From e1fc7b4b7aa1225dff69f47077f3c3495072ece9 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 11 Feb 2024 18:01:25 +0000 Subject: [PATCH] fix: deps/npm/node_modules/pacote/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-IP-6240864 --- deps/npm/node_modules/pacote/package.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/deps/npm/node_modules/pacote/package.json b/deps/npm/node_modules/pacote/package.json index f49c23147a80ca..ea741f8e1b052d 100644 --- a/deps/npm/node_modules/pacote/package.json +++ b/deps/npm/node_modules/pacote/package.json @@ -43,7 +43,7 @@ "@npmcli/git": "^3.0.0", "@npmcli/installed-package-contents": "^1.0.7", "@npmcli/promise-spawn": "^1.2.0", - "@npmcli/run-script": "^3.0.1", + "@npmcli/run-script": "^7.0.2", "cacache": "^16.0.0", "chownr": "^2.0.0", "fs-minipass": "^2.1.0", @@ -53,7 +53,7 @@ "npm-package-arg": "^9.0.0", "npm-packlist": "^4.0.0", "npm-pick-manifest": "^7.0.0", - "npm-registry-fetch": "^13.0.1", + "npm-registry-fetch": "^15.0.0", "proc-log": "^2.0.0", "promise-retry": "^2.0.1", "read-package-json": "^5.0.0",