From 0d57ab3538dc896463cdd541138ce76ef926677a Mon Sep 17 00:00:00 2001 From: Oleg Ulyanov Date: Fri, 14 Dec 2018 10:44:34 +0300 Subject: [PATCH] chore: partially fix security audit --- package.json | 8 ++--- yarn.lock | 91 +++++++++++++++++++++++++++++++++------------------- 2 files changed, 62 insertions(+), 37 deletions(-) diff --git a/package.json b/package.json index 1d49b68..1e4458d 100644 --- a/package.json +++ b/package.json @@ -34,14 +34,14 @@ "lodash": "~4.17.10", "memorystream": "~0.3.1", "mkdirp": "~0.5.1", - "svg2ttf": "~2.1.1", + "svg2ttf": "^4.2.0", "svgicons2svgfont": "~1.1.0", "svgo": "~0.6.1", "temp": "~0.8.3", - "ttf2eot": "~1.3.0", - "ttf2woff": "~1.3.0", + "ttf2eot": "^2.0.0", + "ttf2woff": "^2.0.1", "ttf2woff2": "~2.0.3", - "underscore.string": "~3.2.3", + "underscore.string": "^3.3.5", "winston": "~2.1.1" }, "devDependencies": { diff --git a/yarn.lock b/yarn.lock index b9b3618..a10db1c 100644 --- a/yarn.lock +++ b/yarn.lock @@ -50,13 +50,20 @@ are-we-there-yet@~1.1.2: delegates "^1.0.0" readable-stream "^2.0.6" -argparse@^1.0.3, argparse@^1.0.7: +argparse@^1.0.6: + version "1.0.10" + resolved "https://registry.yarnpkg.com/argparse/-/argparse-1.0.10.tgz#bcd6791ea5ae09725e17e5ad988134cd40b3d911" + integrity sha512-o5Roy6tNG4SL/FOkCAN6RzjiakZS25RLYFrcMttJqbdd8BWrnA+fGz57iN5Pb06pvBGvl5gQ0B48dJlslXvoTg== + dependencies: + sprintf-js "~1.0.2" + +argparse@^1.0.7: version "1.0.9" resolved "https://registry.yarnpkg.com/argparse/-/argparse-1.0.9.tgz#73d83bc263f86e97f8cc4f6bae1b0e90a7d22c86" dependencies: sprintf-js "~1.0.2" -"argparse@~ 0.1.11", "argparse@~ 0.1.15", argparse@~0.1.15: +"argparse@~ 0.1.11": version "0.1.16" resolved "https://registry.yarnpkg.com/argparse/-/argparse-0.1.16.tgz#cfd01e0fbba3d6caed049fbd758d40f65196f57c" dependencies: @@ -1354,14 +1361,15 @@ lodash@3.7.x: version "3.7.0" resolved "https://registry.yarnpkg.com/lodash/-/lodash-3.7.0.tgz#3678bd8ab995057c07ade836ed2ef087da811d45" -lodash@^3.6.0: - version "3.10.1" - resolved "https://registry.yarnpkg.com/lodash/-/lodash-3.10.1.tgz#5bf45e8e49ba4189e17d482789dfd15bd140b7b6" - -lodash@^4.0.0, lodash@^4.2.0, lodash@~4.3.0: +lodash@^4.0.0, lodash@^4.2.0: version "4.3.0" resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.3.0.tgz#efd9c4a6ec53f3b05412429915c3e4824e4d25a4" +lodash@^4.17.10, lodash@~4.17.10: + version "4.17.11" + resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.11.tgz#b39ea6229ef607ecd89e2c8df12536891cac9b8d" + integrity sha512-cQKh8igo5QUhZ7lg38DYWAxMvjSAKG0A8wGSVimP07SIUEK2UO+arSRKbRZWtelMtN5V0Hkwh5ryOto/SshYIg== + lodash@~0.9.2: version "0.9.2" resolved "https://registry.yarnpkg.com/lodash/-/lodash-0.9.2.tgz#8f3499c5245d346d682e5b0d3b40767e09f1a92c" @@ -1680,9 +1688,10 @@ osenv@0: os-homedir "^1.0.0" os-tmpdir "^1.0.0" -"pako@~ 0.2.2": - version "0.2.9" - resolved "https://registry.yarnpkg.com/pako/-/pako-0.2.9.tgz#f3f7522f4ef782348da8161bad9ecfd51bf83a75" +pako@^1.0.0: + version "1.0.7" + resolved "https://registry.yarnpkg.com/pako/-/pako-1.0.7.tgz#2473439021b57f1516c82f58be7275ad8ef1bb27" + integrity sha512-3HNK5tW4x8o5mO8RuHZp3Ydw9icZXx0RANAOMzlMzx7LVXhMJ4mo3MOBpzyd7r/+RUu8BmndP47LXT+vzjtWcQ== parse-glob@^3.0.4: version "3.0.4" @@ -2045,6 +2054,11 @@ spdx-license-ids@^1.0.2: version "1.2.2" resolved "https://registry.yarnpkg.com/spdx-license-ids/-/spdx-license-ids-1.2.2.tgz#c9df7a3424594ade6bd11900d596696dc06bac57" +sprintf-js@^1.0.3: + version "1.1.2" + resolved "https://registry.yarnpkg.com/sprintf-js/-/sprintf-js-1.1.2.tgz#da1765262bf8c0f571749f2ad6c26300207ae673" + integrity sha512-VE0SOVEHCk7Qc8ulkWw3ntAzXuqf7S2lvwQaDLRnUeIEaKNQJzV6BwmLKhOqT61aGhfUMrXeaBk+oDGCzvhcug== + sprintf-js@~1.0.2: version "1.0.3" resolved "https://registry.yarnpkg.com/sprintf-js/-/sprintf-js-1.0.3.tgz#04e6926f662895354f3dd015203633b857297e2c" @@ -2141,16 +2155,17 @@ svg-pathdata@1.0.0: dependencies: readable-stream "~1.0.26-3" -svg2ttf@~2.1.1: - version "2.1.1" - resolved "https://registry.yarnpkg.com/svg2ttf/-/svg2ttf-2.1.1.tgz#103d3a236f6596c47a2490ec22b67c051ee4692e" +svg2ttf@^4.2.0: + version "4.2.0" + resolved "https://registry.yarnpkg.com/svg2ttf/-/svg2ttf-4.2.0.tgz#131a037701fd5cae80d05b168b7b4db24fcc9d74" + integrity sha512-GPry9OqeJUPKrMUYGrq/qmZ4UzDx1dSw+90g+qtznSPtjiZyQGgphfe1HzS96EcFyXSlzMxLZjAL6oHLJdcVcw== dependencies: - argparse "^1.0.3" + argparse "^1.0.6" cubic2quad "^1.0.0" - lodash "^3.6.0" + lodash "^4.17.10" microbuffer "^1.0.0" - svgpath "^2.1.2" - xmldom "~0.1.16" + svgpath "^2.1.5" + xmldom "~0.1.22" svgicons2svgfont@~1.1.0: version "1.1.0" @@ -2172,9 +2187,10 @@ svgo@~0.6.1: sax "~1.2.1" whet.extend "~0.9.9" -svgpath@^2.1.2: +svgpath@^2.1.5: version "2.2.1" resolved "https://registry.yarnpkg.com/svgpath/-/svgpath-2.2.1.tgz#0834bb67c89a76472b2bd06cc101fa7b517b222c" + integrity sha1-CDS7Z8iadkcrK9BswQH6e1F7Iiw= tap-mocha-reporter@^2.0.0: version "2.0.1" @@ -2276,11 +2292,13 @@ trim-right@^1.0.1: version "1.0.1" resolved "https://registry.yarnpkg.com/trim-right/-/trim-right-1.0.1.tgz#cb2e1203067e0c8de1f614094b9fe45704ea6003" -ttf2eot@~1.3.0: - version "1.3.0" - resolved "https://registry.yarnpkg.com/ttf2eot/-/ttf2eot-1.3.0.tgz#94671eacfa5ad7799cd6f9f5b6030f513b032ac2" +ttf2eot@^2.0.0: + version "2.0.0" + resolved "https://registry.yarnpkg.com/ttf2eot/-/ttf2eot-2.0.0.tgz#8e6337a585abd1608a0c84958ab483ce69f6654b" + integrity sha1-jmM3pYWr0WCKDISVirSDzmn2ZUs= dependencies: - argparse "~0.1.15" + argparse "^1.0.6" + microbuffer "^1.0.0" ttf2woff2@~2.0.3: version "2.0.3" @@ -2291,12 +2309,14 @@ ttf2woff2@~2.0.3: nan "^2.1.0" node-gyp "^3.0.3" -ttf2woff@~1.3.0: - version "1.3.0" - resolved "https://registry.yarnpkg.com/ttf2woff/-/ttf2woff-1.3.0.tgz#76a27a6f30ea037a9ed64c9ff43ec7ed461e6d2a" +ttf2woff@^2.0.1: + version "2.0.1" + resolved "https://registry.yarnpkg.com/ttf2woff/-/ttf2woff-2.0.1.tgz#871832240024b09db9570904c7c1928b8057c969" + integrity sha1-hxgyJAAksJ25VwkEx8GSi4BXyWk= dependencies: - argparse "~ 0.1.15" - pako "~ 0.2.2" + argparse "^1.0.6" + microbuffer "^1.0.0" + pako "^1.0.0" tunnel-agent@^0.6.0: version "0.6.0" @@ -2325,6 +2345,14 @@ uglify-to-browserify@~1.0.0: version "1.0.2" resolved "https://registry.yarnpkg.com/uglify-to-browserify/-/uglify-to-browserify-1.0.2.tgz#6e0924d6bda6b5afe349e39a6d632850a0f882b7" +underscore.string@^3.3.5: + version "3.3.5" + resolved "https://registry.yarnpkg.com/underscore.string/-/underscore.string-3.3.5.tgz#fc2ad255b8bd309e239cbc5816fd23a9b7ea4023" + integrity sha512-g+dpmgn+XBneLmXXo+sGlW5xQEt4ErkS3mgeN2GFbremYeMBSJKr9Wf2KJplQVaiPY/f7FN6atosWYNm9ovrYg== + dependencies: + sprintf-js "^1.0.3" + util-deprecate "^1.0.2" + underscore.string@~2.2.1: version "2.2.1" resolved "https://registry.yarnpkg.com/underscore.string/-/underscore.string-2.2.1.tgz#d7c0fa2af5d5a1a67f4253daee98132e733f0f19" @@ -2337,10 +2365,6 @@ underscore.string@~2.4.0: version "2.4.0" resolved "https://registry.yarnpkg.com/underscore.string/-/underscore.string-2.4.0.tgz#8cdd8fbac4e2d2ea1e7e2e8097c42f442280f85b" -underscore.string@~3.2.3: - version "3.2.3" - resolved "https://registry.yarnpkg.com/underscore.string/-/underscore.string-3.2.3.tgz#806992633665d5e5fcb4db1fb3a862eb68e9e6da" - underscore@~1.7.0: version "1.7.0" resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.7.0.tgz#6bbaf0877500d36be34ecaa584e0db9fef035209" @@ -2352,7 +2376,7 @@ unicode-length@^1.0.0: punycode "^1.3.2" strip-ansi "^3.0.1" -util-deprecate@~1.0.1: +util-deprecate@^1.0.2, util-deprecate@~1.0.1: version "1.0.2" resolved "https://registry.yarnpkg.com/util-deprecate/-/util-deprecate-1.0.2.tgz#450d4dc9fa70de732762fbd2d4a28981419a0ccf" @@ -2486,9 +2510,10 @@ xmlbuilder@~2.4.0: dependencies: lodash-node "~2.4.1" -xmldom@~0.1.16: +xmldom@~0.1.22: version "0.1.27" resolved "https://registry.yarnpkg.com/xmldom/-/xmldom-0.1.27.tgz#d501f97b3bdb403af8ef9ecc20573187aadac0e9" + integrity sha1-1QH5ezvbQDr4757MIFcxh6rawOk= xtend@^4.0.0: version "4.0.1"