe7d26fbc32219aca5)), closes [#2254](https://github.com/hyperledger/cacti/issues/2254) [#2256](https://github.com/hyperledger/cacti/issues/2256)
+* **connector-go-ethereum:** add getBlock and ([3fa9093](https://github.com/hyperledger/cacti/commit/3fa909346074ed91175bfd4b9c81023fa77a6678)), closes [#2255](https://github.com/hyperledger/cacti/issues/2255)
+* **driver:** added Monitor to fabric driver for missed events ([b6fa3ac](https://github.com/hyperledger/cacti/commit/b6fa3acee9ea8d93d452c62293b71838d11ac3bd))
+* **relay:** configurable db_open retry mechanism added and in driver ([22ba550](https://github.com/hyperledger/cacti/commit/22ba550a96dace4d47a2e068572dea0ac81f860c))
+
 # [1.2.0](https://github.com/hyperledger/cacti/compare/v1.1.3...v1.2.0) (2023-03-28)
 
 ### Bug Fixes

diff --git a/examples/cactus-check-connection-ethereum-validator/CHANGELOG.md b/examples/cactus-check-connection-ethereum-validator/CHANGELOG.md
@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# [2.0.0-alpha-prerelease](https://github.com/hyperledger/cacti/compare/v1.2.0...v2.0.0-alpha-prerelease) (2023-05-11)
+
+**Note:** Version bump only for package check-connection-ethereum-validator
+
 # [1.2.0](https://github.com/hyperledger/cacti/compare/v1.1.3...v1.2.0) (2023-03-28)
 
 **Note:** Version bump only for package check-connection-ethereum-validator

diff --git a/examples/cactus-check-connection-ethereum-validator/package.json b/examples/cactus-check-connection-ethereum-validator/package.json
@@ -1,6 +1,6 @@
 {
   "name": "check-connection-ethereum-validator",
-  "version": "1.2.0",
+  "version": "2.0.0-alpha-prerelease",
   "private": true,
   "scripts": {
     "start": "node ../../dist/packages/cactus-cmd-socketio-server/src/main/typescript/routing-interface/www.js",

diff --git a/examples/cactus-example-carbon-accounting-backend/CHANGELOG.md b/examples/cactus-example-carbon-accounting-backend/CHANGELOG.md
@@ -3,6 +3,12 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# [2.0.0-alpha-prerelease](https://github.com/hyperledger/cactus/compare/v1.2.0...v2.0.0-alpha-prerelease) (2023-05-11)
+
+### Bug Fixes
+
+* **security:** upgrade express-jwt to v8.4.1 ([e251168](https://github.com/hyperledger/cactus/commit/e251168fb4067a8036a5168709e57154c0c02fe4)), closes [#2231](https://github.com/hyperledger/cactus/issues/2231)
+
 # [1.2.0](https://github.com/hyperledger/cactus/compare/v1.1.3...v1.2.0) (2023-03-28)
 
 **Note:** Version bump only for package @hyperledger/cactus-example-carbon-accounting-backend

diff --git a/examples/cactus-example-carbon-accounting-backend/package.json b/examples/cactus-example-carbon-accounting-backend/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@hyperledger/cactus-example-carbon-accounting-backend",
-  "version": "1.2.0",
+  "version": "2.0.0-alpha-prerelease",
   "description": "An example application showing how to use Cactus when implementing a Carbon Accounting Application where two or more blockchains are sharing data with each other to achieve a certain business outcome beneficial to multiple parties (business organizations).",
   "keywords": [
     "Hyperledger",
@@ -52,16 +52,16 @@
     "webpack:dev:web": "webpack --env=dev --target=web --config ../../webpack.config.js"
   },
   "dependencies": {
-    "@hyperledger/cactus-api-client": "1.2.0",
-    "@hyperledger/cactus-cmd-api-server": "1.2.0",
-    "@hyperledger/cactus-common": "1.2.0",
-    "@hyperledger/cactus-core": "1.2.0",
-    "@hyperledger/cactus-core-api": "1.2.0",
-    "@hyperledger/cactus-example-carbon-accounting-business-logic-plugin": "1.2.0",
-    "@hyperledger/cactus-plugin-keychain-memory": "1.2.0",
-    "@hyperledger/cactus-plugin-ledger-connector-fabric": "1.2.0",
-    "@hyperledger/cactus-plugin-ledger-connector-xdai": "1.2.0",
-    "@hyperledger/cactus-test-tooling": "1.2.0",
+    "@hyperledger/cactus-api-client": "2.0.0-alpha-prerelease",
+    "@hyperledger/cactus-cmd-api-server": "2.0.0-alpha-prerelease",
+    "@hyperledger/cactus-common": "2.0.0-alpha-prerelease",
+    "@hyperledger/cactus-core": "2.0.0-alpha-prerelease",
+    "@hyperledger/cactus-core-api": "2.0.0-alpha-prerelease",
+    "@hyperledger/cactus-example-carbon-accounting-business-logic-plugin": "2.0.0-alpha-prerelease",
+    "@hyperledger/cactus-plugin-keychain-memory": "2.0.0-alpha-prerelease",
+    "@hyperledger/cactus-plugin-ledger-connector-fabric": "2.0.0-alpha-prerelease",
+    "@hyperledger/cactus-plugin-ledger-connector-xdai": "2.0.0-alpha-prerelease",
+    "@hyperledger/cactus-test-tooling": "2.0.0-alpha-prerelease",
     "@openzeppelin/contracts": "4.7.3",
     "@openzeppelin/contracts-upgradeable": "4.8.3",
     "async-exit-hook": "2.0.1",

