fix(sdk-core): bump bitcoinjs message and secp256k1

Resolves GHSA-584q-6j8j-r5pm

TICKET: BTC-1661

Author: davidkaplanbitgo

examples/ts/tss-recovery/package.json

@@ -9,7 +9,7 @@
   "dependencies": {
     "@bitgo/sdk-core": "28.10.0",
     "@bitgo/sdk-lib-mpc": "10.0.0",
-    "secp256k1": "5.0.0"
+    "secp256k1": "5.0.1"
   },
   "devDependencies": {
     "ts-node": "10.9.1",

modules/abstract-utxo/package.json

@@ -47,7 +47,7 @@
     "@types/lodash": "^4.14.121",
     "@types/superagent": "4.1.15",
     "bignumber.js": "^9.0.2",
-    "bitcoinjs-message": "npm:@bitgo-forks/[email protected].2",
+    "bitcoinjs-message": "npm:@bitgo-forks/[email protected].3",
     "bluebird": "^3.5.3",
     "debug": "^3.1.0",
     "io-ts": "npm:@bitgo-forks/[email protected]",

modules/sdk-api/package.json

@@ -45,7 +45,7 @@
     "@bitgo/unspents": "^0.47.17",
     "@bitgo/utxo-lib": "^11.2.1",
     "@types/superagent": "4.1.15",
-    "bitcoinjs-message": "npm:@bitgo-forks/[email protected].2",
+    "bitcoinjs-message": "npm:@bitgo-forks/[email protected].3",
     "bluebird": "^3.5.3",
     "debug": "3.1.0",
     "eol": "^0.5.0",

modules/sdk-core/package.json

@@ -51,7 +51,7 @@
     "big.js": "^3.1.3",
     "bigint-crypto-utils": "3.1.4",
     "bignumber.js": "^9.1.1",
-    "bitcoinjs-message": "npm:@bitgo-forks/[email protected].2",
+    "bitcoinjs-message": "npm:@bitgo-forks/[email protected].3",
     "bolt11": "^1.4.0",
     "bs58": "^4.0.1",
     "bs58check": "^2.1.2",

yarn.lock

@@ -7167,7 +7167,7 @@ bitcoinjs-lib@^6.0.0:
     varuint-bitcoin "^1.1.2"
     wif "^2.0.1"
 
-"bitcoinjs-message@npm:@bitgo-forks/[email protected].2":
+"bitcoinjs-message@npm:@bitgo-forks/[email protected].3":
   version "1.0.0-master.2"
   resolved "https://registry.npmjs.org/@bitgo-forks/bitcoinjs-message/-/bitcoinjs-message-1.0.0-master.2.tgz#62451cdb548640581933db58d4823a0b342d64a1"
   integrity sha512-XSDGM3rA75vcDxeKqHPexika/TgWUFWdfKTv1lV8TZTb5XFHHD6ARckLdMOBiCf29eZSzbJQvF/OIWqNqMl/2A==