From f33e072877ccf2685be3f8d93cd2fcd3e9679627 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 20 Jun 2023 19:23:40 +0000 Subject: [PATCH] fix: workspaces/arborist/test/fixtures/semver-installed-with-old-package-lock/package.json & workspaces/arborist/test/fixtures/semver-installed-with-old-package-lock/package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-SEMVER-3247795 --- .../package-lock.json | 22 ++++++++++++++++--- .../package.json | 2 +- 2 files changed, 20 insertions(+), 4 deletions(-) diff --git a/workspaces/arborist/test/fixtures/semver-installed-with-old-package-lock/package-lock.json b/workspaces/arborist/test/fixtures/semver-installed-with-old-package-lock/package-lock.json index 9362bb609ac61..02c14d26abaa7 100644 --- a/workspaces/arborist/test/fixtures/semver-installed-with-old-package-lock/package-lock.json +++ b/workspaces/arborist/test/fixtures/semver-installed-with-old-package-lock/package-lock.json @@ -2,10 +2,26 @@ "requires": true, "lockfileVersion": 1, "dependencies": { + "lru-cache": { + "version": "6.0.0", + "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz", + "integrity": "sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==", + "requires": { + "yallist": "^4.0.0" + } + }, "semver": { - "version": "7.3.2", - "resolved": "https://registry.npmjs.org/semver/-/semver-7.3.2.tgz", - "integrity": "sha512-OrOb32TeeambH6UrhtShmF7CRDqhL6/5XpPNp2DuRH6+9QLw/orhp72j87v8Qa1ScDkvrrBNpZcDejAirJmfXQ==" + "version": "7.5.2", + "resolved": "https://registry.npmjs.org/semver/-/semver-7.5.2.tgz", + "integrity": "sha512-SoftuTROv/cRjCze/scjGyiDtcUyxw1rgYQSZY7XTmtR5hX+dm76iDbTH8TkLPHCQmlbQVSSbNZCPM2hb0knnQ==", + "requires": { + "lru-cache": "^6.0.0" + } + }, + "yallist": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz", + "integrity": "sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==" } } } diff --git a/workspaces/arborist/test/fixtures/semver-installed-with-old-package-lock/package.json b/workspaces/arborist/test/fixtures/semver-installed-with-old-package-lock/package.json index 56e578b9eb154..65d8ade6e62ff 100644 --- a/workspaces/arborist/test/fixtures/semver-installed-with-old-package-lock/package.json +++ b/workspaces/arborist/test/fixtures/semver-installed-with-old-package-lock/package.json @@ -1,5 +1,5 @@ { "dependencies": { - "semver": "^7.3.2" + "semver": "^7.5.2" } }