diff --git a/examples/cactus-example-carbon-accounting-business-logic-plugin/CHANGELOG.md b/examples/cactus-example-carbon-accounting-business-logic-plugin/CHANGELOG.md
@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# [2.0.0-alpha-prerelease](https://github.com/hyperledger/cactus/compare/v1.2.0...v2.0.0-alpha-prerelease) (2023-05-11)
+
+**Note:** Version bump only for package @hyperledger/cactus-example-carbon-accounting-business-logic-plugin
+
 # [1.2.0](https://github.com/hyperledger/cactus/compare/v1.1.3...v1.2.0) (2023-03-28)
 
 **Note:** Version bump only for package @hyperledger/cactus-example-carbon-accounting-business-logic-plugin

diff --git a/examples/cactus-example-carbon-accounting-business-logic-plugin/package.json b/examples/cactus-example-carbon-accounting-business-logic-plugin/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@hyperledger/cactus-example-carbon-accounting-business-logic-plugin",
-  "version": "1.2.0",
+  "version": "2.0.0-alpha-prerelease",
   "description": "An example business logic plugin implementation for Cactus",
   "keywords": [
     "Hyperledger",
@@ -55,14 +55,14 @@
     "webpack:dev:web": "webpack --env=dev --target=web --config ../../webpack.config.js"
   },
   "dependencies": {
-    "@hyperledger/cactus-api-client": "1.2.0",
-    "@hyperledger/cactus-common": "1.2.0",
-    "@hyperledger/cactus-core": "1.2.0",
-    "@hyperledger/cactus-core-api": "1.2.0",
-    "@hyperledger/cactus-plugin-consortium-manual": "1.2.0",
-    "@hyperledger/cactus-plugin-keychain-memory": "1.2.0",
-    "@hyperledger/cactus-plugin-ledger-connector-fabric": "1.2.0",
-    "@hyperledger/cactus-plugin-ledger-connector-xdai": "1.2.0",
+    "@hyperledger/cactus-api-client": "2.0.0-alpha-prerelease",
+    "@hyperledger/cactus-common": "2.0.0-alpha-prerelease",
+    "@hyperledger/cactus-core": "2.0.0-alpha-prerelease",
+    "@hyperledger/cactus-core-api": "2.0.0-alpha-prerelease",
+    "@hyperledger/cactus-plugin-consortium-manual": "2.0.0-alpha-prerelease",
+    "@hyperledger/cactus-plugin-keychain-memory": "2.0.0-alpha-prerelease",
+    "@hyperledger/cactus-plugin-ledger-connector-fabric": "2.0.0-alpha-prerelease",
+    "@hyperledger/cactus-plugin-ledger-connector-xdai": "2.0.0-alpha-prerelease",
     "async-exit-hook": "2.0.1",
     "axios": "0.21.4",
     "express": "4.17.1",

diff --git a/examples/cactus-example-carbon-accounting-frontend/CHANGELOG.md b/examples/cactus-example-carbon-accounting-frontend/CHANGELOG.md
@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# [2.0.0-alpha-prerelease](https://github.com/hyperledger/cactus/compare/v1.2.0...v2.0.0-alpha-prerelease) (2023-05-11)
+
+**Note:** Version bump only for package @hyperledger/cactus-example-carbon-accounting-frontend
+
 # [1.2.0](https://github.com/hyperledger/cactus/compare/v1.1.3...v1.2.0) (2023-03-28)
 
