Skip to content

Commit

Permalink
fix: package.json & yarn.lock to reduce vulnerabilities (#653)
Browse files Browse the repository at this point in the history
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-PACRESOLVER-1564857
  • Loading branch information
snyk-bot authored Sep 20, 2021
1 parent 226db68 commit 59cdca0
Show file tree
Hide file tree
Showing 2 changed files with 42 additions and 36 deletions.
2 changes: 1 addition & 1 deletion package.json
Original file line number Diff line number Diff line change
Expand Up @@ -36,7 +36,7 @@
"jsonwebtoken": "^8.5.1",
"jwks-rsa": "^1.12.1",
"lru-memoizer": "^2.1.4",
"rest-facade": "^1.13.0",
"rest-facade": "^1.13.1",
"retry": "^0.13.1"
},
"devDependencies": {
Expand Down
76 changes: 41 additions & 35 deletions yarn.lock
Original file line number Diff line number Diff line change
Expand Up @@ -1298,12 +1298,12 @@ debug@^2.2.0, debug@^2.3.3:
dependencies:
ms "2.0.0"

debug@^3.1.0:
version "3.1.0"
resolved "https://registry.npmjs.org/debug/-/debug-3.1.0.tgz"
integrity sha512-OX8XqP7/1a9cqkxYw2yXss15f26NKWBpDXQd0/uK/KPqdQhxbPa994hnzjcE2VqQpDslf55723cKPUOGSmMY3g==
debug@^4.3.2:
version "4.3.2"
resolved "https://registry.yarnpkg.com/debug/-/debug-4.3.2.tgz#f0a49c18ac8779e31d4a0c6029dfb76873c7428b"
integrity sha512-mOp8wKcvj7XxC78zLgw/ZA+6TSgkoE2C/ienthhRD298T7UNwAg9diBpLRxC0mOezLl4B0xV7M0cCO6P/O0Xhw==
dependencies:
ms "2.0.0"
ms "2.1.2"

decamelize@^1.2.0:
version "1.2.0"
Expand Down Expand Up @@ -1380,14 +1380,15 @@ define-property@^2.0.2:
is-descriptor "^1.0.2"
isobject "^3.0.1"

degenerator@^2.2.0:
version "2.2.0"
resolved "https://registry.npmjs.org/degenerator/-/degenerator-2.2.0.tgz"
integrity sha512-aiQcQowF01RxFI4ZLFMpzyotbQonhNpBao6dkI8JPk5a+hmSjR5ErHp2CQySmQe8os3VBqLCIh87nDBgZXvsmg==
degenerator@^3.0.1:
version "3.0.1"
resolved "https://registry.yarnpkg.com/degenerator/-/degenerator-3.0.1.tgz#7ef78ec0c8577a544477308ddf1d2d6e88d51f5b"
integrity sha512-LFsIFEeLPlKvAKXu7j3ssIG6RT0TbI7/GhsqrI0DnHASEQjXQ0LUSYcjJteGgRGmZbl1TnMSxpNQIAiJ7Du5TQ==
dependencies:
ast-types "^0.13.2"
escodegen "^1.8.1"
esprima "^4.0.0"
vm2 "^3.9.3"

delayed-stream@~1.0.0:
version "1.0.0"
Expand Down Expand Up @@ -3576,27 +3577,27 @@ p-try@^2.0.0:
resolved "https://registry.npmjs.org/p-try/-/p-try-2.2.0.tgz"
integrity sha512-R4nPAVTAU0B9D35/Gk3uJf/7XYbQcyohSKdvAxIRSNghFl4e71hVoGnBNQz9cWaXxO2I10KTC+3jMdvvoKw6dQ==

pac-proxy-agent@^4.1.0:
version "4.1.0"
resolved "https://registry.npmjs.org/pac-proxy-agent/-/pac-proxy-agent-4.1.0.tgz"
integrity sha512-ejNgYm2HTXSIYX9eFlkvqFp8hyJ374uDf0Zq5YUAifiSh1D6fo+iBivQZirGvVv8dCYUsLhmLBRhlAYvBKI5+Q==
pac-proxy-agent@^5.0.0:
version "5.0.0"
resolved "https://registry.yarnpkg.com/pac-proxy-agent/-/pac-proxy-agent-5.0.0.tgz#b718f76475a6a5415c2efbe256c1c971c84f635e"
integrity sha512-CcFG3ZtnxO8McDigozwE3AqAw15zDvGH+OjXO4kzf7IkEKkQ4gxQ+3sdF50WmhQ4P/bVusXcqNE2S3XrNURwzQ==
dependencies:
"@tootallnate/once" "1"
agent-base "6"
debug "4"
get-uri "3"
http-proxy-agent "^4.0.1"
https-proxy-agent "5"
pac-resolver "^4.1.0"
pac-resolver "^5.0.0"
raw-body "^2.2.0"
socks-proxy-agent "5"

pac-resolver@^4.1.0:
version "4.2.0"
resolved "https://registry.npmjs.org/pac-resolver/-/pac-resolver-4.2.0.tgz"
integrity sha512-rPACZdUyuxT5Io/gFKUeeZFfE5T7ve7cAkE5TUZRRfuKP0u5Hocwe48X7ZEm6mYB+bTB0Qf+xlVlA/RM/i6RCQ==
pac-resolver@^5.0.0:
version "5.0.0"
resolved "https://registry.yarnpkg.com/pac-resolver/-/pac-resolver-5.0.0.tgz#1d717a127b3d7a9407a16d6e1b012b13b9ba8dc0"
integrity sha512-H+/A6KitiHNNW+bxBKREk2MCGSxljfqRX76NjummWEYIat7ldVXRU3dhRIE3iXZ0nvGBk6smv3nntxKkzRL8NA==
dependencies:
degenerator "^2.2.0"
degenerator "^3.0.1"
ip "^1.1.5"
netmask "^2.0.1"

