[Snyk] Security upgrade @onramper/widget from 2.2.20 to 2.2.35

[harshalmadnani]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @onramper/widget

The new version differs by 23 commits.

• e1cdf4b Merge pull request #283 from onramper/feat/adjust_supported_onramps
• 5ea923e fix: excluded onramp identifiers
• 7769a91 feat: exclude gateways for the default keys
• dd3b7c0 feat: bump the package version
• df08ec4 feat: revert the wallet pre-fill disabling
• fdfd468 Disable wallet prefill.
• 6d44263 Remove mercuryo default for ApplePay.
• 6eeabc5 Bump package version.
• 7c3e77b Fix production key selection.
• f19b3ed fix: Onramp selection not available, Correct expected crypto amount not available after onramp change
• b5005e5 Prod release 11/24
• 0928388 Prod release 11/22
• dd402d0 Prod release - 11/21
• 75ff531 Prod release 11/8
• 59f73d3 Prod release 10/31
• e150b8f Prod release 10/28
• 84ed2e8 Prod release 10/21
• b20307f Prod release 10/20
• a4a2020 Prod release 10/19 WT-329 Set default amount to currency specific default value when default amount is not provided as a url parameter (#262)
• 854b53e Prod release 10/19 (#260)
• 8f7bf96 Prod release 10/11
• e6bde06 Prod release 05/10
• 3b6cfa2 prod release

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)