Skip to content

Commit

Permalink
fix(deps): ensure glob-parent is above 5.1.2 - CVE-2020-28469
Browse files Browse the repository at this point in the history
1. Upgrade cpy-cli to 4.1.0
2. Force glob-parent to be on 5.1.2

TODO: The proper solution to 2) is to upgrade Angular to 13
so we do need to do that later when more time is available.

Fixes hyperledger-cacti#1916

Signed-off-by: Peter Somogyvari <peter.somogyvari@accenture.com>
  • Loading branch information
petermetz committed Mar 14, 2022
1 parent c7ef800 commit 9cfd5fb
Show file tree
Hide file tree
Showing 3 changed files with 84 additions and 150 deletions.
3 changes: 2 additions & 1 deletion package.json
Original file line number Diff line number Diff line change
Expand Up @@ -86,7 +86,7 @@
"@typescript-eslint/parser": "4.29.1",
"buffer": "6.0.3",
"codecov": "3.8.3",
"cpy-cli": "3.1.1",
"cpy-cli": "4.1.0",
"cross-env": "7.0.3",
"crypto-browserify": "3.12.0",
"cspell": "5.6.6",
Expand Down Expand Up @@ -143,6 +143,7 @@
"webpack-cli": "4.7.2"
},
"resolutions": {
"glob-parent": "5.1.2",
"underscore": "1.13.2"
}
}
2 changes: 1 addition & 1 deletion packages/cactus-plugin-keychain-memory-wasm/package.json
Original file line number Diff line number Diff line change
Expand Up @@ -68,7 +68,7 @@
},
"devDependencies": {
"@types/express": "4.17.13",
"cpy-cli": "3.1.1",
"cpy-cli": "4.1.0",
"del-cli": "4.0.1"
},
"engines": {
Expand Down
Loading

0 comments on commit 9cfd5fb

Please sign in to comment.