[Snyk] Security upgrade web3 from 1.2.4 to 1.2.7

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	484/1000 Why? Has a fix available, CVSS 5.4	Open Redirect SNYK-JS-GOT-2932019	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: web3

The new version differs by 250 commits.

• 65237be v1.2.7
• 598e531 v1.2.7-rc.0
• 7614938 Use web3.js for root package name
• 1f41523 Run build on different lerna version lifecycle segment
• ac25f9c Document gulpfile
• 6a1bcef Update lerna dep and release scripts
• 8540877 Update changelog
• 1149c41 Add docs note for Geth v1.9.12 `eth_call` change (#3467)
• a510a00 Add missing items to 1.2.7 changelog (#3465)
• 3684fc3 Merge pull request #3464 from ethereum/upgradeDtslintDep
• e0a8c1d Upgrade devDeps to resolve security warnings (dtslint, definitelytyped-header-parser)
• bd9cf48 Merge pull request #3437 from maektwain/1.x
• 2e15ff4 Fix changelog
• aba4de8 Merge branch '1.x' into 1.x
• 2a5c5cb Fetch revert reason for sendSignedTransaction (#3420)
• 5c03019 Merge branch '1.x' into 1.x
• 0ffac4b Copy block params for historical logs request (#3455)
• 421f06c Merge branch '1.x' into 1.x
• cae5334 Merge pull request #3190 from ethereum/provider-related-improvements
• 2eb3ed1 Merge branch '1.x' into provider-related-improvements
• ad00335 Merge pull request #3453 from ethereum/cokia/node-types
• cf8db2d Merge branch '1.x' into cokia/node-types
• d063437 Merge pull request #3444 from ethereum/addPackageReadmeBadges
• f8b9b48 Apply review formatting suggestions

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Open Redirect