From 4abb28bbd1fa90f9167a67378728f56f191e2e00 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 18 Sep 2024 10:44:11 +0000 Subject: [PATCH] fix: package.json & package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-BRACES-6838727 --- package-lock.json | 39 ++++++++++++++++++++++++++++++++++----- package.json | 2 +- 2 files changed, 35 insertions(+), 6 deletions(-) diff --git a/package-lock.json b/package-lock.json index b9d559f..96bcc85 100644 --- a/package-lock.json +++ b/package-lock.json @@ -19,7 +19,7 @@ "react-bootstrap": "^2.9.1", "react-dom": "^18.2.0", "redux": "^5.0.0", - "sass": "^1.69.6", + "sass": "^1.79.0", "tfjs": "^0.6.0" }, "devDependencies": { @@ -6777,11 +6777,12 @@ } }, "node_modules/sass": { - "version": "1.69.6", - "resolved": "https://registry.npmjs.org/sass/-/sass-1.69.6.tgz", - "integrity": "sha512-qbRr3k9JGHWXCvZU77SD2OTwUlC+gNT+61JOLcmLm+XqH4h/5D+p4IIsxvpkB89S9AwJOyb5+rWNpIucaFxSFQ==", + "version": "1.79.0", + "resolved": "https://registry.npmjs.org/sass/-/sass-1.79.0.tgz", + "integrity": "sha512-9Q1xXsm9XT54yYkmQAoH3vCMEIavwWWQGJ3cZ0WJAgecR4edDDTdtiPyEeFDNWO/hLCy3qZKvwjK4ulPR5Yzow==", + "license": "MIT", "dependencies": { - "chokidar": ">=3.0.0 <4.0.0", + "chokidar": "^4.0.0", "immutable": "^4.0.0", "source-map-js": ">=0.6.2 <2.0.0" }, @@ -6792,6 +6793,34 @@ "node": ">=14.0.0" } }, + "node_modules/sass/node_modules/chokidar": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/chokidar/-/chokidar-4.0.0.tgz", + "integrity": "sha512-mxIojEAQcuEvT/lyXq+jf/3cO/KoA6z4CeNDGGevTybECPOMFCnQy3OPahluUkbqgPNGw5Bi78UC7Po6Lhy+NA==", + "license": "MIT", + "dependencies": { + "readdirp": "^4.0.1" + }, + "engines": { + "node": ">= 14.16.0" + }, + "funding": { + "url": "https://paulmillr.com/funding/" + } + }, + "node_modules/sass/node_modules/readdirp": { + "version": "4.0.1", + "resolved": "https://registry.npmjs.org/readdirp/-/readdirp-4.0.1.tgz", + "integrity": "sha512-GkMg9uOTpIWWKbSsgwb5fA4EavTR+SG/PMPoAY8hkhHfEEY0/vqljY+XHqtDf2cr2IJtoNRDbrrEpZUiZCkYRw==", + "license": "MIT", + "engines": { + "node": ">= 14.16.0" + }, + "funding": { + "type": "individual", + "url": "https://paulmillr.com/funding/" + } + }, "node_modules/scheduler": { "version": "0.23.0", "resolved": "https://registry.npmjs.org/scheduler/-/scheduler-0.23.0.tgz", diff --git a/package.json b/package.json index 292deb7..a69db91 100644 --- a/package.json +++ b/package.json @@ -21,7 +21,7 @@ "react-bootstrap": "^2.9.1", "react-dom": "^18.2.0", "redux": "^5.0.0", - "sass": "^1.69.6", + "sass": "^1.79.0", "tfjs": "^0.6.0" }, "devDependencies": {