From ab0cc82266821e5831669bae7fd70b0e1484d990 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 28 Nov 2023 22:38:18 +0000 Subject: [PATCH] fix: deps/npm/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-REQUEST-3361831 - https://snyk.io/vuln/SNYK-JS-TOUGHCOOKIE-5672873 --- deps/npm/package.json | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/deps/npm/package.json b/deps/npm/package.json index 19326a9aa59df1..4a43b2766e17dd 100644 --- a/deps/npm/package.json +++ b/deps/npm/package.json @@ -42,10 +42,10 @@ "./package.json": "./package.json" }, "dependencies": { - "@npmcli/arborist": "^2.4.1", + "@npmcli/arborist": "^3.0.0", "@npmcli/ci-detect": "^1.2.0", "@npmcli/config": "^2.2.0", - "@npmcli/run-script": "^1.8.5", + "@npmcli/run-script": "^2.0.0", "abbrev": "~1.1.1", "ansicolors": "~0.3.2", "ansistyles": "~0.1.3", @@ -66,23 +66,23 @@ "json-parse-even-better-errors": "^2.3.1", "leven": "^3.1.0", "libnpmaccess": "^4.0.2", - "libnpmdiff": "^2.0.4", - "libnpmexec": "^1.0.1", - "libnpmfund": "^1.0.2", + "libnpmdiff": "^3.0.0", + "libnpmexec": "^3.0.0", + "libnpmfund": "^2.0.0", "libnpmhook": "^6.0.2", "libnpmorg": "^2.0.2", - "libnpmpack": "^2.0.1", + "libnpmpack": "^3.0.0", "libnpmpublish": "^4.0.1", "libnpmsearch": "^3.1.1", "libnpmteam": "^2.0.3", - "libnpmversion": "^1.2.0", + "libnpmversion": "^2.0.1", "make-fetch-happen": "^8.0.14", "minipass": "^3.1.3", "minipass-pipeline": "^1.2.4", "mkdirp": "^1.0.4", "mkdirp-infer-owner": "^2.0.0", "ms": "^2.1.2", - "node-gyp": "^7.1.2", + "node-gyp": "^8.0.0", "nopt": "^5.0.0", "npm-audit-report": "^2.1.4", "npm-package-arg": "^8.1.2", @@ -92,7 +92,7 @@ "npm-user-validate": "^1.0.1", "npmlog": "~4.1.2", "opener": "^1.5.2", - "pacote": "^11.3.3", + "pacote": "^12.0.0", "parse-conflict-json": "^1.1.1", "qrcode-terminal": "^0.12.0", "read": "~1.0.7",