From e94e4bc396cef2e701466fe8a0189b49d493676e Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 9 May 2019 21:53:29 +0000 Subject: [PATCH] fix: .snyk & package.json to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-AXIOS-174505 --- .snyk | 7 ++++++- package.json | 5 +++-- 2 files changed, 9 insertions(+), 3 deletions(-) diff --git a/.snyk b/.snyk index 0a74b6e..e62bbb8 100644 --- a/.snyk +++ b/.snyk @@ -1,5 +1,5 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.12.0 +version: v1.13.3 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: @@ -20,3 +20,8 @@ patch: patched: '2018-06-21T06:49:26.836Z' - botbuilder-location > botbuilder > jsonwebtoken > joi > topo > hoek: patched: '2018-06-21T06:49:26.836Z' + SNYK-JS-AXIOS-174505: + - botbuilder > botframework-connector > @azure/ms-rest-js > axios: + patched: '2019-05-09T21:53:28.043Z' + - botbuilder-azure > botbuilder > botframework-connector > @azure/ms-rest-js > axios: + patched: '2019-05-09T21:53:28.043Z' diff --git a/package.json b/package.json index e0dc1e6..1b01795 100644 --- a/package.json +++ b/package.json @@ -11,7 +11,7 @@ "dotenv-extended": "^2.0.1", "restify": "^5.0.0", "schema-inspector": "^1.6.8", - "snyk": "^1.83.0" + "snyk": "^1.163.1" }, "devDependencies": { "request": "^2.81.0", @@ -20,7 +20,8 @@ "scripts": { "test": "echo \"Error: no test specified\" && exit 1", "snyk-protect": "snyk protect", - "prepare": "npm run snyk-protect" + "prepare": "npm run snyk-protect", + "prepublish": "npm run snyk-protect" }, "author": "", "license": "ISC",