[Snyk] Security upgrade web3 from 1.2.6 to 1.3.6

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

As this is a private repository, Snyk-bot does not have access. Therefore, this PR has been created automatically, but appears to have been created by a real user.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • sealer/backend/package.json
  • sealer/backend/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	486/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 3.3	Arbitrary Code Injection SNYK-JS-UNDERSCORE-1080984	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: web3

The new version differs by 250 commits.

• 8bfba23 v1.3.6
• 4fee853 Update geth-dev-assistant
• 69155de 1.3.6-rc.2 Fixes (#4065)
• 444bce7 Remove dtslint from ci scripts (#4064)
• 360b96a Fixing 1.3.6-rc.2 related issues (#4063)
• 7584ed7 Add web3-core-helpers as dev dependency
• 2823033 Add web3-core-helpers as dev dependency
• bd4509f 1.3.6-rc.2 fixes (#4062)
• 2d3c54a 1.3.6-rc.2 (#4059)
• b0822cd v1.3.6-rc.1
• 0b243e4 Built lib for 1.3.6-rc.1
• 5894e9e npm i
• 131fb16 Merge conflicts
• 73ef7e2 v1.3.6-rc.0
• e758f4b Built lib for 1.3.6-rc.0
• cddf991 Update CHANGELOG and ran npm i
• fdbda49 Bump underscore (#4051)
• 5d02719 Release/1.3.5 (#3974)
• 888d107 Feature/web3 eth iban es6 (#3964) (#3965)
• dc148e7 Clarify commitment to semantic versioning (#3961) (#3962)
• 88f59fe Debugging failing tests (#3959) (#3960)
• 8b2291b Rename tsc to compile (#3957) (#3958)
• bb259d9 add nvmrc file (#3817)
• 20bf22d Bump elliptic from 6.5.3 to 6.5.4 in /packages/web3-core-requestmanager (#3945)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic