Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Fix for 1 vulnerabilities #820

Open
wants to merge 47 commits into
base: main
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
47 commits
Select commit Hold shift + click to select a range
fc12342
fix: server/gitrest/Dockerfile to reduce vulnerabilities
snyk-bot Apr 18, 2022
669a86b
fix: server/routerlicious/packages/lambdas-driver/package.json to red…
snyk-bot Apr 21, 2022
23beb8a
Merge pull request #376 from MarcelRaschke/snyk-fix-26527be55298fe319…
MarcelRaschke Apr 21, 2022
9b687af
fix: server/routerlicious/Dockerfile to reduce vulnerabilities
snyk-bot Apr 28, 2022
cb45784
Merge pull request #375 from MarcelRaschke/snyk-fix-389a2b9249fa1ff98…
MarcelRaschke Apr 29, 2022
99de6b8
fix: server/auspkn/Dockerfile to reduce vulnerabilities
snyk-bot May 8, 2022
f82f4aa
fix: server/headless-agent/Dockerfile to reduce vulnerabilities
snyk-bot May 9, 2022
c7914cd
Merge pull request #398 from MarcelRaschke/snyk-fix-04a2211d23c90419e…
MarcelRaschke May 9, 2022
9c0cf09
Merge pull request #397 from MarcelRaschke/snyk-fix-57eae7f5301126230…
MarcelRaschke May 9, 2022
bb44044
Merge pull request #392 from MarcelRaschke/snyk-fix-53c876438b110e2c6…
MarcelRaschke May 9, 2022
7e94b11
fix: server/headless-agent/Dockerfile to reduce vulnerabilities
snyk-bot May 17, 2022
4651c14
Merge pull request #403 from MarcelRaschke/snyk-fix-5406ea93256beebdc…
MarcelRaschke May 24, 2022
d9753e6
fix: server/historian/Dockerfile to reduce vulnerabilities
snyk-bot May 31, 2022
db31888
fix: server/routerlicious/Dockerfile to reduce vulnerabilities
snyk-bot Jun 1, 2022
9b726b1
Merge pull request #416 from MarcelRaschke/snyk-fix-b588ba7c00a511109…
MarcelRaschke Jun 5, 2022
78acf90
Merge pull request #411 from MarcelRaschke/snyk-fix-2180e61df0ab2b350…
MarcelRaschke Jun 5, 2022
87ce08a
fix: server/service-monitor/package.json & server/service-monitor/pac…
snyk-bot Jun 11, 2022
2f70af8
Merge pull request #421 from MarcelRaschke/snyk-fix-95c458c5469b3d863…
MarcelRaschke Jun 11, 2022
5716524
Bump async from 2.6.3 to 2.6.4 in /tools/generator-fluid
dependabot[bot] Jun 11, 2022
6eb66cf
Merge pull request #423 from MarcelRaschke/dependabot/npm_and_yarn/to…
MarcelRaschke Jun 11, 2022
167ffa5
fix: server/headless-agent/package.json & server/headless-agent/packa…
snyk-bot Jun 11, 2022
7f23320
Merge pull request #425 from MarcelRaschke/snyk-fix-5ae6624a7c39b81f0…
MarcelRaschke Jun 11, 2022
808d4d6
fix: server/historian/packages/historian-base/package.json to reduce …
snyk-bot Jun 11, 2022
c5722cf
Merge pull request #426 from MarcelRaschke/snyk-fix-3fb626009b82a271a…
MarcelRaschke Jun 11, 2022
f9ff4cb
fix: docs/themes/thxvscode/assets/js/package.json & docs/themes/thxvs…
snyk-bot Jun 17, 2022
8d32260
Merge pull request #428 from MarcelRaschke/snyk-fix-db0bbe786eb5cadab…
MarcelRaschke Jun 17, 2022
d3412b8
feat: upgrade @fluid-experimental/get-container from 0.37.4 to 1.2.0
snyk-bot Aug 2, 2022
b8fe757
fix: upgrade @fluidframework/protocol-definitions from 0.1021.0 to 0.…
snyk-bot Aug 4, 2022
d1f13f4
fix: upgrade @fluidframework/common-utils from 0.28.0 to 0.32.1
snyk-bot Aug 4, 2022
b693d48
feat: upgrade jwt-decode from 2.2.0 to 3.1.2
snyk-bot Aug 4, 2022
03fe938
Merge pull request #455 from MarcelRaschke/snyk-upgrade-5024f92cabc23…
MarcelRaschke Aug 11, 2022
d07aca9
Merge pull request #454 from MarcelRaschke/snyk-upgrade-22fa689dd09c5…
MarcelRaschke Aug 11, 2022
0512490
Bump moment from 2.25.3 to 2.29.4 in /tools/getkeys
dependabot[bot] Aug 11, 2022
130bce6
Merge pull request #453 from MarcelRaschke/snyk-upgrade-8729f355a78fb…
MarcelRaschke Aug 11, 2022
c4d1049
Merge pull request #456 from MarcelRaschke/dependabot/npm_and_yarn/to…
MarcelRaschke Aug 18, 2022
9a21790
Merge pull request #443 from MarcelRaschke/snyk-upgrade-68a7b51eaf58b…
MarcelRaschke Aug 18, 2022
5f82315
fix: tools/generator-fluid/app/templates/package.json to reduce vulne…
snyk-bot Aug 18, 2022
999f417
fix: server/historian/packages/historian-base/package.json to reduce …
snyk-bot Aug 18, 2022
ac58adc
fix: packages/dds/ink/package.json to reduce vulnerabilities
snyk-bot Aug 18, 2022
be38b75
fix: packages/hosts/base-host/package.json to reduce vulnerabilities
snyk-bot Aug 18, 2022
8f040d8
Merge pull request #510 from MarcelRaschke/snyk-fix-4c8c59a7a4c58124b…
MarcelRaschke Aug 18, 2022
f438539
Merge pull request #509 from MarcelRaschke/snyk-fix-b2ce38f9ce14e4bd1…
MarcelRaschke Aug 18, 2022
5100bee
Merge pull request #508 from MarcelRaschke/snyk-fix-575ebb1cea5b7f1f8…
MarcelRaschke Aug 18, 2022
005f77d
Merge pull request #507 from MarcelRaschke/snyk-fix-fe981c5384d9219cf…
MarcelRaschke Aug 18, 2022
4ca2fc7
fix: examples/data-objects/prosemirror/package.json to reduce vulnera…
snyk-bot Aug 18, 2022
2722e67
Merge pull request #534 from MarcelRaschke/snyk-fix-3b4213b0488d8d819…
MarcelRaschke Sep 19, 2022
c32be28
fix: examples/data-objects/vltava/package.json to reduce vulnerabilities
snyk-bot Nov 5, 2022
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion docs/themes/thxvscode/assets/js/package.json
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@
},
"dependencies": {
"bootstrap": "^3.4.0",
"jquery": "2.2.4",
"jquery": "3.5.0",
"js-cookie": "^2.1.4",
"lodash": "^4.17.4",
"react-dom": "^15.6.1",
Expand Down
8 changes: 4 additions & 4 deletions docs/themes/thxvscode/assets/js/yarn.lock
Original file line number Diff line number Diff line change
Expand Up @@ -2407,10 +2407,10 @@ isomorphic-fetch@^2.1.1:
node-fetch "^1.0.1"
whatwg-fetch ">=0.10.0"

