From a869ec48b9481c10302378e6c2d94fe36e4c81c2 Mon Sep 17 00:00:00 2001 From: Darcy Clarke Date: Thu, 28 Apr 2022 12:29:36 -0400 Subject: [PATCH] chore: update deps based on critical audit fixes --- .../cliui/node_modules/ansi-regex/index.js | 2 +- .../node_modules/ansi-regex/package.json | 24 ++++++------- node_modules/minimist/index.js | 8 +++-- node_modules/minimist/package.json | 24 ++++++------- node_modules/minimist/readme.markdown | 5 ++- node_modules/minimist/test/proto.js | 16 +++++++++ .../mkdirp/node_modules/minimist/index.js | 8 +++-- .../mkdirp/node_modules/minimist/package.json | 22 ++++++------ .../node_modules/minimist/readme.markdown | 5 ++- .../node_modules/minimist/test/proto.js | 16 +++++++++ .../node_modules/ansi-regex/index.js | 2 +- .../node_modules/ansi-regex/package.json | 24 ++++++------- .../node_modules/ansi-regex/package.json | 14 ++++---- package-lock.json | 36 +++++++++---------- 14 files changed, 126 insertions(+), 80 deletions(-) diff --git a/node_modules/cliui/node_modules/ansi-regex/index.js b/node_modules/cliui/node_modules/ansi-regex/index.js index c25448009f304..9e37ec3def168 100644 --- a/node_modules/cliui/node_modules/ansi-regex/index.js +++ b/node_modules/cliui/node_modules/ansi-regex/index.js @@ -6,7 +6,7 @@ module.exports = options => { }, options); const pattern = [ - '[\\u001B\\u009B][[\\]()#;?]*(?:(?:(?:[a-zA-Z\\d]*(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]*)*)?\\u0007)', + '[\\u001B\\u009B][[\\]()#;?]*(?:(?:(?:(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]+)*|[a-zA-Z\\d]+(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]*)*)?\\u0007)', '(?:(?:\\d{1,4}(?:;\\d{0,4})*)?[\\dA-PR-TZcf-ntqry=><~]))' ].join('|'); diff --git a/node_modules/cliui/node_modules/ansi-regex/package.json b/node_modules/cliui/node_modules/ansi-regex/package.json index 9397a8c3f4e4e..a78ecb77424f3 100644 --- a/node_modules/cliui/node_modules/ansi-regex/package.json +++ b/node_modules/cliui/node_modules/ansi-regex/package.json @@ -1,27 +1,27 @@ { - "_from": "ansi-regex@^4.1.0", - "_id": "ansi-regex@4.1.0", + "_from": "ansi-regex@4.1.1", + "_id": "ansi-regex@4.1.1", "_inBundle": false, - "_integrity": "sha512-1apePfXM1UOSqw0o9IiFAovVz9M5S1Dg+4TrDwfMewQ6p/rmMueb7tWZjQ1rx4Loy1ArBggoqGpfqqdI4rondg==", + "_integrity": "sha512-ILlv4k/3f6vfQ4OoP2AGvirOktlQ98ZEL1k9FaQjxa3L1abBgbuTDAdPOpvbGncC0BTVQrl+OM8xZGK6tWXt7g==", "_location": "/cliui/ansi-regex", "_phantomChildren": {}, "_requested": { - "type": "range", + "type": "version", "registry": true, - "raw": "ansi-regex@^4.1.0", + "raw": "ansi-regex@4.1.1", "name": "ansi-regex", "escapedName": "ansi-regex", - "rawSpec": "^4.1.0", + "rawSpec": "4.1.1", "saveSpec": null, - "fetchSpec": "^4.1.0" + "fetchSpec": "4.1.1" }, "_requiredBy": [ "/cliui/strip-ansi" ], - "_resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-4.1.0.tgz", - "_shasum": "8b9f8f08cf1acb843756a839ca8c7e3168c51997", - "_spec": "ansi-regex@^4.1.0", - "_where": "/Users/claudiahdz/npm/cli/node_modules/cliui/node_modules/strip-ansi", + "_resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-4.1.1.tgz", + "_shasum": "164daac87ab2d6f6db3a29875e2d1766582dabed", + "_spec": "ansi-regex@4.1.1", + "_where": "/Users/darcyclarke/Documents/Repos/npm/npm/cli/node_modules/cliui/node_modules/strip-ansi", "author": { "name": "Sindre