From 90fab5136c28c258efb1399b7d98524b39e7fa0d Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 23 Mar 2024 00:46:53 +0000 Subject: [PATCH] fix: package.json & package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-TAR-6476909 --- package-lock.json | 21 ++++++++------------- package.json | 2 +- 2 files changed, 9 insertions(+), 14 deletions(-) diff --git a/package-lock.json b/package-lock.json index da8ddba..5b8d71b 100644 --- a/package-lock.json +++ b/package-lock.json @@ -25,7 +25,7 @@ "rimraf": "^4.4.0", "shelljs": "^0.8.5", "simple-git": "^3.17.0", - "tar": "^6.1.13", + "tar": "^6.2.1", "ts-node": "^10.9.1", "typescript": "^4.9.5", "uuid": "^9.0.0" @@ -2116,14 +2116,13 @@ } }, "node_modules/tar": { - "version": "6.1.13", - "resolved": "https://registry.npmjs.org/tar/-/tar-6.1.13.tgz", - "integrity": "sha512-jdIBIN6LTIe2jqzay/2vtYLlBHa3JF42ot3h1dW8Q0PaAG4v8rm0cvpVePtau5C6OKXGGcgO9q2AMNSWxiLqKw==", - "license": "ISC", + "version": "6.2.1", + "resolved": "https://registry.npmjs.org/tar/-/tar-6.2.1.tgz", + "integrity": "sha512-DZ4yORTwrbTj/7MZYq2w+/ZFdI6OZ/f9SFHR+71gIVUZhOQPHzVCLpvRnPgyaMpfWxxk/4ONva3GQSyNIKRv6A==", "dependencies": { "chownr": "^2.0.0", "fs-minipass": "^2.0.0", - "minipass": "^4.0.0", + "minipass": "^5.0.0", "minizlib": "^2.1.1", "mkdirp": "^1.0.3", "yallist": "^4.0.0" @@ -2133,13 +2132,9 @@ } }, "node_modules/tar/node_modules/minipass": { - "version": "4.0.0", - "resolved": "https://registry.npmjs.org/minipass/-/minipass-4.0.0.tgz", - "integrity": "sha512-g2Uuh2jEKoht+zvO6vJqXmYpflPqzRBT+Th2h01DKh5z7wbY/AZ2gCQ78cP70YoHPyFdY30YBV5WxgLOEwOykw==", - "license": "ISC", - "dependencies": { - "yallist": "^4.0.0" - }, + "version": "5.0.0", + "resolved": "https://registry.npmjs.org/minipass/-/minipass-5.0.0.tgz", + "integrity": "sha512-3FnjYuehv9k6ovOEbyOswadCDPX1piCfhV8ncmYtHOjuPwylVWsghTLo7rabjC3Rx5xD4HDx8Wm1xnMF7S5qFQ==", "engines": { "node": ">=8" } diff --git a/package.json b/package.json index 5c98cdc..a6ff808 100644 --- a/package.json +++ b/package.json @@ -31,7 +31,7 @@ "rimraf": "^4.4.0", "shelljs": "^0.8.5", "simple-git": "^3.17.0", - "tar": "^6.1.13", + "tar": "^6.2.1", "ts-node": "^10.9.1", "typescript": "^4.9.5", "uuid": "^9.0.0"