From 6bc25c9344d84ff7a767a4038db7645b267d51ed Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 5 Apr 2022 16:36:43 +0000 Subject: [PATCH] fix: package.json & yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-MOMENT-2440688 --- package.json | 2 +- yarn.lock | 24 +++++++++--------------- 2 files changed, 10 insertions(+), 16 deletions(-) diff --git a/package.json b/package.json index e6cb26f..ba79d95 100644 --- a/package.json +++ b/package.json @@ -215,7 +215,7 @@ "history": "^4.7.2", "immutable": "^3.8.1", "keytar": "^4.2.1", - "moment": "^2.19.3", + "moment": "^2.29.2", "react": "^16.0.0", "react-dom": "^16.0.1", "react-hot-loader": "3.0.0", diff --git a/yarn.lock b/yarn.lock index 01d6632..0269344 100644 --- a/yarn.lock +++ b/yarn.lock @@ -3344,10 +3344,10 @@ electron-updater@^2.16.1: semver "^5.5.0" source-map-support "^0.5.5" -electron@2.0.4: - version "2.0.4" - resolved "https://registry.yarnpkg.com/electron/-/electron-2.0.4.tgz#87b86b8d9c13748032868c1be97e2b7021a51808" - integrity sha512-rtg6aW2IpWfiwMRk9gqr+a/xOrFlch9sgLNg0UJzCmtUUEGTrbaLxqANr3Ahlx+ODmh/V+WfF7IdEpD76bbssA== +electron@2.0.18: + version "2.0.18" + resolved "https://registry.yarnpkg.com/electron/-/electron-2.0.18.tgz#52f1b248c3cc013b5a870094de3b6ba5de313a0f" + integrity sha512-PQRHtFvLxHdJzMMIwTddUtkS+Te/fZIs+PHO+zPmTUTBE76V3Od3WRGzMQwiJHxN679licmCKhJpMyxZfDEVWQ== dependencies: "@types/node" "^8.0.24" electron-download "^3.0.1" @@ -4050,7 +4050,7 @@ fbjs-scripts@^0.8.3: semver "^5.1.0" through2 "^2.0.0" -fbjs@^0.8.16, fbjs@^0.8.6, fbjs@^0.8.9: +fbjs@^0.8.16, fbjs@^0.8.9: version "0.8.16" resolved "https://registry.yarnpkg.com/fbjs/-/fbjs-0.8.16.tgz#5e67432f550dc41b572bf55847b8aca64e5337db" dependencies: @@ -6663,10 +6663,10 @@ mksnapshot@^0.3.0: fs-extra "0.26.7" request "^2.79.0" -moment@^2.19.3: - version "2.24.0" - resolved "https://registry.yarnpkg.com/moment/-/moment-2.24.0.tgz#0d055d53f5052aa653c9f6eb68bb5d12bf5c2b5b" - integrity sha512-bV7f+6l2QigeBBZSM/6yTNq4P2fNpSWj/0e7jQcy87A8e7o2nAfP/34/2ky5Vw4B9S446EtIhodAzkFCcR4dQg== +moment@^2.29.2: + version "2.29.2" + resolved "https://registry.yarnpkg.com/moment/-/moment-2.29.2.tgz#00910c60b20843bcba52d37d58c628b47b1f20e4" + integrity sha512-UgzG4rvxYpN15jgCmVJwac49h9ly9NurikMWGPdVxm8GZD6XjkKPxDTjQQ43gtGgnV3X0cAyWDdP2Wexoquifg== move-concurrently@^1.0.1: version "1.0.1" @@ -8165,12 +8165,6 @@ react-select@^1.0.0: prop-types "^15.5.8" react-input-autosize "^2.1.2" -react-tap-event-plugin@^3.0.2: - version "3.0.2" - resolved "https://registry.yarnpkg.com/react-tap-event-plugin/-/react-tap-event-plugin-3.0.2.tgz#280371677b881c31376e0027a0b86d2c6de039ee" - dependencies: - fbjs "^0.8.6" - react-test-renderer@^15.4.2: version "15.6.2" resolved "https://registry.yarnpkg.com/react-test-renderer/-/react-test-renderer-15.6.2.tgz#d0333434fc2c438092696ca770da5ed48037efa8"