chore(deps): fix high severity audit findings (#125)

CHANGELOG.md

@@ -1,19 +1,5 @@
 # Changelog
 
-## [2.3.0](https://git.personal.ksv741.ru/WealthLedger/backend/compare/v2.2.0...v2.3.0) (2026-10-24)
-
-### Features
-
-* log unhandled errors and pretty dev output (WealthLedger/backend[#120](https://git.personal.ksv741.ru/WealthLedger/backend/issues/120)) ([#126](https://git.personal.ksv741.ru/WealthLedger/backend/issues/126)) ([966a1f7](https://git.personal.ksv741.ru/WealthLedger/backend/commit/966a1f793aa2087cce3e47750e0017f78315bd64))
-
-### Bug Fixes
-
-* persist refresh cookie across browser restarts (WealthLedger/backend[#123](https://git.personal.ksv741.ru/WealthLedger/backend/issues/123)) ([d1f6969](https://git.personal.ksv741.ru/WealthLedger/backend/commit/d1f6969dc7c22ae3cf7396bccdbf0cea2f61db2e))
-
-### Maintenance
-
-* **deps:** update non-major dependencies [#11](https://git.personal.ksv741.ru/WealthLedger/backend/issues/11) ([449cfcd](https://git.personal.ksv741.ru/WealthLedger/backend/commit/449cfcd6c5a91307012bb3a640c8255ba243cbf5))
-
 ## [2.2.0](https://git.personal.ksv741.ru/WealthLedger/backend/compare/v2.1.0...v2.2.0) (2026-10-18)
 
 ### Features

package.json

@@ -1,6 +1,6 @@
 {
   "name": "wealth-ledger-backend",
-  "version": "2.3.0",
+  "version": "2.2.0",
   "description": "",
   "author": "",
   "private": true,
@@ -39,17 +39,17 @@
     "test:lint": "node --test test/eslint-config.cjs"
   },
   "dependencies": {
-    "@grpc/grpc-js": "1.14.6",
+    "@grpc/grpc-js": "1.14.5",
     "@grpc/proto-loader": "0.8.1",
-    "@nestjs/common": "12.2.0",
+    "@nestjs/common": "12.0.1",
-    "@nestjs/config": "12.0.1",
+    "@nestjs/config": "12.0.0",
-    "@nestjs/core": "12.2.0",
+    "@nestjs/core": "12.0.1",
-    "@nestjs/jwt": "12.0.3",
+    "@nestjs/jwt": "12.0.1",
     "@nestjs/passport": "12.0.0",
-    "@nestjs/platform-express": "12.2.0",
+    "@nestjs/platform-express": "12.0.1",
-    "@nestjs/swagger": "12.0.4",
+    "@nestjs/swagger": "12.0.1",
-    "@prisma/adapter-better-sqlite3": "7.10.1",
+    "@prisma/adapter-better-sqlite3": "7.10.0",
-    "@prisma/client": "7.10.1",
+    "@prisma/client": "7.10.0",
     "bcrypt": "6.0.0",
     "better-sqlite3": "12.11.1",
     "cheerio": "1.2.0",
@@ -57,53 +57,53 @@
     "class-validator": "0.15.1",
     "cookie-parser": "1.4.7",
     "dotenv": "17.4.2",
-    "lru-cache": "11.5.3",
+    "lru-cache": "11.5.2",
-    "nestjs-pino": "5.3.1",
+    "nestjs-pino": "5.1.0",
     "passport": "0.7.0",
     "passport-jwt": "4.0.1",
     "pino-http": "11.0.0",
-    "prisma": "7.10.1",
+    "prisma": "7.10.0",
     "reflect-metadata": "0.2.2",
     "rxjs": "7.8.2"
   },
   "devDependencies": {
-    "@commitlint/cli": "21.2.4",
+    "@commitlint/cli": "21.2.2",
-    "@commitlint/config-conventional": "21.2.4",
+    "@commitlint/config-conventional": "21.2.2",
-    "@darraghor/eslint-plugin-nestjs-typed": "7.5.8",
+    "@darraghor/eslint-plugin-nestjs-typed": "7.5.6",
     "@eslint/js": "10.0.1",
-    "@nestjs/cli": "12.0.10",
+    "@nestjs/cli": "12.0.0",
-    "@nestjs/schematics": "12.0.10",
+    "@nestjs/schematics": "12.0.1",
-    "@nestjs/testing": "12.2.0",
+    "@nestjs/testing": "12.0.1",
-    "@release-it/conventional-changelog": "12.0.2",
+    "@release-it/conventional-changelog": "12.0.0",
     "@stylistic/eslint-plugin": "5.10.0",
     "@types/bcrypt": "6.0.0",
     "@types/cookie-parser": "1.4.10",
     "@types/express": "5.0.6",
     "@types/jest": "30.0.0",
-    "@types/node": "24.19.2",
+    "@types/node": "24.13.4",
     "@types/passport-jwt": "4.0.1",
     "@types/supertest": "7.2.1",
-    "conventional-changelog-conventionalcommits": "10.4.1",
+    "conventional-changelog-conventionalcommits": "10.4.0",
-    "eslint": "10.13.0",
+    "eslint": "10.11.0",
     "eslint-import-resolver-typescript": "4.4.5",
     "eslint-plugin-import-x": "4.17.1",
-    "eslint-plugin-jest": "29.17.0",
+    "eslint-plugin-jest": "29.16.6",
-    "eslint-plugin-n": "18.5.0",
+    "eslint-plugin-n": "18.4.0",
-    "eslint-plugin-perfectionist": "5.13.0",
+    "eslint-plugin-perfectionist": "5.12.1",
     "eslint-plugin-regexp": "3.3.1",
-    "eslint-plugin-security": "4.2.0",
+    "eslint-plugin-security": "4.1.0",
-    "eslint-plugin-sonarjs": "4.2.2",
+    "eslint-plugin-sonarjs": "4.2.1",
-    "globals": "17.13.0",
+    "globals": "17.12.0",
-    "jest": "30.5.2",
+    "jest": "30.5.1",
     "pino-pretty": "13.2.0",
-    "release-it": "21.1.1",
+    "release-it": "21.0.2",
-    "supertest": "7.3.1",
+    "supertest": "7.2.2",
-    "ts-jest": "29.4.15",
+    "ts-jest": "29.4.12",
     "ts-loader": "9.6.2",
     "ts-node": "10.9.2",
     "tsconfig-paths": "4.2.0",
     "typescript": "6.0.3",
-    "typescript-eslint": "8.72.0"
+    "typescript-eslint": "8.70.1"
   },
   "overrides": {
     "proxy-addr": "2.0.8",
@@ -120,14 +120,14 @@
       "deepmerge-ts": "8.0.2"
     },
     "release-it": {
-      "basic-ftp": "6.2.3",
+      "basic-ftp": "6.2.1",
       "undici": "7.30.1"
     },
     "socks": {
       "ip-address": "10.7.4"
     },
     "prisma": {
-      "mysql2": "3.24.6"
+      "mysql2": "3.24.4"
     }
   },
   "jest": {

