From 65b19a0e2f3f71aa2d2c4860ecd55f7715305fd5 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 3 Dec 2018 23:43:13 +0000 Subject: [PATCH] fix: .snyk & package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/npm:brace-expansion:20170302 - https://snyk.io/vuln/npm:debug:20170905 - https://snyk.io/vuln/npm:deep-extend:20180409 - https://snyk.io/vuln/npm:ejs:20161128 - https://snyk.io/vuln/npm:ejs:20161130 - https://snyk.io/vuln/npm:ejs:20161130-1 - https://snyk.io/vuln/npm:extend:20180424 - https://snyk.io/vuln/npm:is-url:20180319 - https://snyk.io/vuln/npm:lodash:20180130 - https://snyk.io/vuln/npm:ms:20170412 - https://snyk.io/vuln/npm:tunnel-agent:20170305 - https://snyk.io/vuln/npm:underscore.string:20170908 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:lodash:20180130 --- .snyk | 4 +++- package.json | 4 ++-- 2 files changed, 5 insertions(+), 3 deletions(-) diff --git a/.snyk b/.snyk index 6aed903..0f2af99 100644 --- a/.snyk +++ b/.snyk @@ -1,8 +1,10 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.12.0 +version: v1.13.1 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: 'npm:lodash:20180130': - yeoman-generator > html-wiring > cheerio > lodash: patched: '2018-07-02T23:50:42.141Z' + - yeoman-generator > yeoman-test > yeoman-generator > html-wiring > cheerio > lodash: + patched: '2018-12-03T23:43:11.615Z' diff --git a/package.json b/package.json index b3f9a33..07451a5 100644 --- a/package.json +++ b/package.json @@ -43,9 +43,9 @@ "es6" ], "dependencies": { - "yeoman-generator": "0.24.x", + "yeoman-generator": "0.24.1", "yosay": "1.x", - "snyk": "^1.88.0" + "snyk": "^1.113.0" }, "devDependencies": { "babel-cli": "*",