Skip to content

Commit

Permalink
Update es5-ext to 0.10.64.
Browse files Browse the repository at this point in the history
  • Loading branch information
hansenyy committed Oct 30, 2024
1 parent a9abe84 commit 46ff494
Show file tree
Hide file tree
Showing 3 changed files with 57 additions and 18 deletions.
2 changes: 0 additions & 2 deletions package.json
Original file line number Diff line number Diff line change
Expand Up @@ -120,7 +120,6 @@
"@grpc/proto-loader": "^0.7.8",
"async": "^3.2.2",
"debug": ">=3.1.0",
"es5-ext": "0.10.53",
"micromatch": "^4.0.0",
"readable-stream": "^4.0.0 <4.4.2",
"shell-quote": "^1.7.3",
Expand All @@ -130,7 +129,6 @@
"@grpc/proto-loader": "Resolves a security issue with protobufjs, one of its dependencies",
"async": "Versions of async prior to 3.2.2 are vulnerable to prototype pollution",
"debug": "ReDoS vulnerability in older versions, plus the dependents that pull in debug@<1.0.0 haven't been updated in years",
"es5-ext": "Packages after 0.10.54 and at the moment up until 0.10.59 contain a protest message. A policy prevents us from using packages with protestware, therefore downgrading to the latest release without the message.",
"micromatch": "Version 3.x.x depends on decode-uri-component 0.2.0, which has a DoS vulnerability",
"readable-stream": "Eliminates dependency on outdated string_decoder component",
"shell-quote": "Versions prior to 1.7.3 have an RCE vulnerability. Should be removable once we upgrade CLI tools to ^8.0.0 with RN 0.69.",
Expand Down
2 changes: 0 additions & 2 deletions packages/react-native/package.json
Original file line number Diff line number Diff line change
Expand Up @@ -153,7 +153,6 @@
"@grpc/proto-loader": "^0.7.8",
"async": "^3.2.2",
"debug": ">=3.1.0",
"es5-ext": "0.10.53",
"micromatch": "^4.0.0",
"readable-stream": "^4.0.0",
"shell-quote": "^1.7.3",
Expand All @@ -163,7 +162,6 @@
"@grpc/proto-loader": "Resolves a security issue with protobufjs, one of its dependencies",
"async": "Versions of async prior to 3.2.2 are vulnerable to prototype pollution",
"debug": "ReDoS vulnerability in older versions, plus the dependents that pull in debug@<1.0.0 haven't been updated in years",
"es5-ext": "Packages after 0.10.54 and at the moment up until 0.10.59 contain a protest message. A policy prevents us from using packages with protestware, therefore downgrading to the latest release without the message.",
"micromatch": "Version 3.x.x depends on decode-uri-component 0.2.0, which has a DoS vulnerability",
"readable-stream": "Eliminates dependency on outdated string_decoder component",
"shell-quote": "Versions prior to 1.7.3 have an RCE vulnerability. Should be removable once we upgrade CLI tools to ^8.0.0 with RN 0.69.",
Expand Down
71 changes: 57 additions & 14 deletions yarn.lock
Original file line number Diff line number Diff line change
Expand Up @@ -6430,6 +6430,16 @@ __metadata:
languageName: node
linkType: hard

"d@npm:^1.0.2":
version: 1.0.2
resolution: "d@npm:1.0.2"
dependencies:
es5-ext: "npm:^0.10.64"
type: "npm:^2.7.2"
checksum: 10c0/3e6ede10cd3b77586c47da48423b62bed161bf1a48bdbcc94d87263522e22f5dfb0e678a6dba5323fdc14c5d8612b7f7eb9e7d9e37b2e2d67a7bf9f116dabe5a
languageName: node
linkType: hard

"damerau-levenshtein@npm:^1.0.8":
version: 1.0.8
resolution: "damerau-levenshtein@npm:1.0.8"
Expand Down Expand Up @@ -7036,18 +7046,19 @@ __metadata:
languageName: node
linkType: hard

"es5-ext@npm:0.10.53":
version: 0.10.53
resolution: "es5-ext@npm:0.10.53"
"es5-ext@npm:^0.10.35, es5-ext@npm:^0.10.46, es5-ext@npm:^0.10.50, es5-ext@npm:^0.10.62, es5-ext@npm:^0.10.64, es5-ext@npm:~0.10.14":
version: 0.10.64
resolution: "es5-ext@npm:0.10.64"
dependencies:
es6-iterator: "npm:~2.0.3"
es6-symbol: "npm:~3.1.3"
next-tick: "npm:~1.0.0"
checksum: 10c0/02989b89e777264756696baf64b6daf54e0be631b09870dfab8473e81129303c2791a001bf1f06bb38bf008403a0daad02e8001cb419ad8e4430452400ecd771
es6-iterator: "npm:^2.0.3"
es6-symbol: "npm:^3.1.3"
esniff: "npm:^2.0.1"
next-tick: "npm:^1.1.0"
checksum: 10c0/4459b6ae216f3c615db086e02437bdfde851515a101577fd61b19f9b3c1ad924bab4d197981eb7f0ccb915f643f2fc10ff76b97a680e96cbb572d15a27acd9a3
languageName: node
linkType: hard

