Skip to content

Commit

Permalink
chore(deps): upgrade dependencies to fix security vulnerabilities
Browse files Browse the repository at this point in the history
  • Loading branch information
spencerlepine committed Dec 21, 2024
1 parent 427473b commit b1c82f1
Show file tree
Hide file tree
Showing 3 changed files with 15 additions and 19 deletions.
10 changes: 3 additions & 7 deletions .github/dependabot.yml
Original file line number Diff line number Diff line change
@@ -1,11 +1,7 @@
version: 2
updates:
- package-ecosystem: "npm"
directory: "/" # Location of your package.json
directory: "/"
schedule:
interval: "monthly" # "daily", "weekly", or "monthly"
ignore:
- dependency-name: "typedoc"
- dependency-name: "prettier"
- dependency-name: "lint-staged"
- dependency-name: "husky"
interval: "weekly"
open-pull-requests-limit: 0 # only accept security (CVE) updates
2 changes: 1 addition & 1 deletion package.json
Original file line number Diff line number Diff line change
Expand Up @@ -60,7 +60,7 @@
"openapi-typescript-codegen": "^0.29.0",
"prettier": "2.8.8",
"request": "^2.88.2",
"rollup": "^2.79.1",
"rollup": "^2.79.2",
"rollup-plugin-commonjs": "^10.1.0",
"rollup-plugin-dts": "^5",
"rollup-plugin-node-resolve": "^5.2.0",
Expand Down
22 changes: 11 additions & 11 deletions yarn.lock
Original file line number Diff line number Diff line change
Expand Up @@ -476,9 +476,9 @@ cosmiconfig@^7.0.0:
yaml "^1.10.0"

cross-spawn@^7.0.0:
version "7.0.3"
resolved "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz"
integrity sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==
version "7.0.6"
resolved "https://registry.yarnpkg.com/cross-spawn/-/cross-spawn-7.0.6.tgz#8a58fe78f00dcd70c370451759dfbfaf03e8ee9f"
integrity sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==
dependencies:
path-key "^3.1.0"
shebang-command "^2.0.0"
Expand Down Expand Up @@ -1118,9 +1118,9 @@ merge-stream@^2.0.0:
integrity sha512-abv/qOcuPfk3URPfDzmZU1LKmuw8kT+0nIHvKrKgFrwifol/doWcdA4ZqsWQ8ENrFKkd67Mfpo/LovbIUsbt3w==

micromatch@^4.0.2:
version "4.0.7"
resolved "https://registry.npmjs.org/micromatch/-/micromatch-4.0.7.tgz"
integrity sha512-LPP/3KorzCwBxfeUuZmaR6bG2kdeHSbe0P2tY3FLRU4vYrjYz5hI4QZwV0njUx3jeuKe67YukQ1LSPZBKDqO/Q==
version "4.0.8"
resolved "https://registry.yarnpkg.com/micromatch/-/micromatch-4.0.8.tgz#d66fa18f3a47076789320b9b1af32bd86d9fa202"
integrity sha512-PXwfBhYu0hBCPw8Dn0E+WDYb7af3dSLVWKi3HGv84IdF4TyFoC0ysxFd0Goxw7nSv4T/PzEJQxsYsEiFCKo2BA==
dependencies:
braces "^3.0.3"
picomatch "^2.3.1"
Expand Down Expand Up @@ -1404,7 +1404,7 @@ request@^2.88.2:
performance-now "^2.1.0"
qs "~6.5.2"
safe-buffer "^5.1.2"
tough-cookie "~2.5.0"
tough-cookie "~4.1.3"
tunnel-agent "^0.6.0"
uuid "^3.3.2"

Expand Down Expand Up @@ -1494,10 +1494,10 @@ rollup-pluginutils@^2.8.1:
dependencies:
estree-walker "^0.6.1"

rollup@^2.79.1:
version "2.79.1"
resolved "https://registry.npmjs.org/rollup/-/rollup-2.79.1.tgz"
integrity sha512-uKxbd0IhMZOhjAiD5oAFp7BqvkA4Dv47qpOCtaNvng4HBwdbWtdOh8f5nZNuk2rp51PMGk3bzfWu5oayNEuYnw==
rollup@^2.79.2:
version "2.79.2"
resolved "https://registry.yarnpkg.com/rollup/-/rollup-2.79.2.tgz#f150e4a5db4b121a21a747d762f701e5e9f49090"
integrity sha512-fS6iqSPZDs3dr/y7Od6y5nha8dW1YnbgtsyotCVvoFGKbERG++CVRFv1meyGDE1SNItQA8BrnCw7ScdAhRJ3XQ==
optionalDependencies:
fsevents "~2.3.2"

Expand Down

0 comments on commit b1c82f1

Please sign in to comment.