Skip to content

Commit 4cd4eea

Browse files
author
Kimani Ndegwa
committed
build(deps): upgrade vulnerable dependencies to fix security issues
Upgrade multiple dependencies to address security vulnerabilities: - word-wrap: 1.2.3 → 1.2.5 - semver: 6.3.0 → 6.3.1 - decode-uri-component: 0.2.0 → 0.2.2 - shelljs: 0.8.4 → 0.8.5 These upgrades fix 89 security vulnerabilities: - 81 High-severity vulnerabilities - 8 Moderate-severity vulnerabilities Total vulnerabilities reduced from 274 to 185. Added yarn resolutions to force upgrade of transitive dependencies. Verified all packages build successfully. Addresses security PRs: #126, #125, #122, #112, #111, #109, #108, #107, #105
1 parent 24f9a37 commit 4cd4eea

2 files changed

Lines changed: 19 additions & 35 deletions

File tree

package.json

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -46,5 +46,11 @@
4646
"volta": {
4747
"node": "14.21.3",
4848
"yarn": "1.22.10"
49+
},
50+
"resolutions": {
51+
"word-wrap": "~1.2.4",
52+
"semver": "^6.3.1",
53+
"decode-uri-component": "^0.2.2",
54+
"shelljs": "^0.8.5"
4955
}
5056
}

yarn.lock

Lines changed: 13 additions & 35 deletions
Original file line numberDiff line numberDiff line change
@@ -3859,10 +3859,10 @@ decimal.js@^10.2.1:
38593859
resolved "https://registry.yarnpkg.com/decimal.js/-/decimal.js-10.3.1.tgz#d8c3a444a9c6774ba60ca6ad7261c3a94fd5e783"
38603860
integrity sha512-V0pfhfr8suzyPGOx3nmq4aHqabehUZn6Ch9kyFpV79TGDTWFmHqUqXdabR7QHqxzrYolF4+tVmJhUG4OURg5dQ==
38613861

3862-
decode-uri-component@^0.2.0:
3863-
version "0.2.0"
3864-
resolved "https://registry.yarnpkg.com/decode-uri-component/-/decode-uri-component-0.2.0.tgz#eb3913333458775cb84cd1a1fae062106bb87545"
3865-
integrity sha1-6zkTMzRYd1y4TNGh+uBiEGu4dUU=
3862+
decode-uri-component@^0.2.0, decode-uri-component@^0.2.2:
3863+
version "0.2.2"
3864+
resolved "https://registry.npmjs.org/decode-uri-component/-/decode-uri-component-0.2.2.tgz#e69dbe25d37941171dd540e024c444cd5188e1e9"
3865+
integrity sha512-FqUYQ+8o158GyGTrMFJms9qh3CqTKvAqgqsTnkLI8sKu0028orqBhxNMFkFen0zGyg6epACD32pjVk58ngIErQ==
38663866

38673867
dedent@0.7.0, dedent@^0.7.0:
38683868
version "0.7.0"
@@ -8998,33 +8998,11 @@ semver-compare@^1.0.0:
89988998
resolved "https://registry.yarnpkg.com/semver-compare/-/semver-compare-1.0.0.tgz#0dee216a1c941ab37e9efb1788f6afc5ff5537fc"
89998999
integrity sha1-De4hahyUGrN+nvsXiPavxf9VN/w=
90009000

9001-
"semver@2 || 3 || 4 || 5", semver@^5.3.0, semver@^5.5.0, semver@^5.6.0:
9002-
version "5.7.1"
9003-
resolved "https://registry.yarnpkg.com/semver/-/semver-5.7.1.tgz#a954f931aeba508d307bbf069eff0c01c96116f7"
9004-
integrity sha512-sauaDf/PZdVgrLTNYHRtpXa1iRiKcaebiKQ1BJdpQlWH2lCvexQdX55snPFyK7QzpudqbCI0qXFfOasHdyNDGQ==
9005-
9006-
semver@6.3.1, semver@^6.3.1:
9001+
"semver@2 || 3 || 4 || 5", semver@6.3.1, semver@7.5.4, semver@7.x, semver@^5.3.0, semver@^5.5.0, semver@^5.6.0, semver@^6.0.0, semver@^6.1.2, semver@^6.3.0, semver@^6.3.1, semver@^7.0.0, semver@^7.1.1, semver@^7.3.2, semver@^7.3.4, semver@^7.3.5, semver@^7.3.7:
90079002
version "6.3.1"
90089003
resolved "https://registry.yarnpkg.com/semver/-/semver-6.3.1.tgz#556d2ef8689146e46dcea4bfdd095f3434dffcb4"
90099004
integrity sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==
90109005

