diff --git a/.snyk b/.snyk index fecea87b10..f43caf6102 100644 --- a/.snyk +++ b/.snyk @@ -1,5 +1,7 @@ -version: v1.5.2 +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.13.3 ignore: {} +# patches apply the minimum changes required to fix a vulnerability patch: 'npm:minimatch:20160620': - snyk > recursive-readdir > minimatch: @@ -12,3 +14,9 @@ patch: patched: '2016-07-30T14:02:31.280Z' - socket.io > socket.io-client > engine.io-client > ws: patched: '2016-07-30T14:02:31.280Z' + 'npm:debug:20170905': + - socket.io > socket.io-adapter > socket.io-parser > debug: + patched: '2019-04-01T02:17:52.434Z' + 'npm:ms:20170412': + - socket.io > socket.io-adapter > socket.io-parser > debug > ms: + patched: '2019-04-01T02:17:52.434Z' diff --git a/package.json b/package.json index 8c2b226bb4..407ea9f0b9 100644 --- a/package.json +++ b/package.json @@ -46,8 +46,8 @@ "moment": "latest", "request": "^2.74.0", "rrule": "latest", - "snyk": "^1.14.1", - "socket.io": "^1.4.6", + "snyk": "^1.144.0", + "socket.io": "^2.0.2", "valid-url": "latest", "walk": "latest" },