From ab627630badc67e68d692b91653bfed3f3e5c738 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 15 Jan 2025 12:31:00 +0000 Subject: [PATCH] fix: yarn-pnp/react-vite/package.json & yarn-pnp/react-vite/yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AXIOS-6671926 --- yarn-pnp/react-vite/package.json | 2 +- yarn-pnp/react-vite/yarn.lock | 149 +++++++++++++++++++------------ 2 files changed, 92 insertions(+), 59 deletions(-) diff --git a/yarn-pnp/react-vite/package.json b/yarn-pnp/react-vite/package.json index 7c72d63..97b7d14 100644 --- a/yarn-pnp/react-vite/package.json +++ b/yarn-pnp/react-vite/package.json @@ -40,7 +40,7 @@ "storybook": "^7.6.0-alpha.2", "typescript": "^5.2.2", "vite": "^4.5.0", - "wait-on": "^7.0.1" + "wait-on": "^8.0.2" }, "packageManager": "yarn@4.0.0" } diff --git a/yarn-pnp/react-vite/yarn.lock b/yarn-pnp/react-vite/yarn.lock index ae388e2..3d183e3 100644 --- a/yarn-pnp/react-vite/yarn.lock +++ b/yarn-pnp/react-vite/yarn.lock @@ -2,7 +2,7 @@ # Manual changes might be lost - proceed with caution! __metadata: - version: 8 + version: 6 cacheKey: 10c0 "@aashutoshrathi/word-wrap@npm:^1.2.3": @@ -1775,14 +1775,14 @@ __metadata: languageName: node linkType: hard -"@hapi/hoek@npm:^9.0.0": +"@hapi/hoek@npm:^9.0.0, @hapi/hoek@npm:^9.3.0": version: 9.3.0 resolution: "@hapi/hoek@npm:9.3.0" checksum: a096063805051fb8bba4c947e293c664b05a32b47e13bc654c0dd43813a1cec993bdd8f29ceb838020299e1d0f89f68dc0d62a603c13c9cc8541963f0beca055 languageName: node linkType: hard -"@hapi/topo@npm:^5.0.0": +"@hapi/topo@npm:^5.0.0, @hapi/topo@npm:^5.1.0": version: 5.1.0 resolution: "@hapi/topo@npm:5.1.0" dependencies: @@ -2901,6 +2901,15 @@ __metadata: languageName: node linkType: hard +"@sideway/address@npm:^4.1.5": + version: 4.1.5 + resolution: "@sideway/address@npm:4.1.5" + dependencies: + "@hapi/hoek": ^9.0.0 + checksum: 8/3e3ea0f00b4765d86509282290368a4a5fd39a7995fdc6de42116ca19a96120858e56c2c995081def06e1c53e1f8bccc7d013f6326602bec9d56b72ee2772b9d + languageName: node + linkType: hard + "@sideway/formula@npm:^3.0.1": version: 3.0.1 resolution: "@sideway/formula@npm:3.0.1" @@ -5242,13 +5251,14 @@ __metadata: languageName: node linkType: hard -"axios@npm:^0.27.2": - version: 0.27.2 - resolution: "axios@npm:0.27.2" +"axios@npm:^1.7.9": + version: 1.7.9 + resolution: "axios@npm:1.7.9" dependencies: - follow-redirects: "npm:^1.14.9" - form-data: "npm:^4.0.0" - checksum: 76d673d2a90629944b44d6f345f01e58e9174690f635115d5ffd4aca495d99bcd8f95c590d5ccb473513f5ebc1d1a6e8934580d0c57cdd0498c3a101313ef771 + follow-redirects: ^1.15.6 + form-data: ^4.0.0 + proxy-from-env: ^1.1.0 + checksum: 8/cb8ce291818effda09240cb60f114d5625909b345e10f389a945320e06acf0bc949d0f8422d25720f5dd421362abee302c99f5e97edec4c156c8939814b23d19 languageName: node linkType: hard @@ -7311,7 +7321,7 @@ __metadata: languageName: node linkType: hard -"follow-redirects@npm:^1.14.0, follow-redirects@npm:^1.14.9": +"follow-redirects@npm:^1.14.0": version: 1.15.3 resolution: "follow-redirects@npm:1.15.3" peerDependenciesMeta: @@ -7321,6 +7331,16 @@ __metadata: languageName: node linkType: hard +"follow-redirects@npm:^1.15.6": + version: 1.15.9 + resolution: "follow-redirects@npm:1.15.9" + peerDependenciesMeta: + debug: + optional: true + checksum: 8/859e2bacc7a54506f2bf9aacb10d165df78c8c1b0ceb8023f966621b233717dab56e8d08baadc3ad3b9db58af290413d585c999694b7c146aaf2616340c3d2a6 + languageName: node + linkType: hard + "for-each@npm:^0.3.3": version: 0.3.3 resolution: "for-each@npm:0.3.3" @@ -7452,18 +7472,18 @@ __metadata: languageName: node linkType: hard -"fsevents@patch:fsevents@npm%3A2.3.2#optional!builtin": +"fsevents@patch:fsevents@npm%3A2.3.2#~builtin": version: 2.3.2 - resolution: "fsevents@patch:fsevents@npm%3A2.3.2#optional!builtin::version=2.3.2&hash=df0bf1" + resolution: "fsevents@patch:fsevents@npm%3A2.3.2#~builtin::version=2.3.2&hash=df0bf1" dependencies: node-gyp: "npm:latest" conditions: os=darwin languageName: node linkType: hard -"fsevents@patch:fsevents@npm%3A^2.3.2#optional!builtin, fsevents@patch:fsevents@npm%3A~2.3.2#optional!builtin": +"fsevents@patch:fsevents@npm%3A^2.3.2#~builtin, fsevents@patch:fsevents@npm%3A~2.3.2#~builtin": version: 2.3.3 - resolution: "fsevents@patch:fsevents@npm%3A2.3.3#optional!builtin::version=2.3.3&hash=df0bf1" + resolution: "fsevents@patch:fsevents@npm%3A2.3.3#~builtin::version=2.3.3&hash=df0bf1" dependencies: node-gyp: "npm:latest" conditions: os=darwin @@ -9188,7 +9208,20 @@ __metadata: languageName: node linkType: hard -"joi@npm:^17.3.0, joi@npm:^17.7.0": +"joi@npm:^17.13.3": + version: 17.13.3 + resolution: "joi@npm:17.13.3" + dependencies: + "@hapi/hoek": ^9.3.0 + "@hapi/topo": ^5.1.0 + "@sideway/address": ^4.1.5 + "@sideway/formula": ^3.0.1 + "@sideway/pinpoint": ^2.0.0 + checksum: 8/66ed454fee3d8e8da1ce21657fd2c7d565d98f3e539d2c5c028767e5f38cbd6297ce54df8312d1d094e62eb38f9452ebb43da4ce87321df66cf5e3f128cbc400 + languageName: node + linkType: hard + +"joi@npm:^17.3.0": version: 17.11.0 resolution: "joi@npm:17.11.0" dependencies: @@ -9775,7 +9808,7 @@ __metadata: languageName: node linkType: hard -"minimist@npm:^1.2.0, minimist@npm:^1.2.5, minimist@npm:^1.2.6, minimist@npm:^1.2.7": +"minimist@npm:^1.2.0, minimist@npm:^1.2.5, minimist@npm:^1.2.6, minimist@npm:^1.2.8": version: 1.2.8 resolution: "minimist@npm:1.2.8" checksum: 19d3fcdca050087b84c2029841a093691a91259a47def2f18222f41e7645a0b7c44ef4b40e88a1e58a40c84d2ef0ee6047c55594d298146d0eb3f6b737c20ce6 @@ -10688,7 +10721,7 @@ __metadata: languageName: node linkType: hard -"proxy-from-env@npm:^1.0.0": +"proxy-from-env@npm:^1.0.0, proxy-from-env@npm:^1.1.0": version: 1.1.0 resolution: "proxy-from-env@npm:1.1.0" checksum: fe7dd8b1bdbbbea18d1459107729c3e4a2243ca870d26d34c2c1bcd3e4425b7bcc5112362df2d93cc7fb9746f6142b5e272fd1cc5c86ddf8580175186f6ad42b @@ -11286,16 +11319,16 @@ __metadata: languageName: node linkType: hard -"resolve@patch:resolve@npm%3A^1.10.0#optional!builtin, resolve@patch:resolve@npm%3A^1.14.2#optional!builtin, resolve@patch:resolve@npm%3A^1.20.0#optional!builtin, resolve@patch:resolve@npm%3A^1.22.1#optional!builtin": +"resolve@patch:resolve@npm%3A^1.10.0#~builtin, resolve@patch:resolve@npm%3A^1.14.2#~builtin, resolve@patch:resolve@npm%3A^1.20.0#~builtin, resolve@patch:resolve@npm%3A^1.22.1#~builtin": version: 1.22.8 - resolution: "resolve@patch:resolve@npm%3A1.22.8#optional!builtin::version=1.22.8&hash=c3c19d" + resolution: "resolve@patch:resolve@npm%3A1.22.8#~builtin::version=1.22.8&hash=c3c19d" dependencies: is-core-module: "npm:^2.13.0" path-parse: "npm:^1.0.7" supports-preserve-symlinks-flag: "npm:^1.0.0" bin: resolve: bin/resolve - checksum: 0446f024439cd2e50c6c8fa8ba77eaa8370b4180f401a96abf3d1ebc770ac51c1955e12764cde449fde3fff480a61f84388e3505ecdbab778f4bef5f8212c729 + checksum: 8/5479b7d431cacd5185f8db64bfcb7286ae5e31eb299f4c4f404ad8aa6098b77599563ac4257cb2c37a42f59dfc06a1bec2bcf283bb448f319e37f0feb9a09847 languageName: node linkType: hard @@ -11388,7 +11421,7 @@ __metadata: languageName: node linkType: hard -"rxjs@npm:^7.8.0, rxjs@npm:^7.8.1": +"rxjs@npm:^7.8.1": version: 7.8.1 resolution: "rxjs@npm:7.8.1" dependencies: @@ -12332,13 +12365,13 @@ __metadata: languageName: node linkType: hard -"typescript@patch:typescript@npm%3A^5.2.2#optional!builtin": +"typescript@patch:typescript@^5.2.2#~builtin": version: 5.2.2 - resolution: "typescript@patch:typescript@npm%3A5.2.2#optional!builtin::version=5.2.2&hash=f3b441" + resolution: "typescript@patch:typescript@npm%3A5.2.2#~builtin::version=5.2.2&hash=d73830" bin: tsc: bin/tsc tsserver: bin/tsserver - checksum: 062c1cee1990e6b9419ce8a55162b8dc917eb87f807e4de0327dbc1c2fa4e5f61bc0dd4e034d38ff541d1ed0479b53bcee8e4de3a4075c51a1724eb6216cb6f5 + checksum: 8/07106822b4305de3f22835cbba949a2b35451cad50888759b6818421290ff95d522b38ef7919e70fb381c5fe9c1c643d7dea22c8b31652a717ddbd57b7f4d554 languageName: node linkType: hard @@ -12681,18 +12714,18 @@ __metadata: languageName: node linkType: hard -"wait-on@npm:^7.0.1": - version: 7.0.1 - resolution: "wait-on@npm:7.0.1" +"wait-on@npm:^8.0.2": + version: 8.0.2 + resolution: "wait-on@npm:8.0.2" dependencies: - axios: "npm:^0.27.2" - joi: "npm:^17.7.0" - lodash: "npm:^4.17.21" - minimist: "npm:^1.2.7" - rxjs: "npm:^7.8.0" + axios: ^1.7.9 + joi: ^17.13.3 + lodash: ^4.17.21 + minimist: ^1.2.8 + rxjs: ^7.8.1 bin: wait-on: bin/wait-on - checksum: 2a9c56d26dac573e6bfd36e85d99f072021c23dc2c0faab900a411460b58e16982b96b018d9168c366040f56196314fa46f3d79ef19e3dc38f55824d5035f2ec + checksum: 8/3b6388f991faec8d5226f7a1c0dbcf9852f536632f987dd65f27e7a070d03bfc67f051a4d208009e6dbbdb095a6f9109394c2dc88fec191a798983e0c8469471 languageName: node linkType: hard @@ -13054,31 +13087,31 @@ __metadata: version: 0.0.0-use.local resolution: "yarn-pnp-react-vite@workspace:." dependencies: - "@storybook/addon-essentials": "npm:^7.6.0-alpha.2" - "@storybook/addon-interactions": "npm:^7.6.0-alpha.2" - "@storybook/addon-links": "npm:^7.6.0-alpha.2" - "@storybook/addon-onboarding": "npm:^1.0.8" - "@storybook/blocks": "npm:^7.6.0-alpha.2" - "@storybook/react": "npm:^7.6.0-alpha.2" - "@storybook/react-vite": "npm:^7.6.0-alpha.2" - "@storybook/test-runner": "npm:^0.13.0" - "@storybook/testing-library": "npm:^0.2.2" - "@types/react": "npm:^18.2.33" - "@types/react-dom": "npm:^18.2.14" - "@typescript-eslint/eslint-plugin": "npm:^6.9.0" - "@typescript-eslint/parser": "npm:^6.9.0" - "@vitejs/plugin-react": "npm:^4.1.0" - concurrently: "npm:^8.2.2" - eslint: "npm:^8.52.0" - eslint-plugin-react-hooks: "npm:^4.6.0" - eslint-plugin-react-refresh: "npm:^0.4.3" - react: "npm:^18.2.0" - react-dom: "npm:^18.2.0" - serve: "npm:^14.2.1" - storybook: "npm:^7.6.0-alpha.2" - typescript: "npm:^5.2.2" - vite: "npm:^4.5.0" - wait-on: "npm:^7.0.1" + "@storybook/addon-essentials": ^7.6.0-alpha.2 + "@storybook/addon-interactions": ^7.6.0-alpha.2 + "@storybook/addon-links": ^7.6.0-alpha.2 + "@storybook/addon-onboarding": ^1.0.8 + "@storybook/blocks": ^7.6.0-alpha.2 + "@storybook/react": ^7.6.0-alpha.2 + "@storybook/react-vite": ^7.6.0-alpha.2 + "@storybook/test-runner": ^0.13.0 + "@storybook/testing-library": ^0.2.2 + "@types/react": ^18.2.33 + "@types/react-dom": ^18.2.14 + "@typescript-eslint/eslint-plugin": ^6.9.0 + "@typescript-eslint/parser": ^6.9.0 + "@vitejs/plugin-react": ^4.1.0 + concurrently: ^8.2.2 + eslint: ^8.52.0 + eslint-plugin-react-hooks: ^4.6.0 + eslint-plugin-react-refresh: ^0.4.3 + react: ^18.2.0 + react-dom: ^18.2.0 + serve: ^14.2.1 + storybook: ^7.6.0-alpha.2 + typescript: ^5.2.2 + vite: ^4.5.0 + wait-on: ^8.0.2 languageName: unknown linkType: soft