chore(deps): bump elliptic to ^6.6.0

[mikesposito]

Description

This PR bumps elliptic in the dependency tree to mitigate the following security advisories:

• https://github.com/MetaMask/metamask-mobile/security/dependabot/154
• https://github.com/MetaMask/metamask-mobile/security/dependabot/146
• https://github.com/MetaMask/metamask-mobile/security/dependabot/129
• https://github.com/MetaMask/metamask-mobile/security/dependabot/128
• https://github.com/MetaMask/metamask-mobile/security/dependabot/127

The closer version that mitigates all the above advisories is 6.6.0.

Currently on main, these are the versions we have for elliptic:

> yarn why elliptic
=> Found "[email protected]"
info Has been hoisted to "elliptic"
info Reasons this module exists
   - Hoisted from "@walletconnect#utils#elliptic"
   - Hoisted from "@metamask#ppom-validator#elliptic"
   - Hoisted from "secp256k1#elliptic"
   - Hoisted from "ethereumjs-abi#ethereumjs-util#elliptic"
   - Hoisted from "react-native-crypto#create-ecdh#elliptic"
   - Hoisted from "react-native-crypto#browserify-sign#elliptic"
   - Hoisted from "ethereumjs-util#secp256k1#elliptic"
info Disk size without dependencies: "288KB"
info Disk size with unique dependencies: "656KB"
info Disk size with transitive dependencies: "656KB"
info Number of shared dependencies: 7
=> Found "@ethersproject/signing-key#[email protected]"
info This module exists because "ethers#@ethersproject#signing-key" depends on it.
info Disk size without dependencies: "288KB"
info Disk size with unique dependencies: "656KB"
info Disk size with transitive dependencies: "656KB"
info Number of shared dependencies: 7
=> Found "@reown/walletkit#[email protected]"
info Reasons this module exists
   - "@walletconnect#se-sdk#@reown#walletkit#@walletconnect#utils" depends on it
   - Hoisted from "@walletconnect#se-sdk#@reown#walletkit#@walletconnect#utils#elliptic"
info Disk size without dependencies: "172KB"
info Disk size with unique dependencies: "540KB"
info Disk size with transitive dependencies: "540KB"
info Number of shared dependencies: 7
=> Found "@walletconnect/sign-client#[email protected]"
info Reasons this module exists
   - "@walletconnect#se-sdk#@reown#walletkit#@walletconnect#sign-client#@walletconnect#utils" depends on it
   - Hoisted from "@walletconnect#se-sdk#@reown#walletkit#@walletconnect#sign-client#@walletconnect#utils#elliptic"
info Disk size without dependencies: "172KB"
info Disk size with unique dependencies: "540KB"
info Disk size with transitive dependencies: "540KB"
info Number of shared dependencies: 7

The added resolution forces the package on ^6.6.0 which currently resolves to 6.6.1

Related issues

Related: MetaMask/core#4847

Manual testing steps

1. Go to this page...

Screenshots/Recordings

Before

After

Pre-merge author checklist

• I’ve followed MetaMask Contributor Docs and MetaMask Mobile Coding Standards.
• I've completed the PR template to the best of my ability
• I’ve included tests if applicable
• I’ve documented my code using JSDoc format if applicable
• I’ve applied the right labels on the PR (see labeling guidelines). Not required for external contributors.

Pre-merge reviewer checklist

• I've manually tested the PR (e.g. pull and build branch, run the app, test code being changed).
• I confirm that this PR addresses all acceptance criteria described in the ticket it closes and includes the necessary testing evidence such as recordings and or screenshots.

[github-actions]

Bitrise

✅✅✅ pr_smoke_e2e_pipeline passed on Bitrise! ✅✅✅

Commit hash: d7018c0
Build link: https://app.bitrise.io/app/be69d4368ee7e86d/pipelines/efb9ce5e-aa7d-48f4-93ce-27a3d5486b35

Note

• You can kick off another pr_smoke_e2e_pipeline on Bitrise by removing and re-applying the Run Smoke E2E label on the pull request

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud