From 0e91c36f5a2f5fdd812a3847fabccdfa386e78e9 Mon Sep 17 00:00:00 2001 From: Ruben Fiszel Date: Sun, 1 Sep 2024 23:50:21 +0200 Subject: [PATCH] fix: frontend/package.json & frontend/package-lock.json to reduce vulnerabilities (#3918) The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-WS-7266574 Co-authored-by: snyk-bot --- frontend/package-lock.json | 13 +++++++++---- frontend/package.json | 2 +- 2 files changed, 10 insertions(+), 5 deletions(-) diff --git a/frontend/package-lock.json b/frontend/package-lock.json index 7ee98eee2d..7320139bd9 100644 --- a/frontend/package-lock.json +++ b/frontend/package-lock.json @@ -74,7 +74,7 @@ "windmill-parser-wasm-ts": "^1.382.2", "windmill-sql-datatype-parser-wasm": "^1.318.0", "y-monaco": "^0.1.4", - "y-websocket": "^1.5.0", + "y-websocket": "^1.5.4", "yaml": "^2.3.4", "yjs": "^13.6.7" }, @@ -13563,9 +13563,10 @@ } }, "node_modules/y-websocket": { - "version": "1.5.0", - "resolved": "https://registry.npmjs.org/y-websocket/-/y-websocket-1.5.0.tgz", - "integrity": "sha512-A8AO6XtnQlYwWFytWdkDCeXg4l8ghRTIw5h2YUgUYDmEC9ugWGIwYNW80yadhSFAF7CvuWTEkQNEpevnH6EiZw==", + "version": "1.5.4", + "resolved": "https://registry.npmjs.org/y-websocket/-/y-websocket-1.5.4.tgz", + "integrity": "sha512-Y3021uy0anOIHqAPyAZbNDoR05JuMEGjRNI8c+K9MHzVS8dWoImdJUjccljAznc8H2L7WkIXhRHZ1igWNRSgPw==", + "license": "MIT", "dependencies": { "lib0": "^0.2.52", "lodash.debounce": "^4.0.8", @@ -13575,6 +13576,10 @@ "y-websocket": "bin/server.js", "y-websocket-server": "bin/server.js" }, + "engines": { + "node": ">=16.0.0", + "npm": ">=8.0.0" + }, "funding": { "type": "GitHub Sponsors ❤", "url": "https://github.com/sponsors/dmonad" diff --git a/frontend/package.json b/frontend/package.json index eefebf6099..d40bf226f0 100644 --- a/frontend/package.json +++ b/frontend/package.json @@ -147,7 +147,7 @@ "windmill-parser-wasm-ts": "^1.382.2", "windmill-sql-datatype-parser-wasm": "^1.318.0", "y-monaco": "^0.1.4", - "y-websocket": "^1.5.0", + "y-websocket": "^1.5.4", "yaml": "^2.3.4", "yjs": "^13.6.7" },