Skip to content

Commit ccf60b3

Browse files
fix(security): patch micromatch dependency vulnerabilities (#699)
1 parent b97e86c commit ccf60b3

File tree

2 files changed

+6
-11
lines changed

2 files changed

+6
-11
lines changed

package.json

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -29,5 +29,8 @@
2929
"semantic-release": "19.0.5",
3030
"semantic-release-rubygem": "1.2.0",
3131
"semantic-release-slack-bot": "3.5.2"
32+
},
33+
"resolutions": {
34+
"semantic-release-slack-bot/**/micromatch": "^4.0.8"
3235
}
3336
}

yarn.lock

Lines changed: 3 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -925,7 +925,7 @@ brace-expansion@^2.0.1:
925925
dependencies:
926926
balanced-match "^1.0.0"
927927

928-
braces@^3.0.1, braces@^3.0.3:
928+
braces@^3.0.3:
929929
version "3.0.3"
930930
resolved "https://registry.yarnpkg.com/braces/-/braces-3.0.3.tgz#490332f40919452272d55a8480adc0c441358789"
931931
integrity sha512-yQbXgO/OSZVD2IsiLlro+7Hf6Q18EJrKSEsdoMzKePKXct3gvD8oLcOQdIzGupr5Fj+EDe8gO/lxc1BzfMpxvA==
@@ -2730,15 +2730,7 @@ micromark@^2.11.3, micromark@~2.11.0, micromark@~2.11.3:
27302730
debug "^4.0.0"
27312731
parse-entities "^2.0.0"
27322732

2733-
2734-
version "4.0.2"
2735-
resolved "https://registry.yarnpkg.com/micromatch/-/micromatch-4.0.2.tgz#4fcb0999bf9fbc2fcbdd212f6d629b9a56c39259"
2736-
integrity sha512-y7FpHSbMUMoyPbYUSzO6PaZ6FyRnQOpHuKwbo1G+Knck95XVU4QAiKdGEnj5wwoS7PlOgthX/09u5iFJ+aYf5Q==
2737-
dependencies:
2738-
braces "^3.0.1"
2739-
picomatch "^2.0.5"
2740-
2741-
micromatch@^4.0.0, micromatch@^4.0.2, micromatch@^4.0.4:
2733+
[email protected], micromatch@^4.0.0, micromatch@^4.0.2, micromatch@^4.0.4, micromatch@^4.0.8:
27422734
version "4.0.8"
27432735
resolved "https://registry.yarnpkg.com/micromatch/-/micromatch-4.0.8.tgz#d66fa18f3a47076789320b9b1af32bd86d9fa202"
27442736
integrity sha512-PXwfBhYu0hBCPw8Dn0E+WDYb7af3dSLVWKi3HGv84IdF4TyFoC0ysxFd0Goxw7nSv4T/PzEJQxsYsEiFCKo2BA==
@@ -3498,7 +3490,7 @@ path-type@^4.0.0:
34983490
resolved "https://registry.yarnpkg.com/path-type/-/path-type-4.0.0.tgz#84ed01c0a7ba380afe09d90a8c180dcd9d03043b"
34993491
integrity sha512-gDKb8aZMDeD/tZWs9P6+q0J9Mwkdl6xMV8TjnGP3qJVJ06bdMgkbBlLU8IdfOsIsFz2BW1rNVT3XuNEl8zPAvw==
35003492

3501-
picomatch@^2.0.5, picomatch@^2.3.1:
3493+
picomatch@^2.3.1:
35023494
version "2.3.1"
35033495
resolved "https://registry.yarnpkg.com/picomatch/-/picomatch-2.3.1.tgz#3ba3833733646d9d3e4995946c1365a67fb07a42"
35043496
integrity sha512-JU3teHTNjmE2VCGFzuY8EXzCDVwEqB2a8fsIvwaStHhAWJEeVd1o1QD80CU6+ZdEXXSLbSsuLwJjkCBWqRQUVA==

0 commit comments

Comments
 (0)