From 0cb25017457c479f2da8b93fb5ea2bea7b2e2ce3 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 25 Mar 2024 15:08:45 +0000 Subject: [PATCH] fix: package.json & yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-MARKDOWNIT-6483324 --- package.json | 2 +- yarn.lock | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/package.json b/package.json index a5cdca0..47573e6 100644 --- a/package.json +++ b/package.json @@ -36,7 +36,7 @@ "koa-jwt": "^4.0.1", "koa-sse-stream": "^0.2.0", "lodash": "^4.17.20", - "markdown-it": "^13.0.1", + "markdown-it": "^13.0.2", "markdown-it-emoji": "^2.0.0", "markdown-it-github-headings": "^2.0.0", "markdown-it-highlightjs": "^4.0.1", diff --git a/yarn.lock b/yarn.lock index fc4d72c..be79337 100644 --- a/yarn.lock +++ b/yarn.lock @@ -7480,10 +7480,10 @@ markdown-it-task-checkbox@^1.0.6: resolved "https://registry.yarnpkg.com/markdown-it-task-checkbox/-/markdown-it-task-checkbox-1.0.6.tgz#9ebd7b6382e99162264605bc580f2ac118be4242" integrity sha512-7pxkHuvqTOu3iwVGmDPeYjQg+AIS9VQxzyLP9JCg9lBjgPAJXGEkChK6A2iFuj3tS0GV3HG2u5AMNhcQqwxpJw== -markdown-it@^13.0.1: - version "13.0.1" - resolved "https://registry.npmjs.org/markdown-it/-/markdown-it-13.0.1.tgz#c6ecc431cacf1a5da531423fc6a42807814af430" - integrity sha512-lTlxriVoy2criHP0JKRhO2VDG9c2ypWCsT237eDiLqi09rmbKoUetyGHq2uOIRoRS//kfoJckS0eUzzkDR+k2Q== +markdown-it@^13.0.2: + version "13.0.2" + resolved "https://registry.yarnpkg.com/markdown-it/-/markdown-it-13.0.2.tgz#1bc22e23379a6952e5d56217fbed881e0c94d536" + integrity sha512-FtwnEuuK+2yVU7goGn/MJ0WBZMM9ZPgU9spqlFs7/A/pDIUNSOQZhUgOqYCficIuR2QaFnrt8LHqBWsbTAoI5w== dependencies: argparse "^2.0.1" entities "~3.0.1"