fix: update dependencies and override tar to fix audit issue (#129)

dominikg · web-flow · commit eac93d15c5ee · 2021-08-05T13:00:11.000+02:00
diff --git a/package.json b/package.json
@@ -27,15 +27,15 @@
     "@changesets/get-github-info": "^0.5.0",
     "@types/fs-extra": "^9.0.12",
     "@types/jest": "^26.0.24",
-    "@types/node": "^16.4.10",
+    "@types/node": "^16.4.12",
     "@types/semver": "^7.3.8",
     "@typescript-eslint/eslint-plugin": "^4.29.0",
     "@typescript-eslint/parser": "^4.29.0",
     "chalk": "^4.1.2",
     "cross-env": "^7.0.3",
     "dotenv": "^10.0.0",
     "enquirer": "^2.3.6",
-    "esbuild": "^0.12.17",
+    "esbuild": "^0.12.18",
     "eslint": "^7.32.0",
     "eslint-config-prettier": "^8.3.0",
     "eslint-plugin-html": "^6.1.2",
@@ -62,7 +62,7 @@
     "rimraf": "^3.0.2",
     "semver": "^7.3.5",
     "sirv": "^1.0.12",
-    "svelte": "^3.41.0",
+    "svelte": "^3.42.1",
     "ts-jest": "^27.0.4",
     "typescript": "^4.3.5",
     "vite": "^2.4.4"
@@ -78,5 +78,11 @@
     "yarn": "forbidden, use pnpm",
     "npm": "forbidden, use pnpm",
     "node": "^12.20 || ^14.13.1 || >= 16"
+  },
+  "pnpm": {
+    "overrides": {
+      "//tar@6": "see https://npmjs.com/advisories/1770 and https://npmjs.com/advisories/1771",
+      "tar@6": "^6.1.2"
+    }
   }
 }
diff --git a/packages/e2e-tests/autoprefixer-browerslist/package.json b/packages/e2e-tests/autoprefixer-browerslist/package.json
@@ -15,7 +15,7 @@
     "autoprefixer": "^10.3.1",
     "postcss": "^8.3.6",
     "postcss-load-config": "^3.1.0",
-    "svelte": "^3.41.0",
+    "svelte": "^3.42.1",
     "svelte-preprocess": "^4.7.4",
     "vite": "^2.4.4"
   }
diff --git a/packages/e2e-tests/configfile-custom/package.json b/packages/e2e-tests/configfile-custom/package.json
@@ -12,7 +12,7 @@
   },
   "devDependencies": {
     "@sveltejs/vite-plugin-svelte": "workspace:*",
-    "svelte": "^3.41.0",
+    "svelte": "^3.42.1",
     "vite": "^2.4.4"
   }
 }
diff --git a/packages/e2e-tests/configfile-esm/package.json b/packages/e2e-tests/configfile-esm/package.json
@@ -12,7 +12,7 @@
   },
   "devDependencies": {
     "@sveltejs/vite-plugin-svelte": "workspace:*",
-    "svelte": "^3.41.0",
+    "svelte": "^3.42.1",
     "svelte-preprocess": "^4.7.4",
     "vite": "^2.4.4"
   },
diff --git a/packages/e2e-tests/custom-extensions/package.json b/packages/e2e-tests/custom-extensions/package.json
@@ -9,7 +9,7 @@
   },
   "devDependencies": {
     "@sveltejs/vite-plugin-svelte": "workspace:*",
-    "svelte": "^3.41.0",
+    "svelte": "^3.42.1",
     "vite": "^2.4.4"
   }
 }
diff --git a/packages/e2e-tests/hmr/package.json b/packages/e2e-tests/hmr/package.json
@@ -12,7 +12,7 @@
   },
   "devDependencies": {
     "@sveltejs/vite-plugin-svelte": "workspace:*",
-    "svelte": "^3.41.0",
+    "svelte": "^3.42.1",
     "vite": "^2.4.4",
     "node-fetch": "^2.6.1"
   }
diff --git a/packages/e2e-tests/kit-node/package.json b/packages/e2e-tests/kit-node/package.json
@@ -8,9 +8,9 @@
     "preview": "svelte-kit preview"
   },
   "devDependencies": {
-    "@sveltejs/adapter-node": "^1.0.0-next.36",
-    "@sveltejs/kit": "^1.0.0-next.141",
-    "svelte": "^3.41.0"
+    "@sveltejs/adapter-node": "^1.0.0-next.38",
+    "@sveltejs/kit": "^1.0.0-next.142",
+    "svelte": "^3.42.1"
   },
   "type": "module",
   "engines": {
diff --git a/packages/e2e-tests/package-json-svelte-field/package.json b/packages/e2e-tests/package-json-svelte-field/package.json
@@ -12,7 +12,7 @@
   },
   "devDependencies": {
     "@sveltejs/vite-plugin-svelte": "workspace:*",
-    "svelte": "^3.41.0",
+    "svelte": "^3.42.1",
     "vite": "^2.4.4"
   }
 }
diff --git a/packages/e2e-tests/svelte-preprocess/package.json b/packages/e2e-tests/svelte-preprocess/package.json
@@ -9,7 +9,7 @@
   },
   "devDependencies": {
     "@sveltejs/vite-plugin-svelte": "workspace:*",
-    "svelte": "^3.41.0",
+    "svelte": "^3.42.1",
     "svelte-preprocess": "^4.7.4",
     "typescript": "^4.3.5",
     "vite": "^2.4.4"
diff --git a/packages/e2e-tests/ts-type-import/package.json b/packages/e2e-tests/ts-type-import/package.json
@@ -10,7 +10,7 @@
   "devDependencies": {