Expand Down Expand Up @@ -3838,17 +3839,17 @@ propagate@^1.0.0:
resolved "https://registry.npmjs.org/propagate/-/propagate-1.0.0.tgz"
integrity sha1-AMLa7t2iDofjeCs0Stuhzd1q1wk=

proxy-agent@^4.0.0:
version "4.0.0"
resolved "https://registry.npmjs.org/proxy-agent/-/proxy-agent-4.0.0.tgz"
integrity sha512-8P0Y2SkwvKjiGU1IkEfYuTteioMIDFxPL4/j49zzt5Mz3pG1KO+mIrDG1qH0PQUHTTczjwGcYl+EzfXiFj5vUQ==
proxy-agent@^5.0.0:
version "5.0.0"
resolved "https://registry.yarnpkg.com/proxy-agent/-/proxy-agent-5.0.0.tgz#d31405c10d6e8431fde96cba7a0c027ce01d633b"
integrity sha512-gkH7BkvLVkSfX9Dk27W6TyNOWWZWRilRfk1XxGNWOYJ2TuedAv1yFpCaU9QSBmBe716XOTNpYNOzhysyw8xn7g==
dependencies:
agent-base "^6.0.0"
debug "4"
http-proxy-agent "^4.0.0"
https-proxy-agent "^5.0.0"
lru-cache "^5.1.1"
pac-proxy-agent "^4.1.0"
pac-proxy-agent "^5.0.0"
proxy-from-env "^1.0.0"
socks-proxy-agent "^5.0.0"

Expand Down Expand Up @@ -4121,16 +4122,16 @@ resolve@^1.10.0, resolve@^1.11.1:
is-core-module "^2.1.0"
path-parse "^1.0.6"

rest-facade@^1.13.0:
version "1.13.0"
resolved "https://registry.npmjs.org/rest-facade/-/rest-facade-1.13.0.tgz"
integrity sha512-0tVvvP+xUtl1LxsxuDBioj7hEWBFS/cpdxpxguuVbRj9GaZySx/E1le+awmT1xP3RHdwcaoC8ud3yQ5IqnmM7A==
rest-facade@^1.13.1:
version "1.13.1"
resolved "https://registry.yarnpkg.com/rest-facade/-/rest-facade-1.13.1.tgz#b0746011f6f4987eb3fe1f3ace3bfb7505288878"
integrity sha512-BrN31iNzBPuUmWvYntVbaKRx1CWen5q7FiDpOXd0i4LaP3aWyAc4FO3CztAFvNeDMQbWRzbmVZDsmlvk+Kbe2g==
dependencies:
change-case "^2.3.0"
deepmerge "^3.2.0"
lodash.get "^4.4.2"
superagent "^5.1.1"
superagent-proxy "^2.0.0"
superagent-proxy "^3.0.0"

ret@~0.1.10:
version "0.1.15"
Expand Down Expand Up @@ -4628,13 +4629,13 @@ style-loader@^0.8.3:
dependencies:
loader-utils "^0.2.5"

superagent-proxy@^2.0.0:
version "2.1.0"
resolved "https://registry.npmjs.org/superagent-proxy/-/superagent-proxy-2.1.0.tgz"
integrity sha512-DnarpKN6Xn8e3pYlFV4Yvsj9yxLY4q5FIsUe5JvN7vjzP+YCfzXv03dTkZSD2yzrSadsNYHf0IgOUJwKjX457A==
superagent-proxy@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/superagent-proxy/-/superagent-proxy-3.0.0.tgz#e1a17ccba25883599e18d2974020fe83ee7d95d1"
integrity sha512-wAlRInOeDFyd9pyonrkJspdRAxdLrcsZ6aSnS+8+nu4x1aXbz6FWSTT9M6Ibze+eG60szlL7JA8wEIV7bPWuyQ==
dependencies:
debug "^3.1.0"
proxy-agent "^4.0.0"
debug "^4.3.2"
proxy-agent "^5.0.0"

superagent@^5.1.1:
version "5.3.1"
Expand Down Expand Up @@ -4987,6 +4988,11 @@ vm-browserify@^1.0.1:
resolved "https://registry.npmjs.org/vm-browserify/-/vm-browserify-1.1.2.tgz"
integrity sha512-2ham8XPWTONajOR0ohOKOHXkm3+gaBmGut3SRuu75xLd/RRaY6vqgh8NBYYk7+RW3u5AtzPQZG8F10LHkl0lAQ==

vm2@^3.9.3:
version "3.9.3"
resolved "https://registry.yarnpkg.com/vm2/-/vm2-3.9.3.tgz#29917f6cc081cc43a3f580c26c5b553fd3c91f40"
integrity sha512-smLS+18RjXYMl9joyJxMNI9l4w7biW8ilSDaVRvFBDwOH8P0BK1ognFQTpg0wyQ6wIKLTblHJvROW692L/E53Q==

watchpack-chokidar2@^2.0.1:
version "2.0.1"
resolved "https://registry.npmjs.org/watchpack-chokidar2/-/watchpack-chokidar2-2.0.1.tgz"
Expand Down

0 comments on commit 59cdca0

Please sign in to comment.