chore: dependency upgrades and one migration (#1045)

* dependency updates to address dependabot alerts

* updating dependencies: migrating from hapi-auth-basic to @hapi/basic

audit-ci.jsonc

@@ -5,9 +5,7 @@
   "moderate": true,
   "allowlist": [ // NOTE: Please add as much information as possible to any items added to the allowList
   "GHSA-v88g-cgmw-v5xw", // widdershins>swagger2openapi>oas-validator>ajv
-  "GHSA-mg85-8mv5-ffjr", // hapi-auth-basic>hapi>ammo
   "GHSA-phwq-j96m-2c2q", // @mojaloop/central-services-shared>shins>ejs
-  "GHSA-7hx8-2rxv-66xv", // hapi-auth-basic>hapi
   "GHSA-c429-5p7v-vgjp", // hapi>boom>hoek
   "GHSA-282f-qqgm-c34q", // widdershins>swagger2openapi>better-ajv-errors>jsonpointer
   "GHSA-8cf7-32gw-wr33", // @now-ims/hapi-now-auth>jsonwebtoken
@@ -18,9 +16,6 @@
   "GHSA-mjxr-4v3x-q3m4", // @mojaloop/central-services-shared>shins>sanitize-html
   "GHSA-rjqq-98f6-6j3r", // @mojaloop/central-services-shared>shins>sanitize-html
   "GHSA-rm97-x556-q36h", // @mojaloop/central-services-shared>shins>sanitize-html
-  "GHSA-g64q-3vg8-8f93", // hapi-auth-basic>hapi>subtext
-  "GHSA-5854-jvxx-2cg9", // hapi-auth-basic>hapi>subtext
-  "GHSA-2mvq-xp48-4c77", // hapi-auth-basic>hapi>subtext
   "GHSA-w5p7-h5w8-2hfq", // tap-spec>tap-out>trim
   "GHSA-p9pc-299p-vxgp", // widdershins>yargs>yargs-parser
   "GHSA-ghr5-ch3p-vcr6", // https://github.com/advisories/GHSA-ghr5-ch3p-vcr6

package.json

@@ -81,6 +81,7 @@
   "dependencies": {
     "@hapi/good": "9.0.1",
     "@hapi/hapi": "21.3.9",
+    "@hapi/basic": "7.0.2",
     "@hapi/inert": "7.1.0",
     "@hapi/joi": "17.1.1",
     "@hapi/vision": "7.0.3",
@@ -96,7 +97,7 @@
     "@mojaloop/ml-number": "11.2.4",
     "@mojaloop/object-store-lib": "12.0.3",
     "@now-ims/hapi-now-auth": "2.1.0",
-    "ajv": "8.15.0",
+    "ajv": "8.16.0",
     "ajv-keywords": "5.1.0",
     "base64url": "3.0.1",
     "blipp": "4.0.2",
@@ -107,7 +108,6 @@
     "event-stream": "4.0.1",
     "five-bells-condition": "5.0.1",
     "glob": "10.4.1",
-    "hapi-auth-basic": "5.0.0",
     "hapi-auth-bearer-token": "8.0.0",
     "hapi-swagger": "17.2.1",
     "ilp-packet": "2.2.0",
@@ -143,9 +143,10 @@
   },
   "overrides": {
     "shins": {
-      "ejs": "3.1.10",
-      "sanitize-html": "2.12.1",
-      "@hapi/hoek": "9.3.0"
+      "ejs": "^3.1.10",
+      "sanitize-html": "^2.12.1",
+      "jsonpointer": "^5.0.0",
+      "jsonwebtoken": "^9.0.0"
     }
   },
   "config": {

src/shared/plugins.js

@@ -28,7 +28,7 @@ const registerPlugins = async (server) => {
   })
 
   await server.register({
-    plugin: require('hapi-auth-basic')
+    plugin: require('@hapi/basic')
   })
 
   await server.register({