Skip to content

Commit f6b3347

Browse files
committed
fix: package.json & yarn.lock to reduce vulnerabilities
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-NODEFETCH-2964180
1 parent 4ccbc74 commit f6b3347

File tree

2 files changed

+37
-23
lines changed

2 files changed

+37
-23
lines changed

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -114,7 +114,7 @@
114114
"html-to-text": "^8.2.0",
115115
"md5": "^2.3.0",
116116
"mpris-service": "^2.1.2",
117-
"node-fetch": "^2.6.7",
117+
"node-fetch": "^3.2.10",
118118
"node-notifier": "^10.0.1",
119119
"ytdl-core": "^4.11.0",
120120
"ytpl": "^2.3.0"

yarn.lock

Lines changed: 36 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -2786,6 +2786,11 @@ dashdash@^1.12.0:
27862786
dependencies:
27872787
assert-plus "^1.0.0"
27882788

2789+
data-uri-to-buffer@^4.0.0:
2790+
version "4.0.0"
2791+
resolved "https://registry.yarnpkg.com/data-uri-to-buffer/-/data-uri-to-buffer-4.0.0.tgz#b5db46aea50f6176428ac05b73be39a57701a64b"
2792+
integrity sha512-Vr3mLBA8qWmcuschSLAOogKgQ/Jwxulv3RNE4FXnYWRGujzrRWQI4m12fQqRkwX06C0KanhLr4hK+GydchZsaA==
2793+
27892794
data-urls@^2.0.0:
27902795
version "2.0.0"
27912796
resolved "https://registry.yarnpkg.com/data-urls/-/data-urls-2.0.0.tgz#156485a72963a970f5d5821aaf642bef2bf2db9b"
@@ -3927,6 +3932,14 @@ fd-slicer@~1.1.0:
39273932
dependencies:
39283933
pend "~1.2.0"
39293934

3935+
fetch-blob@^3.1.2, fetch-blob@^3.1.4:
3936+
version "3.2.0"
3937+
resolved "https://registry.yarnpkg.com/fetch-blob/-/fetch-blob-3.2.0.tgz#f09b8d4bbd45adc6f0c20b7e787e793e309dcce9"
3938+
integrity sha512-7yAQpD2UMJzLi1Dqv7qFYnPbaPx7ZfFK6PiIxQ4PfkGPyNyl2Ugx+a/umUonmKqjhM4DnfbMvdX6otXq83soQQ==
3939+
dependencies:
3940+
node-domexception "^1.0.0"
3941+
web-streams-polyfill "^3.0.3"
3942+
39303943
file-entry-cache@^6.0.1:
39313944
version "6.0.1"
39323945
resolved "https://registry.yarnpkg.com/file-entry-cache/-/file-entry-cache-6.0.1.tgz#211b2dd9659cb0394b073e7323ac3c933d522027"
@@ -4082,6 +4095,13 @@ form-data@~2.3.2:
40824095
combined-stream "^1.0.6"
40834096
mime-types "^2.1.12"
40844097

4098+
formdata-polyfill@^4.0.10:
4099+
version "4.0.10"
4100+
resolved "https://registry.yarnpkg.com/formdata-polyfill/-/formdata-polyfill-4.0.10.tgz#24807c31c9d402e002ab3d8c720144ceb8848423"
4101+
integrity sha512-buewHzMvYL29jdeQTVILecSaZKnt/RJWjoZCF5OW60Z67/GmSLBkOFM7qh1PI3zFNtJbaZL5eQu1vLfazOwj4g==
4102+
dependencies:
4103+
fetch-blob "^3.1.2"
4104+
40854105
from@~0:
40864106
version "0.1.7"
40874107
resolved "https://registry.yarnpkg.com/from/-/from-0.1.7.tgz#83c60afc58b9c56997007ed1a768b3ab303a44fe"
@@ -6263,17 +6283,24 @@ node-addon-api@^1.3.0, node-addon-api@^1.6.3:
62636283
resolved "https://registry.yarnpkg.com/node-addon-api/-/node-addon-api-1.7.2.tgz#3df30b95720b53c24e59948b49532b662444f54d"
62646284
integrity sha512-ibPK3iA+vaY1eEjESkQkM0BbCqFOaZMiXRTtdB0u7b4djtY6JnsjvPdUHVMg6xQt3B8fpTTWHI9A+ADjM9frzg==
62656285

6286+
node-domexception@^1.0.0:
6287+
version "1.0.0"
6288+
resolved "https://registry.yarnpkg.com/node-domexception/-/node-domexception-1.0.0.tgz#6888db46a1f71c0b76b3f7555016b63fe64766e5"
6289+
integrity sha512-/jKZoMpw0F8GRwl4/eLROPA3cfcXtLApP0QzLmUT/HuPCZWyB7IY9ZrMeKw2O/nFIqPQB3PVM9aYm0F312AXDQ==
6290+
62666291
node-fetch@^2.6.1:
62676292
version "2.6.1"
62686293
resolved "https://registry.yarnpkg.com/node-fetch/-/node-fetch-2.6.1.tgz#045bd323631f76ed2e2b55573394416b639a0052"
62696294
integrity sha512-V4aYg89jEoVRxRb2fJdAg8FHvI7cEyYdVAh94HH0UIK8oJxUfkjlDQN9RbMx+bEjP7+ggMiFRprSti032Oipxw==
62706295

