[Snyk] Security upgrade @truffle/contract from 4.1.15 to 4.3.17

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

As this is a private repository, Snyk-bot does not have access. Therefore, this PR has been created automatically, but appears to have been created by a real user.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • contracts/package.json
  • contracts/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	486/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 3.3	Arbitrary Code Injection SNYK-JS-UNDERSCORE-1080984	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @truffle/contract

The new version differs by 250 commits.

• 39e0c4e Publish
• 8ccb562 Merge pull request #4060 from trufflesuite/y-fail
• 9353be7 Prevent Y from returning to non-error returns
• f7215ea Merge pull request #4038 from trufflesuite/txlog-returndata
• eb0444a Merge pull request #4051 from 0xfoobar/patch-1
• d585c37 Merge pull request #4029 from trufflesuite/reset-to-error
• 8acc128 Fix truffle debug badCompilations error
• 9ddd872 Merge pull request #4047 from trufflesuite/proper-yul-lights
• 9604f0a Merge pull request #4048 from trufflesuite/error-error
• a92b01b Prevent error from missing error.response in source-fetcher
• bed22e7 Update to proper Yul highlighting
• dc7aa63 Merge pull request #4046 from jinyang1994/develop
• 5a93ea8 Check if error.response exists
• a2d5067 Merge pull request #4045 from trufflesuite/circleci
• 3b1ed15 Delete circle ci config
• e6f11fe Redo txlog returnData to be more robust
• 74cdabf Add test of txlog returndata
• 20440a5 Add returndata to txlog
• 46c8f5c Merge pull request #4034 from trufflesuite/reset-txlog
• 1830171 Add test of txlog reset
• 46f75e9 Implement reset for txlog
• dd6d701 Merge pull request #4033 from trufflesuite/web3-136
• 495ca7a Update web3 (and etc) to 1.3.6
• 57a8475 Merge pull request #4020 from trufflesuite/partials-names

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic