From ee4b901b88cdf0bab066ae4fe1b3940201913ca3 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 21 Jun 2023 15:49:27 +0000 Subject: [PATCH] fix: package.json & package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-SEMVER-3247795 --- package-lock.json | 6 +++--- package.json | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package-lock.json b/package-lock.json index 9728a52..079f4e7 100644 --- a/package-lock.json +++ b/package-lock.json @@ -10811,9 +10811,9 @@ "integrity": "sha512-MuCAyrGZcTLfQoH2XoBlQ8C6bzwN88XT/0slOGz0pn8+gIP85BOAfYa44ZXQUTOwRwPU0QvgU+V+OSajl/59Xg==" }, "semver": { - "version": "7.3.7", - "resolved": "https://registry.npmjs.org/semver/-/semver-7.3.7.tgz", - "integrity": "sha512-QlYTucUYOews+WeEujDoEGziz4K6c47V/Bd+LjSSYcA94p+DmINdf7ncaUinThfvZyu13lN9OY1XDxt8C0Tw0g==", + "version": "7.5.2", + "resolved": "https://registry.npmjs.org/semver/-/semver-7.5.2.tgz", + "integrity": "sha512-SoftuTROv/cRjCze/scjGyiDtcUyxw1rgYQSZY7XTmtR5hX+dm76iDbTH8TkLPHCQmlbQVSSbNZCPM2hb0knnQ==", "requires": { "lru-cache": "^6.0.0" } diff --git a/package.json b/package.json index f365396..63bf11c 100644 --- a/package.json +++ b/package.json @@ -52,7 +52,7 @@ "@atomist/skill": "^0.12.0-main.25", "fs-extra": "^10.1.0", "p-retry": "^5.1.1", - "semver": "^7.3.7" + "semver": "^7.5.2" }, "devDependencies": { "@atomist/npm-tools": "^0.1.1-main.0",