From 248069f44cc58b3693ecc636ad2ccd25fa5a65c7 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Tue, 27 Jan 2026 03:00:21 +0000
Subject: [PATCH] fix: packages/bitcore-build/package.json to reduce
 vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-TAR-15038581
- https://snyk.io/vuln/SNYK-JS-DIFF-14917201
- https://snyk.io/vuln/SNYK-JS-TAR-15032660
- https://snyk.io/vuln/SNYK-JS-LODASH-15053838
---
 packages/bitcore-build/package.json | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/packages/bitcore-build/package.json b/packages/bitcore-build/package.json
index c72bba7f6cd..cf8f55a5506 100644
--- a/packages/bitcore-build/package.json
+++ b/packages/bitcore-build/package.json
@@ -46,17 +46,17 @@
     "brfs": "^2.0.1",
     "browserify": "^16.2.3",
     "chai": "^4.2.0",
-    "gulp": "^4.0.0",
-    "gulp-mocha": "^7.0.1",
+    "gulp": "^5.0.0",
+    "gulp-mocha": "^9.0.0",
     "gulp-rename": "^1.4.0",
     "gulp-shell": "^0.6.5",
     "gulp-terser": "^1.1.7",
     "istanbul": "^0.4.5",
-    "karma": "^4.2.0",
+    "karma": "^5.0.8",
     "karma-chrome-launcher": "^3.1.0",
     "karma-mocha": "^1.3.0",
-    "lodash": "^4.17.15",
-    "mocha": "^6.2.0"
+    "lodash": "^4.17.23",
+    "mocha": "^10.6.0"
   },
   "gitHead": "012cc0216a9bc6b195035855bd17149bad41acd1"
 }