From 7b62e483827e959c86911469d871adfe4bdbae72 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 14 Sep 2024 02:56:47 +0000 Subject: [PATCH] fix: docs/package.json & docs/yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-PATHTOREGEXP-7925106 --- docs/package.json | 2 +- docs/yarn.lock | 139 ++++++++++++++++++++++++++++++++++------------ 2 files changed, 103 insertions(+), 38 deletions(-) diff --git a/docs/package.json b/docs/package.json index c5de9e8c..a80dfca9 100644 --- a/docs/package.json +++ b/docs/package.json @@ -12,7 +12,7 @@ }, "dependencies": { "@astrojs/starlight": "^0.26.1", - "astro": "^4.14.2", + "astro": "^4.15.5", "sharp": "^0.33.1" } } diff --git a/docs/yarn.lock b/docs/yarn.lock index fc824dbc..0311043f 100644 --- a/docs/yarn.lock +++ b/docs/yarn.lock @@ -1006,23 +1006,51 @@ dependencies: "@types/hast" "^3.0.4" -"@shikijs/core@1.16.2": - version "1.16.2" - resolved "https://registry.yarnpkg.com/@shikijs/core/-/core-1.16.2.tgz#67182b0eb7e2c3aedcf47e24acb893bca352c869" - integrity sha512-XSVH5OZCvE4WLMgdoBqfPMYmGHGmCC3OgZhw0S7KcSi2XKZ+5oHGe71GFnTljgdOxvxx5WrRks6QoTLKrl1eAA== - dependencies: - "@shikijs/vscode-textmate" "^9.2.0" +"@shikijs/core@1.17.6": + version "1.17.6" + resolved "https://registry.yarnpkg.com/@shikijs/core/-/core-1.17.6.tgz#5a4e46b2a61c4c83ec83dcc1df32fd8549800366" + integrity sha512-9ztslig6/YmCg/XwESAXbKjAjOhaq6HVced9NY6qcbDz1X5g/S90Wco2vMjBNX/6V71ASkzri76JewSGPa7kiQ== + dependencies: + "@shikijs/engine-javascript" "1.17.6" + "@shikijs/engine-oniguruma" "1.17.6" + "@shikijs/types" "1.17.6" + "@shikijs/vscode-textmate" "^9.2.2" "@types/hast" "^3.0.4" + hast-util-to-html "^9.0.2" "@shikijs/core@1.2.4": version "1.2.4" resolved "https://registry.npmjs.org/@shikijs/core/-/core-1.2.4.tgz" integrity sha512-ClaUWpt8oTzjcF0MM1P81AeWyzc1sNSJlAjMG80CbwqbFqXSNz+NpQVUC0icobt3sZn43Sn27M4pHD/Jmp3zHw== -"@shikijs/vscode-textmate@^9.2.0": - version "9.2.0" - resolved "https://registry.yarnpkg.com/@shikijs/vscode-textmate/-/vscode-textmate-9.2.0.tgz#a8405c86b4ea3e1cec779319e7d5c4e67283b2db" - integrity sha512-5FinaOp6Vdh/dl4/yaOTh0ZeKch+rYS8DUb38V3GMKYVkdqzxw53lViRKUYkVILRiVQT7dcPC7VvAKOR73zVtQ== +"@shikijs/engine-javascript@1.17.6": + version "1.17.6" + resolved "https://registry.yarnpkg.com/@shikijs/engine-javascript/-/engine-javascript-1.17.6.tgz#9ab79360c83179c93c262846a57bf64fc8f5bff8" + integrity sha512-5EEZj8tVcierNxm4V0UMS2PVoflb0UJPalWWV8l9rRg+oOfnr5VivqBJbkyq5grltVPvByIXvVbY8GSM/356jQ== + dependencies: + "@shikijs/types" "1.17.6" + oniguruma-to-js "0.4.3" + +"@shikijs/engine-oniguruma@1.17.6": + version "1.17.6" + resolved "https://registry.yarnpkg.com/@shikijs/engine-oniguruma/-/engine-oniguruma-1.17.6.tgz#524c29df08c2f8bcd614aa3d8c9501410cbaf6c8" + integrity sha512-NLfWDMXFYe0nDHFbEoyZdz89aIIey3bTfF3zLYSUNTXks5s4uinZVmuPOFf1HfTeGqIn8uErJSBc3VnpJO7Alw== + dependencies: + "@shikijs/types" "1.17.6" + "@shikijs/vscode-textmate" "^9.2.2" + +"@shikijs/types@1.17.6": + version "1.17.6" + resolved "https://registry.yarnpkg.com/@shikijs/types/-/types-1.17.6.tgz#074c627e62ad80513b6535cbc176adc2997d5c29" + integrity sha512-ndTFa2TJi2w51ddKQDn3Jy8f6K4E5Q2x3dA3Hmsd3+YmxDQ10UWHjcw7VbVbKzv3VcUvYPLy+z9neqytSzUMUg== + dependencies: + "@shikijs/vscode-textmate" "^9.2.2" + "@types/hast" "^3.0.4" + +"@shikijs/vscode-textmate@^9.2.2": + version "9.2.2" + resolved "https://registry.yarnpkg.com/@shikijs/vscode-textmate/-/vscode-textmate-9.2.2.tgz#24571f50625c7cd075f9efe0def8b9d2c0930ada" + integrity sha512-TMp15K+GGYrWlZM8+Lnj9EaHEFmOen0WJBrfa17hF7taDOYthuPPV0GWzfd/9iMij0akS/8Yw2ikquH7uVi/fg== "@types/acorn@^4.0.0": version "4.0.6" @@ -1245,10 +1273,10 @@ astro-expressive-code@^0.35.6: dependencies: rehype-expressive-code "^0.35.6" -astro@^4.14.2: - version "4.15.4" - resolved "https://registry.yarnpkg.com/astro/-/astro-4.15.4.tgz#9e79e3d51431bf5b8b0bb54a346543da313ac252" - integrity sha512-wqy+m3qygt9DmCSqMsckxyK4ccCUFtti2d/WlLkEpAlqHgyDIg20zRTLHO2v/H4YeSlJ8sAcN0RW2FhOeYbINg== +astro@^4.15.5: + version "4.15.6" + resolved "https://registry.yarnpkg.com/astro/-/astro-4.15.6.tgz#55d42fca5a68695174f5af85a8dcc5329264726a" + integrity sha512-SWcUNwm8CiVRaIbh4w5byh62BNihpsovlCd4ElvC7cL/53D24HcI7AaGFsPrromCamQklwQmIan/QS7x/3lLuQ== dependencies: "@astrojs/compiler" "^2.10.3" "@astrojs/internal-helpers" "0.4.1" @@ -1270,7 +1298,7 @@ astro@^4.14.2: common-ancestor-path "^1.0.1" cookie "^0.6.0" cssesc "^3.0.0" - debug "^4.3.6" + debug "^4.3.7" deterministic-object-hash "^2.0.2" devalue "^5.0.0" diff "^5.2.0" @@ -1296,19 +1324,19 @@ astro@^4.14.2: ora "^8.1.0" p-limit "^6.1.0" p-queue "^8.0.1" - path-to-regexp "^6.2.2" + path-to-regexp "6.2.2" preferred-pm "^4.0.0" prompts "^2.4.2" rehype "^13.0.1" semver "^7.6.3" - shiki "^1.16.1" + shiki "^1.16.2" string-width "^7.2.0" strip-ansi "^7.1.0" tinyexec "^0.3.0" tsconfck "^3.1.3" unist-util-visit "^5.0.0" vfile "^6.0.3" - vite "^5.4.2" + vite "^5.4.3" vitefu "^1.0.2" which-pm "^3.0.0" xxhash-wasm "^1.0.2" @@ -1542,12 +1570,12 @@ debug@^4.0.0, debug@^4.1.0, debug@^4.3.1, debug@^4.3.4: dependencies: ms "2.1.2" -debug@^4.3.6: - version "4.3.6" - resolved "https://registry.yarnpkg.com/debug/-/debug-4.3.6.tgz#2ab2c38fbaffebf8aa95fdfe6d88438c7a13c52b" - integrity