From 87de842d39b5bd89fcd3abe5cd18766a4bdd83d7 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 24 Sep 2024 09:14:22 +0000 Subject: [PATCH] fix: package.json & yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-ROLLUP-8073097 --- package.json | 2 +- yarn.lock | 15 ++++++++++----- 2 files changed, 11 insertions(+), 6 deletions(-) diff --git a/package.json b/package.json index 3529a0de..ecc1445b 100644 --- a/package.json +++ b/package.json @@ -191,7 +191,7 @@ "rete-connection-plugin": "^0.9.0", "rete-context-menu-plugin": "^0.6.0-rc.1", "rete-vue-render-plugin": "^0.5.0", - "rollup": "^2.39.0", + "rollup": "^3.29.5", "rollup-plugin-babel": "^3.0.2", "rollup-plugin-commonjs": "^10.1.0", "rollup-plugin-executable-output": "^1.3.0", diff --git a/yarn.lock b/yarn.lock index 74264bfe..b1125aec 100644 --- a/yarn.lock +++ b/yarn.lock @@ -4985,6 +4985,11 @@ fsevents@~2.3.1: resolved "https://registry.yarnpkg.com/fsevents/-/fsevents-2.3.2.tgz#8a526f78b8fdf4623b709e0b975c52c24c02fd1a" integrity sha512-xiqMQR4xAeHTuB9uWm+fFRcIOgKBMiOBP+eXiyT7jsgVCq1bkVygt00oASowB7EdtpOHaaPgKt812P9ab+DDKA== +fsevents@~2.3.2: + version "2.3.3" + resolved "https://registry.yarnpkg.com/fsevents/-/fsevents-2.3.3.tgz#cac6407785d03675a2a5e1a5305c697b347d90d6" + integrity sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw== + fstream@^1.0.12: version "1.0.12" resolved "https://registry.yarnpkg.com/fstream/-/fstream-1.0.12.tgz#4e8ba8ee2d48be4f7d0de505455548eae5932045" @@ -10599,12 +10604,12 @@ rollup-pluginutils@^2.0.1, rollup-pluginutils@^2.3.1, rollup-pluginutils@^2.8.1, dependencies: estree-walker "^0.6.1" -rollup@^2.39.0: - version "2.39.0" - resolved "https://registry.yarnpkg.com/rollup/-/rollup-2.39.0.tgz#be4f98c9e421793a8fec82c854fb567c35e22ab6" - integrity sha512-+WR3bttcq7zE+BntH09UxaW3bQo3vItuYeLsyk4dL2tuwbeSKJuvwiawyhEnvRdRgrII0Uzk00FpctHO/zB1kw== +rollup@^3.29.5: + version "3.29.5" + resolved "https://registry.yarnpkg.com/rollup/-/rollup-3.29.5.tgz#8a2e477a758b520fb78daf04bca4c522c1da8a54" + integrity sha512-GVsDdsbJzzy4S/v3dqWPJ7EfvZJfCHiDqe80IyrF59LYuP+e6U1LJoUqeuqRbwAWoMNoXivMNeNAOf5E22VA1w== optionalDependencies: - fsevents "~2.3.1" + fsevents "~2.3.2" router@^1.3.1: version "1.3.5"