From 7c80c1074b3ee6750c7c5d47cb6068a819ee0ddb Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 8 Oct 2022 14:10:07 +0000 Subject: [PATCH] fix: package.json, package-lock.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- .snyk | 6 +++++- package-lock.json | 5 +++++ package.json | 4 ++-- 3 files changed, 12 insertions(+), 3 deletions(-) diff --git a/.snyk b/.snyk index 5543c23..c5db400 100644 --- a/.snyk +++ b/.snyk @@ -1,5 +1,5 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.19.0 +version: v1.25.0 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: @@ -10716,3 +10716,7 @@ patch: patched: '2020-11-25T13:12:29.645Z' - '@rds/sdk > snyk > snyk-python-plugin > snyk-poetry-lockfile-parser > @snyk/cli-interface > @snyk/dep-graph > graphlib > lodash': patched: '2020-11-25T13:12:29.645Z' + - commitizen > cz-conventional-changelog > @commitlint/load > lodash: + patched: '2022-10-08T14:09:48.179Z' + - commitizen > cz-conventional-changelog > @commitlint/load > @commitlint/resolve-extends > lodash: + patched: '2022-10-08T14:09:48.179Z' diff --git a/package-lock.json b/package-lock.json index 51a984d..58327db 100644 --- a/package-lock.json +++ b/package-lock.json @@ -4456,6 +4456,11 @@ } } }, + "@snyk/protect": { + "version": "1.1025.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.1025.0.tgz", + "integrity": "sha512-RK9tY2Aqujv5l9e/5nE4yiTilk8vxyB99VtJJ/6p9TZYhddCVQUUv+PNenhVVO3jkSD8/3gLWbPakIvQsFKynA==" + }, "@snyk/rpm-parser": { "version": "2.2.1", "resolved": "https://registry.npmjs.org/@snyk/rpm-parser/-/rpm-parser-2.2.1.tgz", diff --git a/package.json b/package.json index 5de3d8c..b495afc 100644 --- a/package.json +++ b/package.json @@ -42,7 +42,7 @@ "precommit": "lint-staged", "travis-deploy-once": "travis-deploy-once --pro", "prepush": "npm run test:prod && npm run build", - "snyk-protect": "snyk protect", + "snyk-protect": "snyk-protect", "prepare": "npm run snyk-protect" }, "dependencies": { @@ -64,7 +64,7 @@ "@rds/sdk": "^1.0.0-alpha.5", "@stackblitz/sdk": "^1.3.0", "smoothscroll-polyfill": "^0.4.4", - "snyk": "^1.431.1" + "@snyk/protect": "latest" }, "devDependencies": { "@commitlint/cli": "^8.3.5",