[Snyk] Security upgrade ipfs from 0.30.1 to 0.66.1

[bkawk]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	823/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 8.6	Server-side Request Forgery (SSRF) SNYK-JS-IP-6240864	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: ipfs

The new version differs by 250 commits.

• bf1bc8b chore: release master (#4364)
• 7b79c1b fix: add deprecation notice to readmes (#4362)
• 410725b chore: disable dependabot.yml (#4363)
• b64d4af docs: update README.md (#4307)
• 3bcabe3 chore: fix link to ci results (#4299)
• ab02e8f docs: update readmes to fix ci badges (#4296)
• c5e76b7 update-ipfs-http-client (#4293)
• 6eeb1be deps(dev): update interop, ipfsd-ctl and kubo-rpc-client (#4294)
• 6e94067 chore: release master (#4252)
• d1c3abb deps: update libp2p to 0.42.x (#4288)
• 0cfcaf6 fix: allow reading rawLeaves in MFS (#4282)
• fa578ba fix: disallow publishing pubsub messages to zero peers (#4286)
• 789ee58 deps: update dag-jose to 4.0.0 (#4289)
• 4b4c124 deps: update ipfs-utils for node 18 compatibility (#4287)
• 5f73eca chore: do not double-build interface tests
• 1916ca8 chore: interface tests should run after build
• 115a405 fix: fix publish step
• 6d90cbf fix: use aegir to publish RCs (#4284)
• 2a6fede fix: update lerna config for rc publishing (#4283)
• e85e5b6 deps: update @ chainsafe/libp2p-gossipsub to 6.0.0 (#4280)
• 563806f fix: restore lerna for preleases (#4281)
• 521c84a fix!: update multiformats to v11.x.x and related depenendcies (#4277)
• 6be5906 fix: mfs blob import for files larger than 262144b (#4251)
• b722041 docs: DisableNatPortMap should be true to disable port mapping (#4244)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Server-side Request Forgery (SSRF)