diff --git a/sdk/typescript/libraries/bot-solutions/.snyk b/sdk/typescript/libraries/bot-solutions/.snyk new file mode 100644 index 0000000000..591a80afda --- /dev/null +++ b/sdk/typescript/libraries/bot-solutions/.snyk @@ -0,0 +1,30 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - eslint > lodash: + patched: '2022-08-19T16:08:55.279Z' + - nock > lodash: + patched: '2022-08-19T16:08:55.279Z' + - restify > lodash: + patched: '2022-08-19T16:08:55.279Z' + - eslint > inquirer > lodash: + patched: '2022-08-19T16:08:55.279Z' + - eslint > table > lodash: + patched: '2022-08-19T16:08:55.279Z' + - mocha > yargs-unparser > lodash: + patched: '2022-08-19T16:08:55.279Z' + - restify > restify-errors > lodash: + patched: '2022-08-19T16:08:55.279Z' + - nyc > istanbul-lib-instrument > @babel/traverse > lodash: + patched: '2022-08-19T16:08:55.279Z' + - restify > restify-errors > @netflix/nerror > lodash: + patched: '2022-08-19T16:08:55.279Z' + - nyc > istanbul-lib-instrument > @babel/traverse > @babel/generator > lodash: + patched: '2022-08-19T16:08:55.279Z' + - nyc > istanbul-lib-instrument > @babel/traverse > @babel/helper-split-export-declaration > @babel/types > lodash: + patched: '2022-08-19T16:08:55.279Z' + - nyc > istanbul-lib-instrument > @babel/traverse > @babel/helper-function-name > @babel/helper-get-function-arity > @babel/types > lodash: + patched: '2022-08-19T16:08:55.279Z' diff --git a/sdk/typescript/libraries/bot-solutions/package.json b/sdk/typescript/libraries/bot-solutions/package.json index 9c49a9a45a..0e2c1e1791 100644 --- a/sdk/typescript/libraries/bot-solutions/package.json +++ b/sdk/typescript/libraries/bot-solutions/package.json @@ -1,71 +1,75 @@ { - "name": "bot-solutions", - "version": "1.0.0", - "description": "Shared library for Conversational AI Virtual Assistants and Skills.", - "homepage": "https://github.com/microsoft/botframework-solutions", - "author": "Microsoft", - "license": "MIT", - "main": "lib/index.js", - "files": [ - "src", - "lib" - ], - "scripts": { - "clean": "rimraf ./lib", - "copy-templates": "copyfiles --up 1 \"./src/**/*.{json,lg}\" \"./lib\"", - "prebuild": "npm run lint", - "build": "tsc --p tsconfig.json && npm run copy-templates", - "lint": "eslint ./src/**/*.ts", - "lint-fix": "eslint --fix ./src/**/*.ts", - "test": "mocha", - "coverage": "nyc mocha", - "test-coverage-ci": "nyc --reporter=cobertura mocha --reporter mocha-junit-reporter" - }, - "dependencies": { - "@types/lru-cache": "^5.1.0", - "@azure/cognitiveservices-luis-authoring": "^2.1.0", - "adaptivecards": "^1.1.3", - "azure-cognitiveservices-contentmoderator": "^4.0.0", - "botbuilder": "^4.9.2", - "botbuilder-ai": "^4.9.2", - "botbuilder-azure": "^4.9.2", - "botbuilder-dialogs": "^4.9.2", - "botframework-config": "^4.9.2", - "botframework-connector": "^4.9.2", - "botbuilder-lg": "^4.9.2", - "dayjs": "1.8.17", - "jwks-rsa": "1.5.0", - "ms-rest-azure": "^2.5.0", - "i18next": "^15.0.6", - "i18next-node-fs-backend": "^2.1.1", - "request-promise-native": "^1.0.7", - "p-queue": "^4.0.0", - "xml-js": "^1.6.11", - "uuid": "^3.3.2", - "@microsoft/recognizers-text": "^1.1.4", - "@microsoft/recognizers-text-choice": "^1.1.4" - }, - "devDependencies": { - "@types/nock": "^10.0.3", - "@types/request-promise-native": "^1.0.7", - "@types/uuid": "^3.4.4", - "@typescript-eslint/eslint-plugin": "^1.10.2", - "@typescript-eslint/parser": "^1.10.2", - "copyfiles": "^2.1.0", - "eslint": "^5.16.0", - "eslint-plugin-only-warn": "^1.0.1", - "mocha": "^6.2.3", - "mocha-junit-reporter": "^1.22.0", - "nock": "^11.7.1", - "nyc": "^14.1.1", - "replace": "^1.2.0", - "restify": "^8.3.2", - "rimraf": "^2.6.2", - "supertest": "^4.0.2", - "typescript": "3.4.5" - }, - "env": { - "mocha": true, - "node": true - } + "name": "bot-solutions", + "version": "1.0.0", + "description": "Shared library for Conversational AI Virtual Assistants and Skills.", + "homepage": "https://github.com/microsoft/botframework-solutions", + "author": "Microsoft", + "license": "MIT", + "main": "lib/index.js", + "files": [ + "src", + "lib" + ], + "scripts": { + "clean": "rimraf ./lib", + "copy-templates": "copyfiles --up 1 \"./src/**/*.{json,lg}\" \"./lib\"", + "prebuild": "npm run lint", + "build": "tsc --p tsconfig.json && npm run copy-templates", + "lint": "eslint ./src/**/*.ts", + "lint-fix": "eslint --fix ./src/**/*.ts", + "test": "mocha", + "coverage": "nyc mocha", + "test-coverage-ci": "nyc --reporter=cobertura mocha --reporter mocha-junit-reporter", + "prepublish": "npm run snyk-protect", + "snyk-protect": "snyk-protect" + }, + "dependencies": { + "@types/lru-cache": "^5.1.0", + "@azure/cognitiveservices-luis-authoring": "^2.1.0", + "adaptivecards": "^1.1.3", + "azure-cognitiveservices-contentmoderator": "^4.0.0", + "botbuilder": "^4.9.2", + "botbuilder-ai": "^4.9.2", + "botbuilder-azure": "^4.9.2", + "botbuilder-dialogs": "^4.9.2", + "botframework-config": "^4.9.2", + "botframework-connector": "^4.9.2", + "botbuilder-lg": "^4.9.2", + "dayjs": "1.8.17", + "jwks-rsa": "1.5.0", + "ms-rest-azure": "^2.5.0", + "i18next": "^15.0.6", + "i18next-node-fs-backend": "^2.1.1", + "request-promise-native": "^1.0.7", + "p-queue": "^4.0.0", + "xml-js": "^1.6.11", + "uuid": "^3.3.2", + "@microsoft/recognizers-text": "^1.1.4", + "@microsoft/recognizers-text-choice": "^1.1.4", + "@snyk/protect": "latest" + }, + "devDependencies": { + "@types/nock": "^10.0.3", + "@types/request-promise-native": "^1.0.7", + "@types/uuid": "^3.4.4", + "@typescript-eslint/eslint-plugin": "^1.10.2", + "@typescript-eslint/parser": "^1.10.2", + "copyfiles": "^2.1.0", + "eslint": "^5.16.0", + "eslint-plugin-only-warn": "^1.0.1", + "mocha": "^6.2.3", + "mocha-junit-reporter": "^1.22.0", + "nock": "^11.7.1", + "nyc": "^15.0.0", + "replace": "^1.2.0", + "restify": "^8.3.2", + "rimraf": "^2.6.2", + "supertest": "^4.0.2", + "typescript": "3.4.5" + }, + "env": { + "mocha": true, + "node": true + }, + "snyk": true }