From 155244db8200c4f1eaa5443070bd06991898643e Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 20 Feb 2020 05:16:20 +0000 Subject: [PATCH] fix: examples/using-gatsby-image/package.json & examples/using-gatsby-image/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-JSYAML-173999 - https://snyk.io/vuln/SNYK-JS-JSYAML-174129 - https://snyk.io/vuln/SNYK-JS-LODASH-450202 - https://snyk.io/vuln/SNYK-JS-LODASH-73638 - https://snyk.io/vuln/SNYK-JS-LODASH-73639 - https://snyk.io/vuln/SNYK-JS-SERVE-174738 - https://snyk.io/vuln/SNYK-JS-SERVEHANDLER-450208 - https://snyk.io/vuln/SNYK-JS-SERVEHANDLER-72615 - https://snyk.io/vuln/SNYK-JS-WEBPACKDEVSERVER-72405 - https://snyk.io/vuln/npm:braces:20180219 - https://snyk.io/vuln/npm:lodash:20180130 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:lodash:20180130 --- examples/using-gatsby-image/.snyk | 8 ++++++++ examples/using-gatsby-image/package.json | 12 ++++++++---- 2 files changed, 16 insertions(+), 4 deletions(-) create mode 100644 examples/using-gatsby-image/.snyk diff --git a/examples/using-gatsby-image/.snyk b/examples/using-gatsby-image/.snyk new file mode 100644 index 0000000000000..4c98d1a9234c5 --- /dev/null +++ b/examples/using-gatsby-image/.snyk @@ -0,0 +1,8 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.14.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:lodash:20180130': + - gatsby > webpack-configurator > lodash: + patched: '2020-02-20T05:16:17.638Z' diff --git a/examples/using-gatsby-image/package.json b/examples/using-gatsby-image/package.json index 4abd96afe7355..747fd3099165b 100644 --- a/examples/using-gatsby-image/package.json +++ b/examples/using-gatsby-image/package.json @@ -4,7 +4,7 @@ "description": "Gatsby example site using using-gatsby-image", "author": "Kyle Mathews ", "dependencies": { - "gatsby": "^1.9.77", + "gatsby": "^2.0.0", "gatsby-image": "^1.0.14", "gatsby-link": "^1.6.23", "gatsby-plugin-glamor": "^1.6.7", @@ -17,12 +17,16 @@ "typeface-oswald": "^0.0.40", "typeface-pt-sans": "^0.0.40", "typography": "^0.16.6", - "typography-theme-elk-glen": "^0.16.9" + "typography-theme-elk-glen": "^0.16.9", + "snyk": "^1.294.0" }, "license": "MIT", "main": "n/a", "scripts": { "develop": "gatsby develop", - "build": "gatsby build" - } + "build": "gatsby build", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" + }, + "snyk": true }