Skip to content

Commit

Permalink
fix: yarn-pnp/react-vite/package.json & yarn-pnp/react-vite/yarn.lock…
Browse files Browse the repository at this point in the history
… to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-AXIOS-6671926
  • Loading branch information
snyk-bot committed Jan 15, 2025
1 parent 9166fbc commit ab62763
Show file tree
Hide file tree
Showing 2 changed files with 92 additions and 59 deletions.
2 changes: 1 addition & 1 deletion yarn-pnp/react-vite/package.json
Original file line number Diff line number Diff line change
Expand Up @@ -40,7 +40,7 @@
"storybook": "^7.6.0-alpha.2",
"typescript": "^5.2.2",
"vite": "^4.5.0",
"wait-on": "^7.0.1"
"wait-on": "^8.0.2"
},
"packageManager": "[email protected]"
}
149 changes: 91 additions & 58 deletions yarn-pnp/react-vite/yarn.lock
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
# Manual changes might be lost - proceed with caution!

__metadata:
version: 8
version: 6
cacheKey: 10c0

"@aashutoshrathi/word-wrap@npm:^1.2.3":
Expand Down Expand Up @@ -1775,14 +1775,14 @@ __metadata:
languageName: node
linkType: hard

"@hapi/hoek@npm:^9.0.0":
"@hapi/hoek@npm:^9.0.0, @hapi/hoek@npm:^9.3.0":
version: 9.3.0
resolution: "@hapi/hoek@npm:9.3.0"
checksum: a096063805051fb8bba4c947e293c664b05a32b47e13bc654c0dd43813a1cec993bdd8f29ceb838020299e1d0f89f68dc0d62a603c13c9cc8541963f0beca055
languageName: node
linkType: hard

"@hapi/topo@npm:^5.0.0":
"@hapi/topo@npm:^5.0.0, @hapi/topo@npm:^5.1.0":
version: 5.1.0
resolution: "@hapi/topo@npm:5.1.0"
dependencies:
Expand Down Expand Up @@ -2901,6 +2901,15 @@ __metadata:
languageName: node
linkType: hard

"@sideway/address@npm:^4.1.5":
version: 4.1.5
resolution: "@sideway/address@npm:4.1.5"
dependencies:
"@hapi/hoek": ^9.0.0
checksum: 8/3e3ea0f00b4765d86509282290368a4a5fd39a7995fdc6de42116ca19a96120858e56c2c995081def06e1c53e1f8bccc7d013f6326602bec9d56b72ee2772b9d
languageName: node
linkType: hard

"@sideway/formula@npm:^3.0.1":
version: 3.0.1
resolution: "@sideway/formula@npm:3.0.1"
Expand Down Expand Up @@ -5242,13 +5251,14 @@ __metadata:
languageName: node
linkType: hard

"axios@npm:^0.27.2":
version: 0.27.2
resolution: "axios@npm:0.27.2"
"axios@npm:^1.7.9":
version: 1.7.9
resolution: "axios@npm:1.7.9"
dependencies:
follow-redirects: "npm:^1.14.9"
form-data: "npm:^4.0.0"
checksum: 76d673d2a90629944b44d6f345f01e58e9174690f635115d5ffd4aca495d99bcd8f95c590d5ccb473513f5ebc1d1a6e8934580d0c57cdd0498c3a101313ef771
follow-redirects: ^1.15.6
form-data: ^4.0.0
proxy-from-env: ^1.1.0
checksum: 8/cb8ce291818effda09240cb60f114d5625909b345e10f389a945320e06acf0bc949d0f8422d25720f5dd421362abee302c99f5e97edec4c156c8939814b23d19
languageName: node
linkType: hard

Expand Down Expand Up @@ -7311,7 +7321,7 @@ __metadata:
languageName: node
linkType: hard

"follow-redirects@npm:^1.14.0, follow-redirects@npm:^1.14.9":
"follow-redirects@npm:^1.14.0":
version: 1.15.3
resolution: "follow-redirects@npm:1.15.3"
peerDependenciesMeta:
Expand All @@ -7321,6 +7331,16 @@ __metadata:
languageName: node
linkType: hard

