Skip to content

Commit e0fd337

Browse files
vilattometa-codesync[bot]
authored andcommitted
Upgrade vulnerable dependencies
Summary: In the previous diff, bumping the version of docusaurus packages did not resolve the vulnerable packages issue since the latest 2.x of docusaurus still depend on the vulnerable versions of these packages. This diff switches to use resolution to force bump the version these packages. Reviewed By: genevievehelsel Differential Revision: D90137962 fbshipit-source-id: fb6ddc4c37921c8afb812f140724367093f8f896
1 parent 08e5bf8 commit e0fd337

File tree

2 files changed

+2272
-1683
lines changed

2 files changed

+2272
-1683
lines changed

website/package.json

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -40,5 +40,11 @@
4040
"node": ">=16",
4141
"npm": "use yarn instead",
4242
"yarn": "^1.5"
43+
},
44+
"resolutions": {
45+
"node-forge": "^1.3.2",
46+
"axios": "^0.30.2",
47+
"cookie": "^0.7.0",
48+
"follow-redirects": "^1.15.6"
4349
}
4450
}

0 commit comments

Comments
 (0)