From 13eb95b4b3dc549f6260ef2cb3b3cf0b6e89cec9 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 1 May 2020 03:16:19 +0200 Subject: [PATCH 1/2] fix: .snyk & package.json to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- .snyk | 19 ++++++++++++++++++- 1 file changed, 18 insertions(+), 1 deletion(-) diff --git a/.snyk b/.snyk index 185dd6b..ca0a60b 100644 --- a/.snyk +++ b/.snyk @@ -1,5 +1,5 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.10.1 +version: v1.14.1 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: @@ -8,3 +8,20 @@ patch: patched: '2018-01-24T16:26:38.614Z' - esdoc-standard-plugin > esdoc-publish-html-plugin > marked: patched: '2018-01-24T16:26:38.614Z' + SNYK-JS-LODASH-567746: + - esdoc > babel-generator > lodash: + patched: '2020-05-01T01:16:17.751Z' + - esdoc > babel-traverse > lodash: + patched: '2020-05-01T01:16:17.751Z' + - esdoc > babel-generator > babel-types > lodash: + patched: '2020-05-01T01:16:17.751Z' + - esdoc > babel-traverse > babel-types > lodash: + patched: '2020-05-01T01:16:17.751Z' + - esdoc-standard-plugin > esdoc-publish-html-plugin > babel-generator > lodash: + patched: '2020-05-01T01:16:17.751Z' + - esdoc > ice-cap > cheerio > lodash: + patched: '2020-05-01T01:16:17.751Z' + - esdoc-standard-plugin > esdoc-publish-html-plugin > babel-generator > babel-types > lodash: + patched: '2020-05-01T01:16:17.751Z' + - esdoc-standard-plugin > esdoc-publish-html-plugin > ice-cap > cheerio > lodash: + patched: '2020-05-01T01:16:17.751Z' From b83027d4f9942732f24aa1b8732f631d54760ac4 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 1 May 2020 03:16:20 +0200 Subject: [PATCH 2/2] fix: .snyk & package.json to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- package.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/package.json b/package.json index d5293dc..2f4c347 100644 --- a/package.json +++ b/package.json @@ -21,7 +21,7 @@ "release": "yarn run build -s && yarn run bump && git push --follow-tags origin master && npm publish", "test": "yarn build && ava -v", "snyk-protect": "snyk protect", - "prepublish": "npm run snyk-protect" + "prepublish": "yarn run snyk-protect" }, "files": [ "dist", @@ -57,7 +57,7 @@ "esdoc-standard-plugin": "^1.0.0", "raf": "^3.4.0", "setimmediate": "^1.0.5", - "snyk": "^*" + "snyk": "^1.316.1" }, "peerDependencies": { "raf": "3.4.0"