From 1cca52c6f31b6e2a80628ec1146f037b6d9d5dba Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 29 Sep 2022 16:22:27 +0000 Subject: [PATCH] fix: test/ng-build/ng6/package.json & test/ng-build/ng6/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-ANGULARCORE-1070902 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 - https://snyk.io/vuln/npm:extend:20180424 - https://snyk.io/vuln/npm:hoek:20180212 - https://snyk.io/vuln/npm:stringstream:20180511 --- test/ng-build/ng6/.snyk | 45 ++++++++++++++++++++++++++++++++++ test/ng-build/ng6/package.json | 12 ++++++--- 2 files changed, 53 insertions(+), 4 deletions(-) create mode 100644 test/ng-build/ng6/.snyk diff --git a/test/ng-build/ng6/.snyk b/test/ng-build/ng6/.snyk new file mode 100644 index 000000000..0dff37289 --- /dev/null +++ b/test/ng-build/ng6/.snyk @@ -0,0 +1,45 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:extend:20180424': + - '@angular/fire > firebase-tools > google-auto-auth > google-auth-library > request > extend': + patched: '2022-09-29T16:22:25.042Z' + 'npm:hoek:20180212': + - '@angular/fire > firebase-tools > google-auto-auth > google-auth-library > request > hawk > hoek': + patched: '2022-09-29T16:22:25.042Z' + - '@angular/fire > firebase-tools > google-auto-auth > google-auth-library > request > hawk > boom > hoek': + patched: '2022-09-29T16:22:25.042Z' + - '@angular/fire > firebase-tools > google-auto-auth > google-auth-library > request > hawk > sntp > hoek': + patched: '2022-09-29T16:22:25.042Z' + - '@angular/fire > firebase-tools > google-auto-auth > google-auth-library > request > hawk > cryptiles > boom > hoek': + patched: '2022-09-29T16:22:25.042Z' + SNYK-JS-LODASH-567746: + - '@angular/fire > firebase-tools > superstatic > nash > lodash': + patched: '2022-09-29T16:22:25.042Z' + - '@angular/fire > firebase-tools > superstatic > lodash': + patched: '2022-09-29T16:22:25.042Z' + - '@angular/fire > firebase-tools > lodash': + patched: '2022-09-29T16:22:25.042Z' + - '@angular/fire > inquirer > lodash': + patched: '2022-09-29T16:22:25.042Z' + - '@angular/fire > firebase-tools > archiver > lodash': + patched: '2022-09-29T16:22:25.042Z' + - '@angular/fire > firebase-tools > inquirer > lodash': + patched: '2022-09-29T16:22:25.042Z' + - '@angular/fire > firebase-tools > archiver > archiver-utils > lodash': + patched: '2022-09-29T16:22:25.042Z' + - '@angular/fire > firebase-tools > archiver > async > lodash': + patched: '2022-09-29T16:22:25.042Z' + - '@angular/fire > firebase-tools > google-auto-auth > async > lodash': + patched: '2022-09-29T16:22:25.042Z' + - '@angular/fire > firebase-tools > archiver > zip-stream > lodash': + patched: '2022-09-29T16:22:25.042Z' + - '@angular/fire > firebase-tools > archiver > zip-stream > archiver-utils > lodash': + patched: '2022-09-29T16:22:25.042Z' + - '@angular/fire > firebase-tools > superstatic > glob-slasher > toxic > lodash': + patched: '2022-09-29T16:22:25.042Z' + 'npm:stringstream:20180511': + - '@angular/fire > firebase-tools > google-auto-auth > google-auth-library > request > stringstream': + patched: '2022-09-29T16:22:25.042Z' diff --git a/test/ng-build/ng6/package.json b/test/ng-build/ng6/package.json index 9fbbaf414..9ad1b93e1 100644 --- a/test/ng-build/ng6/package.json +++ b/test/ng-build/ng6/package.json @@ -9,14 +9,16 @@ "build:prod": "ng build --prod", "test": "ng test", "lint": "ng lint", - "e2e": "ng e2e" + "e2e": "ng e2e", + "prepare": "yarn run snyk-protect", + "snyk-protect": "snyk-protect" }, "private": true, "dependencies": { "@angular/animations": "6.0.1", "@angular/common": "6.0.1", "@angular/compiler": "6.0.1", - "@angular/core": "6.0.1", + "@angular/core": "11.0.5", "@angular/fire": "../../../dist/packages-dist", "@angular/forms": "6.0.1", "@angular/http": "6.0.1", @@ -25,7 +27,8 @@ "@angular/router": "6.0.1", "core-js": "^2.4.1", "rxjs": "^6.0.0", - "zone.js": "^0.8.14" + "zone.js": "^0.8.14", + "@snyk/protect": "latest" }, "devDependencies": { "@angular-devkit/build-angular": "~0.6.1", @@ -33,5 +36,6 @@ "@angular/compiler-cli": "6.0.1", "@angular/language-service": "6.0.1", "typescript": ">=2.7.2 <2.8.0" - } + }, + "snyk": true }