     "@sveltejs/vite-plugin-svelte": "workspace:*",
     "@tsconfig/svelte": "^2.0.1",
-    "@types/node": "^16.4.10",
+    "@types/node": "^16.4.12",
     "svelte-preprocess": "^4.7.4",
     "vite": "^2.4.4"
   }
diff --git a/packages/e2e-tests/vite-ssr/package.json b/packages/e2e-tests/vite-ssr/package.json
@@ -19,7 +19,7 @@
     "cross-env": "^7.0.3",
     "express": "^4.17.1",
     "serve-static": "^1.14.1",
-    "svelte": "^3.41.0",
+    "svelte": "^3.42.1",
     "vite": "^2.4.4"
   }
 }
diff --git a/packages/playground/big/package.json b/packages/playground/big/package.json
@@ -11,7 +11,7 @@
   },
   "devDependencies": {
     "@sveltejs/vite-plugin-svelte": "workspace:*",
-    "svelte": "^3.41.0",
+    "svelte": "^3.42.1",
     "vite": "^2.4.4"
   }
 }
diff --git a/packages/playground/kit-demo-app/package.json b/packages/playground/kit-demo-app/package.json
@@ -8,9 +8,9 @@
     "preview": "svelte-kit preview"
   },
   "devDependencies": {
-    "@sveltejs/adapter-node": "^1.0.0-next.36",
-    "@sveltejs/kit": "^1.0.0-next.141",
-    "svelte": "^3.41.0"
+    "@sveltejs/adapter-node": "^1.0.0-next.38",
+    "@sveltejs/kit": "^1.0.0-next.142",
+    "svelte": "^3.42.1"
   },
   "type": "module",
   "dependencies": {
diff --git a/packages/playground/optimizedeps-include/package.json b/packages/playground/optimizedeps-include/package.json
@@ -10,7 +10,7 @@
   },
   "devDependencies": {
     "@sveltejs/vite-plugin-svelte": "workspace:*",
-    "svelte": "^3.41.0",
+    "svelte": "^3.42.1",
     "vite": "^2.4.4",
     "tinro": "^0.6.5"
   }
diff --git a/packages/playground/preprocess-with-vite/package.json b/packages/playground/preprocess-with-vite/package.json
@@ -9,9 +9,9 @@
   },
   "devDependencies": {
     "@sveltejs/vite-plugin-svelte": "workspace:*",
-    "sass": "^1.37.2",
+    "sass": "^1.37.5",
     "stylus": "^0.54.8",
-    "svelte": "^3.41.0",
+    "svelte": "^3.42.1",
     "vite": "^2.4.4"
   }
 }
diff --git a/packages/playground/windicss/package.json b/packages/playground/windicss/package.json
@@ -12,7 +12,7 @@
   },
   "devDependencies": {
     "@sveltejs/vite-plugin-svelte": "workspace:*",
-    "svelte": "^3.41.0",
+    "svelte": "^3.42.1",
     "vite": "^2.4.4",
     "vite-plugin-windicss": "^1.2.7",
     "diff-match-patch": "^1.0.5"
diff --git a/packages/vite-plugin-svelte/package.json b/packages/vite-plugin-svelte/package.json
@@ -65,10 +65,10 @@
     "@types/debug": "^4.1.7",
     "@types/diff-match-patch": "^1.0.32",
     "diff-match-patch": "^1.0.5",
-    "esbuild": "^0.12.17",
-    "rollup": "^2.55.1",
-    "svelte": "^3.41.0",
-    "tsup": "^4.12.5",
+    "esbuild": "^0.12.18",
+    "rollup": "^2.56.0",
+    "svelte": "^3.42.1",
+    "tsup": "^4.13.1",
     "vite": "^2.4.4"
   }
 }
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml

Original file line number	Diff line number	Diff line change
`@@ -15,7 +15,7 @@`
`15`	`15`	`"autoprefixer": "^10.3.1",`
`16`	`16`	`"postcss": "^8.3.6",`
`17`	`17`	`"postcss-load-config": "^3.1.0",`
`18`		`- "svelte": "^3.41.0",`
	`18`	`+ "svelte": "^3.42.1",`
`19`	`19`	`"svelte-preprocess": "^4.7.4",`
`20`	`20`	`"vite": "^2.4.4"`
`21`	`21`	`}`
Original file line number	Diff line number	Diff line change
`@@ -12,7 +12,7 @@`
`12`	`12`	`},`
`13`	`13`	`"devDependencies": {`
`14`	`14`	`"@sveltejs/vite-plugin-svelte": "workspace:*",`
`15`		`- "svelte": "^3.41.0",`
	`15`	`+ "svelte": "^3.42.1",`
`16`	`16`	`"vite": "^2.4.4"`
`17`	`17`	`}`
`18`	`18`	`}`
Original file line number	Diff line number	Diff line change
`@@ -9,7 +9,7 @@`
`9`	`9`	`},`
`10`	`10`	`"devDependencies": {`
`11`	`11`	`"@sveltejs/vite-plugin-svelte": "workspace:*",`
`12`		`- "svelte": "^3.41.0",`
	`12`	`+ "svelte": "^3.42.1",`
`13`	`13`	`"vite": "^2.4.4"`
`14`	`14`	`}`
`15`	`15`	`}`
Original file line number	Diff line number	Diff line change
`@@ -10,7 +10,7 @@`
`10`	`10`	`"devDependencies": {`
`11`	`11`	`"@sveltejs/vite-plugin-svelte": "workspace:*",`
`12`	`12`	`"@tsconfig/svelte": "^2.0.1",`
`13`		`- "@types/node": "^16.4.10",`
	`13`	`+ "@types/node": "^16.4.12",`
`14`	`14`	`"svelte-preprocess": "^4.7.4",`
`15`	`15`	`"vite": "^2.4.4"`
`16`	`16`	`}`