From eb220f2e3768901ae7e0463da9a95b8be3732d2d Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 5 Oct 2019 00:00:14 +0000 Subject: [PATCH] fix: test/fixtures/pkg-mean-io/package.json & test/fixtures/pkg-mean-io/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-HTTPSPROXYAGENT-469131 --- test/fixtures/pkg-mean-io/.snyk | 14 ++++++++++++++ test/fixtures/pkg-mean-io/package.json | 2 +- 2 files changed, 15 insertions(+), 1 deletion(-) create mode 100644 test/fixtures/pkg-mean-io/.snyk diff --git a/test/fixtures/pkg-mean-io/.snyk b/test/fixtures/pkg-mean-io/.snyk new file mode 100644 index 0000000000..6ac410266e --- /dev/null +++ b/test/fixtures/pkg-mean-io/.snyk @@ -0,0 +1,14 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.13.5 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-HTTPSPROXYAGENT-469131: + - snyk > proxy-agent > https-proxy-agent: + patched: '2019-10-05T00:00:12.705Z' + - snyk > proxy-agent > pac-proxy-agent > https-proxy-agent: + patched: '2019-10-05T00:00:12.705Z' + - meanio > snyk > proxy-agent > https-proxy-agent: + patched: '2019-10-05T00:00:12.705Z' + - meanio > snyk > proxy-agent > pac-proxy-agent > https-proxy-agent: + patched: '2019-10-05T00:00:12.705Z' diff --git a/test/fixtures/pkg-mean-io/package.json b/test/fixtures/pkg-mean-io/package.json index 5f40c3ca25..b3096f350b 100644 --- a/test/fixtures/pkg-mean-io/package.json +++ b/test/fixtures/pkg-mean-io/package.json @@ -55,7 +55,7 @@ "shelljs": "latest", "swig": "latest", "view-helpers": "latest", - "snyk": "*" + "snyk": "^1.231.0" }, "devDependencies": { "del": "latest",