 **Note:** Version bump only for package @hyperledger/cactus-example-carbon-accounting-frontend

diff --git a/examples/cactus-example-carbon-accounting-frontend/package.json b/examples/cactus-example-carbon-accounting-frontend/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@hyperledger/cactus-example-carbon-accounting-frontend",
-  "version": "1.2.0",
+  "version": "2.0.0-alpha-prerelease",
   "description": "The frontend component of an example project demonstrating how Cactus can be used for cross-chain dapp development.",
   "keywords": [
     "Hyperledger",
@@ -54,13 +54,13 @@
     "@angular/platform-browser": "13.3.2",
     "@angular/platform-browser-dynamic": "13.3.2",
     "@angular/router": "13.3.2",
-    "@hyperledger/cactus-api-client": "1.2.0",
-    "@hyperledger/cactus-common": "1.2.0",
-    "@hyperledger/cactus-core-api": "1.2.0",
-    "@hyperledger/cactus-example-carbon-accounting-business-logic-plugin": "1.2.0",
-    "@hyperledger/cactus-plugin-consortium-manual": "1.2.0",
-    "@hyperledger/cactus-plugin-ledger-connector-besu": "1.2.0",
-    "@hyperledger/cactus-plugin-ledger-connector-fabric": "1.2.0",
+    "@hyperledger/cactus-api-client": "2.0.0-alpha-prerelease",
+    "@hyperledger/cactus-common": "2.0.0-alpha-prerelease",
+    "@hyperledger/cactus-core-api": "2.0.0-alpha-prerelease",
+    "@hyperledger/cactus-example-carbon-accounting-business-logic-plugin": "2.0.0-alpha-prerelease",
+    "@hyperledger/cactus-plugin-consortium-manual": "2.0.0-alpha-prerelease",
+    "@hyperledger/cactus-plugin-ledger-connector-besu": "2.0.0-alpha-prerelease",
+    "@hyperledger/cactus-plugin-ledger-connector-fabric": "2.0.0-alpha-prerelease",
     "@ionic-native/core": "5.36.0",
     "@ionic-native/splash-screen": "5.36.0",
     "@ionic-native/status-bar": "5.36.0",

diff --git a/examples/cactus-example-discounted-asset-trade/CHANGELOG.md b/examples/cactus-example-discounted-asset-trade/CHANGELOG.md
@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# [2.0.0-alpha-prerelease](https://github.com/hyperledger/cacti/compare/v1.2.0...v2.0.0-alpha-prerelease) (2023-05-11)
+
+**Note:** Version bump only for package @hyperledger/cactus-example-discounted-asset-trade
+
 # [1.2.0](https://github.com/hyperledger/cacti/compare/v1.1.3...v1.2.0) (2023-03-28)
 
 **Note:** Version bump only for package @hyperledger/cactus-example-discounted-asset-trade

diff --git a/examples/cactus-example-discounted-asset-trade/package.json b/examples/cactus-example-discounted-asset-trade/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@hyperledger/cactus-example-discounted-asset-trade",
-  "version": "1.2.0",
+  "version": "2.0.0-alpha-prerelease",
   "license": "Apache-2.0",
   "main": "dist/www.js",
   "module": "dist/www.js",

diff --git a/examples/cactus-example-electricity-trade/CHANGELOG.md b/examples/cactus-example-electricity-trade/CHANGELOG.md
@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# [2.0.0-alpha-prerelease](https://github.com/hyperledger/cacti/compare/v1.2.0...v2.0.0-alpha-prerelease) (2023-05-11)
+
+**Note:** Version bump only for package @hyperledger/cactus-example-electricity-trade
+
 # [1.2.0](https://github.com/hyperledger/cacti/compare/v1.1.3...v1.2.0) (2023-03-28)
 
 **Note:** Version bump only for package @hyperledger/cactus-example-electricity-trade

diff --git a/examples/cactus-example-electricity-trade/package.json b/examples/cactus-example-electricity-trade/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@hyperledger/cactus-example-electricity-trade",
-  "version": "1.2.0",
+  "version": "2.0.0-alpha-prerelease",
   "license": "Apache-2.0",
   "main": "dist/www.js",
   "module": "dist/www.js",

diff --git a/examples/cactus-example-supply-chain-backend/CHANGELOG.md b/examples/cactus-example-supply-chain-backend/CHANGELOG.md
@@ -3,6 +3,13 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# [2.0.0-alpha-prerelease](https://github.com/hyperledger/cactus/compare/v1.2.0...v2.0.0-alpha-prerelease) (2023-05-11)
+
+### Bug Fixes
+
+* **cactus-example-supply-chain-app:** mitigate CVE-2022-24434 and CVE-2022-24999 ([d28d5e8](https://github.com/hyperledger/cactus/commit/d28d5e8f3ed5dff1aa049c8f1bccce79aa21e948)), closes [#2041](https://github.com/hyperledger/cactus/issues/2041)
+* **security:** upgrade express-jwt to v8.4.1 ([e251168](https://github.com/hyperledger/cactus/commit/e251168fb4067a8036a5168709e57154c0c02fe4)), closes [#2231](https://github.com/hyperledger/cactus/issues/2231)
+
 # [1.2.0](https://github.com/hyperledger/cactus/compare/v1.1.3...v1.2.0) (2023-03-28)
 
 **Note:** Version bump only for package @hyperledger/cactus-example-supply-chain-backend