"follow-redirects@npm:^1.15.6":
version: 1.15.9
resolution: "follow-redirects@npm:1.15.9"
peerDependenciesMeta:
debug:
optional: true
checksum: 8/859e2bacc7a54506f2bf9aacb10d165df78c8c1b0ceb8023f966621b233717dab56e8d08baadc3ad3b9db58af290413d585c999694b7c146aaf2616340c3d2a6
languageName: node
linkType: hard

"for-each@npm:^0.3.3":
version: 0.3.3
resolution: "for-each@npm:0.3.3"
Expand Down Expand Up @@ -7452,18 +7472,18 @@ __metadata:
languageName: node
linkType: hard

"fsevents@patch:fsevents@npm%3A2.3.2#optional!builtin<compat/fsevents>":
"fsevents@patch:fsevents@npm%3A2.3.2#~builtin<compat/fsevents>":
version: 2.3.2
resolution: "fsevents@patch:fsevents@npm%3A2.3.2#optional!builtin<compat/fsevents>::version=2.3.2&hash=df0bf1"
resolution: "fsevents@patch:fsevents@npm%3A2.3.2#~builtin<compat/fsevents>::version=2.3.2&hash=df0bf1"
dependencies:
node-gyp: "npm:latest"
conditions: os=darwin
languageName: node
linkType: hard

"fsevents@patch:fsevents@npm%3A^2.3.2#optional!builtin<compat/fsevents>, fsevents@patch:fsevents@npm%3A~2.3.2#optional!builtin<compat/fsevents>":
"fsevents@patch:fsevents@npm%3A^2.3.2#~builtin<compat/fsevents>, fsevents@patch:fsevents@npm%3A~2.3.2#~builtin<compat/fsevents>":
version: 2.3.3
resolution: "fsevents@patch:fsevents@npm%3A2.3.3#optional!builtin<compat/fsevents>::version=2.3.3&hash=df0bf1"
resolution: "fsevents@patch:fsevents@npm%3A2.3.3#~builtin<compat/fsevents>::version=2.3.3&hash=df0bf1"
dependencies:
node-gyp: "npm:latest"
conditions: os=darwin
Expand Down Expand Up @@ -9188,7 +9208,20 @@ __metadata:
languageName: node
linkType: hard

"joi@npm:^17.3.0, joi@npm:^17.7.0":
"joi@npm:^17.13.3":
version: 17.13.3
resolution: "joi@npm:17.13.3"
dependencies:
"@hapi/hoek": ^9.3.0
"@hapi/topo": ^5.1.0
"@sideway/address": ^4.1.5
"@sideway/formula": ^3.0.1
"@sideway/pinpoint": ^2.0.0
checksum: 8/66ed454fee3d8e8da1ce21657fd2c7d565d98f3e539d2c5c028767e5f38cbd6297ce54df8312d1d094e62eb38f9452ebb43da4ce87321df66cf5e3f128cbc400
languageName: node
linkType: hard

"joi@npm:^17.3.0":
version: 17.11.0
resolution: "joi@npm:17.11.0"
dependencies:
Expand Down Expand Up @@ -9775,7 +9808,7 @@ __metadata:
languageName: node
linkType: hard

"minimist@npm:^1.2.0, minimist@npm:^1.2.5, minimist@npm:^1.2.6, minimist@npm:^1.2.7":
"minimist@npm:^1.2.0, minimist@npm:^1.2.5, minimist@npm:^1.2.6, minimist@npm:^1.2.8":
version: 1.2.8
resolution: "minimist@npm:1.2.8"
checksum: 19d3fcdca050087b84c2029841a093691a91259a47def2f18222f41e7645a0b7c44ef4b40e88a1e58a40c84d2ef0ee6047c55594d298146d0eb3f6b737c20ce6
Expand Down Expand Up @@ -10688,7 +10721,7 @@ __metadata:
languageName: node
linkType: hard

