Skip to content
This repository was archived by the owner on Jul 9, 2025. It is now read-only.

chore: Fix Component Governance Security Alerts #9306

Merged
tonyanziano merged 45 commits into from
Jul 15, 2022
Merged

chore: Fix Component Governance Security Alerts #9306

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
45 commits
Select commit Hold shift + click to select a range
ca64866
Add dependency_updates.yml
Jun 29, 2022
91fabae
Use yarn up-all in Update dependencies
Jul 5, 2022
803d6cc
Add up-all plugin
Jul 5, 2022
83d47de
Remove yarn upgrade from workflow
Jul 5, 2022
c47d09b
yarn up-all 7-6 e
Jul 7, 2022
c46b223
Merge pull request #9297 from BruceHaley/bruce/yarnupall7-6e
Jul 7, 2022
8effcb7
lock file updates
Jul 7, 2022
0c59bac
Merge pull request #9299 from BruceHaley/bruce/yarnupall7-6e
Jul 7, 2022
6deea5b
Add dir workspace
Jul 7, 2022
086af2d
drop myget Nuget source setup
Jul 7, 2022
631e884
Update hashes in .lock files
Jul 7, 2022
3437565
Reupdate lock files
Jul 7, 2022
7bcaf62
By-hand lock file hash fixes
Jul 7, 2022
1cfdd42
Revert eslint-config-prettier to 6.11.0
Jul 7, 2022
c3e939f
Revert esline-plugin and parser to 2.34.0
Jul 8, 2022
28e9ea5
Revert eslint-plugin-prettier to 3.1.3
Jul 8, 2022
1328a9e
Revert prettier to 2.0.5.
Jul 8, 2022
85ab8ac
Disable/warn eslint errors
Jul 8, 2022
c8ea3cc
Add to excludes
Jul 8, 2022
f01773d
Clean up azure-pipelines.yml
Jul 8, 2022
f26d4f2
Update .yarnrc.prod.yml for yaarn 3.2.1
Jul 9, 2022
810f682
Merge branch 'main' into bruce/yarnuptest7-6e
tonyanziano Jul 13, 2022
07ac795
Fixed newline in en-US.json locale file
tonyanziano Jul 13, 2022
bafbb39
Update json-schema
Jul 13, 2022
702ccd3
Update ejs
Jul 13, 2022
3bf3bb5
Update eventsource
Jul 13, 2022
aea598b
After compileExtensions.js
Jul 13, 2022
acee9f4
By-hand fixes to hashes, checksums
Jul 13, 2022
e5eaf7a
Update shell-quote
Jul 13, 2022
961766f
Update ansi-regex for Composer
Jul 13, 2022
b9286f7
Update ansi-regex in extensions
Jul 14, 2022
d53d46b
Update async
Jul 14, 2022
88ffca2
Update glob-parent, moment
Jul 14, 2022
a908def
Update node-fetch
Jul 14, 2022
c6e9b99
Update node-forge
Jul 14, 2022
91546ea
Update set-value
Jul 14, 2022
dca98ae
Hash fixup for glob-parent, moment
Jul 14, 2022
9a7991a
Update minimist 2
Jul 14, 2022
43d8bde
By-hand fixup for pvaPublish
Jul 14, 2022
81d0495
By-hand fixuup for azurePublish, azurePublishNew
Jul 14, 2022
1236455
Update create-react-context to latest version per CG legal requirement
Jul 14, 2022
4dc4df2
Merge branch 'main' into bruce/fixcgalerts7-13b
Jul 14, 2022
83d7575
Fixups from merge
Jul 14, 2022
ad86639
Fix resolution: "glob@npm:7.2.0" checksum
Jul 15, 2022
68bbd98
Fixups again for [sample-ui-plugin]
Jul 15, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion Composer/packages/extension/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@
"@types/fs-extra": "^9.0.1",
"@types/path-to-regexp": "^1.7.0",
"@types/tar": "^4.0.3",
"json-schema": "^0.2.5",
"json-schema": "0.4.0",
"rimraf": "3.0.2",
"typescript": "^3.8.3"
},
Expand Down
2 changes: 1 addition & 1 deletion Composer/packages/lib/shared/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,7 @@
"@botframework-composer/types": "*",
"format-message": "6.2.4",
"https-proxy-agent": "^5.0.0",
"json-schema": "^0.2.5",
"json-schema": "0.4.0",
"multimatch": "^5.0.0",
"nanoid": "^3.1.3",
"nanoid-dictionary": "^3.0.0",
Expand Down
2 changes: 1 addition & 1 deletion Composer/packages/server/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -94,7 +94,7 @@
"debug": "^4.1.1",
"dotenv": "^8.1.0",
"download-npm-package": "^3.1.12",
"ejs": "^3.1.6",
"ejs": "3.1.8",
"express": "4.16.1",
"express-serve-static-core": "0.1.1",
"express-session": "^1.17.0",
Expand Down
2 changes: 1 addition & 1 deletion Composer/packages/types/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,7 @@
"axios": "^0.21.1",
"botframework-schema": "^4.11.1",
"express-serve-static-core": "0.1.1",
"json-schema": "^0.2.5",
"json-schema": "0.4.0",
"tslib": "2.4.0"
},
"devDependencies": {
Expand Down
Loading