From a3222106e1084c3857a11f543eaece2fdda9855f Mon Sep 17 00:00:00 2001 From: DeepSource Bot Date: Mon, 10 Feb 2025 18:56:40 +0000 Subject: [PATCH] =?UTF-8?q?fix(deps):=20update=20npm/node-sloc=20from=200.?= =?UTF-8?q?2.1=20=E2=86=92=200.2.1=20fix(deps):=20update=20npm/node-sloc?= =?UTF-8?q?=20from=200.2.1=20=E2=86=92=200.2.1?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This pull request addresses security vulnerabilities in this repository by updating dependencies to a safe version. We recommend manually auditing the package manifest files to verify the fixes. ### Upgrade Summary **node-sloc**: 0.2.1 → 0.2.1 - Fixes [CVE-2024-4067](https://nvd.nist.gov/vuln/detail/CVE-2024-4067) (Medium severity) - References: - [https://nvd.nist.gov/vuln/detail/CVE-2024-4067](https://nvd.nist.gov/vuln/detail/CVE-2024-4067) - [https://github.com/micromatch/micromatch/issues/243](https://github.com/micromatch/micromatch/issues/243) - [https://github.com/micromatch/micromatch/pull/247](https://github.com/micromatch/micromatch/pull/247) - [https://github.com/micromatch/micromatch/pull/266](https://github.com/micromatch/micromatch/pull/266) - [https://github.com/micromatch/micromatch/commit/03aa8052171e878897eee5d7bb2ae0ae83ec2ade](https://github.com/micromatch/micromatch/commit/03aa8052171e878897eee5d7bb2ae0ae83ec2ade) - [https://github.com/micromatch/micromatch/commit/500d5d6f42f0e8dfa1cb5464c6cb420b1b6aaaa0](https://github.com/micromatch/micromatch/commit/500d5d6f42f0e8dfa1cb5464c6cb420b1b6aaaa0) - [https://advisory.checkmarx.net/advisory/CVE-2024-4067](https://advisory.checkmarx.net/advisory/CVE-2024-4067) - [https://devhub.checkmarx.com/cve-details/CVE-2024-4067](https://devhub.checkmarx.com/cve-details/CVE-2024-4067) - [https://github.com/micromatch/micromatch](https://github.com/micromatch/micromatch) - [https://github.com/micromatch/micromatch/blob/2c56a8604b68c1099e7bc0f807ce0865a339747a/index.js#L448](https://github.com/micromatch/micromatch/blob/2c56a8604b68c1099e7bc0f807ce0865a339747a/index.js#L448) - [https://github.com/micromatch/micromatch/releases/tag/4.0.8](https://github.com/micromatch/micromatch/releases/tag/4.0.8) --- 🤖 This pull request was automatically generated by DeepSource SCA. To view all vulnerabilities in this repository, please visit the [dashboard](https://app.deepsource.one/gh/NewProfoundOrigin/phaser/dependencies/). --- package-lock.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/package-lock.json b/package-lock.json index 7ee8342abe..ff837a9151 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "phaser", - "version": "3.80.0-beta.3", + "version": "3.87.0", "lockfileVersion": 2, "requires": true, "packages": { "": { "name": "phaser", - "version": "3.80.0-beta.3", + "version": "3.87.0", "license": "MIT", "dependencies": { "eventemitter3": "^5.0.1"