From da06f178e02b94c8350a9225f3229378cd9ce734 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 26 Apr 2023 22:50:50 +0000 Subject: [PATCH] fix: tools/node_modules/@babel/eslint-parser/node_modules/estraverse/package.json & tools/node_modules/@babel/eslint-parser/node_modules/estraverse/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908 - https://snyk.io/vuln/SNYK-JS-DOTOBJECT-548905 - https://snyk.io/vuln/SNYK-JS-MINIMATCH-1019388 - https://snyk.io/vuln/SNYK-JS-MINIMATCH-3050818 - https://snyk.io/vuln/SNYK-JS-MINIMIST-2429795 - https://snyk.io/vuln/SNYK-JS-MINIMIST-559764 - https://snyk.io/vuln/SNYK-JS-MOCHA-2863123 - https://snyk.io/vuln/SNYK-JS-MOCHA-561476 - https://snyk.io/vuln/npm:debug:20170905 - https://snyk.io/vuln/npm:growl:20160721 - https://snyk.io/vuln/npm:minimatch:20160620 - https://snyk.io/vuln/npm:ms:20170412 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:minimatch:20160620 --- .../eslint-parser/node_modules/estraverse/.snyk | 12 ++++++++++++ .../node_modules/estraverse/package.json | 14 ++++++++++---- 2 files changed, 22 insertions(+), 4 deletions(-) create mode 100644 tools/node_modules/@babel/eslint-parser/node_modules/estraverse/.snyk diff --git a/tools/node_modules/@babel/eslint-parser/node_modules/estraverse/.snyk b/tools/node_modules/@babel/eslint-parser/node_modules/estraverse/.snyk new file mode 100644 index 00000000000000..327b1f7f1f18dc --- /dev/null +++ b/tools/node_modules/@babel/eslint-parser/node_modules/estraverse/.snyk @@ -0,0 +1,12 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:minimatch:20160620': + - gulp > vinyl-fs > glob-stream > minimatch: + patched: '2023-04-26T22:50:45.985Z' + - gulp > vinyl-fs > glob-watcher > gaze > globule > minimatch: + patched: '2023-04-26T22:50:45.985Z' + - gulp > vinyl-fs > glob-watcher > gaze > globule > glob > minimatch: + patched: '2023-04-26T22:50:45.985Z' diff --git a/tools/node_modules/@babel/eslint-parser/node_modules/estraverse/package.json b/tools/node_modules/@babel/eslint-parser/node_modules/estraverse/package.json index 1138238672309b..e51e05de1fe821 100644 --- a/tools/node_modules/@babel/eslint-parser/node_modules/estraverse/package.json +++ b/tools/node_modules/@babel/eslint-parser/node_modules/estraverse/package.json @@ -23,18 +23,24 @@ "babel-register": "^6.3.13", "chai": "^2.1.1", "espree": "^1.11.0", - "gulp": "^3.8.10", - "gulp-bump": "^0.2.2", + "gulp": "^4.0.0", + "gulp-bump": "^2.0.0", "gulp-filter": "^2.0.0", "gulp-git": "^1.0.1", "gulp-tag-version": "^1.3.0", "jshint": "^2.5.6", - "mocha": "^2.1.0" + "mocha": "^10.1.0" }, "license": "BSD-2-Clause", "scripts": { "test": "npm run-script lint && npm run-script unit-test", "lint": "jshint estraverse.js", - "unit-test": "mocha --compilers js:babel-register" + "unit-test": "mocha --compilers js:babel-register", + "prepublish": "npm run snyk-protect", + "snyk-protect": "snyk-protect" + }, + "snyk": true, + "dependencies": { + "@snyk/protect": "latest" } }