Merge pull request #62 from twilio-labs/fix-axios-security-advisory

Upgrade packages to resolve security advisory

CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## 0.7.1
+
+### Maintenence
+
+- This version upgrades dependencies in order to resolve this [security advisory](https://github.com/advisories/GHSA-4w2v-q235-vp99) regarding the axios library.
+- Upgraded @twilio/cli-core from 5.9.3 to 5.15.1
+- Upgraded twilio from 3.48.2 to 3.54.2
+
 ## 0.7.0
 
 ### Enhancements

package.json

@@ -21,7 +21,7 @@
     "@oclif/config": "^1.14.0",
     "@oclif/plugin-help": "^2",
     "@twilio-labs/serverless-api": "^4.0.3",
-    "@twilio/cli-core": "^5.15.0",
+    "@twilio/cli-core": "^5.15.1",
     "lodash": "^4.17.20",
     "moment": "^2.29.0",
     "nanoid": "^3.1.16"
@@ -37,7 +37,7 @@
     "lint-staged": "^10.0.8",
     "prettier": "^1.19.1",
     "superagent": "^5.2.2",
-    "twilio": "^3.48.2"
+    "twilio": "^3.54.2"
   },
   "eslintConfig": {
     "extends": "eslint:recommended",

src/helpers.js

@@ -191,7 +191,7 @@ TWILIO_API_SECRET = the secret for the API Key`);
     },
     pkgJson: {
       dependencies: {
-        twilio: '^3.51.0',
+        twilio: '^3.54.2',
       },
     },
     functionsEnv: 'dev',