From a0146b7bfa9afc5ff527576e67d12a9de11d43f5 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 10 Oct 2019 04:35:38 +0000 Subject: [PATCH] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-HTTPSPROXYAGENT-469131 --- .snyk | 7 ++++++- package.json | 2 +- 2 files changed, 7 insertions(+), 2 deletions(-) diff --git a/.snyk b/.snyk index ddfc553..4c73a2b 100644 --- a/.snyk +++ b/.snyk @@ -1,5 +1,5 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.13.3 +version: v1.13.5 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: @@ -8,3 +8,8 @@ patch: patched: '2018-07-05T23:23:10.204Z' - '@dadi/boot > cli-table2 > lodash': patched: '2019-05-02T06:46:18.478Z' + SNYK-JS-HTTPSPROXYAGENT-469131: + - snyk > proxy-agent > https-proxy-agent: + patched: '2019-10-10T04:35:36.289Z' + - snyk > proxy-agent > pac-proxy-agent > https-proxy-agent: + patched: '2019-10-10T04:35:36.289Z' diff --git a/package.json b/package.json index c59ff30..2527de1 100644 --- a/package.json +++ b/package.json @@ -20,7 +20,7 @@ "convict": "^4.3.2", "mkdirp": "^0.5.1", "rsmq-worker": "^0.4.3", - "snyk": "^1.158.0" + "snyk": "^1.234.0" }, "devDependencies": { "coveralls": "^3.0.2",