fix: security audits (#232)

* fix: security audits

* chore: used released version

* fix: use tag

Cargo.toml

@@ -22,7 +22,7 @@ serde = { version = "1.0", features = ["derive"] }
 serde_bson = "0.0.1"
 
 # Env Vars
-dotenv = "0.15"
+dotenvy = "0.15"
 envy = "0.4"
 
 # Metrics & Traces
@@ -37,7 +37,6 @@ tracing-subscriber = { version = "0.3", features = [
 ] }
 tracing-appender = "0.2"
 tracing-opentelemetry = "0.19"
-atty = "0.2"
 
 
 # Analytics
@@ -60,7 +59,7 @@ thiserror = "1.0"
 async-trait = "0.1"
 tokio-stream = "0.1.11"
 regex = "1.7.1"
-tungstenite = { version = "0.18.0", features = ["native-tls"] }
+tungstenite = { version = "0.20", features = ["native-tls"] }
 url = "2.3.1"
 sha256 = "1.1.1"
 chacha20poly1305 = "0.10.1"
@@ -73,14 +72,10 @@ data-encoding = "2.3.3"
 chrono = { version = "0.4.23", features = ["serde"] }
 derive_more = "0.99.17"
 futures = "0.3.26"
-async-tungstenite = { version = "0.20.0", features = [
-    "tokio",
-    "tokio-native-tls",
-] }
 dashmap = "5.4.0"
 
-relay_rpc = { git = "https://github.com/WalletConnect/WalletConnectRust.git", rev = "54ce4be", features = ["cacao"] }
-relay_client = { git = "https://github.com/WalletConnect/WalletConnectRust.git", rev = "54ce4be" }
+relay_rpc = { git = "https://github.com/WalletConnect/WalletConnectRust.git", tag = "v0.23.2", features = ["cacao"] }
+relay_client = { git = "https://github.com/WalletConnect/WalletConnectRust.git", tag = "v0.23.2" }
 x25519-dalek = { version = "2.0.0", features = ["static_secrets"] }
 hkdf = "0.12.3"
 sha2 = "0.10.6"

src/config/local.rs

@@ -1,7 +1,7 @@
 use {
     super::Configuration,
     crate::error::Result,
-    dotenv::dotenv,
+    dotenvy::dotenv,
     relay_rpc::domain::ProjectId,
     serde::Deserialize,
     std::net::{IpAddr, Ipv4Addr, SocketAddr},
@@ -98,7 +98,7 @@ pub fn get_configuration() -> Result<Configuration> {
     Ok(config)
 }
 
-fn load_dot_env() -> dotenv::Result<()> {
+fn load_dot_env() -> dotenvy::Result<()> {
     match dotenv() {
         Ok(_) => Ok(()),
         Err(e) if e.not_found() => Ok(()),

src/error.rs

@@ -17,7 +17,7 @@ pub type Result<T> = std::result::Result<T, Error>;
 #[derive(Debug, thiserror::Error)]
 pub enum Error {
     #[error("Failed to load .env {0}")]
-    DotEnv(#[from] dotenv::Error),
+    DotEnvy(#[from] dotenvy::Error),
 
     #[error("Failed to load configuration from environment {0}")]
     EnvConfiguration(#[from] envy::Error),