From 3434f78bee190aa5eb8c0a9fa0408d941e32c774 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 24 Aug 2024 16:18:02 +0000 Subject: [PATCH] fix: docs/package.json, docs/package-lock.json & docs/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- docs/.snyk | 36 ++++++++++++++++++++++++++++++++++++ docs/package-lock.json | 21 +++++++++++++-------- docs/package.json | 10 +++++++--- 3 files changed, 56 insertions(+), 11 deletions(-) create mode 100644 docs/.snyk diff --git a/docs/.snyk b/docs/.snyk new file mode 100644 index 0000000000000..2b9768dbafa05 --- /dev/null +++ b/docs/.snyk @@ -0,0 +1,36 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - docz > gatsby > gatsby-cli > gatsby-recipes > @babel/template > @babel/types > lodash: + patched: '2024-08-24T16:17:48.305Z' + id: SNYK-JS-LODASH-567746 + path: >- + docz > gatsby > gatsby-cli > gatsby-recipes > @babel/template > + @babel/types > lodash + - gatsby-theme-docz > gatsby > gatsby-cli > gatsby-recipes > remark-mdxjs > @babel/core > lodash: + patched: '2024-08-24T16:17:48.305Z' + id: SNYK-JS-LODASH-567746 + path: >- + gatsby-theme-docz > gatsby > gatsby-cli > gatsby-recipes > + remark-mdxjs > @babel/core > lodash + - docz > gatsby > gatsby-cli > gatsby-recipes > remark-mdxjs > @babel/core > lodash: + patched: '2024-08-24T16:17:48.305Z' + id: SNYK-JS-LODASH-567746 + path: >- + docz > gatsby > gatsby-cli > gatsby-recipes > remark-mdxjs > + @babel/core > lodash + - gatsby-theme-docz > gatsby > gatsby-cli > gatsby-recipes > remark-mdxjs > @babel/core > @babel/helper-module-transforms > lodash: + patched: '2024-08-24T16:17:48.305Z' + id: SNYK-JS-LODASH-567746 + path: >- + gatsby-theme-docz > gatsby > gatsby-cli > gatsby-recipes > + remark-mdxjs > @babel/core > @babel/helper-module-transforms > lodash + - docz > gatsby > gatsby-cli > gatsby-recipes > remark-mdxjs > @babel/core > @babel/helper-module-transforms > lodash: + patched: '2024-08-24T16:17:48.305Z' + id: SNYK-JS-LODASH-567746 + path: >- + docz > gatsby > gatsby-cli > gatsby-recipes > remark-mdxjs > + @babel/core > @babel/helper-module-transforms > lodash diff --git a/docs/package-lock.json b/docs/package-lock.json index 46b6115ea5343..2c968aa7714d1 100644 --- a/docs/package-lock.json +++ b/docs/package-lock.json @@ -2691,6 +2691,11 @@ } } }, + "@snyk/protect": { + "version": "1.1292.4", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.1292.4.tgz", + "integrity": "sha512-13ZSAV6fBIx/DtM4WyN/aeWaWQO8vV7RoSXxLefZ4V4oUBZ+LfsR2VdCM2Qo8aQaUK7/YlBgZo8To8MEn9Iocg==" + }, "@styled-system/background": { "version": "5.1.2", "resolved": "https://registry.npmjs.org/@styled-system/background/-/background-5.1.2.tgz", @@ -23309,6 +23314,14 @@ "resolved": "https://registry.npmjs.org/strict-uri-encode/-/strict-uri-encode-1.1.0.tgz", "integrity": "sha1-J5siXfHVgrH1TmWt3UNS4Y+qBxM=" }, + "string_decoder": { + "version": "1.1.1", + "resolved": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.1.1.tgz", + "integrity": "sha512-n/ShnvDi6FHbbVfviro+WojiFzv+s8MPMHBczVePfUpDJLwoLT0ht1l4YwBCbi8pJAveEEdnkHyPyTP/mzRfwg==", + "requires": { + "safe-buffer": "~5.1.0" + } + }, "string-convert": { "version": "0.2.1", "resolved": "https://registry.npmjs.org/string-convert/-/string-convert-0.2.1.tgz", @@ -23386,14 +23399,6 @@ "es-abstract": "^1.17.5" } }, - "string_decoder": { - "version": "1.1.1", - "resolved": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.1.1.tgz", - "integrity": "sha512-n/ShnvDi6FHbbVfviro+WojiFzv+s8MPMHBczVePfUpDJLwoLT0ht1l4YwBCbi8pJAveEEdnkHyPyTP/mzRfwg==", - "requires": { - "safe-buffer": "~5.1.0" - } - }, "stringify-entities": { "version": "3.1.0", "resolved": "https://registry.npmjs.org/stringify-entities/-/stringify-entities-3.1.0.tgz", diff --git a/docs/package.json b/docs/package.json index 9458f576d0ed6..e351f4c7b7f25 100644 --- a/docs/package.json +++ b/docs/package.json @@ -39,7 +39,8 @@ "react-helmet": "^6.1.0", "swagger-ui-react": "^3.36.2", "theme-ui": "^0.3.1", - "three": "^0.125.0" + "three": "^0.125.0", + "@snyk/protect": "latest" }, "devDependencies": { "eslint-config-airbnb": "^18.2.1", @@ -61,7 +62,9 @@ "clean": "gatsby clean", "lint": "eslint src/ --ext .ts,.js,.tsx,.jsx", "lint-fix": "eslint --fix src/ --ext .ts,.js,.tsx,.jsx", - "test": "echo \"Write tests! -> https://gatsby.dev/unit-testing\" && exit 1" + "test": "echo \"Write tests! -> https://gatsby.dev/unit-testing\" && exit 1", + "prepare": "npm run snyk-protect", + "snyk-protect": "snyk-protect" }, "repository": { "type": "git", @@ -75,5 +78,6 @@ }, "bugs": { "url": "https://github.com/gatsbyjs/gatsby/issues" - } + }, + "snyk": true }