From 13d25237deb22c24300deaa54702311933468e7f Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 27 Dec 2023 19:26:27 +0000 Subject: [PATCH] fix: package.json & package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AXIOS-6124857 --- package-lock.json | 44 +++++++++++++------------------------------- package.json | 2 +- 2 files changed, 14 insertions(+), 32 deletions(-) diff --git a/package-lock.json b/package-lock.json index ac83d61..e3a7c70 100644 --- a/package-lock.json +++ b/package-lock.json @@ -19,7 +19,7 @@ "@map-colonies/telemetry": "4.1.0", "@opentelemetry/api": "1.1.0", "@opentelemetry/api-metrics": "0.29.0", - "axios": "^0.24.0", + "axios": "^1.6.3", "better-ajv-errors": "^1.1.2", "concat-stream": "^2.0.0", "config": "^3.3.6", @@ -3929,16 +3929,6 @@ "serialize-error": "^8.1.0" } }, - "node_modules/@map-colonies/arstotzka-mediator/node_modules/axios": { - "version": "1.3.5", - "resolved": "https://registry.npmjs.org/axios/-/axios-1.3.5.tgz", - "integrity": "sha512-glL/PvG/E+xCWwV8S6nCHcrfg1exGx7vxyUIivIA1iL7BIh6bePylCfVHwp6k13ao7SATxB6imau2kqY+I67kw==", - "dependencies": { - "follow-redirects": "^1.15.0", - "form-data": "^4.0.0", - "proxy-from-env": "^1.1.0" - } - }, "node_modules/@map-colonies/cleanup-registry": { "version": "1.1.0", "resolved": "https://registry.npmjs.org/@map-colonies/cleanup-registry/-/cleanup-registry-1.1.0.tgz", @@ -7217,11 +7207,13 @@ } }, "node_modules/axios": { - "version": "0.24.0", - "resolved": "https://registry.npmjs.org/axios/-/axios-0.24.0.tgz", - "integrity": "sha512-Q6cWsys88HoPgAaFAVUb0WpPk0O8iTeisR9IMqy9G8AbO4NlpVknrnQS03zzF9PGAWgO3cgletO3VjV/P7VztA==", + "version": "1.6.3", + "resolved": "https://registry.npmjs.org/axios/-/axios-1.6.3.tgz", + "integrity": "sha512-fWyNdeawGam70jXSVlKl+SUNVcL6j6W79CuSIPfi6HnDUmSCH6gyUys/HrqHeA/wU0Az41rRgean494d0Jb+ww==", "dependencies": { - "follow-redirects": "^1.14.4" + "follow-redirects": "^1.15.0", + "form-data": "^4.0.0", + "proxy-from-env": "^1.1.0" } }, "node_modules/axios-retry": { @@ -17315,18 +17307,6 @@ "axios-retry": "^3.4.0", "http-status-codes": "^2.2.0", "serialize-error": "^8.1.0" - }, - "dependencies": { - "axios": { - "version": "1.3.5", - "resolved": "https://registry.npmjs.org/axios/-/axios-1.3.5.tgz", - "integrity": "sha512-glL/PvG/E+xCWwV8S6nCHcrfg1exGx7vxyUIivIA1iL7BIh6bePylCfVHwp6k13ao7SATxB6imau2kqY+I67kw==", - "requires": { - "follow-redirects": "^1.15.0", - "form-data": "^4.0.0", - "proxy-from-env": "^1.1.0" - } - } } }, "@map-colonies/cleanup-registry": { @@ -19800,11 +19780,13 @@ "dev": true }, "axios": { - "version": "0.24.0", - "resolved": "https://registry.npmjs.org/axios/-/axios-0.24.0.tgz", - "integrity": "sha512-Q6cWsys88HoPgAaFAVUb0WpPk0O8iTeisR9IMqy9G8AbO4NlpVknrnQS03zzF9PGAWgO3cgletO3VjV/P7VztA==", + "version": "1.6.3", + "resolved": "https://registry.npmjs.org/axios/-/axios-1.6.3.tgz", + "integrity": "sha512-fWyNdeawGam70jXSVlKl+SUNVcL6j6W79CuSIPfi6HnDUmSCH6gyUys/HrqHeA/wU0Az41rRgean494d0Jb+ww==", "requires": { - "follow-redirects": "^1.14.4" + "follow-redirects": "^1.15.0", + "form-data": "^4.0.0", + "proxy-from-env": "^1.1.0" } }, "axios-retry": { diff --git a/package.json b/package.json index f5515d5..6eab1f4 100644 --- a/package.json +++ b/package.json @@ -45,7 +45,7 @@ "@map-colonies/telemetry": "4.1.0", "@opentelemetry/api": "1.1.0", "@opentelemetry/api-metrics": "0.29.0", - "axios": "^0.24.0", + "axios": "^1.6.3", "better-ajv-errors": "^1.1.2", "concat-stream": "^2.0.0", "config": "^3.3.6",