"proxy-from-env@npm:^1.0.0":
"proxy-from-env@npm:^1.0.0, proxy-from-env@npm:^1.1.0":
version: 1.1.0
resolution: "proxy-from-env@npm:1.1.0"
checksum: fe7dd8b1bdbbbea18d1459107729c3e4a2243ca870d26d34c2c1bcd3e4425b7bcc5112362df2d93cc7fb9746f6142b5e272fd1cc5c86ddf8580175186f6ad42b
Expand Down Expand Up @@ -11286,16 +11319,16 @@ __metadata:
languageName: node
linkType: hard

"resolve@patch:resolve@npm%3A^1.10.0#optional!builtin<compat/resolve>, resolve@patch:resolve@npm%3A^1.14.2#optional!builtin<compat/resolve>, resolve@patch:resolve@npm%3A^1.20.0#optional!builtin<compat/resolve>, resolve@patch:resolve@npm%3A^1.22.1#optional!builtin<compat/resolve>":
"resolve@patch:resolve@npm%3A^1.10.0#~builtin<compat/resolve>, resolve@patch:resolve@npm%3A^1.14.2#~builtin<compat/resolve>, resolve@patch:resolve@npm%3A^1.20.0#~builtin<compat/resolve>, resolve@patch:resolve@npm%3A^1.22.1#~builtin<compat/resolve>":
version: 1.22.8
resolution: "resolve@patch:resolve@npm%3A1.22.8#optional!builtin<compat/resolve>::version=1.22.8&hash=c3c19d"
resolution: "resolve@patch:resolve@npm%3A1.22.8#~builtin<compat/resolve>::version=1.22.8&hash=c3c19d"
dependencies:
is-core-module: "npm:^2.13.0"
path-parse: "npm:^1.0.7"
supports-preserve-symlinks-flag: "npm:^1.0.0"
bin:
resolve: bin/resolve
checksum: 0446f024439cd2e50c6c8fa8ba77eaa8370b4180f401a96abf3d1ebc770ac51c1955e12764cde449fde3fff480a61f84388e3505ecdbab778f4bef5f8212c729
checksum: 8/5479b7d431cacd5185f8db64bfcb7286ae5e31eb299f4c4f404ad8aa6098b77599563ac4257cb2c37a42f59dfc06a1bec2bcf283bb448f319e37f0feb9a09847
languageName: node
linkType: hard

Expand Down Expand Up @@ -11388,7 +11421,7 @@ __metadata:
languageName: node
linkType: hard

"rxjs@npm:^7.8.0, rxjs@npm:^7.8.1":
"rxjs@npm:^7.8.1":
version: 7.8.1
resolution: "rxjs@npm:7.8.1"
dependencies:
Expand Down Expand Up @@ -12332,13 +12365,13 @@ __metadata:
languageName: node
linkType: hard

"typescript@patch:typescript@npm%3A^5.2.2#optional!builtin<compat/typescript>":
"typescript@patch:typescript@^5.2.2#~builtin<compat/typescript>":
version: 5.2.2
resolution: "typescript@patch:typescript@npm%3A5.2.2#optional!builtin<compat/typescript>::version=5.2.2&hash=f3b441"
resolution: "typescript@patch:typescript@npm%3A5.2.2#~builtin<compat/typescript>::version=5.2.2&hash=d73830"
bin:
tsc: bin/tsc
tsserver: bin/tsserver
checksum: 062c1cee1990e6b9419ce8a55162b8dc917eb87f807e4de0327dbc1c2fa4e5f61bc0dd4e034d38ff541d1ed0479b53bcee8e4de3a4075c51a1724eb6216cb6f5
checksum: 8/07106822b4305de3f22835cbba949a2b35451cad50888759b6818421290ff95d522b38ef7919e70fb381c5fe9c1c643d7dea22c8b31652a717ddbd57b7f4d554
languageName: node
linkType: hard

Expand Down Expand Up @@ -12681,18 +12714,18 @@ __metadata:
languageName: node
linkType: hard

