diff --git a/.snyk b/.snyk index fecea87b10..0ace03e533 100644 --- a/.snyk +++ b/.snyk @@ -1,5 +1,7 @@ -version: v1.5.2 +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.0 ignore: {} +# patches apply the minimum changes required to fix a vulnerability patch: 'npm:minimatch:20160620': - snyk > recursive-readdir > minimatch: @@ -12,3 +14,9 @@ patch: patched: '2016-07-30T14:02:31.280Z' - socket.io > socket.io-client > engine.io-client > ws: patched: '2016-07-30T14:02:31.280Z' + 'npm:debug:20170905': + - socket.io > socket.io-adapter > socket.io-parser > debug: + patched: '2022-10-01T14:19:44.157Z' + 'npm:ms:20170412': + - socket.io > socket.io-adapter > socket.io-parser > debug > ms: + patched: '2022-10-01T14:19:44.157Z' diff --git a/package.json b/package.json index 86915fd800..6ac8e3956b 100644 --- a/package.json +++ b/package.json @@ -9,7 +9,7 @@ "stylelint": "stylelint css/main.css fonts/roboto.css", "htmlvalidator": "html-validator --file=index.html", "test": "snyk test", - "snyk-protect": "snyk protect", + "snyk-protect": "snyk-protect", "prepublish": "npm run snyk-protect" }, "repository": { @@ -47,10 +47,11 @@ "moment": "latest", "request": "^2.74.0", "rrule": "latest", - "snyk": "^1.14.1", - "socket.io": "^1.4.6", + "snyk": "^1.1019.0", + "socket.io": "^3.0.0", "valid-url": "latest", - "walk": "latest" + "walk": "latest", + "@snyk/protect": "latest" }, "snyk": true }