From 3c1146970a8206bab2c8a9f58cca6ec422c0a359 Mon Sep 17 00:00:00 2001
From: Snyk bot <github+bot@snyk.io>
Date: Thu, 2 Feb 2023 13:43:15 +0000
Subject: [PATCH] fix: package.json, package-lock.json & .snyk to reduce
 vulnerabilities (#53)

The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/SNYK-JS-LODASH-567746
---
 .snyk             |   8 +++
 package-lock.json |   5 ++
 package.json      | 140 ++++++++++++++++++++++++----------------------
 3 files changed, 85 insertions(+), 68 deletions(-)
 create mode 100644 .snyk

diff --git a/.snyk b/.snyk
new file mode 100644
index 000000000..1a50ada9c
--- /dev/null
+++ b/.snyk
@@ -0,0 +1,8 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.25.0
+ignore: {}
+# patches apply the minimum changes required to fix a vulnerability
+patch:
+  SNYK-JS-LODASH-567746:
+    - botbuilder > botbuilder-core > botframework-connector > adal-node > async > lodash:
+        patched: '2023-02-02T13:31:43.660Z'
diff --git a/package-lock.json b/package-lock.json
index 7915ab634..4a1495821 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -3672,6 +3672,11 @@
         }
       }
     },
+    "@snyk/protect": {
+      "version": "1.1094.0",
+      "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.1094.0.tgz",
+      "integrity": "sha512-WK7RGzqlCG9VdPPx3WJimkAYITkFEB/G6wVfB4+92AAPDzBlV7iTNjl+G5DRu7gWaEAQNF+fcVYEJrTeN6jnCw=="
+    },
     "@tootallnate/once": {
       "version": "2.0.0",
       "resolved": "https://registry.npmjs.org/@tootallnate/once/-/once-2.0.0.tgz",
diff --git a/package.json b/package.json
index cf0920bb1..2339b7c28 100644
--- a/package.json
+++ b/package.json
@@ -1,79 +1,83 @@
 {
-  "name"           : "@skitionek/notify-microsoft-teams",
-  "version"        : "v1.0.0",
-  "description"    : "Microsoft Teams Notification for Github Actions",
-  "main"           : "dist/index.js",
-	"publishConfig": {
-	  "registry":"https://npm.pkg.github.com/skitionek"
-	},
-  "scripts"        : {
-	"package": "ncc build src -o dist",
-	"lint"   : "eslint src/index.js",
-	"test"   : "npm run lint && jest"
+  "name": "@skitionek/notify-microsoft-teams",
+  "version": "v1.0.0",
+  "description": "Microsoft Teams Notification for Github Actions",
+  "main": "dist/index.js",
+  "publishConfig": {
+    "registry": "https://npm.pkg.github.com/skitionek"
   },
-  "repository"     : {
-	"type": "git",
-	"url" : "git+https://github.com/Skitionek/notify-microsoft-teams.git"
+  "scripts": {
+    "package": "ncc build src -o dist",
+    "lint": "eslint src/index.js",
+    "test": "npm run lint && jest",
+    "prepare": "npm run snyk-protect",
+    "snyk-protect": "snyk-protect"
   },
-  "husky"          : {
-	"hooks": {
-	  "pre-commit": "npm run package && git add dist/index.js"
-	}
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Skitionek/notify-microsoft-teams.git"
   },
-  "keywords"       : [
-	"GitHub",
-	"Actions",
-	"JavaScript"
+  "husky": {
+    "hooks": {
+      "pre-commit": "npm run package && git add dist/index.js"
+    }
+  },
+  "keywords": [
+    "GitHub",
+    "Actions",
+    "JavaScript"
   ],
-  "author"         : "GitHub",
-  "license"        : "MIT",
-  "bugs"           : {
-	"url": "https://github.com/Skitionek/notify-microsoft-teams/issues"
+  "author": "GitHub",
+  "license": "MIT",
+  "bugs": {
+    "url": "https://github.com/Skitionek/notify-microsoft-teams/issues"
   },
-  "homepage"       : "https://github.com/Skitionek/notify-microsoft-teams#readme",
-  "dependencies"   : {
-	"@actions/core"   : "^1.9.1",
-	"@octokit/rest"   : "^17.11.2",
-	"botbuilder"      : "^4.19.0",
-	"lodash.merge"    : "^4.6.2",
-	"ms-teams-webhook": "^1.0.4"
+  "homepage": "https://github.com/Skitionek/notify-microsoft-teams#readme",
+  "dependencies": {
+    "@actions/core": "^1.9.1",
+    "@octokit/rest": "^17.11.2",
+    "botbuilder": "^4.19.0",
+    "lodash.merge": "^4.6.2",
+    "ms-teams-webhook": "^1.0.4",
+    "@snyk/protect": "latest"
   },
   "devDependencies": {
-	"@actions/github"                        : "^2.1.1",
-	"@babel/cli"                             : "^7.8.4",
-	"@babel/core"                            : "^7.9.0",
-	"@babel/plugin-proposal-class-properties": "^7.8.3",
-	"@babel/preset-env"                      : "^7.9.5",
-	"@semantic-release/changelog"            : "^5.0.1",
-	"@semantic-release/git"                  : "^9.0.0",
-	"@zeit/ncc"                              : "^0.20.5",
-	"eslint"                                 : "^6.3.0",
-	"husky"                                  : "^4.2.5",
-	"jest"                                   : "^24.9.0"
+    "@actions/github": "^2.1.1",
+    "@babel/cli": "^7.8.4",
+    "@babel/core": "^7.9.0",
+    "@babel/plugin-proposal-class-properties": "^7.8.3",
+    "@babel/preset-env": "^7.9.5",
+    "@semantic-release/changelog": "^5.0.1",
+    "@semantic-release/git": "^9.0.0",
+    "@zeit/ncc": "^0.20.5",
+    "eslint": "^6.3.0",
+    "husky": "^4.2.5",
+    "jest": "^24.9.0"
+  },
+  "release": {
+    "plugins": [
+      "@semantic-release/commit-analyzer",
+      "@semantic-release/release-notes-generator",
+      "@semantic-release/github",
+      "@semantic-release/changelog",
+      "@semantic-release/git"
+    ],
+    "branch": "master"
   },
-  "release"        : {
-	"plugins": [
-	  "@semantic-release/commit-analyzer",
-	  "@semantic-release/release-notes-generator",
-	  "@semantic-release/github",
-	  "@semantic-release/changelog",
-	  "@semantic-release/git"
-	],
-	"branch" : "master"
+  "babel": {
+    "plugins": [
+      "@babel/plugin-proposal-class-properties"
+    ],
+    "presets": [
+      [
+        "@babel/preset-env",
+        {
+          "targets": {
+            "node": "16"
+          }
+        }
+      ]
+    ]
   },
-  "babel"          : {
-	"plugins": [
-	  "@babel/plugin-proposal-class-properties"
-	],
-	"presets": [
-	  [
-		"@babel/preset-env",
-		{
-		  "targets": {
-			"node": "16"
-		  }
-		}
-	  ]
-	]
-  }
+  "snyk": true
 }