client/ts-web: bump vulnerable subdependencies

[lukaw3d]

No description provided.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (cdd5e4a) 60.41% compared to head (701c9bf) 60.41%.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1576   +/-   ##
=======================================
  Coverage   60.41%   60.41%           
=======================================
  Files         139      139           
  Lines        9949     9949           
=======================================
  Hits         6011     6011           
  Misses       3896     3896           
  Partials       42       42           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[pro-wh]

• dev: true
• I don't like babel in this codebase anyway
• not gonna look at package-lock.json changes or dependency changelogs

[lubej]

Alternative created by dependabot of 392d1e0 -> #1578

[lubej]

There is still this report of https://github.com/oasisprotocol/explorer/security/dependabot/41 protobufjs, which I don't see updated.

Ah I see it fixed in #1431 disregard.

Looks like we are still referencing @oasisprotocol/client@^0.1.1-alpha.1 https://github.com/oasisprotocol/explorer/blob/master/yarn.lock#L3009

Looks like this PR 01d5f9e hasn't been released because https://registry.yarnpkg.com/@oasisprotocol/client-rt/-/client-rt-0.2.1-alpha.2.tgz returns different package.json(containing "@oasisprotocol/client" "^0.1.1-alpha.1"), which does not reflect the changes on master. So all is needed is another release of @oasisprotocol/client-rt package.