"es6-iterator@npm:^2.0.3, es6-iterator@npm:~2.0.3":
"es6-iterator@npm:^2.0.3":
version: 2.0.3
resolution: "es6-iterator@npm:2.0.3"
dependencies:
Expand All @@ -7058,7 +7069,7 @@ __metadata:
languageName: node
linkType: hard

"es6-symbol@npm:^3.1.1, es6-symbol@npm:~3.1.3":
"es6-symbol@npm:^3.1.1":
version: 3.1.3
resolution: "es6-symbol@npm:3.1.3"
dependencies:
Expand All @@ -7068,6 +7079,16 @@ __metadata:
languageName: node
linkType: hard

"es6-symbol@npm:^3.1.3":
version: 3.1.4
resolution: "es6-symbol@npm:3.1.4"
dependencies:
d: "npm:^1.0.2"
ext: "npm:^1.7.0"
checksum: 10c0/777bf3388db5d7919e09a0fd175aa5b8a62385b17cb2227b7a137680cba62b4d9f6193319a102642aa23d5840d38a62e4784f19cfa5be4a2210a3f0e9b23d15d
languageName: node
linkType: hard

"es6-weak-map@npm:^2.0.1":
version: 2.0.3
resolution: "es6-weak-map@npm:2.0.3"
Expand Down Expand Up @@ -7390,6 +7411,18 @@ __metadata:
languageName: node
linkType: hard

"esniff@npm:^2.0.1":
version: 2.0.1
resolution: "esniff@npm:2.0.1"
dependencies:
d: "npm:^1.0.1"
es5-ext: "npm:^0.10.62"
event-emitter: "npm:^0.3.5"
type: "npm:^2.7.2"
checksum: 10c0/7efd8d44ac20e5db8cb0ca77eb65eca60628b2d0f3a1030bcb05e71cc40e6e2935c47b87dba3c733db12925aa5b897f8e0e7a567a2c274206f184da676ea2e65
languageName: node
linkType: hard

"espree@npm:^9.0.0, espree@npm:^9.6.0, espree@npm:^9.6.1":
version: 9.6.1
resolution: "espree@npm:9.6.1"
Expand Down Expand Up @@ -7457,6 +7490,16 @@ __metadata:
languageName: node
linkType: hard

"event-emitter@npm:^0.3.5":
version: 0.3.5
resolution: "event-emitter@npm:0.3.5"
dependencies:
d: "npm:1"
es5-ext: "npm:~0.10.14"
checksum: 10c0/75082fa8ffb3929766d0f0a063bfd6046bd2a80bea2666ebaa0cfd6f4a9116be6647c15667bea77222afc12f5b4071b68d393cf39fdaa0e8e81eda006160aff0
languageName: node
linkType: hard

"event-target-shim@npm:^5.0.0, event-target-shim@npm:^5.0.1":
version: 5.0.1
resolution: "event-target-shim@npm:5.0.1"
Expand Down Expand Up @@ -7524,7 +7567,7 @@ __metadata:
languageName: node
linkType: hard

"ext@npm:^1.1.2":
"ext@npm:^1.1.2, ext@npm:^1.7.0":
version: 1.7.0
resolution: "ext@npm:1.7.0"
dependencies:
Expand Down Expand Up @@ -11362,10 +11405,10 @@ __metadata:
languageName: node
linkType: hard

"next-tick@npm:~1.0.0":
version: 1.0.0
resolution: "next-tick@npm:1.0.0"
checksum: 10c0/851058d7af979a94743ae0ae4c71f0257662a2b7129e0a159273d13782401823c154ee2e49a790e979e5b92126dbc2b5eb522eaff631b997ddf95903e7c5e9cc
"next-tick@npm:^1.1.0":
version: 1.1.0
resolution: "next-tick@npm:1.1.0"
checksum: 10c0/3ba80dd805fcb336b4f52e010992f3e6175869c8d88bf4ff0a81d5d66e6049f89993463b28211613e58a6b7fe93ff5ccbba0da18d4fa574b96289e8f0b577f28
languageName: node
linkType: hard

Expand Down

0 comments on commit 46ff494

Please sign in to comment.