Sorhus", "email": "sindresorhus@gmail.com", @@ -81,5 +81,5 @@ "test": "xo && ava", "view-supported": "node fixtures/view-codes.js" }, - "version": "4.1.0" + "version": "4.1.1" } diff --git a/node_modules/minimist/index.js b/node_modules/minimist/index.js index d2afe5e4d4056..d9c3eb79f237a 100644 --- a/node_modules/minimist/index.js +++ b/node_modules/minimist/index.js @@ -70,7 +70,7 @@ module.exports = function (args, opts) { var o = obj; for (var i = 0; i < keys.length-1; i++) { var key = keys[i]; - if (key === '__proto__') return; + if (isConstructorOrProto(o, key)) return; if (o[key] === undefined) o[key] = {}; if (o[key] === Object.prototype || o[key] === Number.prototype || o[key] === String.prototype) o[key] = {}; @@ -79,7 +79,7 @@ module.exports = function (args, opts) { } var key = keys[keys.length - 1]; - if (key === '__proto__') return; + if (isConstructorOrProto(o, key)) return; if (o === Object.prototype || o === Number.prototype || o === String.prototype) o = {}; if (o === Array.prototype) o = []; @@ -243,3 +243,7 @@ function isNumber (x) { return /^[-+]?(?:\d+(?:\.\d*)?|\.\d+)(e[-+]?\d+)?$/.test(x); } + +function isConstructorOrProto (obj, key) { + return key === 'constructor' && typeof obj[key] === 'function' || key === '__proto__'; +} diff --git a/node_modules/minimist/package.json b/node_modules/minimist/package.json index 502b798942f81..c49cc01bd882e 100644 --- a/node_modules/minimist/package.json +++ b/node_modules/minimist/package.json @@ -1,27 +1,27 @@ { - "_from": "minimist@^1.2.0", - "_id": "minimist@1.2.5", + "_from": "minimist@1.2.6", + "_id": "minimist@1.2.6", "_inBundle": false, - "_integrity": "sha512-FM9nNUYrRBAELZQT3xeZQ7fmMOBg6nWNmJKTcgsJeaLstP/UODVpGsr5OhXhhXg6f+qtJ8uiZ+PUxkDWcgIXLw==", + "_integrity": "sha512-Jsjnk4bw3YJqYzbdyBiNsPWHPfO++UGG749Cxs6peCu5Xg4nrena6OVxOYxrQTqww0Jmwt+Ref8rggumkTLz9Q==", "_location": "/minimist", "_phantomChildren": {}, "_requested": { - "type": "range", + "type": "version", "registry": true, - "raw": "minimist@^1.2.0", + "raw": "minimist@1.2.6", "name": "minimist", "escapedName": "minimist", - "rawSpec": "^1.2.0", + "rawSpec": "1.2.6", "saveSpec": null, - "fetchSpec": "^1.2.0" + "fetchSpec": "1.2.6" }, "_requiredBy": [ "/rc" ], - "_resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.5.tgz", - "_shasum": "67d66014b66a6a8aaa0c083c5fd58df4e4e97602", - "_spec": "minimist@^1.2.0", - "_where": "/Users/ruyadorno/Documents/workspace/cli/latest/node_modules/rc", + "_resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.6.tgz", + "_shasum": "8637a5b759ea0d6e98702cfb3a9283323c93af44", + "_spec": "minimist@1.2.6", + "_where": "/Users/darcyclarke/Documents/Repos/npm/npm/cli/node_modules/rc", "author": { "name": "James Halliday", "email": "mail@substack.net", @@ -69,5 +69,5 @@ "opera/12" ] }, - "version": "1.2.5" + "version": "1.2.6" } diff --git a/node_modules/minimist/readme.markdown b/node_modules/minimist/readme.markdown index 5fd97ab11ee9d..859d1ab4522df 100644 --- a/node_modules/minimist/readme.markdown +++ b/node_modules/minimist/readme.markdown @@ -34,7 +34,10 @@ $ node