fix : CVE-2020-8116 CVE-2020-13822 (#166)

romainmenke · web-flow · commit 648255561530 · 2020-07-31T21:04:10.000+02:00
diff --git a/lerna.json b/lerna.json
@@ -3,6 +3,6 @@
   "packages": [
     "packages/*"
   ],
-  "version": "0.3.8",
+  "version": "0.3.9",
   "useWorkspaces": true
 }
diff --git a/package.json b/package.json
@@ -12,5 +12,9 @@
   },
   "devDependencies": {
     "lerna": "^3.22.1"
+  },
+  "resolutions": {
+    "**/elliptic": "^6.5.3",
+    "**/dot-prop": "^5.1.1"
   }
 }
diff --git a/packages/babel-plugin-core-web/package.json b/packages/babel-plugin-core-web/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@mrhenry/babel-plugin-core-web",
-  "version": "0.3.8",
+  "version": "0.3.9",
   "description": "browser feature polyfills as a babel plugin",
   "main": "lib/index.js",
   "author": "Simon Menke <simon.menke@gmail.com>",
@@ -28,7 +28,7 @@
     "@babel/parser": "^7.10.5",
     "@babel/traverse": "^7.10.1",
     "@babel/types": "^7.9.6",
-    "@mrhenry/core-web": "^0.3.8",
+    "@mrhenry/core-web": "^0.3.9",
     "fast-deep-equal": "^3.1.3"
   },
   "bugs": {
diff --git a/packages/core-web-example/package.json b/packages/core-web-example/package.json
@@ -1,13 +1,13 @@
 {
   "name": "@mrhenry/core-web-example",
-  "version": "0.3.8",
+  "version": "0.3.9",
   "private": true,
   "scripts": {
     "build": "babel src -d lib"
   },
   "devDependencies": {
     "@babel/cli": "^7.10.5",
     "@babel/core": "^7.10.5",
-    "@mrhenry/babel-plugin-core-web": "^0.3.8"
+    "@mrhenry/babel-plugin-core-web": "^0.3.9"
   }
 }
diff --git a/packages/core-web-generator/package.json b/packages/core-web-generator/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@mrhenry/core-web-generator",
-  "version": "0.3.8",
+  "version": "0.3.9",
   "private": true,
   "scripts": {
     "build": "node ./generate.js"
@@ -15,7 +15,7 @@
     "fast-deep-equal": "^3.1.3",
     "from2-string": "^1.1.0",
     "merge2": "^1.4.1",
-    "polyfill-library": "^3.93.0",
+    "polyfill-library": "3.93.0",
     "stream-to-string": "^1.2.0"
   }
 }
diff --git a/packages/core-web-tests/package.json b/packages/core-web-tests/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@mrhenry/core-web-tests",
-  "version": "0.3.8",
+  "version": "0.3.9",
   "private": true,
   "scripts": {
     "build": "webpack",
@@ -9,7 +9,7 @@
   "devDependencies": {
     "@babel/core": "^7.10.5",
     "@babel/preset-env": "^7.10.4",
-    "@mrhenry/babel-plugin-core-web": "^0.3.8",
+    "@mrhenry/babel-plugin-core-web": "^0.3.9",
     "@types/qunit": "2.9.x",
     "babel-loader": "^8.0.6",
     "browserstack-runner": "^0.9.2",
diff --git a/packages/core-web/package.json b/packages/core-web/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@mrhenry/core-web",
-  "version": "0.3.8",
+  "version": "0.3.9",
   "description": "browser feature polyfills as a babel plugin",
   "main": "lib/index.js",
   "author": "Simon Menke <simon.menke@gmail.com>",
diff --git a/yarn.lock b/yarn.lock

Original file line number	Diff line number	Diff line change
`@@ -3,6 +3,6 @@`
`3`	`3`	`"packages": [`
`4`	`4`	`"packages/*"`
`5`	`5`	`],`
`6`		`- "version": "0.3.8",`
	`6`	`+ "version": "0.3.9",`
`7`	`7`	`"useWorkspaces": true`
`8`	`8`	`}`
Original file line number	Diff line number	Diff line change
`@@ -12,5 +12,9 @@`
`12`	`12`	`},`
`13`	`13`	`"devDependencies": {`
`14`	`14`	`"lerna": "^3.22.1"`
	`15`	`+ },`
	`16`	`+ "resolutions": {`
	`17`	`+ "**/elliptic": "^6.5.3",`
	`18`	`+ "**/dot-prop": "^5.1.1"`
`15`	`19`	`}`
`16`	`20`	`}`
Original file line number	Diff line number	Diff line change
`@@ -1,13 +1,13 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "@mrhenry/core-web-example",`
`3`		`- "version": "0.3.8",`
	`3`	`+ "version": "0.3.9",`
`4`	`4`	`"private": true,`
`5`	`5`	`"scripts": {`
`6`	`6`	`"build": "babel src -d lib"`
`7`	`7`	`},`
`8`	`8`	`"devDependencies": {`
`9`	`9`	`"@babel/cli": "^7.10.5",`
`10`	`10`	`"@babel/core": "^7.10.5",`
`11`		`- "@mrhenry/babel-plugin-core-web": "^0.3.8"`
	`11`	`+ "@mrhenry/babel-plugin-core-web": "^0.3.9"`
`12`	`12`	`}`
`13`	`13`	`}`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "@mrhenry/core-web-generator",`
`3`		`- "version": "0.3.8",`
	`3`	`+ "version": "0.3.9",`
`4`	`4`	`"private": true,`
`5`	`5`	`"scripts": {`
`6`	`6`	`"build": "node ./generate.js"`
`@@ -15,7 +15,7 @@`
`15`	`15`	`"fast-deep-equal": "^3.1.3",`
`16`	`16`	`"from2-string": "^1.1.0",`
`17`	`17`	`"merge2": "^1.4.1",`
`18`		`- "polyfill-library": "^3.93.0",`
	`18`	`+ "polyfill-library": "3.93.0",`
`19`	`19`	`"stream-to-string": "^1.2.0"`
`20`	`20`	`}`
`21`	`21`	`}`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "@mrhenry/core-web",`
`3`		`- "version": "0.3.8",`
	`3`	`+ "version": "0.3.9",`
`4`	`4`	`"description": "browser feature polyfills as a babel plugin",`
`5`	`5`	`"main": "lib/index.js",`
`6`	`6`	`"author": "Simon Menke <[email protected]>",`