Merge remote-tracking branch 'origin/master' into drew/bump_node

[node] v14 LTS

fix: package.json & yarn.lock to reduce vulnerabilities

fix: package.json & yarn.lock to reduce vulnerabilities

load 10 addresses from ledger

fix incorrect decoding when there happen to be exactly 5 msig txns

fix missing msig transactions w/ low IDs

fix: package.json & yarn.lock to reduce vulnerabilities

Merging snyk-fix-6c388ce44b597859656c79eeac513911 into master with polymerge

Use web-hid instead of web-usb

fix: Dockerfile to reduce vulnerabilities

[lint]

[message serialization] we must check the length of potential transaction ids

Fix deserialization of MsigPendingTxns

fix reading Transaction ID from encoded pending transactions buffer