From 64a2559243b34a8fceb965af5b99a850acdb1e65 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 25 Apr 2023 03:46:04 +0000 Subject: [PATCH] fix: tools/node_modules/@babel/eslint-parser/node_modules/esrecurse/package.json & tools/node_modules/@babel/eslint-parser/node_modules/esrecurse/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AJV-584908 - https://snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908 - https://snyk.io/vuln/SNYK-JS-MINIMATCH-1019388 - https://snyk.io/vuln/SNYK-JS-MINIMATCH-3050818 - https://snyk.io/vuln/SNYK-JS-MINIMIST-2429795 - https://snyk.io/vuln/SNYK-JS-MINIMIST-559764 - https://snyk.io/vuln/SNYK-JS-MOCHA-561476 - https://snyk.io/vuln/npm:debug:20170905 - https://snyk.io/vuln/npm:diff:20180305 - https://snyk.io/vuln/npm:growl:20160721 - https://snyk.io/vuln/npm:minimatch:20160620 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:minimatch:20160620 --- .../eslint-parser/node_modules/esrecurse/.snyk | 12 ++++++++++++ .../node_modules/esrecurse/package.json | 16 ++++++++++------ 2 files changed, 22 insertions(+), 6 deletions(-) create mode 100644 tools/node_modules/@babel/eslint-parser/node_modules/esrecurse/.snyk mode change 100755 => 100644 tools/node_modules/@babel/eslint-parser/node_modules/esrecurse/package.json diff --git a/tools/node_modules/@babel/eslint-parser/node_modules/esrecurse/.snyk b/tools/node_modules/@babel/eslint-parser/node_modules/esrecurse/.snyk new file mode 100644 index 00000000000000..6cd5dca98d307a --- /dev/null +++ b/tools/node_modules/@babel/eslint-parser/node_modules/esrecurse/.snyk @@ -0,0 +1,12 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:minimatch:20160620': + - gulp > vinyl-fs > glob-stream > minimatch: + patched: '2023-04-25T03:45:58.816Z' + - gulp > vinyl-fs > glob-watcher > gaze > globule > minimatch: + patched: '2023-04-25T03:45:58.816Z' + - gulp > vinyl-fs > glob-watcher > gaze > globule > glob > minimatch: + patched: '2023-04-25T03:45:58.816Z' diff --git a/tools/node_modules/@babel/eslint-parser/node_modules/esrecurse/package.json b/tools/node_modules/@babel/eslint-parser/node_modules/esrecurse/package.json old mode 100755 new mode 100644 index dec5b1bc1fd3ac..c793c03a4aa22f --- a/tools/node_modules/@babel/eslint-parser/node_modules/esrecurse/package.json +++ b/tools/node_modules/@babel/eslint-parser/node_modules/esrecurse/package.json @@ -19,7 +19,8 @@ "url": "https://github.com/estools/esrecurse.git" }, "dependencies": { - "estraverse": "^5.2.0" + "estraverse": "^5.2.0", + "@snyk/protect": "latest" }, "devDependencies": { "babel-cli": "^6.24.1", @@ -28,12 +29,12 @@ "babel-register": "^6.24.1", "chai": "^4.0.2", "esprima": "^4.0.0", - "gulp": "^3.9.0", + "gulp": "^4.0.0", "gulp-bump": "^2.7.0", - "gulp-eslint": "^4.0.0", + "gulp-eslint": "^5.0.0", "gulp-filter": "^5.0.0", "gulp-git": "^2.4.1", - "gulp-mocha": "^4.3.1", + "gulp-mocha": "^7.0.0", "gulp-tag-version": "^1.2.1", "jsdoc": "^3.3.0-alpha10", "minimist": "^1.1.0" @@ -42,11 +43,14 @@ "scripts": { "test": "gulp travis", "unit-test": "gulp test", - "lint": "gulp lint" + "lint": "gulp lint", + "prepublish": "npm run snyk-protect", + "snyk-protect": "snyk-protect" }, "babel": { "presets": [ "es2015" ] - } + }, + "snyk": true }