From 3f5473d86f99da9cdc07cc0c94981ba125200a05 Mon Sep 17 00:00:00 2001 From: Snyk bot Date: Tue, 19 May 2020 23:07:42 +0300 Subject: [PATCH] [Snyk] Fix for 1 vulnerabilities (#18) * fix: tests/ui-regression/package.json & tests/ui-regression/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 * fix: tests/ui-regression/package.json & tests/ui-regression/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- tests/ui-regression/.snyk | 64 ++++++++++++++++++++++++++++++++ tests/ui-regression/package.json | 40 +++++++++++--------- 2 files changed, 86 insertions(+), 18 deletions(-) create mode 100644 tests/ui-regression/.snyk diff --git a/tests/ui-regression/.snyk b/tests/ui-regression/.snyk new file mode 100644 index 0000000000000..21a30959a1bd8 --- /dev/null +++ b/tests/ui-regression/.snyk @@ -0,0 +1,64 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.14.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - mocha > yargs-unparser > lodash: + patched: '2020-05-01T00:34:28.276Z' + - polyserve > http-proxy-middleware > lodash: + patched: '2020-05-01T00:34:28.276Z' + - polyserve > polymer-build > @babel/plugin-transform-block-scoping > lodash: + patched: '2020-05-01T00:34:28.276Z' + - polyserve > polymer-build > babel-preset-minify > lodash: + patched: '2020-05-01T00:34:28.276Z' + - polyserve > polymer-build > @babel/plugin-transform-sticky-regex > @babel/helper-regex > lodash: + patched: '2020-05-01T00:34:28.276Z' + - polyserve > polymer-build > polymer-analyzer > @babel/traverse > lodash: + patched: '2020-05-01T00:34:28.276Z' + - polyserve > polymer-build > babel-preset-minify > babel-plugin-minify-dead-code-elimination > lodash: + patched: '2020-05-01T00:34:28.276Z' + - polyserve > polymer-project-config > winston > async > lodash: + patched: '2020-05-01T00:34:28.276Z' + - polyserve > polymer-build > polymer-bundler > babel-types > lodash: + patched: '2020-05-01T00:34:28.276Z' + - polyserve > polymer-build > polymer-bundler > babel-generator > lodash: + patched: '2020-05-01T00:34:28.276Z' + - polyserve > polymer-build > polymer-bundler > babel-traverse > lodash: + patched: '2020-05-01T00:34:28.276Z' + - polyserve > polymer-build > @babel/plugin-transform-unicode-regex > @babel/helper-create-regexp-features-plugin > @babel/helper-regex > lodash: + patched: '2020-05-01T00:34:28.276Z' + - polyserve > polymer-build > polymer-analyzer > @babel/traverse > @babel/generator > lodash: + patched: '2020-05-01T00:34:28.276Z' + - polyserve > polymer-build > polymer-bundler > polymer-analyzer > @babel/traverse > lodash: + patched: '2020-05-01T00:34:28.276Z' + - polyserve > polymer-project-config > plylog > winston > async > lodash: + patched: '2020-05-01T00:34:28.276Z' + - polyserve > polymer-build > plylog > winston > async > lodash: + patched: '2020-05-01T00:34:28.276Z' + - polyserve > polymer-build > polymer-project-config > winston > async > lodash: + patched: '2020-05-01T00:34:28.276Z' + - polyserve > polymer-build > polymer-bundler > babel-generator > babel-types > lodash: + patched: '2020-05-01T00:34:28.276Z' + - polyserve > polymer-build > polymer-bundler > babel-traverse > babel-types > lodash: + patched: '2020-05-01T00:34:28.276Z' + - polyserve > polymer-build > @babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > lodash: + patched: '2020-05-01T00:34:28.276Z' + - polyserve > polymer-build > polymer-analyzer > @babel/traverse > @babel/helper-split-export-declaration > @babel/types > lodash: + patched: '2020-05-01T00:34:28.276Z' + - polyserve > polymer-build > polymer-bundler > polymer-analyzer > @babel/traverse > @babel/generator > lodash: + patched: '2020-05-01T00:34:28.276Z' + - polyserve > polymer-build > polymer-project-config > plylog > winston > async > lodash: + patched: '2020-05-01T00:34:28.276Z' + - polyserve > polymer-build > @babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > @babel/generator > lodash: + patched: '2020-05-01T00:34:28.276Z' + - polyserve > polymer-build > polymer-bundler > polymer-analyzer > @babel/traverse > @babel/helper-split-export-declaration > @babel/types > lodash: + patched: '2020-05-01T00:34:28.276Z' + - polyserve > polymer-build > polymer-analyzer > @babel/traverse > @babel/helper-function-name > @babel/template > @babel/types > lodash: + patched: '2020-05-01T00:34:28.276Z' + - polyserve > polymer-build > @babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > @babel/helper-split-export-declaration > @babel/types > lodash: + patched: '2020-05-01T00:34:28.276Z' + - polyserve > polymer-build > polymer-bundler > polymer-analyzer > @babel/traverse > @babel/helper-function-name > @babel/template > @babel/types > lodash: + patched: '2020-05-01T00:34:28.276Z' + - polyserve > polymer-build > @babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > @babel/helper-function-name > @babel/template > @babel/types > lodash: + patched: '2020-05-01T00:34:28.276Z' diff --git a/tests/ui-regression/package.json b/tests/ui-regression/package.json index 57923f3e4e9a1..faf259790488c 100644 --- a/tests/ui-regression/package.json +++ b/tests/ui-regression/package.json @@ -1,20 +1,24 @@ { - "name": "ui-regression", - "version": "1.0.0", - "description": "", - "main": "index.js", - "scripts": { - "test": "mocha test/" - }, - "author": "", - "dependencies": { - "chai": "^4.1.2", - "mocha": "^7.1.1", - "mocha-json-report": "0.0.2", - "pixelmatch": "^5.0.2", - "png-js": "^0.1.1", - "pngjs2": "^2.0.0", - "polyserve": "^0.27.13", - "puppeteer": "^1.6.1" - } + "name": "ui-regression", + "version": "1.0.0", + "description": "", + "main": "index.js", + "scripts": { + "test": "mocha test/", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" + }, + "author": "", + "dependencies": { + "chai": "^4.1.2", + "mocha": "^7.1.1", + "mocha-json-report": "0.0.2", + "pixelmatch": "^5.0.2", + "png-js": "^0.1.1", + "pngjs2": "^2.0.0", + "polyserve": "^0.27.13", + "puppeteer": "^1.6.1", + "snyk": "^1.316.1" + }, + "snyk": true }