From 87a3658737b66461833081721386f8569f602afe Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <support@dependabot.com>
Date: Thu, 11 Oct 2018 02:05:52 +0000
Subject: [PATCH] build(deps): [security] bump sshpk from 1.13.1 to 1.14.2

Bumps [sshpk](https://github.com/arekinath/node-sshpk) from 1.13.1 to 1.14.2. **This update includes security fixes.**
- [Release notes](https://github.com/arekinath/node-sshpk/releases)
- [Commits](https://github.com/arekinath/node-sshpk/compare/v1.13.1...v1.14.2)

Signed-off-by: dependabot[bot] <support@dependabot.com>
---
 yarn.lock | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/yarn.lock b/yarn.lock
index db69b7c..9dabc12 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -5665,7 +5665,7 @@ safe-regex@^1.1.0:
   dependencies:
     ret "~0.1.10"
 
-"safer-buffer@>= 2.1.2 < 3":
+"safer-buffer@>= 2.1.2 < 3", safer-buffer@^2.0.2:
   version "2.1.2"
   resolved "https://registry.yarnpkg.com/safer-buffer/-/safer-buffer-2.1.2.tgz#44fa161b0187b9549dd84bb91802f9bd8385cd6a"
   integrity sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==
@@ -6072,14 +6072,15 @@ sprintf-js@~1.0.2:
   integrity sha1-BOaSb2YolTVPPdAVIDYzuFcpfiw=
 
 sshpk@^1.7.0:
-  version "1.13.1"
-  resolved "https://registry.yarnpkg.com/sshpk/-/sshpk-1.13.1.tgz#512df6da6287144316dc4c18fe1cf1d940739be3"
-  integrity sha1-US322mKHFEMW3EwY/hzx2UBzm+M=
+  version "1.14.2"
+  resolved "https://registry.yarnpkg.com/sshpk/-/sshpk-1.14.2.tgz#c6fc61648a3d9c4e764fd3fcdf4ea105e492ba98"
+  integrity sha1-xvxhZIo9nE52T9P8306hBeSSupg=
   dependencies:
     asn1 "~0.2.3"
     assert-plus "^1.0.0"
     dashdash "^1.12.0"
     getpass "^0.1.1"
+    safer-buffer "^2.0.2"
   optionalDependencies:
     bcrypt-pbkdf "^1.0.0"
     ecc-jsbn "~0.1.1"