fix: add selective dependency resolution to fix vulnerability

https://nodesecurity.io/advisories/1468
bcgov · Feb 10, 2020 · 1f5313c · 1f5313c
1 parent 9120719
commit 1f5313c
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 6 deletions.
diff --git a/app/package.json b/app/package.json
@@ -95,7 +95,9 @@
     },
     "overrides": [
       {
-        "files": ["cypress/integration/*.spec.js"],
+        "files": [
+          "cypress/integration/*.spec.js"
+        ],
         "rules": {
           "jest/valid-expect-in-promise": 0,
           "promise/prefer-await-to-then": 0
@@ -217,7 +219,8 @@
     "@storybook/**/terser-webpack-plugin": "^1.4.2",
     "xo/open-editor/open": "^7.0.0",
     "xo/prettier": "^1.19.1",
-    "jest/jest-cli/@jest/core/@jest/reporters/istanbul-reports/handlebars": "^4.5.3"
+    "jest/jest-cli/@jest/core/@jest/reporters/istanbul-reports/handlebars": "^4.5.3",
+    "wait-on/@hapi/joi/@hapi/topo/@hapi/hoek": "8.5.1"
   },
   "jest": {
     "testMatch": [

diff --git a/app/yarn.lock b/app/yarn.lock
@@ -1471,10 +1471,10 @@
   resolved "https://registry.yarnpkg.com/@hapi/bourne/-/bourne-1.3.2.tgz#0a7095adea067243ce3283e1b56b8a8f453b242a"
   integrity sha512-1dVNHT76Uu5N3eJNTYcvxee+jzX4Z9lfciqRRHCU27ihbUcYi+iSc2iml5Ke1LXe1SyJCLA0+14Jh4tXJgOppA==
 
-"@hapi/hoek@8.x.x", "@hapi/hoek@^8.3.0":
-  version "8.5.0"
-  resolved "https://registry.yarnpkg.com/@hapi/hoek/-/hoek-8.5.0.tgz#2f9ce301c8898e1c3248b0a8564696b24d1a9a5a"
-  integrity sha512-7XYT10CZfPsH7j9F1Jmg1+d0ezOux2oM2GfArAzLwWe4mE2Dr3hVjsAL6+TFY49RRJlCdJDMw3nJsLFroTc8Kw==
+"@hapi/hoek@8.5.1", "@hapi/hoek@8.x.x", "@hapi/hoek@^8.3.0":
+  version "8.5.1"
+  resolved "https://registry.yarnpkg.com/@hapi/hoek/-/hoek-8.5.1.tgz#fde96064ca446dec8c55a8c2f130957b070c6e06"
+  integrity sha512-yN7kbciD87WzLGc5539Tn0sApjyiGHAJgKvG9W8C7O+6c7qmoQMfVs0W4bX17eqz6C78QJqqFrtgdK5EWf6Qow==
 
 "@hapi/joi@^15.0.3":
   version "15.1.1"