From 8aa49df8fd904f1cbe8b3b44930b2ed0003fe10b Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 4 Dec 2020 22:10:28 +0000 Subject: [PATCH] fix: app/package.json & app/yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-NODEFETCH-674311 --- app/package.json | 2 +- app/yarn.lock | 11 +++++------ 2 files changed, 6 insertions(+), 7 deletions(-) diff --git a/app/package.json b/app/package.json index 625468d62..d250f35b6 100644 --- a/app/package.json +++ b/app/package.json @@ -45,7 +45,7 @@ "queue": "^4.4.2", "quick-lru": "^3.0.0", "react": "^16.3.2", - "react-addons-shallow-compare": "^15.6.2", + "react-addons-shallow-compare": "^15.6.3", "react-css-transition-replace": "^3.0.3", "react-dom": "^16.3.2", "react-transition-group": "^1.2.0", diff --git a/app/yarn.lock b/app/yarn.lock index 8b29892ef..a9a257f71 100644 --- a/app/yarn.lock +++ b/app/yarn.lock @@ -476,7 +476,7 @@ eyes@0.1.x: resolved "https://registry.yarnpkg.com/eyes/-/eyes-0.1.8.tgz#62cf120234c683785d902348a800ef3e0cc20bc0" integrity sha1-Ys8SAjTGg3hdkCNIqADvPgzCC8A= -fbjs@^0.8.16, fbjs@^0.8.4: +fbjs@^0.8.16: version "0.8.16" resolved "https://registry.yarnpkg.com/fbjs/-/fbjs-0.8.16.tgz#5e67432f550dc41b572bf55847b8aca64e5337db" integrity sha1-XmdDL1UNxBtXK/VYR7ispk5TN9s= @@ -1143,12 +1143,11 @@ rc@^1.2.7: minimist "^1.2.0" strip-json-comments "~2.0.1" -react-addons-shallow-compare@^15.6.2: - version "15.6.2" - resolved "https://registry.yarnpkg.com/react-addons-shallow-compare/-/react-addons-shallow-compare-15.6.2.tgz#198a00b91fc37623db64a28fd17b596ba362702f" - integrity sha1-GYoAuR/DdiPbZKKP0XtZa6NicC8= +react-addons-shallow-compare@^15.6.3: + version "15.6.3" + resolved "https://registry.yarnpkg.com/react-addons-shallow-compare/-/react-addons-shallow-compare-15.6.3.tgz#28a94b0dfee71530852c66a69053d59a1baf04cb" + integrity sha512-EDJbgKTtGRLhr3wiGDXK/+AEJ59yqGS+tKE6mue0aNXT6ZMR7VJbbzIiT6akotmHg1BLj46ElJSb+NBMp80XBg== dependencies: - fbjs "^0.8.4" object-assign "^4.1.0" react-css-transition-replace@^3.0.3: