From 86b9bb3ad0cb548f1cd7fd5f8d50414e3268d22e Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 15 Mar 2021 08:59:04 +0000 Subject: [PATCH] fix: deps/npm/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-SSRI-1085630 --- deps/npm/package.json | 20 ++++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/deps/npm/package.json b/deps/npm/package.json index 3c37420f4c5ec2..7176c416ef869f 100644 --- a/deps/npm/package.json +++ b/deps/npm/package.json @@ -42,7 +42,7 @@ "bin-links": "^1.1.7", "bluebird": "^3.5.5", "byte-size": "^5.0.1", - "cacache": "^12.0.3", + "cacache": "^15.0.0", "call-limit": "^1.1.1", "chownr": "^1.1.3", "ci-info": "^2.0.0", @@ -75,11 +75,11 @@ "lazy-property": "~1.0.0", "libcipm": "^4.0.7", "libnpm": "^3.0.1", - "libnpmaccess": "^3.0.2", - "libnpmhook": "^5.0.3", - "libnpmorg": "^1.0.1", - "libnpmsearch": "^2.0.2", - "libnpmteam": "^1.0.2", + "libnpmaccess": "^4.0.0", + "libnpmhook": "^6.0.0", + "libnpmorg": "^2.0.0", + "libnpmsearch": "^3.0.0", + "libnpmteam": "^2.0.0", "libnpx": "^10.2.2", "lock-verify": "^2.1.0", "lockfile": "^1.0.4", @@ -103,14 +103,14 @@ "npm-package-arg": "^6.1.1", "npm-packlist": "^1.4.7", "npm-pick-manifest": "^3.0.2", - "npm-profile": "^4.0.2", - "npm-registry-fetch": "^4.0.2", + "npm-profile": "^5.0.0", + "npm-registry-fetch": "^7.0.0", "npm-user-validate": "~1.0.0", "npmlog": "~4.1.2", "once": "~1.4.0", "opener": "^1.5.1", "osenv": "^0.1.5", - "pacote": "^9.5.12", + "pacote": "^11.0.0", "path-is-inside": "~1.0.2", "promise-inflight": "~1.0.1", "qrcode-terminal": "^0.12.0", @@ -132,7 +132,7 @@ "slide": "~1.1.6", "sorted-object": "~2.0.1", "sorted-union-stream": "~2.1.3", - "ssri": "^6.0.1", + "ssri": "^8.0.1", "stringify-package": "^1.0.1", "tar": "^4.4.13", "text-table": "~0.2.0",