From 89a82bfc27e6c2d9eb56bd11fe2d55d160487879 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 2 Dec 2024 17:45:06 +0000 Subject: [PATCH] fix: package.json & package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AXIOS-6671926 --- package-lock.json | 48 ++++++++++++++++++++++++++++++----------------- package.json | 2 +- 2 files changed, 32 insertions(+), 18 deletions(-) diff --git a/package-lock.json b/package-lock.json index 959c6ce..eab34c2 100644 --- a/package-lock.json +++ b/package-lock.json @@ -16,7 +16,7 @@ "@testing-library/react": "^11.2.7", "@testing-library/user-event": "^12.8.3", "@ya.praktikum/react-developer-burger-ui-components": "^1.13.1", - "axios": "^0.27.2", + "axios": "^1.7.8", "is-email": "^1.0.2", "nanoid": "^3.2.0", "react": "^16.8.6", @@ -29,6 +29,7 @@ "redux": "^4.1.2", "redux-thunk": "^2.4.1", "redux-toolkit": "^1.1.2", + "typescript": "^4.7.2", "typescript-cookie": "^1.0.3", "web-vitals": "^1.1.2" }, @@ -5620,13 +5621,14 @@ } }, "node_modules/axios": { - "version": "0.27.2", - "resolved": "https://npm.prakticum-team.ru/axios/-/axios-0.27.2.tgz", - "integrity": "sha512-t+yRIyySRTp/wua5xEr+z1q60QmLq8ABsS5O9Me1AsE5dfKqgnCFzwiCZZ/cGNd1lq4/7akDWMxdhVlucjmnOQ==", + "version": "1.7.8", + "resolved": "https://registry.npmjs.org/axios/-/axios-1.7.8.tgz", + "integrity": "sha512-Uu0wb7KNqK2t5K+YQyVCLM76prD5sRFjKHbJYCP1J7JFGEQ6nN7HWn9+04LAeiJ3ji54lgS/gZCH1oxyrf1SPw==", "license": "MIT", "dependencies": { - "follow-redirects": "^1.14.9", - "form-data": "^4.0.0" + "follow-redirects": "^1.15.6", + "form-data": "^4.0.0", + "proxy-from-env": "^1.1.0" } }, "node_modules/axios/node_modules/form-data": { @@ -9145,9 +9147,9 @@ } }, "node_modules/follow-redirects": { - "version": "1.15.0", - "resolved": "https://npm.prakticum-team.ru/follow-redirects/-/follow-redirects-1.15.0.tgz", - "integrity": "sha512-aExlJShTV4qOUOL7yF1U5tvLCB0xQuudbf6toyYA0E/acBNw71mvjFTnLaRp50aQaYocMR0a/RMMBIHeZnGyjQ==", + "version": "1.15.9", + "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.9.tgz", + "integrity": "sha512-gew4GsXizNgdoRyqmyfMHyAmXsZDk6mHkSxZFCzW9gwlbtOW44CDtYavM+y+72qD/Vq2l550kMF52DT8fOLJqQ==", "funding": [ { "type": "individual", @@ -15011,6 +15013,12 @@ "node": ">= 0.10" } }, + "node_modules/proxy-from-env": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/proxy-from-env/-/proxy-from-env-1.1.0.tgz", + "integrity": "sha512-D+zkORCbA9f1tdWRK0RaCR3GPv50cMxcrz4X8k5LTSUD1Dkw47mKJEZQNunItRTkWwgtaUSo1RVFRIG9ZXiFYg==", + "license": "MIT" + }, "node_modules/psl": { "version": "1.8.0", "resolved": "https://npm.prakticum-team.ru/psl/-/psl-1.8.0.tgz", @@ -23138,12 +23146,13 @@ "dev": true }, "axios": { - "version": "0.27.2", - "resolved": "https://npm.prakticum-team.ru/axios/-/axios-0.27.2.tgz", - "integrity": "sha512-t+yRIyySRTp/wua5xEr+z1q60QmLq8ABsS5O9Me1AsE5dfKqgnCFzwiCZZ/cGNd1lq4/7akDWMxdhVlucjmnOQ==", + "version": "1.7.8", + "resolved": "https://registry.npmjs.org/axios/-/axios-1.7.8.tgz", + "integrity": "sha512-Uu0wb7KNqK2t5K+YQyVCLM76prD5sRFjKHbJYCP1J7JFGEQ6nN7HWn9+04LAeiJ3ji54lgS/gZCH1oxyrf1SPw==", "requires": { - "follow-redirects": "^1.14.9", - "form-data": "^4.0.0" + "follow-redirects": "^1.15.6", + "form-data": "^4.0.0", + "proxy-from-env": "^1.1.0" }, "dependencies": { "form-data": { @@ -25713,9 +25722,9 @@ } }, "follow-redirects": { - "version": "1.15.0", - "resolved": "https://npm.prakticum-team.ru/follow-redirects/-/follow-redirects-1.15.0.tgz", - "integrity": "sha512-aExlJShTV4qOUOL7yF1U5tvLCB0xQuudbf6toyYA0E/acBNw71mvjFTnLaRp50aQaYocMR0a/RMMBIHeZnGyjQ==" + "version": "1.15.9", + "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.9.tgz", + "integrity": "sha512-gew4GsXizNgdoRyqmyfMHyAmXsZDk6mHkSxZFCzW9gwlbtOW44CDtYavM+y+72qD/Vq2l550kMF52DT8fOLJqQ==" }, "fork-ts-checker-webpack-plugin": { "version": "6.5.2", @@ -29807,6 +29816,11 @@ } } }, + "proxy-from-env": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/proxy-from-env/-/proxy-from-env-1.1.0.tgz", + "integrity": "sha512-D+zkORCbA9f1tdWRK0RaCR3GPv50cMxcrz4X8k5LTSUD1Dkw47mKJEZQNunItRTkWwgtaUSo1RVFRIG9ZXiFYg==" + }, "psl": { "version": "1.8.0", "resolved": "https://npm.prakticum-team.ru/psl/-/psl-1.8.0.tgz", diff --git a/package.json b/package.json index fdecb75..d455456 100644 --- a/package.json +++ b/package.json @@ -12,7 +12,7 @@ "@testing-library/react": "^11.2.7", "@testing-library/user-event": "^12.8.3", "@ya.praktikum/react-developer-burger-ui-components": "^1.13.1", - "axios": "^0.27.2", + "axios": "^1.7.8", "is-email": "^1.0.2", "nanoid": "^3.2.0", "react": "^16.8.6",