From 2aca9275614b935f6601f1894a8339df98d1b63f Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 13 Jun 2024 07:39:39 +0000 Subject: [PATCH] fix: package.json & package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-GRPCGRPCJS-7242922 --- package-lock.json | 15 ++++++++------- package.json | 2 +- 2 files changed, 9 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index 3a6f84a2..69e2cead 100644 --- a/package-lock.json +++ b/package-lock.json @@ -9,7 +9,7 @@ "version": "3.3.1", "license": "ISC", "dependencies": { - "@grpc/grpc-js": "^1.9.3", + "@grpc/grpc-js": "^1.9.15", "@js-temporal/polyfill": "^0.3.0", "@microsoft/durabletask-js": "^0.1.0-alpha.1", "@types/google-protobuf": "^3.15.5", @@ -792,9 +792,10 @@ "integrity": "sha512-J8TOSBq3SoZbDhM9+R/u77hP93gz/rajSA+K2kGyijPpORPWUXHUpTaleoj+92As0S9uPRP7Oi8IqMf0u+ro6A==" }, "node_modules/@grpc/grpc-js": { - "version": "1.9.4", - "resolved": "https://registry.npmjs.org/@grpc/grpc-js/-/grpc-js-1.9.4.tgz", - "integrity": "sha512-oEnzYiDuEsBydZBtP84BkpduLsE1nSAO4KrhTLHRzNrIQE647fhchmosTQsJdCo8X9zBBt+l5+fNk+m/yCFJ/Q==", + "version": "1.9.15", + "resolved": "https://registry.npmjs.org/@grpc/grpc-js/-/grpc-js-1.9.15.tgz", + "integrity": "sha512-nqE7Hc0AzI+euzUwDAy0aY5hCp10r734gMGRdU+qOPX0XSceI2ULrcXB5U2xSc5VkWwalCj4M7GzCAygZl2KoQ==", + "license": "Apache-2.0", "dependencies": { "@grpc/proto-loader": "^0.7.8", "@types/node": ">=12.12.47" @@ -8090,9 +8091,9 @@ "integrity": "sha512-J8TOSBq3SoZbDhM9+R/u77hP93gz/rajSA+K2kGyijPpORPWUXHUpTaleoj+92As0S9uPRP7Oi8IqMf0u+ro6A==" }, "@grpc/grpc-js": { - "version": "1.9.4", - "resolved": "https://registry.npmjs.org/@grpc/grpc-js/-/grpc-js-1.9.4.tgz", - "integrity": "sha512-oEnzYiDuEsBydZBtP84BkpduLsE1nSAO4KrhTLHRzNrIQE647fhchmosTQsJdCo8X9zBBt+l5+fNk+m/yCFJ/Q==", + "version": "1.9.15", + "resolved": "https://registry.npmjs.org/@grpc/grpc-js/-/grpc-js-1.9.15.tgz", + "integrity": "sha512-nqE7Hc0AzI+euzUwDAy0aY5hCp10r734gMGRdU+qOPX0XSceI2ULrcXB5U2xSc5VkWwalCj4M7GzCAygZl2KoQ==", "requires": { "@grpc/proto-loader": "^0.7.8", "@types/node": ">=12.12.47" diff --git a/package.json b/package.json index 0c3b2f10..44aece1b 100644 --- a/package.json +++ b/package.json @@ -46,7 +46,7 @@ "author": "Xavier Geerinck", "license": "ISC", "dependencies": { - "@grpc/grpc-js": "^1.9.3", + "@grpc/grpc-js": "^1.9.15", "@js-temporal/polyfill": "^0.3.0", "@types/google-protobuf": "^3.15.5", "@types/node-fetch": "^2.6.2",