From 3886754a0ae3bd85d1e6824d24c7d8279dba4f22 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Sat, 13 Jul 2024 16:05:51 +0000
Subject: [PATCH] fix: packages/react-devtools-extensions/package.json &
 packages/react-devtools-extensions/.snyk to reduce vulnerabilities

The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/SNYK-JS-LODASH-567746
---
 packages/react-devtools-extensions/.snyk      | 34 +++++++++++++++++++
 .../react-devtools-extensions/package.json    | 10 ++++--
 2 files changed, 41 insertions(+), 3 deletions(-)
 create mode 100644 packages/react-devtools-extensions/.snyk

diff --git a/packages/react-devtools-extensions/.snyk b/packages/react-devtools-extensions/.snyk
new file mode 100644
index 0000000000000..a70a7602c9a0c
--- /dev/null
+++ b/packages/react-devtools-extensions/.snyk
@@ -0,0 +1,34 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.25.1
+ignore: {}
+# patches apply the minimum changes required to fix a vulnerability
+patch:
+  SNYK-JS-LODASH-567746:
+    - web-ext > firefox-profile > lodash:
+        patched: '2024-07-13T16:05:49.171Z'
+        id: SNYK-JS-LODASH-567746
+        path: web-ext > firefox-profile > lodash
+    - web-ext > addons-linter > cheerio > lodash:
+        patched: '2024-07-13T16:05:49.171Z'
+        id: SNYK-JS-LODASH-567746
+        path: web-ext > addons-linter > cheerio > lodash
+    - web-ext > addons-linter > eslint > lodash:
+        patched: '2024-07-13T16:05:49.171Z'
+        id: SNYK-JS-LODASH-567746
+        path: web-ext > addons-linter > eslint > lodash
+    - web-ext > firefox-profile > archiver > lodash:
+        patched: '2024-07-13T16:05:49.171Z'
+        id: SNYK-JS-LODASH-567746
+        path: web-ext > firefox-profile > archiver > lodash
+    - web-ext > firefox-profile > async > lodash:
+        patched: '2024-07-13T16:05:49.171Z'
+        id: SNYK-JS-LODASH-567746
+        path: web-ext > firefox-profile > async > lodash
+    - web-ext > firefox-profile > archiver > archiver-utils > lodash:
+        patched: '2024-07-13T16:05:49.171Z'
+        id: SNYK-JS-LODASH-567746
+        path: web-ext > firefox-profile > archiver > archiver-utils > lodash
+    - web-ext > firefox-profile > archiver > zip-stream > lodash:
+        patched: '2024-07-13T16:05:49.171Z'
+        id: SNYK-JS-LODASH-567746
+        path: web-ext > firefox-profile > archiver > zip-stream > lodash
diff --git a/packages/react-devtools-extensions/package.json b/packages/react-devtools-extensions/package.json
index 3a6bdfa7c044c..c07681b621f63 100644
--- a/packages/react-devtools-extensions/package.json
+++ b/packages/react-devtools-extensions/package.json
@@ -16,7 +16,9 @@
     "test:chrome": "node ./chrome/test",
     "test:firefox": "node ./firefox/test",
     "test:edge": "node ./edge/test",
-    "improve-images": "node ./improveImages.mjs"
+    "improve-images": "node ./improveImages.mjs",
+    "prepare": "yarn run snyk-protect",
+    "snyk-protect": "snyk-protect"
   },
   "devDependencies": {
     "@babel/core": "^7.11.1",
@@ -68,6 +70,8 @@
     "workerize-loader": "^1.3.0"
   },
   "dependencies": {
-    "web-ext": "^4"
-  }
+    "web-ext": "^4",
+    "@snyk/protect": "latest"
+  },
+  "snyk": true
 }