atomist-skills / github-auto-rebase-skill

Atomist Skill to rebase a pull request branch if there are branches to the base branch
Apache License 2.0
0 stars 0 forks source link

Fix y18n > 4.0.1 #165

Closed atomist[bot] closed 3 years ago

atomist[bot] commented 3 years ago

This pull request fixes all 3 high security vulnerabilities open on 9f67cc8.

npm audit fix updated the following npm dependencies:


Fixed vulnerabilities

Following security vulnerability is fixed:

y18n

Prototype Pollution Upgrade to version 3.2.2, 4.0.1, 5.0.5 or later high · <3.2.2||=4.0.0||>=5.0.0 <5.0.5 · CVE-2020-7774 · automatic fix available

y18n@4.0.0 · 3 vulnerable paths
  • @atomist/skill > @graphql-codegen/typescript-operations > @graphql-codegen/typescript > @graphql-codegen/visitor-plugin-common > @graphql-tools/relay-operation-optimizer > relay-compiler > yargs > y18n
  • @atomist/skill > @graphql-codegen/typescript-operations > @graphql-codegen/visitor-plugin-common > @graphql-tools/relay-operation-optimizer > relay-compiler > yargs > y18n
  • @atomist/skill > @graphql-codegen/typescript > @graphql-codegen/visitor-plugin-common > @graphql-tools/relay-operation-optimizer > relay-compiler > yargs > y18n

  • File changed:


    atomist/npm-vulnerability-scanner-skill · Configure

    atomist[bot] commented 3 years ago

    Pull request auto merged: