From b7ca28d89fd0ca4e254661bca196cadced940083 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 24 Apr 2023 14:46:11 +0000 Subject: [PATCH] fix: tools/node_modules/eslint/node_modules/esquery/node_modules/estraverse/package.json & tools/node_modules/eslint/node_modules/esquery/node_modules/estraverse/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908 - https://snyk.io/vuln/SNYK-JS-DOTOBJECT-548905 - https://snyk.io/vuln/SNYK-JS-MINIMATCH-1019388 - https://snyk.io/vuln/SNYK-JS-MINIMATCH-3050818 - https://snyk.io/vuln/SNYK-JS-MINIMIST-2429795 - https://snyk.io/vuln/SNYK-JS-MINIMIST-559764 - https://snyk.io/vuln/SNYK-JS-MOCHA-2863123 - https://snyk.io/vuln/SNYK-JS-MOCHA-561476 - https://snyk.io/vuln/npm:debug:20170905 - https://snyk.io/vuln/npm:growl:20160721 - https://snyk.io/vuln/npm:minimatch:20160620 - https://snyk.io/vuln/npm:ms:20170412 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:minimatch:20160620 --- .../esquery/node_modules/estraverse/.snyk | 12 ++++++++++++ .../esquery/node_modules/estraverse/package.json | 14 ++++++++++---- 2 files changed, 22 insertions(+), 4 deletions(-) create mode 100644 tools/node_modules/eslint/node_modules/esquery/node_modules/estraverse/.snyk diff --git a/tools/node_modules/eslint/node_modules/esquery/node_modules/estraverse/.snyk b/tools/node_modules/eslint/node_modules/esquery/node_modules/estraverse/.snyk new file mode 100644 index 00000000000000..0e7dee5e8fda5b --- /dev/null +++ b/tools/node_modules/eslint/node_modules/esquery/node_modules/estraverse/.snyk @@ -0,0 +1,12 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:minimatch:20160620': + - gulp > vinyl-fs > glob-stream > minimatch: + patched: '2023-04-24T14:46:06.279Z' + - gulp > vinyl-fs > glob-watcher > gaze > globule > minimatch: + patched: '2023-04-24T14:46:06.279Z' + - gulp > vinyl-fs > glob-watcher > gaze > globule > glob > minimatch: + patched: '2023-04-24T14:46:06.279Z' diff --git a/tools/node_modules/eslint/node_modules/esquery/node_modules/estraverse/package.json b/tools/node_modules/eslint/node_modules/esquery/node_modules/estraverse/package.json index bc99e7c4a64674..ad71f4637ef7d4 100644 --- a/tools/node_modules/eslint/node_modules/esquery/node_modules/estraverse/package.json +++ b/tools/node_modules/eslint/node_modules/esquery/node_modules/estraverse/package.json @@ -23,18 +23,24 @@ "babel-register": "^6.3.13", "chai": "^2.1.1", "espree": "^1.11.0", - "gulp": "^3.8.10", - "gulp-bump": "^0.2.2", + "gulp": "^4.0.0", + "gulp-bump": "^2.0.0", "gulp-filter": "^2.0.0", "gulp-git": "^1.0.1", "gulp-tag-version": "^1.3.0", "jshint": "^2.5.6", - "mocha": "^2.1.0" + "mocha": "^10.1.0" }, "license": "BSD-2-Clause", "scripts": { "test": "npm run-script lint && npm run-script unit-test", "lint": "jshint estraverse.js", - "unit-test": "mocha --compilers js:babel-register" + "unit-test": "mocha --compilers js:babel-register", + "prepublish": "npm run snyk-protect", + "snyk-protect": "snyk-protect" + }, + "snyk": true, + "dependencies": { + "@snyk/protect": "latest" } }