From 59b252389e13ee18a95540fd6de9968852645daf Mon Sep 17 00:00:00 2001 From: Jack Date: Wed, 25 Jan 2023 23:21:53 +0100 Subject: [PATCH] fix: backend/package.json & backend/package-lock.json to reduce vulnerabilities (#3945) The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-SIMPLEGIT-3177391 Co-authored-by: snyk-bot --- backend/package-lock.json | 14 +++++++------- backend/package.json | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/backend/package-lock.json b/backend/package-lock.json index d0123a2b1..b2eec43b6 100644 --- a/backend/package-lock.json +++ b/backend/package-lock.json @@ -30,7 +30,7 @@ "path": "0.12.7", "prom-client": "14.0.1", "rate-limiter-flexible": "2.3.7", - "simple-git": "3.15.0", + "simple-git": "^3.16.0", "string-similarity": "4.0.4", "swagger-stats": "0.99.4", "swagger-ui-express": "4.3.0", @@ -8315,9 +8315,9 @@ "license": "ISC" }, "node_modules/simple-git": { - "version": "3.15.0", - "resolved": "https://registry.npmjs.org/simple-git/-/simple-git-3.15.0.tgz", - "integrity": "sha512-FiWoMPlcYHQ+ApRihUsGjC/ZmIlWj62S6MBCwOunczvXcLQt+9ZdrysDrR6QVepkRQfEAaBXrN2QtJKrN6zbtg==", + "version": "3.16.0", + "resolved": "https://registry.npmjs.org/simple-git/-/simple-git-3.16.0.tgz", + "integrity": "sha512-zuWYsOLEhbJRWVxpjdiXl6eyAyGo/KzVW+KFhhw9MqEEJttcq+32jTWSGyxTdf9e/YCohxRE+9xpWFj9FdiJNw==", "dependencies": { "@kwsites/file-exists": "^1.1.1", "@kwsites/promise-deferred": "^1.1.1", @@ -15628,9 +15628,9 @@ "version": "3.0.7" }, "simple-git": { - "version": "3.15.0", - "resolved": "https://registry.npmjs.org/simple-git/-/simple-git-3.15.0.tgz", - "integrity": "sha512-FiWoMPlcYHQ+ApRihUsGjC/ZmIlWj62S6MBCwOunczvXcLQt+9ZdrysDrR6QVepkRQfEAaBXrN2QtJKrN6zbtg==", + "version": "3.16.0", + "resolved": "https://registry.npmjs.org/simple-git/-/simple-git-3.16.0.tgz", + "integrity": "sha512-zuWYsOLEhbJRWVxpjdiXl6eyAyGo/KzVW+KFhhw9MqEEJttcq+32jTWSGyxTdf9e/YCohxRE+9xpWFj9FdiJNw==", "requires": { "@kwsites/file-exists": "^1.1.1", "@kwsites/promise-deferred": "^1.1.1", diff --git a/backend/package.json b/backend/package.json index 31111234b..4ea4dd469 100644 --- a/backend/package.json +++ b/backend/package.json @@ -37,7 +37,7 @@ "path": "0.12.7", "prom-client": "14.0.1", "rate-limiter-flexible": "2.3.7", - "simple-git": "3.15.0", + "simple-git": "3.16.0", "string-similarity": "4.0.4", "swagger-stats": "0.99.4", "swagger-ui-express": "4.3.0",