From 5ee0a75f05aa0827685d74bcc0322be9caf37576 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 2 Dec 2023 17:56:20 +0000 Subject: [PATCH] fix: package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116 - https://snyk.io/vuln/SNYK-JS-SEMVER-3247795 - https://snyk.io/vuln/SNYK-JS-WORDWRAP-3149973 --- package.json | 22 +++++++++++----------- 1 file changed, 11 insertions(+), 11 deletions(-) diff --git a/package.json b/package.json index c11da5b05417e..469c18af86a36 100644 --- a/package.json +++ b/package.json @@ -52,11 +52,11 @@ }, "dependencies": { "@isaacs/string-locale-compare": "^1.1.0", - "@npmcli/arborist": "^6.2.9", + "@npmcli/arborist": "^7.0.0", "@npmcli/config": "^6.2.0", "@npmcli/map-workspaces": "^3.0.4", "@npmcli/package-json": "^3.1.1", - "@npmcli/run-script": "^6.0.2", + "@npmcli/run-script": "^7.0.2", "abbrev": "^2.0.0", "archy": "~1.0.0", "cacache": "^17.1.2", @@ -75,22 +75,22 @@ "is-cidr": "^4.0.2", "json-parse-even-better-errors": "^3.0.0", "libnpmaccess": "^7.0.2", - "libnpmdiff": "^5.0.17", - "libnpmexec": "^6.0.0", - "libnpmfund": "^4.0.17", + "libnpmdiff": "^6.0.0", + "libnpmexec": "^7.0.0", + "libnpmfund": "^4.0.20", "libnpmhook": "^9.0.3", "libnpmorg": "^5.0.4", - "libnpmpack": "^5.0.17", + "libnpmpack": "^6.0.0", "libnpmpublish": "^7.3.0", "libnpmsearch": "^6.0.2", "libnpmteam": "^5.0.3", - "libnpmversion": "^4.0.2", + "libnpmversion": "^5.0.0", "make-fetch-happen": "^11.1.1", "minimatch": "^9.0.0", "minipass": "^5.0.0", "minipass-pipeline": "^1.2.4", "ms": "^2.1.2", - "node-gyp": "^9.3.1", + "node-gyp": "^10.0.0", "nopt": "^7.1.0", "npm-audit-report": "^5.0.0", "npm-install-checks": "^6.1.1", @@ -101,7 +101,7 @@ "npm-user-validate": "^2.0.0", "npmlog": "^7.0.1", "p-map": "^4.0.0", - "pacote": "^15.1.3", + "pacote": "^17.0.4", "parse-conflict-json": "^3.0.1", "proc-log": "^3.0.0", "qrcode-terminal": "^0.12.0", @@ -192,7 +192,7 @@ "@npmcli/mock-globals": "^1.0.0", "@npmcli/mock-registry": "^1.0.0", "@npmcli/promise-spawn": "^6.0.2", - "@npmcli/template-oss": "4.14.1", + "@npmcli/template-oss": "4.21.0", "@tufjs/repo-mock": "^1.3.1", "diff": "^5.1.0", "licensee": "^10.0.0", @@ -202,7 +202,7 @@ "remark-gfm": "^3.0.1", "remark-github": "^11.2.4", "spawk": "^1.7.1", - "tap": "^16.3.4" + "tap": "^18.0.0" }, "scripts": { "dependencies": "node scripts/bundle-and-gitignore-deps.js && node scripts/dependency-graph.js",