Skip to content

Commit

Permalink
fix: onboarding/demos/angular/media/package.json, onboarding/demos/an…
Browse files Browse the repository at this point in the history
…gular/media/yarn.lock & onboarding/demos/angular/media/.snyk to reduce vulnerabilities

The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/SNYK-JS-LODASH-567746
  • Loading branch information
snyk-bot committed Jun 8, 2024
1 parent c55daf4 commit b80d58d
Show file tree
Hide file tree
Showing 3 changed files with 22 additions and 3 deletions.
10 changes: 10 additions & 0 deletions onboarding/demos/angular/media/.snyk
Original file line number Diff line number Diff line change
@@ -0,0 +1,10 @@
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
version: v1.25.1
ignore: {}
# patches apply the minimum changes required to fix a vulnerability
patch:
SNYK-JS-LODASH-567746:
- angular-instantsearch > lodash:
patched: '2024-06-08T08:24:32.799Z'
id: SNYK-JS-LODASH-567746
path: angular-instantsearch > lodash
10 changes: 7 additions & 3 deletions onboarding/demos/angular/media/package.json
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,9 @@
"build": "ng build",
"test": "ng test",
"lint": "ng lint",
"e2e": "ng e2e"
"e2e": "ng e2e",
"prepare": "yarn run snyk-protect",
"snyk-protect": "snyk-protect"
},
"dependencies": {
"@angular/animations": "6.0.3",
Expand All @@ -23,7 +25,8 @@
"angular-instantsearch": "2.2.2",
"core-js": "2.6.11",
"rxjs": "6.2.0",
"zone.js": "0.8.28"
"zone.js": "0.8.28",
"@snyk/protect": "latest"
},
"devDependencies": {
"@angular-devkit/build-angular": "0.12.2",
Expand All @@ -45,5 +48,6 @@
"ts-node": "5.0.1",
"tslint": "5.12.1",
"typescript": "2.7.2"
}
},
"snyk": true
}
5 changes: 5 additions & 0 deletions onboarding/demos/angular/media/yarn.lock
Original file line number Diff line number Diff line change
Expand Up @@ -309,6 +309,11 @@
semver "5.6.0"
semver-intersect "1.4.0"

"@snyk/protect@^1.1291.1":
version "1.1291.1"
resolved "https://registry.yarnpkg.com/@snyk/protect/-/protect-1.1291.1.tgz#45ed75d6d3f0ed14a08566271aed9e5a0a228646"
integrity sha512-Xb9Q4KkZTGOm5BGDBQDnPOU8YmIDUmj9Ub6O1qsCfkGm8Jk+VU6pTl5nhDYS/zmA8n5xJYEYRKUVI9mUZG8Hbg==

"@types/jasmine@*":
version "2.8.8"
resolved "https://registry.yarnpkg.com/@types/jasmine/-/jasmine-2.8.8.tgz#bf53a7d193ea8b03867a38bfdb4fbb0e0bf066c9"
Expand Down

0 comments on commit b80d58d

Please sign in to comment.