jquery@2.2.4:
version "2.2.4"
resolved "https://registry.yarnpkg.com/jquery/-/jquery-2.2.4.tgz#2c89d6889b5eac522a7eea32c14521559c6cbf02"
integrity sha1-LInWiJterFIqfuoywUUhVZxsvwI=
jquery@3.5.0:
version "3.5.0"
resolved "https://registry.yarnpkg.com/jquery/-/jquery-3.5.0.tgz#9980b97d9e4194611c36530e7dc46a58d7340fc9"
integrity sha512-Xb7SVYMvygPxbFMpTFQiHh1J7HClEaThguL15N/Gg37Lri/qKyhRGZYzHRyLH8Stq3Aow0LsHO2O2ci86fCrNQ==

js-cookie@^2.1.4:
version "2.2.1"
Expand Down
2 changes: 1 addition & 1 deletion examples/apps/collaborative-textarea/package.json
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@
"webpack:dev": "webpack --env.development"
},
"dependencies": {
"@fluid-experimental/get-container": "^0.37.0",
"@fluid-experimental/get-container": "^1.2.0",
"@fluidframework/aqueduct": "^0.37.0",
"@fluidframework/common-definitions": "^0.19.1",
"@fluidframework/core-interfaces": "^0.37.0",
Expand Down
4 changes: 2 additions & 2 deletions examples/data-objects/prosemirror/package.json
Original file line number Diff line number Diff line change
Expand Up @@ -74,7 +74,7 @@
"@typescript-eslint/parser": "~4.14.0",
"concurrently": "^5.2.0",
"copyfiles": "^2.1.0",
"css-loader": "^1.0.0",
"css-loader": "^2.0.0",
"eslint": "~7.18.0",
"eslint-plugin-eslint-comments": "~3.2.0",
"eslint-plugin-import": "~2.22.1",
Expand All @@ -89,7 +89,7 @@
"typescript-formatter": "7.1.0",
"webpack": "^4.43.0",
"webpack-cli": "^3.3.11",
"webpack-dev-server": "^3.8.0",
"webpack-dev-server": "^4.7.3",
"webpack-merge": "^4.1.4"
},
"fluid": {
Expand Down
16 changes: 8 additions & 8 deletions examples/data-objects/vltava/package.json
Original file line number Diff line number Diff line change
Expand Up @@ -71,29 +71,29 @@
"@typescript-eslint/eslint-plugin": "~4.14.0",
"@typescript-eslint/parser": "~4.14.0",
"concurrently": "^5.2.0",
"css-loader": "^1.0.0",
"css-loader": "^4.0.0",
"eslint": "~7.18.0",
"eslint-plugin-eslint-comments": "~3.2.0",
"eslint-plugin-import": "~2.22.1",
"eslint-plugin-no-null": "~1.0.2",
"eslint-plugin-prefer-arrow": "~1.2.2",
"eslint-plugin-react": "~7.22.0",
"eslint-plugin-unicorn": "~26.0.1",
"html-loader": "^0.5.5",
"html-loader": "^1.0.0",
"jest": "^26.6.3",
"jest-junit": "^10.0.0",
"jest-puppeteer": "^4.3.0",
"puppeteer": "^1.20.0",
"rimraf": "^2.6.2",
"sass-loader": "^7.1.0",
"source-map-loader": "^0.2.4",
"sass-loader": "^9.0.0",
"source-map-loader": "^1.0.0",
"style-loader": "^1.0.0",
"ts-loader": "^6.1.2",
"ts-loader": "^8.0.14",
"typescript": "~4.1.3",
"typescript-formatter": "7.1.0",
"url-loader": "^2.1.0",
"webpack": "^4.43.0",
"webpack-cli": "^3.3.11",
"url-loader": "^4.0.0",
"webpack": "^5.0.0",
"webpack-cli": "^4.0.0",
"webpack-dev-server": "^3.8.0",
"webpack-merge": "^4.1.4"
},
Expand Down
2 changes: 1 addition & 1 deletion packages/dds/ink/package.json
Original file line number Diff line number Diff line change
Expand Up @@ -84,7 +84,7 @@
"eslint-plugin-prefer-arrow": "~1.2.2",
"eslint-plugin-react": "~7.22.0",
"eslint-plugin-unicorn": "~26.0.1",
"mocha": "^8.1.1",
"mocha": "^9.2.0",
"nyc": "^15.0.0",
"rimraf": "^2.6.2",
"typescript": "~4.1.3",
Expand Down
4 changes: 2 additions & 2 deletions packages/hosts/base-host/package.json
Original file line number Diff line number Diff line change
Expand Up @@ -92,15 +92,15 @@
"eslint-plugin-prefer-arrow": "~1.2.2",
"eslint-plugin-react": "~7.22.0",
"eslint-plugin-unicorn": "~26.0.1",
"mocha": "^8.1.1",
"mocha": "^9.2.0",
"nyc": "^15.0.0",
"rimraf": "^2.6.2",
"source-map-loader": "^0.2.4",
"ts-loader": "^6.1.2",
"typescript": "~4.1.3",
"typescript-formatter": "7.1.0",
"webpack": "^4.43.0",
"webpack-bundle-analyzer": "^3.8.0",
"webpack-bundle-analyzer": "^4.0.0",
"webpack-cli": "^3.3.11"
}
}
6 changes: 3 additions & 3 deletions packages/utils/tool-utils/package.json
Original file line number Diff line number Diff line change
Expand Up @@ -55,12 +55,12 @@
"temp-directory": "nyc/.nyc_output"
},
"dependencies": {
"@fluidframework/common-utils": "^0.28.0-0",
"@fluidframework/common-utils": "^0.32.1",
"@fluidframework/odsp-doclib-utils": "^0.37.0",
"@fluidframework/protocol-base": "^0.1021.0-0",
"@fluidframework/protocol-definitions": "^0.1021.0-0",
"@fluidframework/protocol-definitions": "^0.1028.2000",
"debug": "^4.1.1",
"jwt-decode": "^2.2.0",
"jwt-decode": "^3.1.2",
"proper-lockfile": "^4.1.1"
},
"devDependencies": {
Expand Down
2 changes: 1 addition & 1 deletion server/auspkn/Dockerfile
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
# Copyright (c) Microsoft Corporation. All rights reserved.
# Licensed under the MIT License.

FROM node:12.16.3-alpine AS base
FROM node:12-alpine AS base

RUN apk add --no-cache tini

Expand Down
2 changes: 1 addition & 1 deletion server/gitrest/Dockerfile
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
# Copyright (c) Microsoft Corporation. All rights reserved.
# Licensed under the MIT License.

FROM node:12.20.1-stretch AS base
FROM node:12.22-stretch AS base

# Add Tini
ENV TINI_VERSION v0.18.0
Expand Down
2 changes: 1 addition & 1 deletion server/headless-agent/Dockerfile
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
# Copyright (c) Microsoft Corporation. All rights reserved.
# Licensed under the MIT License.

FROM node:10.16.0-slim
FROM node:10.24.0-slim

# See https://crbug.com/795759
RUN apt-get update && apt-get install -yq libgconf-2-4 python make g++
Expand Down
Loading