Skip to content

Commit aaaf703

Browse files
committed
minor #1356 Upgrading some dependencies with vulnerability issues (Kocal)
This PR was squashed before being merged into the main branch. Discussion ---------- Upgrading some dependencies with vulnerability issues | Q | A | ------------- | --- | Bug fix? | no | New feature? | no <!-- please update CHANGELOG.md file --> | Deprecations? | no <!-- please update CHANGELOG.md file --> | Issues | Fix #... <!-- prefix each issue number with "Fix #", no need to create an issue if none exists, explain below instead --> | License | MIT <!-- Replace this notice by a description of your feature/bugfix. This will help reviewers and should be a good start for the documentation. Additionally (see https://symfony.com/releases): - Always add tests and ensure they pass. - Features and deprecations must be submitted against the latest branch. - For new features, provide some code snippets to help understand usage. - Changelog entry should follow https://symfony.com/doc/current/contributing/code/conventions.html#writing-a-changelog-entry - Never break backward compatibility. --> Purely internal, it won't impact end-users (except for suggesting a newer version of `webpack-dev-server`). That's mainly to close issues opened in https://github.com/symfony/webpack-encore/security/dependabot Commits ------- 93f37f5 Upgrade Express to 4.21.1, to fix issues with cookie, send, and path-to-regexp abc75cf Update http-proxy-middleware to 2.0.7 (https://github.com/symfony/webpack-encore/security/dependabot/144) a96b9fd Update cross-spawn to 7.0.6 (https://github.com/symfony/webpack-encore/security/dependabot/145)
2 parents 57cd2bf + 93f37f5 commit aaaf703

File tree

11 files changed

+57
-83
lines changed

11 files changed

+57
-83
lines changed

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -97,7 +97,7 @@
9797
"vue-loader": "^17.0.0",
9898
"webpack": "^5.72",
9999
"webpack-cli": "^5.1.4",
100-
"webpack-dev-server": "^5.0.4",
100+
"webpack-dev-server": "^5.1.0",
101101
"webpack-notifier": "^1.15.0"
102102
},
103103
"peerDependencies": {

test_apps/npm-with-babel/package-lock.json

Lines changed: 3 additions & 3 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

test_apps/npm-with-external-babel-config/package-lock.json

Lines changed: 3 additions & 3 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

test_apps/npm/package-lock.json

Lines changed: 3 additions & 3 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

test_apps/pnpm-with-babel/pnpm-lock.yaml

Lines changed: 3 additions & 3 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

test_apps/pnpm-with-external-babel-config/pnpm-lock.yaml

Lines changed: 3 additions & 3 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

test_apps/pnpm/pnpm-lock.yaml

Lines changed: 3 additions & 3 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

test_apps/yarn-pnp-with-babel/yarn.lock

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1818,13 +1818,13 @@ __metadata:
18181818
linkType: hard
18191819

18201820
"cross-spawn@npm:^7.0.3":
1821-
version: 7.0.3
1822-
resolution: "cross-spawn@npm:7.0.3"
1821+
version: 7.0.6
1822+
resolution: "cross-spawn@npm:7.0.6"
18231823
dependencies:
18241824
path-key: "npm:^3.1.0"
18251825
shebang-command: "npm:^2.0.0"
18261826
which: "npm:^2.0.1"
1827-
checksum: 10/e1a13869d2f57d974de0d9ef7acbf69dc6937db20b918525a01dacb5032129bd552d290d886d981e99f1b624cb03657084cc87bd40f115c07ecf376821c729ce
1827+
checksum: 10/0d52657d7ae36eb130999dffff1168ec348687b48dd38e2ff59992ed916c88d328cf1d07ff4a4a10bc78de5e1c23f04b306d569e42f7a2293915c081e4dfee86
18281828
languageName: node
18291829
linkType: hard
18301830

test_apps/yarn-pnp-with-external-babel-config/yarn.lock

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1818,13 +1818,13 @@ __metadata:
18181818
linkType: hard
18191819

18201820
"cross-spawn@npm:^7.0.3":
1821-
version: 7.0.3
1822-
resolution: "cross-spawn@npm:7.0.3"
1821+
version: 7.0.6
1822+
resolution: "cross-spawn@npm:7.0.6"
18231823
dependencies:
18241824
path-key: "npm:^3.1.0"
18251825
shebang-command: "npm:^2.0.0"
18261826
which: "npm:^2.0.1"
1827-
checksum: 10/e1a13869d2f57d974de0d9ef7acbf69dc6937db20b918525a01dacb5032129bd552d290d886d981e99f1b624cb03657084cc87bd40f115c07ecf376821c729ce
1827+
checksum: 10/0d52657d7ae36eb130999dffff1168ec348687b48dd38e2ff59992ed916c88d328cf1d07ff4a4a10bc78de5e1c23f04b306d569e42f7a2293915c081e4dfee86
18281828
languageName: node
18291829
linkType: hard
18301830

test_apps/yarn-pnp/yarn.lock

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1795,13 +1795,13 @@ __metadata:
17951795
linkType: hard
17961796

17971797
"cross-spawn@npm:^7.0.3":
1798-
version: 7.0.3
1799-
resolution: "cross-spawn@npm:7.0.3"
1798+
version: 7.0.6
1799+
resolution: "cross-spawn@npm:7.0.6"
18001800
dependencies:
18011801
path-key: "npm:^3.1.0"
18021802
shebang-command: "npm:^2.0.0"
18031803
which: "npm:^2.0.1"
1804-
checksum: 10/e1a13869d2f57d974de0d9ef7acbf69dc6937db20b918525a01dacb5032129bd552d290d886d981e99f1b624cb03657084cc87bd40f115c07ecf376821c729ce
1804+
checksum: 10/0d52657d7ae36eb130999dffff1168ec348687b48dd38e2ff59992ed916c88d328cf1d07ff4a4a10bc78de5e1c23f04b306d569e42f7a2293915c081e4dfee86
18051805
languageName: node
18061806
linkType: hard
18071807

0 commit comments

Comments
 (0)