fix: Vulnerabilities with semver and path-to-regexp (#1391)

* update semver * revert tslint update * update sinon and fetch-mock
microsoft · Sep 19, 2024 · c4a96f0 · c4a96f0
1 parent 2dc343a
commit c4a96f0
Show file tree

Hide file tree

Showing 11 changed files with 166 additions and 338 deletions.
diff --git a/common/config/rush/pnpm-lock.yaml b/common/config/rush/pnpm-lock.yaml
diff --git a/packages/chatdown/package.json b/packages/chatdown/package.json
@@ -21,7 +21,7 @@
     "axios": "~1.6.0",
     "https-proxy-agent": "^5.0.0",
     "please-upgrade-node": "^3.0.1",
-    "semver": "^5.5.1",
+    "semver": "^7.6.3",
     "tslib": "^2.0.3",
     "window-size": "^1.1.0"
   },
@@ -41,7 +41,7 @@
     "mocha": "^10.4.0",
     "rimraf": "^2.6.3",
     "ts-node": "^10.8.1",
-    "tslint": "^5.16.0",
+    "tslint": "^5.18.0",
     "typescript": "^4.9.5"
   },
   "engines": {

diff --git a/packages/cli/package.json b/packages/cli/package.json
@@ -85,7 +85,7 @@
     "fs-extra": "^7.0.1",
     "is-ci": "2.0.0",
     "latest-version": "5.1.0",
-    "semver": "^5.5.1",
+    "semver": "^7.6.3",
     "tslib": "^2.0.3"
   },
   "devDependencies": {
@@ -104,7 +104,7 @@
     "nyc": "^15.1.0",
     "rimraf": "^2.6.3",
     "ts-node": "^10.8.1",
-    "tslint": "^5.16.0",
+    "tslint": "^5.18.0",
     "typescript": "^4.9.5"
   }
 }
diff --git a/packages/command/package.json b/packages/command/package.json
@@ -74,7 +74,7 @@
     "source-map-support": "~0.5.16",
     "testdouble": "^3.11.0",
     "ts-node": "^10.8.1",
-    "tslint": "^5.16.0",
+    "tslint": "^5.18.0",
     "typescript": "^4.9.5"
   }
 }
diff --git a/packages/dialog/package.json b/packages/dialog/package.json
@@ -68,7 +68,7 @@
     "os": "~0.1.1",
     "path": "^0.12.7",
     "seedrandom": "~3.0.5",
-    "semver": "^7.3.4",
+    "semver": "^7.6.3",
     "tslib": "^2.0.3",
     "xml2js": "^0.5.0",
     "json-ptr": "~3.1.0",

diff --git a/packages/dispatcher/package.json b/packages/dispatcher/package.json
@@ -23,7 +23,7 @@
     "mocha": "^10.4.0",
     "rimraf": "^3.0.0",
     "ts-node": "^8.4.1",
-    "tslint": "^5.20.1",
+    "tslint": "^5.18.0",
     "typescript": "^4.9.5"
   },
   "engines": {

diff --git a/packages/lu/package.json b/packages/lu/package.json
@@ -59,7 +59,7 @@
     "globby": "^11.0.4",
     "intercept-stdout": "^0.1.2",
     "lodash": "^4.17.21",
-    "semver": "^5.5.1",
+    "semver": "^7.6.3",
     "tslib": "^2.0.3"
   },
   "devDependencies": {

diff --git a/packages/luis/package.json b/packages/luis/package.json
@@ -86,9 +86,9 @@
     "nock": "^13.5.5",
     "nyc": "^15.1.0",
     "rimraf": "^3.0.0",
-    "sinon": "^7.5.0",
+    "sinon": "^18.0.1",
     "ts-node": "^10.8.1",
-    "tslint": "^5.20.1",
+    "tslint": "^5.18.0",
     "typescript": "^4.9.5",
     "uuid": "^3.3.3"
   }

diff --git a/packages/orchestrator/package.json b/packages/orchestrator/package.json
@@ -46,7 +46,7 @@
     "rimraf": "^3.0.2",
     "ts-node": "^10.8.1",
     "typescript": "^4.9.5",
-    "sinon": "^9.0.2"
+    "sinon": "^18.0.1"
   },
   "files": [
     "/lib",

diff --git a/packages/orchestratorlib/package.json b/packages/orchestratorlib/package.json
@@ -72,6 +72,6 @@
     "rimraf": "^2.6.3",
     "ts-node": "^10.8.1",
     "typescript": "^4.9.5",
-    "sinon": "^9.0.2"
+    "sinon": "^18.0.1"
   }
 }
diff --git a/packages/qnamaker/package.json b/packages/qnamaker/package.json
@@ -72,7 +72,7 @@
     "readline": "^1.3.0",
     "readline-sync": "^1.4.9",
     "rimraf": "^2.6.3",
-    "semver": "^5.5.1",
+    "semver": "^7.6.3",
     "tslib": "^2.0.3",
     "window-size": "^1.1.0",
     "username": "^4.1.0"
@@ -87,7 +87,7 @@
     "@types/nock": "^11.1.0",
     "@types/node": "^11.13.7",
     "chai": "^4.4.1",
-    "fetch-mock": "^7.3.9",
+    "fetch-mock": "^11.1.3",
     "globby": "^11.0.4",
     "mocha": "^10.4.0",
     "nock": "^13.5.5",