9011-
semver@7.5.4:
9012-
version "7.5.4"
9013-
resolved "https://registry.yarnpkg.com/semver/-/semver-7.5.4.tgz#483986ec4ed38e1c6c48c34894a9182dbff68a6e"
9014-
integrity sha512-1bCSESV6Pv+i21Hvpxp3Dx+pSD8lIPt8uVjRrxAUt/nbswYc+tK6Y2btiULjd4+fnq15PX+nqQDC7Oft7WkwcA==
9015-
dependencies:
9016-
lru-cache "^6.0.0"
9017-
9018-
semver@7.x, semver@^7.0.0, semver@^7.1.1, semver@^7.3.2, semver@^7.3.4, semver@^7.3.5, semver@^7.3.7:
9019-
version "7.6.2"
9020-
resolved "https://registry.yarnpkg.com/semver/-/semver-7.6.2.tgz#1e3b34759f896e8f14d6134732ce798aeb0c6e13"
9021-
integrity sha512-FNAIBWCx9qcRhoHcgcJ0gvU7SN1lYU2ZXuSfl04bSC5OpvDHFyJCjdNHomPXxjQlCBU67YW64PzY7/VIEH7F2w==
9022-
9023-
semver@^6.0.0, semver@^6.1.2, semver@^6.3.0:
9024-
version "6.3.0"
9025-
resolved "https://registry.yarnpkg.com/semver/-/semver-6.3.0.tgz#ee0a64c8af5e8ceea67687b133761e1becbd1d3d"
9026-
integrity sha512-b39TBaTSfV6yBrapU89p5fKekE2m/NwnDocOVruQFS1/veMgdzuPcnOM34M6CwxW8jH/lxEa5rBoDeUwu5HHTw==
9027-
90289006
set-blocking@^2.0.0:
90299007
version "2.0.0"
90309008
resolved "https://registry.yarnpkg.com/set-blocking/-/set-blocking-2.0.0.tgz#045f9782d011ae9a6803ddd382b24392b3d890f7"
@@ -9083,10 +9061,10 @@ shebang-regex@^3.0.0:
90839061
resolved "https://registry.yarnpkg.com/shebang-regex/-/shebang-regex-3.0.0.tgz#ae16f1644d873ecad843b0307b143362d4c42172"
90849062
integrity sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==
90859063

9086-
shelljs@^0.8.4:
9087-
version "0.8.4"
9088-
resolved "https://registry.yarnpkg.com/shelljs/-/shelljs-0.8.4.tgz#de7684feeb767f8716b326078a8a00875890e3c2"
9089-
integrity sha512-7gk3UZ9kOfPLIAbslLzyWeGiEqx9e3rxwZM0KE6EL8GlGwjym9Mrlx5/p33bWTu9YG6vcS4MBxYZDHYr5lr8BQ==
9064+
shelljs@^0.8.4, shelljs@^0.8.5:
9065+
version "0.8.5"
9066+
resolved "https://registry.npmjs.org/shelljs/-/shelljs-0.8.5.tgz#de055408d8361bed66c669d2f000538ced8ee20c"
9067+
integrity sha512-TiwcRcrkhHvbrZbnRcFYMLl30Dfov3HKqzp5tO5b4pt6G/SezKcYhmDg15zXVBswHmctSAQKznqNW2LO5tTDow==
90909068
dependencies:
90919069
glob "^7.0.0"
90929070
interpret "^1.0.0"
@@ -10093,10 +10071,10 @@ wide-align@^1.1.5:
1009310071
dependencies:
1009410072
string-width "^1.0.2 || 2 || 3 || 4"
1009510073

10096-
word-wrap@^1.0.3, word-wrap@~1.2.3:
10097-
version "1.2.3"
10098-
resolved "https://registry.yarnpkg.com/word-wrap/-/word-wrap-1.2.3.tgz#610636f6b1f703891bd34771ccb17fb93b47079c"
10099-
integrity sha512-Hz/mrNwitNRh/HUAtM/VT/5VH+ygD6DV7mYKZAtHOrbs8U7lvPS6xf7EJKMF0uW1KJCl0H701g3ZGus+muE5vQ==
10074+
word-wrap@^1.0.3, word-wrap@~1.2.3, word-wrap@~1.2.4:
10075+
version "1.2.5"
10076+
resolved "https://registry.npmjs.org/word-wrap/-/word-wrap-1.2.5.tgz#d2c45c6dd4fbce621a66f136cbe328afd0410b34"
10077+
integrity sha512-BN22B5eaMMI9UMtjrGd5g5eCYPpCPDUy0FJXbYsaT5zYxjFOckS53SQDE3pWkVoWpHXVb3BrYcEN4Twa55B5cA==
1010010078

1010110079
wordwrap@^1.0.0:
1010210080
version "1.0.0"

0 commit comments

Comments
 (0)