From 27839540f621395bee87ee403c3315676b0ed7f6 Mon Sep 17 00:00:00 2001 From: jonim8or Date: Tue, 28 Sep 2021 11:06:41 +0200 Subject: [PATCH 1/2] Switched to chokidar 3.5.2 to fix advisory 1751 Moderate Regular expression denial of service Package glob-parent Patched in >=5.1.2 Dependency of @cypress/browserify-preprocessor Path @cypress/browserify-preprocessor > watchify > chokidar > glob-parent More info https://npmjs.com/advisories/1751 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 0fba55f..ae2c190 100644 --- a/package.json +++ b/package.json @@ -10,7 +10,7 @@ "dependencies": { "anymatch": "^3.1.0", "browserify": "^17.0.0", - "chokidar": "^3.4.0", + "chokidar": "^3.5.2", "defined": "^1.0.0", "outpipe": "^1.1.0", "through2": "^4.0.2", From fe3f7f8b7ccf791a6847761bdb0fe9b7a3d0d058 Mon Sep 17 00:00:00 2001 From: "jonatan.bijl" Date: Tue, 28 Sep 2021 11:59:06 +0200 Subject: [PATCH 2/2] Replaced deprecated win-spawn with cross-spawn --- package.json | 2 +- test/bin.js | 2 +- test/bin_brfs.js | 2 +- test/bin_ignore_watch.js | 2 +- test/bin_ignore_watch_default.js | 2 +- test/bin_ignore_watch_multiple.js | 2 +- test/bin_pipe.js | 2 +- test/bin_plugins_pipelining_multiple_errors.js | 2 +- test/bin_standalone.js | 2 +- test/many.js | 8 ++++---- test/many_immediate.js | 8 ++++---- 11 files changed, 17 insertions(+), 17 deletions(-) diff --git a/package.json b/package.json index ae2c190..46ac757 100644 --- a/package.json +++ b/package.json @@ -22,7 +22,7 @@ "split": "^1.0.0", "tape": "^5.1.1", "uglify-js": "^2.5.0", - "win-spawn": "^2.0.0" + "cross-spawn": "^7.0.3" }, "scripts": { "test": "tape test/*.js" diff --git a/test/bin.js b/test/bin.js index c72a02f..a4f446a 100644 --- a/test/bin.js +++ b/test/bin.js @@ -2,7 +2,7 @@ var test = require('tape'); var fs = require('fs'); var path = require('path'); var mkdirp = require('mkdirp'); -var spawn = require('win-spawn'); +var spawn = require('cross-spawn'); var split = require('split'); var cmd = path.resolve(__dirname, '../bin/cmd.js'); diff --git a/test/bin_brfs.js b/test/bin_brfs.js index 1144377..f3c4104 100644 --- a/test/bin_brfs.js +++ b/test/bin_brfs.js @@ -2,7 +2,7 @@ var test = require('tape'); var fs = require('fs'); var path = require('path'); var mkdirp = require('mkdirp'); -var spawn = require('win-spawn'); +var spawn = require('cross-spawn'); var split = require('split'); var cmd = path.resolve(__dirname, '../bin/cmd.js'); diff --git a/test/bin_ignore_watch.js b/test/bin_ignore_watch.js index 358090f..595c655 100644 --- a/test/bin_ignore_watch.js +++ b/test/bin_ignore_watch.js @@ -2,7 +2,7 @@ var test = require('tape'); var fs = require('fs'); var path = require('path'); var mkdirp = require('mkdirp'); -var spawn = require('win-spawn'); +var spawn = require('cross-spawn'); var split = require('split'); var cmd = path.resolve(__dirname, '../bin/cmd.js'); diff --git a/test/bin_ignore_watch_default.js b/test/bin_ignore_watch_default.js index f701348..e0865ce 100644 --- a/test/bin_ignore_watch_default.js +++ b/test/bin_ignore_watch_default.js @@ -2,7 +2,7 @@ var test = require('tape'); var fs = require('fs'); var path = require('path'); var mkdirp = require('mkdirp'); -var spawn = require('win-spawn'); +var spawn = require('cross-spawn'); var split = require('split'); var cmd = path.resolve(__dirname, '../bin/cmd.js'); diff --git a/test/bin_ignore_watch_multiple.js b/test/bin_ignore_watch_multiple.js index 37ff91f..084f32f 100644 --- a/test/bin_ignore_watch_multiple.js +++ b/test/bin_ignore_watch_multiple.js @@ -2,7 +2,7 @@ var test = require('tape'); var fs = require('fs'); var path = require('path'); var mkdirp = require('mkdirp'); -var spawn = require('win-spawn'); +var spawn = require('cross-spawn'); var split = require('split'); var cmd = path.resolve(__dirname, '../bin/cmd.js'); diff --git a/test/bin_pipe.js b/test/bin_pipe.js index 02f14d0..c3c78db 100644 --- a/test/bin_pipe.js +++ b/test/bin_pipe.js @@ -2,7 +2,7 @@ var test = require('tape'); var fs = require('fs'); var path = require('path'); var mkdirp = require('mkdirp'); -var spawn = require('win-spawn'); +var spawn = require('cross-spawn'); var split = require('split'); var cmd = path.resolve(__dirname, '../bin/cmd.js'); diff --git a/test/bin_plugins_pipelining_multiple_errors.js b/test/bin_plugins_pipelining_multiple_errors.js index cdc7017..b3e11a2 100644 --- a/test/bin_plugins_pipelining_multiple_errors.js +++ b/test/bin_plugins_pipelining_multiple_errors.js @@ -2,7 +2,7 @@ var test = require('tape'); var fs = require('fs'); var path = require('path'); var mkdirp = require('mkdirp'); -var spawn = require('win-spawn'); +var spawn = require('cross-spawn'); var split = require('split'); var cmd = path.resolve(__dirname, '../bin/cmd.js'); diff --git a/test/bin_standalone.js b/test/bin_standalone.js index f3f3dcf..59224f0 100644 --- a/test/bin_standalone.js +++ b/test/bin_standalone.js @@ -2,7 +2,7 @@ var test = require('tape'); var fs = require('fs'); var path = require('path'); var mkdirp = require('mkdirp'); -var spawn = require('win-spawn'); +var spawn = require('cross-spawn'); var split = require('split'); var cmd = path.resolve(__dirname, '../bin/cmd.js'); diff --git a/test/many.js b/test/many.js index bc6b22c..3de819b 100644 --- a/test/many.js +++ b/test/many.js @@ -2,7 +2,7 @@ var test = require('tape'); var fs = require('fs'); var path = require('path'); var mkdirp = require('mkdirp'); -var spawn = require('win-spawn'); +var spawn = require('cross-spawn'); var split = require('split'); var cmd = path.resolve(__dirname, '../bin/cmd.js'); @@ -66,11 +66,11 @@ test('many edits', function (t) { var lineNum = 0; ps.stderr.pipe(split()).on('data', function (line) { if (line.length === 0) return; - + run(files.bundle, function (err, output) { t.ifError(err); t.equal(output, expected.shift()); - + (function next () { if (edits.length === 0) return; var edit = edits.shift(); @@ -83,7 +83,7 @@ test('many edits', function (t) { })(); }) }); - + t.on('end', function () { ps.kill(); }); diff --git a/test/many_immediate.js b/test/many_immediate.js index 290b95e..aac1b91 100644 --- a/test/many_immediate.js +++ b/test/many_immediate.js @@ -2,7 +2,7 @@ var test = require('tape'); var fs = require('fs'); var path = require('path'); var mkdirp = require('mkdirp'); -var spawn = require('win-spawn'); +var spawn = require('cross-spawn'); var split = require('split'); var cmd = path.resolve(__dirname, '../bin/cmd.js'); @@ -66,11 +66,11 @@ test('many immediate', function (t) { var lineNum = 0; ps.stderr.pipe(split()).on('data', function (line) { if (line.length === 0) return; - + run(files.bundle, function (err, output) { t.ifError(err); t.equal(output, expected.shift()); - + (function next () { if (edits.length === 0) return; var edit = edits.shift(); @@ -81,7 +81,7 @@ test('many immediate', function (t) { })(); }) }); - + t.on('end', function () { ps.kill(); });