@@ -5259,16 +5259,16 @@ unsupported strategy "force" - must be one of: in-place, relax, override
52595259---
52605260
52615261[TestCommand/fix_non-interactive_in-place_package-lock.json - 1]
5262- Found 14 vulnerabilities matching the filter
5263- Can fix 7/14 matching vulnerabilities by changing 5 dependencies
5262+ Found 15 vulnerabilities matching the filter
5263+ Can fix 7/15 matching vulnerabilities by changing 5 dependencies
52645264UPGRADED-PACKAGE: minimatch,3.1.2,3.1.5
52655265UPGRADED-PACKAGE: ajv,6.12.6,6.14.0
52665266UPGRADED-PACKAGE: brace-expansion,1.1.11,1.1.12
52675267UPGRADED-PACKAGE: concat-stream,1.5.0,1.6.1
52685268UPGRADED-PACKAGE: hosted-git-info,2.1.4,2.8.9
52695269FIXED-VULN-IDS: GHSA-23c5-xmqv-rm74,GHSA-2g4f-4pwh-qvx6,GHSA-3ppc-4f35-3m26,GHSA-43f8-2h32-f4cj,GHSA-7r86-cg39-jmmj,GHSA-g74r-ffvr-5q9f,GHSA-v6h2-p8h4-qcjw
5270- REMAINING-VULNS: 7
5271- UNFIXABLE-VULNS: 7
5270+ REMAINING-VULNS: 8
5271+ UNFIXABLE-VULNS: 8
52725272
52735273---
52745274
@@ -7101,6 +7101,16 @@ UNFIXABLE-VULNS: 7
71017101 ],
71027102 "unactionable": true
71037103 },
7104+ {
7105+ "id": "GHSA-f886-m6hf-6m8v",
7106+ "packages": [
7107+ {
7108+ "name": "brace-expansion",
7109+ "version": "1.1.11"
7110+ }
7111+ ],
7112+ "unactionable": true
7113+ },
71047114 {
71057115 "id": "GHSA-fjxv-7rqg-78g4",
71067116 "packages": [
@@ -9379,6 +9389,15 @@ UNFIXABLE-VULNS: 7
93799389 }
93809390 ]
93819391 },
9392+ {
9393+ "id": "GHSA-f886-m6hf-6m8v",
9394+ "packages": [
9395+ {
9396+ "name": "brace-expansion",
9397+ "version": "1.1.12"
9398+ }
9399+ ]
9400+ },
93829401 {
93839402 "id": "GHSA-fjxv-7rqg-78g4",
93849403 "packages": [
@@ -9437,6 +9456,15 @@ UNFIXABLE-VULNS: 7
94379456 "version": "0.0.2"
94389457 }
94399458 ]
9459+ },
9460+ {
9461+ "id": "GHSA-f886-m6hf-6m8v",
9462+ "packages": [
9463+ {
9464+ "name": "brace-expansion",
9465+ "version": "1.1.12"
9466+ }
9467+ ]
94409468 }
94419469 ]
94429470 }
@@ -9533,10 +9561,10 @@ UNFIXABLE-VULNS: 0
95339561---
95349562
95359563[TestCommand/fix_non-interactive_relax_package.json - 1]
9536- Found 7 vulnerabilities matching the filter
9537- Can fix 3/7 matching vulnerabilities by changing 1 dependencies
9564+ Found 8 vulnerabilities matching the filter
9565+ Can fix 4/8 matching vulnerabilities by changing 1 dependencies
95389566UPGRADED-PACKAGE: npm-registry-client,6.2.0,^7.5.0
9539- FIXED-VULN-IDS: GHSA-43f8-2h32-f4cj,GHSA-c2qf-rxjj-qqgw,GHSA-c6rq-rjc2-86v2
9567+ FIXED-VULN-IDS: GHSA-43f8-2h32-f4cj,GHSA-c2qf-rxjj-qqgw,GHSA-c6rq-rjc2-86v2,GHSA-f886-m6hf-6m8v
95409568REMAINING-VULNS: 4
95419569UNFIXABLE-VULNS: 4
95429570
@@ -9565,16 +9593,16 @@ UNFIXABLE-VULNS: 4
95659593---
95669594
