From 60166729aeb41471549101fc29d27914d9656521 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 7 Oct 2019 08:37:57 +0000 Subject: [PATCH] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-HTTPSPROXYAGENT-469131 --- .snyk | 7 ++++++- package.json | 2 +- 2 files changed, 7 insertions(+), 2 deletions(-) diff --git a/.snyk b/.snyk index 4a43212..0223415 100644 --- a/.snyk +++ b/.snyk @@ -1,8 +1,13 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.10.2 +version: v1.13.5 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: 'npm:request:20160119': - express-uglify > winston > loggly > request: patched: '2018-02-28T13:04:50.087Z' + SNYK-JS-HTTPSPROXYAGENT-469131: + - snyk > proxy-agent > https-proxy-agent: + patched: '2019-10-07T08:37:56.073Z' + - snyk > proxy-agent > pac-proxy-agent > https-proxy-agent: + patched: '2019-10-07T08:37:56.073Z' diff --git a/package.json b/package.json index 399cbad..22ffeae 100644 --- a/package.json +++ b/package.json @@ -15,7 +15,7 @@ "express-uglify": "*", "lodash": "~4.17.5", "btoa": "~1.1.0", - "snyk": "^1.69.10" + "snyk": "^1.231.0" }, "devDependencies": { "grunt": "~0.4.1",