diff --git a/.snyk b/.snyk index 348209b538..0d8c09efa9 100644 --- a/.snyk +++ b/.snyk @@ -1,5 +1,5 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.25.0 +version: v1.25.1 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: @@ -22,3 +22,8 @@ patch: patched: '2023-04-03T07:20:36.731Z' - tap > nyc > istanbul-lib-instrument > babel-template > babel-traverse > babel-types > lodash: patched: '2023-04-03T07:20:36.731Z' + 'npm:ms:20151024': + - humanize-ms > ms: + patched: '2023-10-31T07:52:09.998Z' + id: 'npm:ms:20151024' + path: humanize-ms > ms diff --git a/package.json b/package.json index 763464c0bd..9f08d545a2 100644 --- a/package.json +++ b/package.json @@ -38,23 +38,23 @@ "method-override": "latest", "moment": "2.29.4", "mongodb": "^3.5.9", - "mongoose": "5.13.15", + "mongoose": "5.13.20", "morgan": "latest", - "ms": "^0.7.1", + "ms": "^2.0.0", "mysql": "^2.18.1", "npmconf": "2.1.3", "optional": "^0.1.3", "st": "1.2.2", "stream-buffers": "^3.0.1", - "tap": "^14.6.8", - "typeorm": "^0.2.25", - "validator": "^13.5.2", + "tap": "^15.0.0", + "typeorm": "^0.3.14", + "validator": "^13.7.0", "@snyk/protect": "latest" }, "devDependencies": { "browserify": "^13.1.1", "nodemon": "^2.0.7", - "snyk": "^1.1133.0" + "snyk": "^1.1237.0" }, "license": "Apache-2.0", "snyk": true