example/parse.js -x 3 -y 4 -n5 -abc --beep=boop foo bar baz Previous versions had a prototype pollution bug that could cause privilege escalation in some circumstances when handling untrusted user input. -Please use version 1.2.3 or later: https://snyk.io/vuln/SNYK-JS-MINIMIST-559764 +Please use version 1.2.6 or later: + +* https://security.snyk.io/vuln/SNYK-JS-MINIMIST-2429795 (version <=1.2.5) +* https://snyk.io/vuln/SNYK-JS-MINIMIST-559764 (version <=1.2.3) # methods diff --git a/node_modules/minimist/test/proto.js b/node_modules/minimist/test/proto.js index 8649107ecba1f..4ac62df264504 100644 --- a/node_modules/minimist/test/proto.js +++ b/node_modules/minimist/test/proto.js @@ -42,3 +42,19 @@ test('proto pollution (constructor)', function (t) { t.equal(argv.y, undefined); t.end(); }); + +test('proto pollution (constructor function)', function (t) { + var argv = parse(['--_.concat.constructor.prototype.y', '123']); + function fnToBeTested() {} + t.equal(fnToBeTested.y, undefined); + t.equal(argv.y, undefined); + t.end(); +}); + +// powered by snyk - https://github.com/backstage/backstage/issues/10343 +test('proto pollution (constructor function) snyk', function (t) { + var argv = parse('--_.constructor.constructor.prototype.foo bar'.split(' ')); + t.equal((function(){}).foo, undefined); + t.equal(argv.y, undefined); + t.end(); +}) diff --git a/node_modules/mkdirp/node_modules/minimist/index.js b/node_modules/mkdirp/node_modules/minimist/index.js index d2afe5e4d4056..d9c3eb79f237a 100644 --- a/node_modules/mkdirp/node_modules/minimist/index.js +++ b/node_modules/mkdirp/node_modules/minimist/index.js @@ -70,7 +70,7 @@ module.exports = function (args, opts) { var o = obj; for (var i = 0; i < keys.length-1; i++) { var key = keys[i]; - if (key === '__proto__') return; + if (isConstructorOrProto(o, key)) return; if (o[key] === undefined) o[key] = {}; if (o[key] === Object.prototype || o[key] === Number.prototype || o[key] === String.prototype) o[key] = {}; @@ -79,7 +79,7 @@ module.exports = function (args, opts) { } var key = keys[keys.length - 1]; - if (key === '__proto__') return; + if (isConstructorOrProto(o, key)) return; if (o === Object.prototype || o === Number.prototype || o === String.prototype) o = {}; if (o === Array.prototype) o = []; @@ -243,3 +243,7 @@ function isNumber (x) { return /^[-+]?(?:\d+(?:\.\d*)?|\.\d+)(e[-+]?\d+)?$/.test(x); } + +function isConstructorOrProto (obj, key) { + return key === 'constructor' && typeof obj[key] === 'function' || key === '__proto__'; +} diff --git a/node_modules/mkdirp/node_modules/minimist/package.json b/node_modules/mkdirp/node_modules/minimist/package.json index 2846f6885ae63..fcd4f461848f0 100644 --- a/node_modules/mkdirp/node_modules/minimist/package.json +++ b/node_modules/mkdirp/node_modules/minimist/package.json @@ -1,26 +1,26 @@ { - "_from": "minimist@^1.2.5", - "_id": "minimist@1.2.5", + "_from": "minimist@1.2.6", + "_id": "minimist@1.2.6", "_inBundle": false, - "_integrity": "sha512-FM9nNUYrRBAELZQT3xeZQ7fmMOBg6nWNmJKTcgsJeaLstP/UODVpGsr5OhXhhXg6f+qtJ8uiZ+PUxkDWcgIXLw==", + "_integrity": "sha512-Jsjnk4bw3YJqYzbdyBiNsPWHPfO++UGG749Cxs6peCu5Xg4nrena6OVxOYxrQTqww0Jmwt+Ref8rggumkTLz9Q==", "_location": "/mkdirp/minimist", "_phantomChildren": {}, "_requested": { - "type": "range", + "type": "version", "registry": true, - "raw": "minimist@^1.2.5", + "raw": "minimist@1.2.6", "name": "minimist", "escapedName": "minimist", - "rawSpec": "^1.2.5", + "rawSpec": "1.2.6", "saveSpec": null, - "fetchSpec": "^1.2.5" + "fetchSpec": "1.2.6" }, "_requiredBy": [ "/mkdirp" ], - "_resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.5.tgz", - "_shasum": "67d66014b66a6a8aaa0c083c5fd58df4e4e97602", - "_spec": "minimist@^1.2.5", + "_resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.6.tgz", + "_shasum": "8637a5b759ea0d6e98702cfb3a9283323c93af44", + "_spec": "minimist@1.2.6", "_where": "/Users/darcyclarke/Documents/Repos/npm/npm/cli/node_modules/mkdirp", "author": { "name": "James Halliday", @@ -69,5 +69,5 @@ "opera/12" ] }, - "version": "1.2.5" + "version": "1.2.6" } diff --git a/node_modules/mkdirp/node_modules/minimist/readme.markdown b/node_modules/mkdirp/node_modules/minimist/readme.markdown index 5fd97ab11ee9d..859d1ab4522df 100644 --- a/node_modules/mkdirp/node_modules/minimist/readme.markdown +++ b/node_modules/mkdirp/node_modules/minimist/readme.markdown @@ -34,7 +34,10 @@ $ node example/parse.js -x 3 -y 4 -n5 -abc --beep=boop foo bar baz Previous versions had a prototype pollution bug that could cause privilege escalation in some circumstances when handling untrusted user input. -Please use version 1.2.3 or later: https://snyk.io/vuln/SNYK-JS-MINIMIST-559764 +Please use version 1.2.6 or later: + +* https://security.snyk.io/vuln/SNYK-JS-MINIMIST-2429795 (version <=1.2.5) +* https://snyk.io/vuln/SNYK-JS-MINIMIST-559764 (version <=1.2.3) # methods diff --git a/node_modules/mkdirp/node_modules/minimist/test/proto.js b/node_modules/mkdirp/node_modules/minimist/test/proto.js index 8649107ecba1f..4ac62df264504 100644 --- a/node_modules/mkdirp/node_modules/minimist/test/proto.js +++ b/node_modules/mkdirp/node_modules/minimist/test/proto.js @@ -42,3 +42,19 @@ test('proto pollution (constructor)', function (t) { t.equal(argv.y, undefined); t.end(); }); + +test('proto pollution (constructor function)', function (t) { + var argv = parse(['--_.concat.constructor.prototype.y', '123']); + function fnToBeTested() {} + t.equal(fnToBeTested.y, undefined); + t.equal(argv.y, undefined); + t.end(); +}); + +// powered by snyk - https://github.com/backstage/backstage/issues/10343 +test('proto pollution (constructor function) snyk', function (t) { + var argv = parse('--_.constructor.constructor.prototype.foo bar'.split(' ')); + t.equal((function(){}).foo, undefined); + t.equal(argv.y, undefined); + t.end(); +}) diff --git a/node_modules/wrap-ansi/node_modules/ansi-regex/index.js b/node_modules/wrap-ansi/node_modules/ansi-regex/index.js index c25448009f304..9e37ec3def168 100644 --- a/node_modules/wrap-ansi/node_modules/ansi-regex/index.js +++ b/node_modules/wrap-ansi/node_modules/ansi-regex/index.js @@ -6,7 +6,7 @@ module.exports = options => { }, options); const pattern = [ - '[\\u001B\\u009B][[\\]()#;?]*(?:(?:(?:[a-zA-Z\\d]*(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]*)*)?\\u0007)', + '[\\u001B\\u009B][[\\]()#;?]