From 319c0a7762941e8f4833b1d1835199af1e44c6ef Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 25 Apr 2023 17:20:23 +0000 Subject: [PATCH] fix: deps/npm/node_modules/har-schema/package.json & deps/npm/node_modules/har-schema/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AJV-584908 - https://snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908 - https://snyk.io/vuln/SNYK-JS-FOLLOWREDIRECTS-2332181 - https://snyk.io/vuln/SNYK-JS-FOLLOWREDIRECTS-2396346 - https://snyk.io/vuln/SNYK-JS-HAWK-2808852 - https://snyk.io/vuln/SNYK-JS-HTTPSPROXYAGENT-469131 - https://snyk.io/vuln/SNYK-JS-ISTANBULREPORTS-2328088 - https://snyk.io/vuln/SNYK-JS-JSYAML-173999 - https://snyk.io/vuln/SNYK-JS-JSYAML-174129 - https://snyk.io/vuln/SNYK-JS-MINIMIST-2429795 - https://snyk.io/vuln/SNYK-JS-MINIMIST-559764 - https://snyk.io/vuln/SNYK-JS-SEMANTICRELEASE-1041706 - https://snyk.io/vuln/SNYK-JS-YARGSPARSER-560381 - https://snyk.io/vuln/npm:braces:20180219 - https://snyk.io/vuln/npm:deep-extend:20180409 - https://snyk.io/vuln/npm:hoek:20180212 - https://snyk.io/vuln/npm:https-proxy-agent:20180402 - https://snyk.io/vuln/npm:tunnel-agent:20170305 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:hoek:20180212 - https://snyk.io/vuln/npm:lodash:20180130 --- deps/npm/node_modules/har-schema/.snyk | 17 +++++++++++++++++ deps/npm/node_modules/har-schema/package.json | 18 ++++++++++++------ 2 files changed, 29 insertions(+), 6 deletions(-) create mode 100644 deps/npm/node_modules/har-schema/.snyk diff --git a/deps/npm/node_modules/har-schema/.snyk b/deps/npm/node_modules/har-schema/.snyk new file mode 100644 index 00000000000000..037c071be6320c --- /dev/null +++ b/deps/npm/node_modules/har-schema/.snyk @@ -0,0 +1,17 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:hoek:20180212': + - codeclimate-test-reporter > request > hawk > hoek: + patched: '2023-04-25T17:20:18.209Z' + - codeclimate-test-reporter > request > hawk > boom > hoek: + patched: '2023-04-25T17:20:18.209Z' + - codeclimate-test-reporter > request > hawk > sntp > hoek: + patched: '2023-04-25T17:20:18.209Z' + - codeclimate-test-reporter > request > hawk > cryptiles > boom > hoek: + patched: '2023-04-25T17:20:18.209Z' + 'npm:lodash:20180130': + - semantic-release > @semantic-release/release-notes-generator > conventional-changelog > lodash: + patched: '2023-04-25T17:20:18.209Z' diff --git a/deps/npm/node_modules/har-schema/package.json b/deps/npm/node_modules/har-schema/package.json index d14650bd78261d..7605a85640893a 100644 --- a/deps/npm/node_modules/har-schema/package.json +++ b/deps/npm/node_modules/har-schema/package.json @@ -35,7 +35,9 @@ "pretest": "snazzy && echint", "coverage": "tap test --reporter silent --coverage", "codeclimate": "tap --coverage-report=text-lcov | codeclimate-test-reporter", - "semantic-release": "semantic-release pre && npm publish && semantic-release post" + "semantic-release": "semantic-release pre && npm publish && semantic-release post", + "prepublish": "npm run snyk-protect", + "snyk-protect": "snyk-protect" }, "config": { "commitizen": { @@ -43,12 +45,16 @@ } }, "devDependencies": { - "ajv": "^5.0.0", - "codeclimate-test-reporter": "^0.4.0", + "ajv": "^6.12.3", + "codeclimate-test-reporter": "^0.5.1", "cz-conventional-changelog": "^1.2.0", - "echint": "^2.1.0", - "semantic-release": "^6.3.2", + "echint": "^4.0.2", + "semantic-release": "^17.2.3", "snazzy": "^5.0.0", - "tap": "^8.0.1" + "tap": "^15.0.0" + }, + "snyk": true, + "dependencies": { + "@snyk/protect": "latest" } } \ No newline at end of file