sha512-O/09Bd4Z1fBrU4VzkhFqVgpPzaGbw6Sm9FEkBT1A/YBXQFGuuSxa1dN2nxgxS34JmKXqYx8CZAwEVoJFImUXIg== +debug@^4.3.7: + version "4.3.7" + resolved "https://registry.yarnpkg.com/debug/-/debug-4.3.7.tgz#87945b4151a011d76d95a198d7111c865c360a52" + integrity sha512-Er2nc/H7RrMXZBFCEim6TCmMk02Z8vLC2Rbi1KEBggpo0fS6l0S1nnapwmIi3yW/+GOJap1Krg4w0Hg80oCqgQ== dependencies: - ms "2.1.2" + ms "^2.1.3" decode-named-character-reference@^1.0.0: version "1.0.2" @@ -2024,6 +2052,23 @@ hast-util-to-html@^9.0.0, hast-util-to-html@^9.0.1: stringify-entities "^4.0.0" zwitch "^2.0.4" +hast-util-to-html@^9.0.2: + version "9.0.2" + resolved "https://registry.yarnpkg.com/hast-util-to-html/-/hast-util-to-html-9.0.2.tgz#314d8c125c36cf736e4389850b4f73871965d0c3" + integrity sha512-RP5wNpj5nm1Z8cloDv4Sl4RS8jH5HYa0v93YB6Wb4poEzgMo/dAAL0KcT4974dCjcNG5pkLqTImeFHHCwwfY3g== + dependencies: + "@types/hast" "^3.0.0" + "@types/unist" "^3.0.0" + ccount "^2.0.0" + comma-separated-tokens "^2.0.0" + hast-util-whitespace "^3.0.0" + html-void-elements "^3.0.0" + mdast-util-to-hast "^13.0.0" + property-information "^6.0.0" + space-separated-tokens "^2.0.0" + stringify-entities "^4.0.0" + zwitch "^2.0.4" + hast-util-to-jsx-runtime@^2.0.0: version "2.3.0" resolved "https://registry.npmjs.org/hast-util-to-jsx-runtime/-/hast-util-to-jsx-runtime-2.3.0.tgz" @@ -2977,6 +3022,11 @@ ms@2.1.2: resolved "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz" integrity sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w== +ms@^2.1.3: + version "2.1.3" + resolved "https://registry.yarnpkg.com/ms/-/ms-2.1.3.tgz#574c8138ce1d2b5861f0b44579dbadd60c6615b2" + integrity sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA== + nanoid@^3.3.7: version "3.3.7" resolved "https://registry.npmjs.org/nanoid/-/nanoid-3.3.7.tgz" @@ -3018,6 +3068,13 @@ onetime@^7.0.0: dependencies: mimic-function "^5.0.0" +oniguruma-to-js@0.4.3: + version "0.4.3" + resolved "https://registry.yarnpkg.com/oniguruma-to-js/-/oniguruma-to-js-0.4.3.tgz#8d899714c21f5c7d59a3c0008ca50e848086d740" + integrity sha512-X0jWUcAlxORhOqqBREgPMgnshB7ZGYszBNspP+tS9hPD3l13CdaXcHbgImoHUHlrvGx/7AvFEkTRhAGYh+jzjQ== + dependencies: + regex "^4.3.2" + ora@^8.1.0: version "8.1.0" resolved "https://registry.yarnpkg.com/ora/-/ora-8.1.0.tgz#c3db2f9f83a2bec9e8ab71fe3b9ae234d65ca3a8" @@ -3121,10 +3178,10 @@ path-exists@^4.0.0: resolved "https://registry.npmjs.org/path-exists/-/path-exists-4.0.0.tgz" integrity sha512-ak9Qy5Q7jYb2Wwcey5Fpvg2KoAc/ZIhLSLOSBmRmygPsGwkVVt0fZa0qrtMz+m6tJTAHfZQ8FnmB4MG4LWy7/w== -path-to-regexp@^6.2.2: - version "6.3.0" - resolved "https://registry.yarnpkg.com/path-to-regexp/-/path-to-regexp-6.3.0.tgz#2b6a26a337737a8e1416f9272ed0766b1c0389f4" - integrity