From 8f4503a47b26e55f6d12cca9deee644e63150f1f Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 1 Feb 2020 00:02:30 +0000 Subject: [PATCH] fix: package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-DOTPROP-543489 --- package.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/package.json b/package.json index 9ab85ff29a..5c01afcefb 100644 --- a/package.json +++ b/package.json @@ -56,7 +56,7 @@ "abbrev": "^1.1.1", "ansi-escapes": "3.2.0", "chalk": "^2.4.2", - "configstore": "^3.1.2", + "configstore": "^5.0.0", "debug": "^3.1.0", "diff": "^4.0.1", "git-url-parse": "11.1.2", @@ -89,7 +89,7 @@ "strip-ansi": "^5.2.0", "tempfile": "^2.0.0", "then-fs": "^2.0.0", - "update-notifier": "^2.5.0", + "update-notifier": "^4.0.0", "uuid": "^3.3.2" }, "devDependencies": {