From 1d5180fd47a41229f68c4a4b8a6a4cd5a3459e44 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 12 Mar 2020 04:19:51 +0000 Subject: [PATCH] fix: cli/package.json & cli/yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-MINIMIST-559764 --- cli/package.json | 2 +- cli/yarn.lock | 15 ++++----------- 2 files changed, 5 insertions(+), 12 deletions(-) diff --git a/cli/package.json b/cli/package.json index 0291c5449a..bce022b948 100644 --- a/cli/package.json +++ b/cli/package.json @@ -14,7 +14,7 @@ "chokidar": "^3.0.2", "handlebars": "^4.1.2", "isarray": "^2.0.5", - "mkdirp": "^0.5.1", + "mkdirp": "^1.0.0", "mobx": "^4.2.0", "node-libs-browser": "^2.2.1", "react": "^16.8.6", diff --git a/cli/yarn.lock b/cli/yarn.lock index 7e1362f361..1f9f0e7e4c 100644 --- a/cli/yarn.lock +++ b/cli/yarn.lock @@ -1134,11 +1134,6 @@ minimalistic-crypto-utils@^1.0.0, minimalistic-crypto-utils@^1.0.1: resolved "https://registry.yarnpkg.com/minimalistic-crypto-utils/-/minimalistic-crypto-utils-1.0.1.tgz#f6c00c1c0b082246e5c4d99dfb8c7c083b2b582a" integrity sha1-9sAMHAsIIkblxNmd+4x8CDsrWCo= -minimist@0.0.8: - version "0.0.8" - resolved "https://registry.yarnpkg.com/minimist/-/minimist-0.0.8.tgz#857fcabfc3397d2625b8228262e86aa7a011b05d" - integrity sha1-hX/Kv8M5fSYluCKCYuhqp6ARsF0= - minimist@^1.2.0: version "1.2.0" resolved "https://registry.yarnpkg.com/minimist/-/minimist-1.2.0.tgz#a35008b20f41383eec1fb914f4cd5df79a264284" @@ -1149,12 +1144,10 @@ minimist@~0.0.1: resolved "https://registry.yarnpkg.com/minimist/-/minimist-0.0.10.tgz#de3f98543dbf96082be48ad1a0c7cda836301dcf" integrity sha1-3j+YVD2/lggr5IrRoMfNqDYwHc8= -mkdirp@^0.5.1: - version "0.5.1" - resolved "https://registry.yarnpkg.com/mkdirp/-/mkdirp-0.5.1.tgz#30057438eac6cf7f8c4767f38648d6697d75c903" - integrity sha1-MAV0OOrGz3+MR2fzhkjWaX11yQM= - dependencies: - minimist "0.0.8" +mkdirp@^1.0.0: + version "1.0.3" + resolved "https://registry.yarnpkg.com/mkdirp/-/mkdirp-1.0.3.tgz#4cf2e30ad45959dddea53ad97d518b6c8205e1ea" + integrity sha512-6uCP4Qc0sWsgMLy1EOqqS/3rjDHOEnsStVr/4vtAIK2Y5i2kA7lFFejYrpIyiN9w0pYf4ckeCYT9f1r1P9KX5g== mobx-react-lite@1.4.0: version "1.4.0"