sha512-Yhpw4T9C6hPpgPeA28us07OJeqZ5EzQTkbfwuhsUg0c237RomFoETJgmp2sa3F/41gfLE6G5cqcYwznmeEeOlQ== +path-to-regexp@6.2.2: + version "6.2.2" + resolved "https://registry.yarnpkg.com/path-to-regexp/-/path-to-regexp-6.2.2.tgz#324377a83e5049cbecadc5554d6a63a9a4866b36" + integrity sha512-GQX3SSMokngb36+whdpRXE+3f9V8UzyAorlYvOGx87ufGHehNTn5lCxrKtLyZ4Yl/wEKnNnr98ZzOwwDZV5ogw== periscopic@^3.0.0: version "3.1.0" @@ -3227,6 +3284,11 @@ queue-microtask@^1.2.2: resolved "https://registry.npmjs.org/queue-microtask/-/queue-microtask-1.2.3.tgz" integrity sha512-NuaNSa6flKT5JaSYQzJok04JzTL1CA6aGhv5rfLW3PgqA+M2ChpZQnAC8h8i4ZFkBS8X5RqkDBHA7r4hej3K9A== +regex@^4.3.2: + version "4.3.2" + resolved "https://registry.yarnpkg.com/regex/-/regex-4.3.2.tgz#a68a68c9b337a77bf4ce4ed0b4b1a49d97cb3b7b" + integrity sha512-kK/AA3A9K6q2js89+VMymcboLOlF5lZRCYJv3gzszXFHBr6kO6qLGzbm+UIugBEV8SMMKCTR59txoY6ctRHYVw== + rehype-expressive-code@^0.35.6: version "0.35.6" resolved "https://registry.yarnpkg.com/rehype-expressive-code/-/rehype-expressive-code-0.35.6.tgz#aacae31a68664b4055b4c969a69992787ace5307" @@ -3551,13 +3613,16 @@ shiki@^1.10.3: "@shikijs/core" "1.12.1" "@types/hast" "^3.0.4" -shiki@^1.16.1: - version "1.16.2" - resolved "https://registry.yarnpkg.com/shiki/-/shiki-1.16.2.tgz#6cb6ec67bfd518d720840b9fafc714419253e0e0" - integrity sha512-gSym0hZf5a1U0iDPsdoOAZbvoi+e0c6c3NKAi03FoSLTm7oG20tum29+gk0wzzivOasn3loxfGUPT+jZXIUbWg== +shiki@^1.16.2: + version "1.17.6" + resolved "https://registry.yarnpkg.com/shiki/-/shiki-1.17.6.tgz#68ed6cd91ccd8c380cf7cf6195b76f1d970c459c" + integrity sha512-RejGugKpDM75vh6YtF9R771acxHRDikC/01kxsUGW+Pnaz3pTY+c8aZB5CnD7p0vuFPs1HaoAIU/4E+NCfS+mQ== dependencies: - "@shikijs/core" "1.16.2" - "@shikijs/vscode-textmate" "^9.2.0" + "@shikijs/core" "1.17.6" + "@shikijs/engine-javascript" "1.17.6" + "@shikijs/engine-oniguruma" "1.17.6" + "@shikijs/types" "1.17.6" + "@shikijs/vscode-textmate" "^9.2.2" "@types/hast" "^3.0.4" signal-exit@^4.1.0: @@ -3901,10 +3966,10 @@ vfile@^6.0.3: "@types/unist" "^3.0.0" vfile-message "^4.0.0" -vite@^5.4.2: - version "5.4.3" - resolved "https://registry.yarnpkg.com/vite/-/vite-5.4.3.tgz#771c470e808cb6732f204e1ee96c2ed65b97a0eb" - integrity sha512-IH+nl64eq9lJjFqU+/yrRnrHPVTlgy42/+IzbOdaFDVlyLgI/wDlf+FCobXLX1cT0X5+7LMyH1mIy2xJdLfo8Q== +vite@^5.4.3: + version "5.4.5" + resolved "https://registry.yarnpkg.com/vite/-/vite-5.4.5.tgz#e4ab27709de46ff29bd8db52b0c51606acba893b" + integrity sha512-pXqR0qtb2bTwLkev4SE3r4abCNioP3GkjvIDLlzziPpXtHgiJIjuKl+1GN6ESOT3wMjG3JTeARopj2SwYaHTOA== dependencies: esbuild "^0.21.3" postcss "^8.4.43"