"wait-on@npm:^7.0.1":
version: 7.0.1
resolution: "wait-on@npm:7.0.1"
"wait-on@npm:^8.0.2":
version: 8.0.2
resolution: "wait-on@npm:8.0.2"
dependencies:
axios: "npm:^0.27.2"
joi: "npm:^17.7.0"
lodash: "npm:^4.17.21"
minimist: "npm:^1.2.7"
rxjs: "npm:^7.8.0"
axios: ^1.7.9
joi: ^17.13.3
lodash: ^4.17.21
minimist: ^1.2.8
rxjs: ^7.8.1
bin:
wait-on: bin/wait-on
checksum: 2a9c56d26dac573e6bfd36e85d99f072021c23dc2c0faab900a411460b58e16982b96b018d9168c366040f56196314fa46f3d79ef19e3dc38f55824d5035f2ec
checksum: 8/3b6388f991faec8d5226f7a1c0dbcf9852f536632f987dd65f27e7a070d03bfc67f051a4d208009e6dbbdb095a6f9109394c2dc88fec191a798983e0c8469471
languageName: node
linkType: hard

Expand Down Expand Up @@ -13054,31 +13087,31 @@ __metadata:
version: 0.0.0-use.local
resolution: "yarn-pnp-react-vite@workspace:."
dependencies:
"@storybook/addon-essentials": "npm:^7.6.0-alpha.2"
"@storybook/addon-interactions": "npm:^7.6.0-alpha.2"
"@storybook/addon-links": "npm:^7.6.0-alpha.2"
"@storybook/addon-onboarding": "npm:^1.0.8"
"@storybook/blocks": "npm:^7.6.0-alpha.2"
"@storybook/react": "npm:^7.6.0-alpha.2"
"@storybook/react-vite": "npm:^7.6.0-alpha.2"
"@storybook/test-runner": "npm:^0.13.0"
"@storybook/testing-library": "npm:^0.2.2"
"@types/react": "npm:^18.2.33"
"@types/react-dom": "npm:^18.2.14"
"@typescript-eslint/eslint-plugin": "npm:^6.9.0"
"@typescript-eslint/parser": "npm:^6.9.0"
"@vitejs/plugin-react": "npm:^4.1.0"
concurrently: "npm:^8.2.2"
eslint: "npm:^8.52.0"
eslint-plugin-react-hooks: "npm:^4.6.0"
eslint-plugin-react-refresh: "npm:^0.4.3"
react: "npm:^18.2.0"
react-dom: "npm:^18.2.0"
serve: "npm:^14.2.1"
storybook: "npm:^7.6.0-alpha.2"
typescript: "npm:^5.2.2"
vite: "npm:^4.5.0"
wait-on: "npm:^7.0.1"
"@storybook/addon-essentials": ^7.6.0-alpha.2
"@storybook/addon-interactions": ^7.6.0-alpha.2
"@storybook/addon-links": ^7.6.0-alpha.2
"@storybook/addon-onboarding": ^1.0.8
"@storybook/blocks": ^7.6.0-alpha.2
"@storybook/react": ^7.6.0-alpha.2
"@storybook/react-vite": ^7.6.0-alpha.2
"@storybook/test-runner": ^0.13.0
"@storybook/testing-library": ^0.2.2
"@types/react": ^18.2.33
"@types/react-dom": ^18.2.14
"@typescript-eslint/eslint-plugin": ^6.9.0
"@typescript-eslint/parser": ^6.9.0
"@vitejs/plugin-react": ^4.1.0
concurrently: ^8.2.2
eslint: ^8.52.0
eslint-plugin-react-hooks: ^4.6.0
eslint-plugin-react-refresh: ^0.4.3
react: ^18.2.0
react-dom: ^18.2.0
serve: ^14.2.1
storybook: ^7.6.0-alpha.2
typescript: ^5.2.2
vite: ^4.5.0
wait-on: ^8.0.2
languageName: unknown
linkType: soft

Expand Down

0 comments on commit ab62763

Please sign in to comment.