From 68d5d084597599fa059d975a218ae1ab3af54dea Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 24 Apr 2023 19:54:07 +0000 Subject: [PATCH] fix: node_modules/esquery/node_modules/estraverse/package.json & node_modules/esquery/node_modules/estraverse/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908 - https://snyk.io/vuln/SNYK-JS-DOTOBJECT-548905 - https://snyk.io/vuln/SNYK-JS-MINIMATCH-1019388 - https://snyk.io/vuln/SNYK-JS-MINIMATCH-3050818 - https://snyk.io/vuln/SNYK-JS-MINIMIST-2429795 - https://snyk.io/vuln/SNYK-JS-MINIMIST-559764 - https://snyk.io/vuln/SNYK-JS-MOCHA-2863123 - https://snyk.io/vuln/SNYK-JS-MOCHA-561476 - https://snyk.io/vuln/npm:debug:20170905 - https://snyk.io/vuln/npm:growl:20160721 - https://snyk.io/vuln/npm:minimatch:20160620 - https://snyk.io/vuln/npm:ms:20170412 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:minimatch:20160620 --- node_modules/esquery/node_modules/estraverse/.snyk | 12 ++++++++++++ .../esquery/node_modules/estraverse/package.json | 14 ++++++++++---- 2 files changed, 22 insertions(+), 4 deletions(-) create mode 100644 node_modules/esquery/node_modules/estraverse/.snyk diff --git a/node_modules/esquery/node_modules/estraverse/.snyk b/node_modules/esquery/node_modules/estraverse/.snyk new file mode 100644 index 0000000000..bc3f5de960 --- /dev/null +++ b/node_modules/esquery/node_modules/estraverse/.snyk @@ -0,0 +1,12 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:minimatch:20160620': + - gulp > vinyl-fs > glob-stream > minimatch: + patched: '2023-04-24T19:54:00.995Z' + - gulp > vinyl-fs > glob-watcher > gaze > globule > minimatch: + patched: '2023-04-24T19:54:00.995Z' + - gulp > vinyl-fs > glob-watcher > gaze > globule > glob > minimatch: + patched: '2023-04-24T19:54:00.995Z' diff --git a/node_modules/esquery/node_modules/estraverse/package.json b/node_modules/esquery/node_modules/estraverse/package.json index 0cf551dd78..fd091a1360 100644 --- a/node_modules/esquery/node_modules/estraverse/package.json +++ b/node_modules/esquery/node_modules/estraverse/package.json @@ -23,18 +23,24 @@ "babel-register": "^6.3.13", "chai": "^2.1.1", "espree": "^1.11.0", - "gulp": "^3.8.10", - "gulp-bump": "^0.2.2", + "gulp": "^4.0.0", + "gulp-bump": "^2.0.0", "gulp-filter": "^2.0.0", "gulp-git": "^1.0.1", "gulp-tag-version": "^1.3.0", "jshint": "^2.5.6", - "mocha": "^2.1.0" + "mocha": "^10.1.0" }, "license": "BSD-2-Clause", "scripts": { "test": "npm run-script lint && npm run-script unit-test", "lint": "jshint estraverse.js", - "unit-test": "mocha --compilers js:babel-register" + "unit-test": "mocha --compilers js:babel-register", + "prepublish": "npm run snyk-protect", + "snyk-protect": "snyk-protect" + }, + "snyk": true, + "dependencies": { + "@snyk/protect": "latest" } } \ No newline at end of file