Skip to content

Commit c7e08d5

Browse files
committed
fix: package.json & yarn.lock to reduce vulnerabilities
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AXIOS-6671926
1 parent bfb1549 commit c7e08d5

File tree

2 files changed

+27
-11
lines changed

2 files changed

+27
-11
lines changed

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@
2929
}
3030
},
3131
"dependencies": {
32-
"axios": "^0.21.4",
32+
"axios": "^1.7.8",
3333
"commander": "^6.2.1",
3434
"snyk": "^1.685.0"
3535
},

yarn.lock

Lines changed: 26 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -1542,12 +1542,14 @@ aws4@^1.8.0:
15421542
resolved "https://registry.yarnpkg.com/aws4/-/aws4-1.10.1.tgz#e1e82e4f3e999e2cfd61b161280d16a111f86428"
15431543
integrity sha512-zg7Hz2k5lI8kb7U32998pRRFin7zJlkfezGJjUc2heaD4Pw2wObakCDVzkKztTm/Ln7eiVvYsjqak0Ed4LkMDA==
15441544

1545-
axios@^0.21.4:
1546-
version "0.21.4"
1547-
resolved "https://registry.yarnpkg.com/axios/-/axios-0.21.4.tgz#c67b90dc0568e5c1cf2b0b858c43ba28e2eda575"
1548-
integrity sha512-ut5vewkiu8jjGBdqpM44XxjuCjq9LAKeHVmoVfHVzy8eHgxxq8SbAVQNovDA8mVi05kP0Ea/n/UzcSHcTJQfNg==
1545+
axios@^1.7.8:
1546+
version "1.7.8"
1547+
resolved "https://registry.yarnpkg.com/axios/-/axios-1.7.8.tgz#1997b1496b394c21953e68c14aaa51b7b5de3d6e"
1548+
integrity sha512-Uu0wb7KNqK2t5K+YQyVCLM76prD5sRFjKHbJYCP1J7JFGEQ6nN7HWn9+04LAeiJ3ji54lgS/gZCH1oxyrf1SPw==
15491549
dependencies:
1550-
follow-redirects "^1.14.0"
1550+
follow-redirects "^1.15.6"
1551+
form-data "^4.0.0"
1552+
proxy-from-env "^1.1.0"
15511553

15521554
babel-jest@^26.6.3:
15531555
version "26.6.3"
@@ -2190,7 +2192,7 @@ columnify@~1.5.4:
21902192
strip-ansi "^3.0.0"
21912193
wcwidth "^1.0.0"
21922194

2193-
combined-stream@^1.0.6, combined-stream@~1.0.6:
2195+
combined-stream@^1.0.6, combined-stream@^1.0.8, combined-stream@~1.0.6:
21942196
version "1.0.8"
21952197
resolved "https://registry.yarnpkg.com/combined-stream/-/combined-stream-1.0.8.tgz#c3d45a8b34fd730631a110a8a2520682b31d5a7f"
21962198
integrity sha512-FQN4MRfuJeHf7cBbBMJFXhKSDq+2kAArBlmRBvcvFE5BB1HZKXtSFASDhdlz9zOYwxh8lDdnvmMOe/+5cdoEdg==
@@ -3297,10 +3299,10 @@ flush-write-stream@^1.0.0:
32973299
inherits "^2.0.3"
32983300
readable-stream "^2.3.6"
32993301

3300-
follow-redirects@^1.14.0:
3301-
version "1.14.8"
3302-
resolved "https://registry.yarnpkg.com/follow-redirects/-/follow-redirects-1.14.8.tgz#016996fb9a11a100566398b1c6839337d7bfa8fc"
3303-
integrity sha512-1x0S9UVJHsQprFcEC/qnNzBLcIxsjAV905f/UkQxbclCsoTWlacCNOpQa/anodLl2uaEKFhfWOvM2Qg77+15zA==
3302+
follow-redirects@^1.15.6:
3303+
version "1.15.9"
3304+
resolved "https://registry.yarnpkg.com/follow-redirects/-/follow-redirects-1.15.9.tgz#a604fa10e443bf98ca94228d9eebcc2e8a2c8ee1"
3305+
integrity sha512-gew4GsXizNgdoRyqmyfMHyAmXsZDk6mHkSxZFCzW9gwlbtOW44CDtYavM+y+72qD/Vq2l550kMF52DT8fOLJqQ==
33043306

33053307
for-in@^1.0.2:
33063308
version "1.0.2"
@@ -3312,6 +3314,15 @@ forever-agent@~0.6.1:
33123314
resolved "https://registry.yarnpkg.com/forever-agent/-/forever-agent-0.6.1.tgz#fbc71f0c41adeb37f96c577ad1ed42d8fdacca91"
33133315
integrity sha1-+8cfDEGt6zf5bFd60e1C2P2sypE=
33143316

3317+
form-data@^4.0.0:
3318+
version "4.0.1"
3319+
resolved "https://registry.yarnpkg.com/form-data/-/form-data-4.0.1.tgz#ba1076daaaa5bfd7e99c1a6cb02aa0a5cff90d48"
3320+
integrity sha512-tzN8e4TX8+kkxGPK8D5u0FNmjPUjw3lwC9lSLxxoB/+GtsJG91CO8bSWy73APlgAZzZbXEYZJuxjkHH2w+Ezhw==
3321+
dependencies:
3322+
asynckit "^0.4.0"
3323+
combined-stream "^1.0.8"
3324+
mime-types "^2.1.12"
3325+
33153326
form-data@~2.3.2:
33163327
version "2.3.3"
33173328
resolved "https://registry.yarnpkg.com/form-data/-/form-data-2.3.3.tgz#dcce52c05f644f298c6a7ab936bd724ceffbf3a6"
@@ -7086,6 +7097,11 @@ protoduck@^5.0.1:
70867097
dependencies:
70877098
genfun "^5.0.0"
70887099

7100+
proxy-from-env@^1.1.0:
7101+
version "1.1.0"
7102+
resolved "https://registry.yarnpkg.com/proxy-from-env/-/proxy-from-env-1.1.0.tgz#e102f16ca355424865755d2c9e8ea4f24d58c3e2"
7103+
integrity sha512-D+zkORCbA9f1tdWRK0RaCR3GPv50cMxcrz4X8k5LTSUD1Dkw47mKJEZQNunItRTkWwgtaUSo1RVFRIG9ZXiFYg==
7104+
70897105
prr@~1.0.1:
70907106
version "1.0.1"
70917107
resolved "https://registry.yarnpkg.com/prr/-/prr-1.0.1.tgz#d3fc114ba06995a45ec6893f484ceb1d78f5f476"

0 commit comments

Comments
 (0)