From 299b57b6e53e94d24c4c5d08b0da5f4974aad1ef Mon Sep 17 00:00:00 2001
From: Tommy Markley <markleyt@amazon.com>
Date: Tue, 8 Jun 2021 17:15:31 +0000
Subject: [PATCH] Add proper dependency resolution for ssri

Dependabot bumped the dependency from 6.0.1 to 6.0.2 in #332,
but it edited the yarn.lock file directly. This left older
versions of the dependency in the lockfile.

Signed-off-by: Tommy Markley <markleyt@amazon.com>
---
 package.json |  1 +
 yarn.lock    | 17 +----------------
 2 files changed, 2 insertions(+), 16 deletions(-)

diff --git a/package.json b/package.json
index 2935dd9062a6..da2c7e1a2b0b 100644
--- a/package.json
+++ b/package.json
@@ -89,6 +89,7 @@
     "**/react-syntax-highlighter": "^15.3.1",
     "**/react-syntax-highlighter/**/highlight.js": "^10.4.1",
     "**/request": "^2.88.2",
+    "**/ssri": "^6.0.2",
     "**/trim": "^0.0.3",
     "**/typescript": "4.0.2"
   },
diff --git a/yarn.lock b/yarn.lock
index 1505510d2856..95a04fbb6dd3 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -21966,28 +21966,13 @@ sshpk@^1.7.0:
     safer-buffer "^2.0.2"
     tweetnacl "~0.14.0"
 
-ssri@^6.0.1:
+ssri@^6.0.1, ssri@^6.0.2, ssri@^7.0.0, ssri@^8.0.0:
   version "6.0.2"
   resolved "https://registry.yarnpkg.com/ssri/-/ssri-6.0.2.tgz#157939134f20464e7301ddba3e90ffa8f7728ac5"
   integrity sha512-cepbSq/neFK7xB6A50KHN0xHDotYzq58wWCa5LeWqnPrHG8GzfEjO/4O8kpmcGW+oaxkvhEJCWgbgNk4/ZV93Q==
   dependencies:
     figgy-pudding "^3.5.1"
 
-ssri@^7.0.0:
-  version "7.1.0"
-  resolved "https://registry.yarnpkg.com/ssri/-/ssri-7.1.0.tgz#92c241bf6de82365b5c7fb4bd76e975522e1294d"
-  integrity sha512-77/WrDZUWocK0mvA5NTRQyveUf+wsrIc6vyrxpS8tVvYBcX215QbafrJR3KtkpskIzoFLqqNuuYQvxaMjXJ/0g==
-  dependencies:
-    figgy-pudding "^3.5.1"
-    minipass "^3.1.1"
-
-ssri@^8.0.0:
-  version "8.0.0"
-  resolved "https://registry.yarnpkg.com/ssri/-/ssri-8.0.0.tgz#79ca74e21f8ceaeddfcb4b90143c458b8d988808"
-  integrity sha512-aq/pz989nxVYwn16Tsbj1TqFpD5LLrQxHf5zaHuieFV+R0Bbr4y8qUsOA45hXT/N4/9UNXTarBjnjVmjSOVaAA==
-  dependencies:
-    minipass "^3.1.1"
-
 stable@^0.1.8:
   version "0.1.8"
   resolved "https://registry.yarnpkg.com/stable/-/stable-0.1.8.tgz#836eb3c8382fe2936feaf544631017ce7d47a3cf"