From 49e92d2ce69919300de2bf3c79e39a9dd8091443 Mon Sep 17 00:00:00 2001 From: Emilio Rojas Date: Wed, 13 Apr 2022 11:46:32 -0600 Subject: [PATCH] Update minimist As stated in the minimist readme file, version 1.2.6 or later should be used due to security reasons. https://github.com/substack/minimist#security --- package.json | 2 +- yarn.lock | 7 ++++++- 2 files changed, 7 insertions(+), 2 deletions(-) diff --git a/package.json b/package.json index ac88f79..28ecd89 100644 --- a/package.json +++ b/package.json @@ -10,7 +10,7 @@ "cross-spawn": "^7.0.3", "dotenv": "^16.0.0", "dotenv-expand": "^8.0.1", - "minimist": "^1.2.5" + "minimist": "^1.2.6" }, "devDependencies": { "standard": "^16.0.4" diff --git a/yarn.lock b/yarn.lock index 304f5d7..c38e7e2 100644 --- a/yarn.lock +++ b/yarn.lock @@ -977,11 +977,16 @@ minimatch@^3.0.4: dependencies: brace-expansion "^1.1.7" -minimist@^1.2.0, minimist@^1.2.5: +minimist@^1.2.0: version "1.2.5" resolved "https://registry.yarnpkg.com/minimist/-/minimist-1.2.5.tgz#67d66014b66a6a8aaa0c083c5fd58df4e4e97602" integrity sha512-FM9nNUYrRBAELZQT3xeZQ7fmMOBg6nWNmJKTcgsJeaLstP/UODVpGsr5OhXhhXg6f+qtJ8uiZ+PUxkDWcgIXLw== +minimist@^1.2.5: + version "1.2.6" + resolved "https://registry.yarnpkg.com/minimist/-/minimist-1.2.6.tgz#8637a5b759ea0d6e98702cfb3a9283323c93af44" + integrity sha512-Jsjnk4bw3YJqYzbdyBiNsPWHPfO++UGG749Cxs6peCu5Xg4nrena6OVxOYxrQTqww0Jmwt+Ref8rggumkTLz9Q== + ms@2.0.0: version "2.0.0" resolved "https://registry.yarnpkg.com/ms/-/ms-2.0.0.tgz#5608aeadfc00be6c2901df5f9861788de0d597c8"