Skip to content

Commit 8f903a6

Browse files
Upgrade package parse-url to fix the security issue (#3337) (#3338)
* update package parse-url * Revert changes to private packages Co-authored-by: Josh Gummersall <jgummersall@microsoft.com> Co-authored-by: Hongyang Du (hond) <hond@microsoft.com>
1 parent 2df9b0a commit 8f903a6

File tree

3 files changed

+6
-6
lines changed

3 files changed

+6
-6
lines changed

libraries/botbuilder-ai/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@
3434
"botbuilder-core": "4.1.6",
3535
"botbuilder-dialogs": "4.1.6",
3636
"node-fetch": "^2.6.0",
37-
"url-parse": "^1.4.4"
37+
"url-parse": "^1.5.1"
3838
},
3939
"devDependencies": {
4040
"@types/node-fetch": "^2.5.7",

libraries/botbuilder-dialogs-adaptive-testing/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@
3030
"botbuilder-dialogs-declarative": "4.1.6",
3131
"murmurhash-js": "^1.0.0",
3232
"nock": "^11.9.1",
33-
"url-parse": "^1.4.7"
33+
"url-parse": "^1.5.1"
3434
},
3535
"devDependencies": {
3636
"@types/nock": "^11.1.0"

yarn.lock

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -12571,10 +12571,10 @@ url-parse-lax@^3.0.0:
1257112571
dependencies:
1257212572
prepend-http "^2.0.0"
1257312573

12574-
url-parse@^1.4.4, url-parse@^1.4.7:
12575-
version "1.4.7"
12576-
resolved "https://registry.yarnpkg.com/url-parse/-/url-parse-1.4.7.tgz#a8a83535e8c00a316e403a5db4ac1b9b853ae278"
12577-
integrity sha512-d3uaVyzDB9tQoSXFvuSUNFibTd9zxd2bkVrDRvF5TmvWWQwqE4lgYJ5m+x1DbecWkw+LK4RNl2CU1hHuOKPVlg==
12574+
url-parse@^1.5.1:
12575+
version "1.5.1"
12576+
resolved "https://registry.yarnpkg.com/url-parse/-/url-parse-1.5.1.tgz#d5fa9890af8a5e1f274a2c98376510f6425f6e3b"
12577+
integrity sha512-HOfCOUJt7iSYzEx/UqgtwKRMC6EU91NFhsCHMv9oM03VJcVo2Qrp8T8kI9D7amFf1cu+/3CEhgb3rF9zL7k85Q==
1257812578
dependencies:
1257912579
querystringify "^2.1.1"
1258012580
requires-port "^1.0.0"

0 commit comments

Comments
 (0)