Skip to content

Commit

Permalink
Upgrade jasmine-browser-runner dependencies
Browse files Browse the repository at this point in the history
to fix a security vulnerability.

We had a medium security vulnerability because jasmine-browser-runner
depends on express 4.20.0 wihich depends on serve-static 0.16.0 which
depends on send 0.18.0, which is currently vulnerable due to
GHSA-m6fv-jmcg-4jfg.

The changes to `yarn.lock` were generated by running `yarn upgrade
jasmine-browser-runner` to ensure it's using the patched version
(0.19.0) of the `send` dependency.
  • Loading branch information
Gweaton committed Sep 12, 2024
1 parent 0aa7fd7 commit dbf7b52
Show file tree
Hide file tree
Showing 2 changed files with 129 additions and 157 deletions.
1 change: 0 additions & 1 deletion package.json
Original file line number Diff line number Diff line change
Expand Up @@ -41,7 +41,6 @@
"stylelint-config-gds": "^1.1.1"
},
"resolutions": {
"express": "^4.20.0",
"selenium-webdriver": "4.17.0",
"stylelint/strip-ansi": "6.0.1",
"stylelint/string-width": "4.2.3"
Expand Down
Loading

0 comments on commit dbf7b52

Please sign in to comment.