From e65be016986f8e2a9621645d5d7937d8d3918a31 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 8 Jul 2023 03:31:54 +0000 Subject: [PATCH] fix: package.json & package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-SEMVER-3247795 --- package-lock.json | 6 +++--- package.json | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package-lock.json b/package-lock.json index 745da21b1f..d8cc339c12 100644 --- a/package-lock.json +++ b/package-lock.json @@ -6783,9 +6783,9 @@ "integrity": "sha1-DnNQrN7ICxEIUoeG7B1EGNEbOW0=" }, "semver": { - "version": "7.3.5", - "resolved": "https://registry.npmjs.org/semver/-/semver-7.3.5.tgz", - "integrity": "sha512-PoeGJYh8HK4BTO/a9Tf6ZG3veo/A7ZVsYrSA6J8ny9nb3B1VrpkuN+z9OE5wfE5p6H4LchYZsegiQgbJD94ZFQ==", + "version": "7.5.2", + "resolved": "https://registry.npmjs.org/semver/-/semver-7.5.2.tgz", + "integrity": "sha512-SoftuTROv/cRjCze/scjGyiDtcUyxw1rgYQSZY7XTmtR5hX+dm76iDbTH8TkLPHCQmlbQVSSbNZCPM2hb0knnQ==", "requires": { "lru-cache": "^6.0.0" } diff --git a/package.json b/package.json index cd311ab8bf..bcdb8142f1 100644 --- a/package.json +++ b/package.json @@ -65,7 +65,7 @@ "posthtml": "^0.16.5", "posthtml-urls": "^1.0.0", "search-insights": "^2.0.3", - "semver": "^7.3.5", + "semver": "^7.5.2", "tap-spot": "^1.1.1", "tippy.js": "5.2.0", "typewriter": "^7.4.1",