From 9df7ef5f2c8e4d7874c3d76f61f23b2cf93b702b Mon Sep 17 00:00:00 2001 From: "snyk-io[bot]" <141718529+snyk-io[bot]@users.noreply.github.com> Date: Tue, 22 Oct 2024 17:57:40 +0000 Subject: [PATCH] fix: node_modules/diff/package.json & node_modules/diff/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908 - https://snyk.io/vuln/SNYK-JS-BRACES-6838727 - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8187303 - https://snyk.io/vuln/SNYK-JS-GLOBPARENT-1016905 - https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116 - https://snyk.io/vuln/SNYK-JS-IP-7148531 - https://snyk.io/vuln/SNYK-JS-MICROMATCH-6838728 - https://snyk.io/vuln/SNYK-JS-MINIMATCH-3050818 - https://snyk.io/vuln/SNYK-JS-MOCHA-2863123 - https://snyk.io/vuln/SNYK-JS-NODEFORGE-2330875 - https://snyk.io/vuln/SNYK-JS-NODEFORGE-2331908 - https://snyk.io/vuln/SNYK-JS-ROLLUP-8073097 - https://snyk.io/vuln/SNYK-JS-UNSETVALUE-2400660 - https://snyk.io/vuln/SNYK-JS-WEBPACK-7840298 - https://snyk.io/vuln/SNYK-JS-WEBPACKDEVMIDDLEWARE-6476555 - https://snyk.io/vuln/npm:debug:20170905 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:minimatch:20160620 --- node_modules/diff/.snyk | 10 ++++++++++ node_modules/diff/package.json | 24 +++++++++++++++--------- 2 files changed, 25 insertions(+), 9 deletions(-) create mode 100644 node_modules/diff/.snyk diff --git a/node_modules/diff/.snyk b/node_modules/diff/.snyk new file mode 100644 index 0000000000000..999e68ea5cdb0 --- /dev/null +++ b/node_modules/diff/.snyk @@ -0,0 +1,10 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:minimatch:20160620': + - istanbul > fileset > minimatch: + patched: '2024-10-22T17:57:34.624Z' + id: 'npm:minimatch:20160620' + path: istanbul > fileset > minimatch diff --git a/node_modules/diff/package.json b/node_modules/diff/package.json index dcffb9474baef..8c8dada2f617d 100644 --- a/node_modules/diff/package.json +++ b/node_modules/diff/package.json @@ -44,7 +44,9 @@ "scripts": { "clean": "rm -rf lib/ dist/", "build:node": "yarn babel --out-dir lib --source-maps=inline src", - "test": "grunt" + "test": "grunt", + "prepublish": "npm run snyk-protect", + "snyk-protect": "snyk-protect" }, "devDependencies": { "@babel/cli": "^7.2.3", @@ -56,7 +58,7 @@ "babel-eslint": "^10.0.1", "babel-loader": "^8.0.5", "chai": "^4.2.0", - "eslint": "^5.12.0", + "eslint": "^9.0.0", "grunt": "^1.0.3", "grunt-babel": "^8.0.0", "grunt-cli": "^1.3.2", @@ -64,7 +66,7 @@ "grunt-contrib-copy": "^1.0.0", "grunt-contrib-uglify": "^5.0.0", "grunt-contrib-watch": "^1.1.0", - "grunt-eslint": "^23.0.0", + "grunt-eslint": "^25.0.0", "grunt-exec": "^3.0.0", "grunt-karma": "^4.0.0", "grunt-mocha-istanbul": "^5.0.2", @@ -77,13 +79,17 @@ "karma-mocha-reporter": "^2.0.0", "karma-sauce-launcher": "^4.1.5", "karma-sourcemap-loader": "^0.3.6", - "karma-webpack": "^4.0.2", - "mocha": "^6.0.0", - "rollup": "^1.0.2", + "karma-webpack": "^5.0.0", + "mocha": "^10.1.0", + "rollup": "^3.29.5", "rollup-plugin-babel": "^4.2.0", "semver": "^7.3.2", - "webpack": "^4.28.3", - "webpack-dev-server": "^3.1.14" + "webpack": "^5.94.0", + "webpack-dev-server": "^4.15.2" }, - "optionalDependencies": {} + "optionalDependencies": {}, + "snyk": true, + "dependencies": { + "@snyk/protect": "latest" + } }