From 8ba50c9973b0465d463db12bb0990b9ed5265eeb Mon Sep 17 00:00:00 2001 From: Muhammad Anas <88967643+Anas12091101@users.noreply.github.com> Date: Thu, 19 Sep 2024 18:03:56 +0500 Subject: [PATCH] fix: pin minimist to solve dependabot security issues (#1598) * fix: yarn file * fix: version --- package.json | 3 ++- yarn.lock | 7 +------ 2 files changed, 3 insertions(+), 7 deletions(-) diff --git a/package.json b/package.json index 3023729fd..046c47993 100644 --- a/package.json +++ b/package.json @@ -60,7 +60,7 @@ "keycode": "^2.2.0", "lodash": "^4.17.21", "mini-css-extract-plugin": "^1.1.2", - "minimist": "^1.2.6", + "minimist": "1.2.8", "mocha": "^8.0.0", "moment": "^2.29.4", "mutationobserver-shim": "^0.3.5", @@ -125,6 +125,7 @@ "yup": "^0.32.0" }, "resolutions": { + "minimist": "1.2.8", "merge": "^2.1.1", "webpack/watchpack/watchpack-chokidar2/**/chokidar": "^3.4.3" }, diff --git a/yarn.lock b/yarn.lock index 78d39a0d0..d3868830c 100644 --- a/yarn.lock +++ b/yarn.lock @@ -7793,12 +7793,7 @@ minimist-options@4.1.0: is-plain-obj "^1.1.0" kind-of "^6.0.3" -minimist@1.1.x: - version "1.1.3" - resolved "https://registry.yarnpkg.com/minimist/-/minimist-1.1.3.tgz#3bedfd91a92d39016fcfaa1c681e8faa1a1efda8" - integrity sha512-2RbeLaM/Hbo9vJ1+iRrxzfDnX9108qb2m923U+s+Ot2eMey0IYGdSjzHmvtg2XsxoCuMnzOMw7qc573RvnLgwg== - -minimist@^1.2.0, minimist@^1.2.6: +minimist@1.1.x, minimist@1.2.8, minimist@^1.2.0, minimist@^1.2.6: version "1.2.8" resolved "https://registry.yarnpkg.com/minimist/-/minimist-1.2.8.tgz#c1a464e7693302e082a075cee0c057741ac4772c" integrity sha512-2yyAR8qBkN3YuheJanUpWC5U3bb5osDywNB8RzDVlDwDHbocAJveqqj1u8+SVD7jkWT4yvsHCpWqqWqAxb0zCA==