fix: Vulnerabilities with semver and path-to-regexp (#1391)

JhontSouth · web-flow · commit c4a96f01b050 · 2024-09-19T08:56:32.000-05:00
* update semver

* revert tslint update

* update sinon and fetch-mock
diff --git a/common/config/rush/pnpm-lock.yaml b/common/config/rush/pnpm-lock.yaml
diff --git a/packages/chatdown/package.json b/packages/chatdown/package.json
@@ -21,7 +21,7 @@
     "axios": "~1.6.0",
     "https-proxy-agent": "^5.0.0",
     "please-upgrade-node": "^3.0.1",
-    "semver": "^5.5.1",
+    "semver": "^7.6.3",
     "tslib": "^2.0.3",
     "window-size": "^1.1.0"
   },
@@ -41,7 +41,7 @@
     "mocha": "^10.4.0",
     "rimraf": "^2.6.3",
     "ts-node": "^10.8.1",
-    "tslint": "^5.16.0",
+    "tslint": "^5.18.0",
     "typescript": "^4.9.5"
   },
   "engines": {
diff --git a/packages/cli/package.json b/packages/cli/package.json
@@ -85,7 +85,7 @@
     "fs-extra": "^7.0.1",
     "is-ci": "2.0.0",
     "latest-version": "5.1.0",
-    "semver": "^5.5.1",
+    "semver": "^7.6.3",
     "tslib": "^2.0.3"
   },
   "devDependencies": {
@@ -104,7 +104,7 @@
     "nyc": "^15.1.0",
     "rimraf": "^2.6.3",
     "ts-node": "^10.8.1",
-    "tslint": "^5.16.0",
+    "tslint": "^5.18.0",
     "typescript": "^4.9.5"
   }
 }
diff --git a/packages/command/package.json b/packages/command/package.json
@@ -74,7 +74,7 @@
     "source-map-support": "~0.5.16",
     "testdouble": "^3.11.0",
     "ts-node": "^10.8.1",
-    "tslint": "^5.16.0",
+    "tslint": "^5.18.0",
     "typescript": "^4.9.5"
   }
 }
diff --git a/packages/dialog/package.json b/packages/dialog/package.json
@@ -68,7 +68,7 @@
     "os": "~0.1.1",
     "path": "^0.12.7",
     "seedrandom": "~3.0.5",
-    "semver": "^7.3.4",
+    "semver": "^7.6.3",
     "tslib": "^2.0.3",
     "xml2js": "^0.5.0",
     "json-ptr": "~3.1.0",
diff --git a/packages/dispatcher/package.json b/packages/dispatcher/package.json
@@ -23,7 +23,7 @@
     "mocha": "^10.4.0",
     "rimraf": "^3.0.0",
     "ts-node": "^8.4.1",
-    "tslint": "^5.20.1",
+    "tslint": "^5.18.0",
     "typescript": "^4.9.5"
   },
   "engines": {
diff --git a/packages/lu/package.json b/packages/lu/package.json
@@ -59,7 +59,7 @@
     "globby": "^11.0.4",
     "intercept-stdout": "^0.1.2",
     "lodash": "^4.17.21",
-    "semver": "^5.5.1",
+    "semver": "^7.6.3",
     "tslib": "^2.0.3"
   },
   "devDependencies": {
diff --git a/packages/luis/package.json b/packages/luis/package.json
@@ -86,9 +86,9 @@
     "nock": "^13.5.5",
     "nyc": "^15.1.0",
     "rimraf": "^3.0.0",
-    "sinon": "^7.5.0",
+    "sinon": "^18.0.1",
     "ts-node": "^10.8.1",
-    "tslint": "^5.20.1",
+    "tslint": "^5.18.0",
     "typescript": "^4.9.5",
     "uuid": "^3.3.3"
   }
diff --git a/packages/orchestrator/package.json b/packages/orchestrator/package.json
@@ -46,7 +46,7 @@
     "rimraf": "^3.0.2",
     "ts-node": "^10.8.1",
     "typescript": "^4.9.5",
-    "sinon": "^9.0.2"
+    "sinon": "^18.0.1"
   },
   "files": [
     "/lib",
diff --git a/packages/orchestratorlib/package.json b/packages/orchestratorlib/package.json
@@ -72,6 +72,6 @@
     "rimraf": "^2.6.3",
     "ts-node": "^10.8.1",
     "typescript": "^4.9.5",
-    "sinon": "^9.0.2"
+    "sinon": "^18.0.1"
   }
 }
diff --git a/packages/qnamaker/package.json b/packages/qnamaker/package.json
@@ -72,7 +72,7 @@
     "readline": "^1.3.0",
     "readline-sync": "^1.4.9",
     "rimraf": "^2.6.3",
-    "semver": "^5.5.1",
+    "semver": "^7.6.3",
     "tslib": "^2.0.3",
     "window-size": "^1.1.0",
     "username": "^4.1.0"
@@ -87,7 +87,7 @@
     "@types/nock": "^11.1.0",
     "@types/node": "^11.13.7",
     "chai": "^4.4.1",
-    "fetch-mock": "^7.3.9",
+    "fetch-mock": "^11.1.3",
     "globby": "^11.0.4",
     "mocha": "^10.4.0",
     "nock": "^13.5.5",

Original file line number	Diff line number	Diff line change
`@@ -74,7 +74,7 @@`
`74`	`74`	`"source-map-support": "~0.5.16",`
`75`	`75`	`"testdouble": "^3.11.0",`
`76`	`76`	`"ts-node": "^10.8.1",`
`77`		`- "tslint": "^5.16.0",`
	`77`	`+ "tslint": "^5.18.0",`
`78`	`78`	`"typescript": "^4.9.5"`
`79`	`79`	`}`
`80`	`80`	`}`
Original file line number	Diff line number	Diff line change
`@@ -72,6 +72,6 @@`
`72`	`72`	`"rimraf": "^2.6.3",`
`73`	`73`	`"ts-node": "^10.8.1",`
`74`	`74`	`"typescript": "^4.9.5",`
`75`		`- "sinon": "^9.0.2"`
	`75`	`+ "sinon": "^18.0.1"`
`76`	`76`	`}`
`77`	`77`	`}`