From b4e43f0ca01f113fdcc57fffa31d51b3d237f0a7 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 7 Jul 2022 09:46:30 +0000 Subject: [PATCH] fix: package.json & yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-MOMENT-2944238 --- package.json | 2 +- yarn.lock | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) mode change 100755 => 100644 package.json mode change 100755 => 100644 yarn.lock diff --git a/package.json b/package.json old mode 100755 new mode 100644 index cded8be..ab26cbc --- a/package.json +++ b/package.json @@ -19,7 +19,7 @@ "jsonschema8": "^1.0.1", "lodash": "^4.17.15", "md5": "^2.2.1", - "moment": "^2.24.0", + "moment": "^2.29.4", "nconf": "^0.10.0", "overmind": "^21.0.0", "overmind-react": "^28.0.0", diff --git a/yarn.lock b/yarn.lock old mode 100755 new mode 100644 index a5d5f43..c1e72ba --- a/yarn.lock +++ b/yarn.lock @@ -9073,10 +9073,10 @@ mkdirp@^1.0.3, mkdirp@^1.0.4: resolved "https://registry.yarnpkg.com/mkdirp/-/mkdirp-1.0.4.tgz#3eb5ed62622756d79a5f0e2a221dfebad75c2f7e" integrity sha512-vVqVZQyf3WLx2Shd0qJ9xuvqgAyKPLAiqITEtqW0oIUjzo3PePDd6fW9iFz30ef7Ysp/oiWqbhszeGWW2T6Gzw== -moment@^2.24.0: - version "2.29.1" - resolved "https://registry.yarnpkg.com/moment/-/moment-2.29.1.tgz#b2be769fa31940be9eeea6469c075e35006fa3d3" - integrity sha512-kHmoybcPV8Sqy59DwNDY3Jefr64lK/by/da0ViFcuA4DH0vQg5Q6Ze5VimxkfQNSC+Mls/Kx53s7TjP1RhFEDQ== +moment@^2.29.4: + version "2.29.4" + resolved "https://registry.yarnpkg.com/moment/-/moment-2.29.4.tgz#3dbe052889fe7c1b2ed966fcb3a77328964ef108" + integrity sha512-5LC9SOxjSc2HF6vO2CyuTDNivEdoz2IvyJJGj6X8DJ0eFyfszE0QiEd+iXmBvUP3WHxSjFH/vIsA0EN00cgr8w== move-concurrently@^1.0.1: version "1.0.1"