*(?:(?:(?:(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]+)*|[a-zA-Z\\d]+(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]*)*)?\\u0007)', '(?:(?:\\d{1,4}(?:;\\d{0,4})*)?[\\dA-PR-TZcf-ntqry=><~]))' ].join('|'); diff --git a/node_modules/wrap-ansi/node_modules/ansi-regex/package.json b/node_modules/wrap-ansi/node_modules/ansi-regex/package.json index d12a58a622317..9c541aa239cd1 100644 --- a/node_modules/wrap-ansi/node_modules/ansi-regex/package.json +++ b/node_modules/wrap-ansi/node_modules/ansi-regex/package.json @@ -1,27 +1,27 @@ { - "_from": "ansi-regex@^4.1.0", - "_id": "ansi-regex@4.1.0", + "_from": "ansi-regex@4.1.1", + "_id": "ansi-regex@4.1.1", "_inBundle": false, - "_integrity": "sha512-1apePfXM1UOSqw0o9IiFAovVz9M5S1Dg+4TrDwfMewQ6p/rmMueb7tWZjQ1rx4Loy1ArBggoqGpfqqdI4rondg==", + "_integrity": "sha512-ILlv4k/3f6vfQ4OoP2AGvirOktlQ98ZEL1k9FaQjxa3L1abBgbuTDAdPOpvbGncC0BTVQrl+OM8xZGK6tWXt7g==", "_location": "/wrap-ansi/ansi-regex", "_phantomChildren": {}, "_requested": { - "type": "range", + "type": "version", "registry": true, - "raw": "ansi-regex@^4.1.0", + "raw": "ansi-regex@4.1.1", "name": "ansi-regex", "escapedName": "ansi-regex", - "rawSpec": "^4.1.0", + "rawSpec": "4.1.1", "saveSpec": null, - "fetchSpec": "^4.1.0" + "fetchSpec": "4.1.1" }, "_requiredBy": [ "/wrap-ansi/strip-ansi" ], - "_resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-4.1.0.tgz", - "_shasum": "8b9f8f08cf1acb843756a839ca8c7e3168c51997", - "_spec": "ansi-regex@^4.1.0", - "_where": "/Users/claudiahdz/npm/cli/node_modules/wrap-ansi/node_modules/strip-ansi", + "_resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-4.1.1.tgz", + "_shasum": "164daac87ab2d6f6db3a29875e2d1766582dabed", + "_spec": "ansi-regex@4.1.1", + "_where": "/Users/darcyclarke/Documents/Repos/npm/npm/cli/node_modules/wrap-ansi/node_modules/strip-ansi", "author": { "name": "Sindre Sorhus", "email": "sindresorhus@gmail.com", @@ -81,5 +81,5 @@ "test": "xo && ava", "view-supported": "node fixtures/view-codes.js" }, - "version": "4.1.0" + "version": "4.1.1" } diff --git a/node_modules/yargs/node_modules/ansi-regex/package.json b/node_modules/yargs/node_modules/ansi-regex/package.json index 32d176534fee2..3a6bc7c66e1b1 100644 --- a/node_modules/yargs/node_modules/ansi-regex/package.json +++ b/node_modules/yargs/node_modules/ansi-regex/package.json @@ -1,27 +1,27 @@ { - "_from": "ansi-regex@^4.1.0", + "_from": "ansi-regex@4.1.0", "_id": "ansi-regex@4.1.0", "_inBundle": false, "_integrity": "sha512-1apePfXM1UOSqw0o9IiFAovVz9M5S1Dg+4TrDwfMewQ6p/rmMueb7tWZjQ1rx4Loy1ArBggoqGpfqqdI4rondg==", "_location": "/yargs/ansi-regex", "_phantomChildren": {}, "_requested": { - "type": "range", + "type": "version", "registry": true, - "raw": "ansi-regex@^4.1.0", + "raw": "ansi-regex@4.1.0", "name": "ansi-regex", "escapedName": "ansi-regex", - "rawSpec": "^4.1.0", + "rawSpec": "4.1.0", "saveSpec": null, - "fetchSpec": "^4.1.0" + "fetchSpec": "4.1.0" }, "_requiredBy": [ "/yargs/strip-ansi" ], "_resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-4.1.0.tgz", "_shasum": "8b9f8f08cf1acb843756a839ca8c7e3168c51997", - "_spec": "ansi-regex@^4.1.0", - "_where": "/Users/claudiahdz/npm/cli/node_modules/yargs/node_modules/strip-ansi", + "_spec": "ansi-regex@4.1.0", + "_where": "/Users/ruyadorno/Documents/workspace/cli/legacy", "author": { "name": "Sindre Sorhus", "email": "sindresorhus@gmail.com", diff --git a/package-lock.json b/package-lock.json index 448f166be17b2..29d936784806f 100644 --- a/package-lock.json +++ b/package-lock.json @@ -697,9 +697,9 @@ }, "dependencies": { "ansi-regex": { - "version": "4.1.0", - "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-4.1.0.tgz", - "integrity": "sha512-1apePfXM1UOSqw0o9IiFAovVz9M5S1Dg+4TrDwfMewQ6p/rmMueb7tWZjQ1rx4Loy1ArBggoqGpfqqdI4rondg==" + "version": "4.1.1", + "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-4.1.1.tgz", + "integrity": "sha512-ILlv4k/3f6vfQ4OoP2AGvirOktlQ98ZEL1k9FaQjxa3L1abBgbuTDAdPOpvbGncC0BTVQrl+OM8xZGK6tWXt7g==" }, "is-fullwidth-code-point": { "version": "2.0.0", @@ -935,9 +935,9 @@ }, "dependencies": { "minimist": { - "version": "1.2.5", - "resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.5.tgz", - "integrity": "sha512-FM9nNUYrRBAELZQT3xeZQ7fmMOBg6nWNmJKTcgsJeaLstP/UODVpGsr5OhXhhXg6f+qtJ8uiZ+PUxkDWcgIXLw==", + "version": "1.2.6", + "resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.6.tgz", + "integrity": "sha512-Jsjnk4bw3YJqYzbdyBiNsPWHPfO++UGG749Cxs6peCu5Xg4nrena6OVxOYxrQTqww0Jmwt+Ref8rggumkTLz9Q==", "dev": true } } @@ -3347,9 +3347,9 @@ } }, "minimist": { - "version": "1.2.5", - "resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.5.tgz", - "integrity": "sha512-FM9nNUYrRBAELZQT3xeZQ7fmMOBg6nWNmJKTcgsJeaLstP/UODVpGsr5OhXhhXg6f+qtJ8uiZ+PUxkDWcgIXLw==" + "version": "1.2.6", + "resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.6.tgz", + "integrity": "sha512-Jsjnk4bw3YJqYzbdyBiNsPWHPfO++UGG749Cxs6peCu5Xg4nrena6OVxOYxrQTqww0Jmwt+Ref8rggumkTLz9Q==" }, "minipass": { "version": "2.3.3", @@ -3414,9 +3414,9 @@ }, "dependencies": { "minimist": { - "version": "1.2.5", - "resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.5.tgz", - "integrity": "sha512-FM9nNUYrRBAELZQT3xeZQ7fmMOBg6nWNmJKTcgsJeaLstP/UODVpGsr5OhXhhXg6f+qtJ8uiZ+PUxkDWcgIXLw==" + "version": "1.2.6", + "resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.6.tgz", + "integrity": "sha512-Jsjnk4bw3YJqYzbdyBiNsPWHPfO++UGG749Cxs6peCu5Xg4nrena6OVxOYxrQTqww0Jmwt+Ref8rggumkTLz9Q==" } } }, @@ -5134,9 +5134,9 @@ }, "dependencies": { "minimist": { - "version": "1.2.5", - "resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.5.tgz", - "integrity": "sha512-FM9nNUYrRBAELZQT3xeZQ7fmMOBg6nWNmJKTcgsJeaLstP/UODVpGsr5OhXhhXg6f+qtJ8uiZ+PUxkDWcgIXLw==", + "version": "1.2.6", + "resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.6.tgz", + "integrity": "sha512-Jsjnk4bw3YJqYzbdyBiNsPWHPfO++UGG749Cxs6peCu5Xg4nrena6OVxOYxrQTqww0Jmwt+Ref8rggumkTLz9Q==", "dev": true } } @@ -6102,9 +6102,9 @@ }, "dependencies": { "ansi-regex": { - "version": "4.1.0", - "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-4.1.0.tgz", - "integrity": "sha512-1apePfXM1UOSqw0o9IiFAovVz9M5S1Dg+4TrDwfMewQ6p/rmMueb7tWZjQ1rx4Loy1ArBggoqGpfqqdI4rondg==" + "version": "4.1.1", + "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-4.1.1.tgz", + "integrity": "sha512-ILlv4k/3f6vfQ4OoP2AGvirOktlQ98ZEL1k9FaQjxa3L1abBgbuTDAdPOpvbGncC0BTVQrl+OM8xZGK6tWXt7g==" }, "is-fullwidth-code-point": { "version": "2.0.0",