95679595[TestCommand/fix_non_interactive_in_place_package_lock_json_with_native_data_source - 1]
9568- Found 14 vulnerabilities matching the filter
9569- Can fix 7/14 matching vulnerabilities by changing 5 dependencies
9596+ Found 15 vulnerabilities matching the filter
9597+ Can fix 7/15 matching vulnerabilities by changing 5 dependencies
95709598UPGRADED-PACKAGE: minimatch,3.1.2,3.1.5
95719599UPGRADED-PACKAGE: ajv,6.12.6,6.14.0
95729600UPGRADED-PACKAGE: brace-expansion,1.1.11,1.1.12
95739601UPGRADED-PACKAGE: concat-stream,1.5.0,1.6.1
95749602UPGRADED-PACKAGE: hosted-git-info,2.1.4,2.8.9
95759603FIXED-VULN-IDS: GHSA-23c5-xmqv-rm74,GHSA-2g4f-4pwh-qvx6,GHSA-3ppc-4f35-3m26,GHSA-43f8-2h32-f4cj,GHSA-7r86-cg39-jmmj,GHSA-g74r-ffvr-5q9f,GHSA-v6h2-p8h4-qcjw
9576- REMAINING-VULNS: 7
9577- UNFIXABLE-VULNS: 7
9604+ REMAINING-VULNS: 8
9605+ UNFIXABLE-VULNS: 8
95789606
95799607---
95809608
@@ -11381,16 +11409,16 @@ manifest or lockfile is required
1138111409---
1138211410
1138311411[TestCommand_OfflineDatabase/fix_non_interactive_in_place_package_lock_json_with_offline_vulns - 1]
11384- Found 14 vulnerabilities matching the filter
11385- Can fix 7/14 matching vulnerabilities by changing 5 dependencies
11412+ Found 15 vulnerabilities matching the filter
11413+ Can fix 7/15 matching vulnerabilities by changing 5 dependencies
1138611414UPGRADED-PACKAGE: minimatch,3.1.2,3.1.5
1138711415UPGRADED-PACKAGE: ajv,6.12.6,6.14.0
1138811416UPGRADED-PACKAGE: brace-expansion,1.1.11,1.1.12
1138911417UPGRADED-PACKAGE: concat-stream,1.5.0,1.6.1
1139011418UPGRADED-PACKAGE: hosted-git-info,2.1.4,2.8.9
1139111419FIXED-VULN-IDS: GHSA-23c5-xmqv-rm74,GHSA-2g4f-4pwh-qvx6,GHSA-3ppc-4f35-3m26,GHSA-43f8-2h32-f4cj,GHSA-7r86-cg39-jmmj,GHSA-g74r-ffvr-5q9f,GHSA-v6h2-p8h4-qcjw
11392- REMAINING-VULNS: 7
11393- UNFIXABLE-VULNS: 7
11420+ REMAINING-VULNS: 8
11421+ UNFIXABLE-VULNS: 8
1139411422
1139511423---
1139611424
@@ -13123,10 +13151,10 @@ UNFIXABLE-VULNS: 7
1312313151---
1312413152
1312513153[TestCommand_OfflineDatabase/fix_non_interactive_relax_package_json_with_offline_vulns - 1]
13126- Found 7 vulnerabilities matching the filter
13127- Can fix 3/7 matching vulnerabilities by changing 1 dependencies
13154+ Found 8 vulnerabilities matching the filter
13155+ Can fix 4/8 matching vulnerabilities by changing 1 dependencies
1312813156UPGRADED-PACKAGE: npm-registry-client,6.2.0,^7.5.0
13129- FIXED-VULN-IDS: GHSA-43f8-2h32-f4cj,GHSA-c2qf-rxjj-qqgw,GHSA-c6rq-rjc2-86v2
13157+ FIXED-VULN-IDS: GHSA-43f8-2h32-f4cj,GHSA-c2qf-rxjj-qqgw,GHSA-c6rq-rjc2-86v2,GHSA-f886-m6hf-6m8v
1313013158REMAINING-VULNS: 4
1313113159UNFIXABLE-VULNS: 4
1313213160
0 commit comments