Skip to content

Commit af24202

Browse files
Fix reported vulnerabilities (take two)
A couple of fixes on top of #12443: - unpin the node-forge 0.10.0 resolution to remove it from our lockfile - remove the useless scoped resolution for marked For the latter, the transitive dependency breaks between 3.x and 4.x so the problem is not easily solved without `typedoc` maintainers publishing a fixed version. I opened a PR here: TypeStrong/typedoc#1851 changelog_begin changelog_end
1 parent e6fe718 commit af24202

File tree

3 files changed

+9
-11
lines changed

3 files changed

+9
-11
lines changed

language-support/ts/packages/package.json

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,6 @@
2929
},
3030
"resolutions": {
3131
"marked": "^2.0.0",
32-
"typedoc/**/marked": "^4.0.10",
3332
"**/y18n": "^4.0.1",
3433
"**/@types/react-test-renderer": "^16.9.3 || ^17.0.0",
3534
"**/hosted-git-info": "^4.0.2",

navigator/frontend/package.json

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -92,7 +92,6 @@
9292
"resolutions": {
9393
"**/elliptic": "^6.5.4",
9494
"**/jpeg-js": "^0.4.1",
95-
"**/selfsigned": "^1.10.8",
9695
"**/ssri": "^8.0.1",
9796
"**/hosted-git-info": "^4.0.2",
9897
"**/ws": "^7.4.6",

navigator/frontend/yarn.lock

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -3555,10 +3555,10 @@ no-case@^3.0.4:
35553555
lower-case "^2.0.2"
35563556
tslib "^2.0.3"
35573557

3558-
node-forge@^0.10.0:
3559-
version "0.10.0"
3560-
resolved "https://registry.yarnpkg.com/node-forge/-/node-forge-0.10.0.tgz#32dea2afb3e9926f02ee5ce8794902691a676bf3"
3561-
integrity sha512-PPmu8eEeG9saEUvI97fm4OYxXVB6bFvyNTyiUOBichBpFG8A1Ljw3bY62+5oOjDEMHRnd0Y7HQ+x7uzxOzC6JA==
3558+
node-forge@^1.2.0:
3559+
version "1.2.1"
3560+
resolved "https://registry.yarnpkg.com/node-forge/-/node-forge-1.2.1.tgz#82794919071ef2eb5c509293325cec8afd0fd53c"
3561+
integrity sha512-Fcvtbb+zBcZXbTTVwqGA5W+MKBj56UjVRevvchv5XrcyXbmNdesfZL37nlcWOfpgHhgmxApw3tQbTr4CqNmX4w==
35623562

35633563
node-releases@^1.1.76:
35643564
version "1.1.76"
@@ -4541,12 +4541,12 @@ select-hose@^2.0.0:
45414541
resolved "https://registry.yarnpkg.com/select-hose/-/select-hose-2.0.0.tgz#625d8658f865af43ec962bfc376a37359a4994ca"
45424542
integrity sha1-Yl2GWPhlr0Psliv8N2o3NZpJlMo=
45434543

4544-
selfsigned@^1.10.8, selfsigned@^2.0.0:
4545-
version "1.10.11"
4546-
resolved "https://registry.yarnpkg.com/selfsigned/-/selfsigned-1.10.11.tgz#24929cd906fe0f44b6d01fb23999a739537acbe9"
4547-
integrity sha512-aVmbPOfViZqOZPgRBT0+3u4yZFHpmnIghLMlAcb5/xhp5ZtB/RVnKhz5vl2M32CLXAqR4kha9zfhNg0Lf/sxKA==
4544+
selfsigned@^2.0.0:
4545+
version "2.0.0"
4546+
resolved "https://registry.yarnpkg.com/selfsigned/-/selfsigned-2.0.0.tgz#e927cd5377cbb0a1075302cff8df1042cc2bce5b"
4547+
integrity sha512-cUdFiCbKoa1mZ6osuJs2uDHrs0k0oprsKveFiiaBKCNq3SYyb5gs2HxhQyDNLCmL51ZZThqi4YNDpCK6GOP1iQ==
45484548
dependencies:
4549-
node-forge "^0.10.0"
4549+
node-forge "^1.2.0"
45504550

45514551
"semver@2 || 3 || 4 || 5", semver@^5.5.0:
45524552
version "5.7.1"

0 commit comments

Comments
 (0)