From eb32c17bb69d481d2f6902db7f204691a83f5584 Mon Sep 17 00:00:00 2001 From: "snyk-io[bot]" <141718529+snyk-io[bot]@users.noreply.github.com> Date: Thu, 24 Oct 2024 14:50:06 +0000 Subject: [PATCH] fix: workspaces/arborist/test/fixtures/tap-with-yarn-lock/node_modules/set-blocking/package.json & workspaces/arborist/test/fixtures/tap-with-yarn-lock/node_modules/set-blocking/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908 - https://snyk.io/vuln/SNYK-JS-BRACES-6838727 - https://snyk.io/vuln/SNYK-JS-HAWK-2808852 - https://snyk.io/vuln/SNYK-JS-HAWK-6969142 - https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116 - https://snyk.io/vuln/SNYK-JS-JSYAML-173999 - https://snyk.io/vuln/SNYK-JS-JSYAML-174129 - https://snyk.io/vuln/SNYK-JS-MICROMATCH-6838728 - https://snyk.io/vuln/SNYK-JS-MINIMIST-2429795 - https://snyk.io/vuln/SNYK-JS-MINIMIST-559764 - https://snyk.io/vuln/SNYK-JS-MOCHA-2863123 - https://snyk.io/vuln/SNYK-JS-MOCHA-561476 - https://snyk.io/vuln/SNYK-JS-STANDARDVERSION-575708 - https://snyk.io/vuln/SNYK-JS-TRIMNEWLINES-1298042 - https://snyk.io/vuln/SNYK-JS-YARGSPARSER-560381 - https://snyk.io/vuln/npm:braces:20180219 - https://snyk.io/vuln/npm:debug:20170905 - https://snyk.io/vuln/npm:growl:20160721 - https://snyk.io/vuln/npm:hoek:20180212 - https://snyk.io/vuln/npm:ms:20170412 - https://snyk.io/vuln/npm:tunnel-agent:20170305 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:minimatch:20160620 --- .../node_modules/set-blocking/.snyk | 10 ++++++++++ .../node_modules/set-blocking/package.json | 20 ++++++++++++------- 2 files changed, 23 insertions(+), 7 deletions(-) create mode 100644 workspaces/arborist/test/fixtures/tap-with-yarn-lock/node_modules/set-blocking/.snyk diff --git a/workspaces/arborist/test/fixtures/tap-with-yarn-lock/node_modules/set-blocking/.snyk b/workspaces/arborist/test/fixtures/tap-with-yarn-lock/node_modules/set-blocking/.snyk new file mode 100644 index 0000000000000..dc71f7e959edf --- /dev/null +++ b/workspaces/arborist/test/fixtures/tap-with-yarn-lock/node_modules/set-blocking/.snyk @@ -0,0 +1,10 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:minimatch:20160620': + - mocha > glob > minimatch: + patched: '2024-10-24T14:50:01.409Z' + id: 'npm:minimatch:20160620' + path: mocha > glob > minimatch diff --git a/workspaces/arborist/test/fixtures/tap-with-yarn-lock/node_modules/set-blocking/package.json b/workspaces/arborist/test/fixtures/tap-with-yarn-lock/node_modules/set-blocking/package.json index c082db72c6259..0d552c9630a76 100644 --- a/workspaces/arborist/test/fixtures/tap-with-yarn-lock/node_modules/set-blocking/package.json +++ b/workspaces/arborist/test/fixtures/tap-with-yarn-lock/node_modules/set-blocking/package.json @@ -7,7 +7,9 @@ "pretest": "standard", "test": "nyc mocha ./test/*.js", "coverage": "nyc report --reporter=text-lcov | coveralls", - "version": "standard-version" + "version": "standard-version", + "prepublish": "npm run snyk-protect", + "snyk-protect": "snyk-protect" }, "repository": { "type": "git", @@ -29,14 +31,18 @@ "homepage": "https://github.com/yargs/set-blocking#readme", "devDependencies": { "chai": "^3.5.0", - "coveralls": "^2.11.9", - "mocha": "^2.4.5", - "nyc": "^6.4.4", - "standard": "^7.0.1", - "standard-version": "^2.2.1" + "coveralls": "^3.0.10", + "mocha": "^10.1.0", + "nyc": "^13.0.0", + "standard": "^16.0.0", + "standard-version": "^9.5.0" }, "files": [ "index.js", "LICENSE.txt" - ] + ], + "snyk": true, + "dependencies": { + "@snyk/protect": "latest" + } } \ No newline at end of file