From 54673ff2763acf5ed32d747969494bb4863a4fe9 Mon Sep 17 00:00:00 2001 From: "dependabot-preview[bot]" <27856297+dependabot-preview[bot]@users.noreply.github.com> Date: Tue, 20 Oct 2020 14:27:02 +0000 Subject: [PATCH] [Security] Bump webpack-subresource-integrity from 1.1.0-rc.4 to 1.5.1 Bumps [webpack-subresource-integrity](https://github.com/waysact/webpack-subresource-integrity) from 1.1.0-rc.4 to 1.5.1. **This update includes a security fix.** - [Release notes](https://github.com/waysact/webpack-subresource-integrity/releases) - [Changelog](https://github.com/waysact/webpack-subresource-integrity/blob/master/CHANGELOG.md) - [Commits](https://github.com/waysact/webpack-subresource-integrity/compare/v1.1.0-rc.4...v1.5.1) Signed-off-by: dependabot-preview[bot] --- package.json | 2 +- yarn.lock | 27 ++++++++++++++++++--------- 2 files changed, 19 insertions(+), 10 deletions(-) diff --git a/package.json b/package.json index 6af449c74ef..5a232db1597 100644 --- a/package.json +++ b/package.json @@ -166,7 +166,7 @@ "webpack-dev-server": "3.2.1", "webpack-merge": "4.2.1", "webpack-sources": "1.1.0", - "webpack-subresource-integrity": "1.1.0-rc.4", + "webpack-subresource-integrity": "1.5.1", "what-input": "5.0.5", "worker-loader": "1.1.1" }, diff --git a/yarn.lock b/yarn.lock index 746782c71fa..986a39957e4 100644 --- a/yarn.lock +++ b/yarn.lock @@ -5302,7 +5302,7 @@ event-lite@^0.1.1: event-stream@~3.3.0: version "3.3.4" - resolved "http://registry.npmjs.org/event-stream/-/event-stream-3.3.4.tgz#4ab4c9a0f5a54db9338b4c34d86bfce8f4b35571" + resolved "https://registry.npmjs.org/event-stream/-/event-stream-3.3.4.tgz#4ab4c9a0f5a54db9338b4c34d86bfce8f4b35571" dependencies: duplexer "~0.1.1" from "~0" @@ -10147,7 +10147,7 @@ once@^1.3.0, once@^1.3.1, once@^1.3.3, once@^1.4.0: onetime@^1.0.0: version "1.1.0" - resolved "http://registry.npmjs.org/onetime/-/onetime-1.1.0.tgz#a1f7838f8314c516f05ecefcbc4ccfe04b4ed789" + resolved "https://registry.npmjs.org/onetime/-/onetime-1.1.0.tgz#a1f7838f8314c516f05ecefcbc4ccfe04b4ed789" onetime@^2.0.0: version "2.0.1" @@ -11460,7 +11460,7 @@ react-dom@^15.3.2: react-fast-compare@^1.0.0: version "1.0.0" - resolved "http://registry.npmjs.org/react-fast-compare/-/react-fast-compare-1.0.0.tgz#813a039155e49b43ceffe99528fe5e9d97a6c938" + resolved "https://registry.npmjs.org/react-fast-compare/-/react-fast-compare-1.0.0.tgz#813a039155e49b43ceffe99528fe5e9d97a6c938" react-hot-loader@4.8.4: version "4.8.4" @@ -14687,7 +14687,7 @@ webpack-cli@2.0.13: yeoman-environment "^2.0.0" yeoman-generator "^2.0.3" -webpack-core@^0.6.8, webpack-core@~0.6.0: +webpack-core@~0.6.0: version "0.6.9" resolved "https://registry.yarnpkg.com/webpack-core/-/webpack-core-0.6.9.tgz#fc571588c8558da77be9efb6debdc5a3b172bdc2" dependencies: @@ -14761,18 +14761,27 @@ webpack-merge@^4.1.0: dependencies: lodash "^4.17.5" -webpack-sources@1.1.0, webpack-sources@^1.0.1, webpack-sources@^1.1.0: +webpack-sources@1.1.0: version "1.1.0" resolved "https://registry.yarnpkg.com/webpack-sources/-/webpack-sources-1.1.0.tgz#a101ebae59d6507354d71d8013950a3a8b7a5a54" dependencies: source-list-map "^2.0.0" source-map "~0.6.1" -webpack-subresource-integrity@1.1.0-rc.4: - version "1.1.0-rc.4" - resolved "https://registry.yarnpkg.com/webpack-subresource-integrity/-/webpack-subresource-integrity-1.1.0-rc.4.tgz#c5c4e3d690f9d2f64a9550e07a8767f9796aa5d8" +webpack-sources@^1.0.1, webpack-sources@^1.1.0, webpack-sources@^1.3.0: + version "1.4.3" + resolved "https://registry.yarnpkg.com/webpack-sources/-/webpack-sources-1.4.3.tgz#eedd8ec0b928fbf1cbfe994e22d2d890f330a933" + integrity sha512-lgTS3Xhv1lCOKo7SA5TjKXMjpSM4sBjNV5+q2bqesbSPs5FjGmU6jjtBSkX9b4qW87vDIsCIlUPOEhbZrMdjeQ== + dependencies: + source-list-map "^2.0.0" + source-map "~0.6.1" + +webpack-subresource-integrity@1.5.1: + version "1.5.1" + resolved "https://registry.yarnpkg.com/webpack-subresource-integrity/-/webpack-subresource-integrity-1.5.1.tgz#6f44ea99987266b70c4ec42ac51064d33e982277" + integrity sha512-uekbQ93PZ9e7BFB8Hl9cFIVYQyQqiXp2ExKk9Zv+qZfH/zHXHrCFAfw1VW0+NqWbTWrs/HnuDrto3+tiPXh//Q== dependencies: - webpack-core "^0.6.8" + webpack-sources "^1.3.0" webpack@4.5.0: version "4.5.0"