6271-
node-fetch@^2.6.7:
6272-
version "2.6.7"
6273-
resolved "https://registry.yarnpkg.com/node-fetch/-/node-fetch-2.6.7.tgz#24de9fba827e3b4ae44dc8b20256a379160052ad"
6274-
integrity sha512-ZjMPFEfVx5j+y2yF35Kzx5sF7kDzxuDj6ziH4FFbOp87zKDZNx8yExJIb05OGF4Nlt9IHFIMBkRl41VdvcNdbQ==
6296+
node-fetch@^3.2.10:
6297+
version "3.2.10"
6298+
resolved "https://registry.yarnpkg.com/node-fetch/-/node-fetch-3.2.10.tgz#e8347f94b54ae18b57c9c049ef641cef398a85c8"
6299+
integrity sha512-MhuzNwdURnZ1Cp4XTazr69K0BTizsBroX7Zx3UgDSVcZYKF/6p0CBe4EUb/hLqmzVhl0UpYfgRljQ4yxE+iCxA==
62756300
dependencies:
6276-
whatwg-url "^5.0.0"
6301+
data-uri-to-buffer "^4.0.0"
6302+
fetch-blob "^3.1.4"
6303+
formdata-polyfill "^4.0.10"
62776304

62786305
node-int64@^0.4.0:
62796306
version "0.4.0"
@@ -7989,11 +8016,6 @@ tr46@^2.1.0:
79898016
dependencies:
79908017
punycode "^2.1.1"
79918018

7992-
tr46@~0.0.3:
7993-
version "0.0.3"
7994-
resolved "https://registry.yarnpkg.com/tr46/-/tr46-0.0.3.tgz#8184fd347dac9cdc185992f3a6622e14b9d9ab6a"
7995-
integrity sha1-gYT9NH2snNwYWZLzpmIuFLnZq2o=
7996-
79978019
trim-newlines@^4.0.2:
79988020
version "4.0.2"
79998021
resolved "https://registry.yarnpkg.com/trim-newlines/-/trim-newlines-4.0.2.tgz#d6aaaf6a0df1b4b536d183879a6b939489808c7c"
@@ -8294,10 +8316,10 @@ walker@^1.0.7:
82948316
dependencies:
82958317
makeerror "1.0.x"
82968318

8297-
webidl-conversions@^3.0.0:
8298-
version "3.0.1"
8299-
resolved "https://registry.yarnpkg.com/webidl-conversions/-/webidl-conversions-3.0.1.tgz#24534275e2a7bc6be7bc86611cc16ae0a5654871"
8300-
integrity sha1-JFNCdeKnvGvnvIZhHMFq4KVlSHE=
8319+
web-streams-polyfill@^3.0.3:
8320+
version "3.2.1"
8321+
resolved "https://registry.yarnpkg.com/web-streams-polyfill/-/web-streams-polyfill-3.2.1.tgz#71c2718c52b45fd49dbeee88634b3a60ceab42a6"
8322+
integrity sha512-e0MO3wdXWKrLbL0DgGnUV7WHVuw9OUvL4hjgnPkIeEvESk74gAITi5G606JtZPp39cd8HA9VQzCIvA49LpPN5Q==
83018323

83028324
webidl-conversions@^5.0.0:
83038325
version "5.0.0"
@@ -8321,14 +8343,6 @@ whatwg-mimetype@^2.3.0:
83218343
resolved "https://registry.yarnpkg.com/whatwg-mimetype/-/whatwg-mimetype-2.3.0.tgz#3d4b1e0312d2079879f826aff18dbeeca5960fbf"
83228344
integrity sha512-M4yMwr6mAnQz76TbJm914+gPpB/nCwvZbJU28cUD6dR004SAxDLOOSUaB1JDRqLtaOV/vi0IC5lEAGFgrjGv/g==
83238345

8324-
whatwg-url@^5.0.0:
8325-
version "5.0.0"
8326-
resolved "https://registry.yarnpkg.com/whatwg-url/-/whatwg-url-5.0.0.tgz#966454e8765462e37644d3626f6742ce8b70965d"
8327-
integrity sha1-lmRU6HZUYuN2RNNib2dCzotwll0=
8328-
dependencies:
8329-
tr46 "~0.0.3"
8330-
webidl-conversions "^3.0.0"
8331-
83328346
whatwg-url@^8.0.0:
83338347
version "8.4.0"
83348348
resolved "https://registry.yarnpkg.com/whatwg-url/-/whatwg-url-8.4.0.tgz#50fb9615b05469591d2b2bd6dfaed2942ed72837"

0 commit comments

Comments
 (0)