Skip to content

Commit 20d2ad5

Browse files
[Snyk] Fix for 4 vulnerabilities (#705)
* fix: package.json & yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AJV-584908 - https://snyk.io/vuln/SNYK-JS-FLAT-596927 - https://snyk.io/vuln/SNYK-JS-LODASH-1018905 - https://snyk.io/vuln/SNYK-JS-LODASH-1040724 * Update package.json Co-authored-by: eti-codefresh <85868206+eti-codefresh@users.noreply.github.com>
1 parent 7569833 commit 20d2ad5

File tree

2 files changed

+26
-9
lines changed

2 files changed

+26
-9
lines changed

package.json

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "codefresh",
3-
"version": "0.75.34",
3+
"version": "0.75.35",
44
"description": "Codefresh command line utility",
55
"main": "index.js",
66
"preferGlobal": true,
@@ -32,9 +32,9 @@
3232
"dependencies": {
3333
"@codefresh-io/docker-reference": "^0.0.5",
3434
"adm-zip": "^0.5.5",
35-
"ajv": "^6.6.1",
35+
"ajv": "^6.12.3",
3636
"bluebird": "^3.5.1",
37-
"cf-errors": "^0.1.15",
37+
"cf-errors": "^0.1.16",
3838
"chalk": "^4.1.0",
3939
"cli-progress": "3.6.0",
4040
"codefresh-sdk": "^1.9.22",
@@ -52,7 +52,7 @@
5252
"figlet": "^1.4.0",
5353
"filesize": "^3.5.11",
5454
"firebase": "git+https://github.com/codefresh-io/firebase.git#80b2ed883ff281cd67b53bd0f6a0bbd6f330fed5",
55-
"flat": "^4.1.0",
55+
"flat": "^4.1.1",
5656
"inquirer": "^7.1.0",
5757
"js-yaml": "^3.10.0",
5858
"jsonwebtoken": "^8.1.0",

yarn.lock

Lines changed: 22 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -265,7 +265,17 @@ ajv@^5.2.3, ajv@^5.3.0:
265265
fast-json-stable-stringify "^2.0.0"
266266
json-schema-traverse "^0.3.0"
267267

268-
ajv@^6.5.5, ajv@^6.6.1:
268+
ajv@^6.12.3:
269+
version "6.12.6"
270+
resolved "https://registry.yarnpkg.com/ajv/-/ajv-6.12.6.tgz#baf5a62e802b07d977034586f8c3baf5adf26df4"
271+
integrity sha512-j3fVLgvTo527anyYyJOGTYJbG+vnnQYvE0m5mmkc1TK+nxAppkCLMIL0aZ4dblVCNoGShhm+kzE4ZUykBoMg4g==
272+
dependencies:
273+
fast-deep-equal "^3.1.1"
274+
fast-json-stable-stringify "^2.0.0"
275+
json-schema-traverse "^0.4.1"
276+
uri-js "^4.2.2"
277+
278+
ajv@^6.5.5:
269279
version "6.12.2"
270280
resolved "https://registry.yarnpkg.com/ajv/-/ajv-6.12.2.tgz#c629c5eced17baf314437918d2da88c99d5958cd"
271281
integrity sha512-k+V+hzjm5q/Mr8ef/1Y9goCmlsK4I6Sm74teeyGvFk1XrOsbsKLjEdrvny42CZ+a8sXbk8KWpY/bDwS+FLL2UQ==
@@ -903,6 +913,13 @@ cf-errors@^0.1.15:
903913
dependencies:
904914
lodash "4.17.20"
905915

916+
cf-errors@^0.1.16:
917+
version "0.1.16"
918+
resolved "https://registry.yarnpkg.com/cf-errors/-/cf-errors-0.1.16.tgz#03d0b050ac94762552792907b08bd39d1a012116"
919+
integrity sha512-ewA6cTS+bVC32NCxIdEu/5HQ8zb09PV1ubdu0t2yPXs51K31gI78+XGEomVjaXdTbZcGBPVIWhFnG6R/U7K4IQ==
920+
dependencies:
921+
lodash "^4.17.21"
922+
906923
chalk@2.4.2, chalk@^2.0.0, chalk@^2.0.1, chalk@^2.1.0, chalk@^2.4.2, chalk@~2.4.1:
907924
version "2.4.2"
908925
resolved "https://registry.yarnpkg.com/chalk/-/chalk-2.4.2.tgz#cd42541677a54333cf541a49108c1432b44c9424"
@@ -2132,10 +2149,10 @@ flat-cache@^1.2.1:
21322149
rimraf "~2.6.2"
21332150
write "^0.2.1"
21342151

2135-
flat@^4.1.0:
2136-
version "4.1.0"
2137-
resolved "https://registry.yarnpkg.com/flat/-/flat-4.1.0.tgz#090bec8b05e39cba309747f1d588f04dbaf98db2"
2138-
integrity sha512-Px/TiLIznH7gEDlPXcUD4KnBusa6kR6ayRUVcnEAbreRIuhkqow/mun59BuRXwoYk7ZQOLW1ZM05ilIvK38hFw==
2152+
flat@^4.1.1:
2153+
version "4.1.1"
2154+
resolved "https://registry.yarnpkg.com/flat/-/flat-4.1.1.tgz#a392059cc382881ff98642f5da4dde0a959f309b"
2155+
integrity sha512-FmTtBsHskrU6FJ2VxCnsDb84wu9zhmO3cUX2kGFb5tuwhfXxGciiT0oRY+cck35QmG+NmGh5eLz6lLCpWTqwpA==
21392156
dependencies:
21402157
is-buffer "~2.0.3"
21412158

0 commit comments

Comments
 (0)