test/app.e2e-spec.ts

@@ -32,7 +32,6 @@ describe('Authentication (e2e)', () => {
         pinoHttp: {
           ...loggingOptions(config),
           level: 'info',
-          transport: undefined,
           stream: { write: (line: string) => logs.push(JSON.parse(line) as Record<string, unknown>) },
         },
         assignResponse: true,
@@ -540,14 +539,7 @@ describe('Authentication (e2e)', () => {
       'X-Request-ID',
     );
     expect(logs.filter((entry) => entry.requestId === response.headers['x-request-id'])).toEqual([
-      expect.objectContaining({
+      expect.objectContaining({ level: 40, message: 'http.request.completed', status: 401, code: 'UNAUTHORIZED' }),
-        level: 40,
-        message: 'http.request.completed',
-        method: 'GET',
-        route: '/api/v1/auth/me',
-        status: 401,
-        code: 'UNAUTHORIZED',
-      }),
     ]);
   });
 
@@ -559,7 +551,7 @@ describe('Authentication (e2e)', () => {
         new Error('operation failed\npassword: SYNTHETIC_AUDIT_SECRET'),
       );
 
-    await request(app.getHttpServer())
+    const response = await request(app.getHttpServer())
       .post('/api/v1/auth/login')
       .set('X-Request-ID', clientRequestId)
       .send({ email: 'user@example.com', password: 'a secure password' })
@@ -569,30 +561,26 @@ describe('Authentication (e2e)', () => {
         expect(body).toEqual({ status: 500, code: 'INTERNAL_SERVER_ERROR' }),
       );
 
-    expect(logs).toEqual(
+    const related = logs.filter((entry) => entry.requestId === response.headers['x-request-id']);
-      expect.arrayContaining([
+    expect(related).toEqual([
-        expect.objectContaining({
+      expect.objectContaining({
-          method: 'POST',
+        requestId: response.headers['x-request-id'],
-          route: '/api/v1/auth/login',
+        clientRequestId,
-          status: 500,
+        code: 'INTERNAL_SERVER_ERROR',
-          code: 'INTERNAL_SERVER_ERROR',
+        level: 50,
-          level: 50,
+        message: 'http.request.unhandled',
-          message: 'http.request.completed',
+        errorName: 'Error',
-        }),
+        errorStack: expect.stringContaining('    at ') as unknown,
-      ]),
+      }),
-    );
+      expect.objectContaining({
-    expect(logs).toEqual(
+        requestId: response.headers['x-request-id'],
-      expect.arrayContaining([
+        clientRequestId,
-        expect.objectContaining({
+        status: 500,
-          clientRequestId,
+        code: 'INTERNAL_SERVER_ERROR',
-          code: 'INTERNAL_SERVER_ERROR',
+        level: 50,
-          level: 50,
+        message: 'http.request.completed',
-          message: 'http.request.unhandled',
+      }),
-          errorName: 'Error',
+    ]);
-          errorStack: expect.stringContaining('    at ') as unknown,
-        }),
-      ]),
-    );
     expect(JSON.stringify(logs)).not.toContain(
       'SYNTHETIC_AUDIT_SECRET',
     );