From 4ccefda99a0ce0418b1f7e51af7e403d6e5f1239 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 24 Sep 2024 08:43:39 +0000 Subject: [PATCH] fix: package.json & package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-ROLLUP-8073097 --- package-lock.json | 18 ++++++++++-------- package.json | 2 +- 2 files changed, 11 insertions(+), 9 deletions(-) diff --git a/package-lock.json b/package-lock.json index 7e9395c6..e5725555 100644 --- a/package-lock.json +++ b/package-lock.json @@ -41,7 +41,7 @@ "popper.js": "^1.16.1", "postcss": "^8.4.41", "postcss-import": "^16.1.0", - "rollup": "^2.79.1", + "rollup": "^3.29.5", "rollup-plugin-babel": "^4.4.0", "vinyl-buffer": "^1.0.1", "vinyl-source-stream": "^2.0.0" @@ -12159,14 +12159,16 @@ } }, "node_modules/rollup": { - "version": "2.79.1", - "resolved": "https://registry.npmjs.org/rollup/-/rollup-2.79.1.tgz", - "integrity": "sha512-uKxbd0IhMZOhjAiD5oAFp7BqvkA4Dv47qpOCtaNvng4HBwdbWtdOh8f5nZNuk2rp51PMGk3bzfWu5oayNEuYnw==", + "version": "3.29.5", + "resolved": "https://registry.npmjs.org/rollup/-/rollup-3.29.5.tgz", + "integrity": "sha512-GVsDdsbJzzy4S/v3dqWPJ7EfvZJfCHiDqe80IyrF59LYuP+e6U1LJoUqeuqRbwAWoMNoXivMNeNAOf5E22VA1w==", + "license": "MIT", "bin": { "rollup": "dist/bin/rollup" }, "engines": { - "node": ">=10.0.0" + "node": ">=14.18.0", + "npm": ">=8.0.0" }, "optionalDependencies": { "fsevents": "~2.3.2" @@ -23256,9 +23258,9 @@ } }, "rollup": { - "version": "2.79.1", - "resolved": "https://registry.npmjs.org/rollup/-/rollup-2.79.1.tgz", - "integrity": "sha512-uKxbd0IhMZOhjAiD5oAFp7BqvkA4Dv47qpOCtaNvng4HBwdbWtdOh8f5nZNuk2rp51PMGk3bzfWu5oayNEuYnw==", + "version": "3.29.5", + "resolved": "https://registry.npmjs.org/rollup/-/rollup-3.29.5.tgz", + "integrity": "sha512-GVsDdsbJzzy4S/v3dqWPJ7EfvZJfCHiDqe80IyrF59LYuP+e6U1LJoUqeuqRbwAWoMNoXivMNeNAOf5E22VA1w==", "requires": { "fsevents": "~2.3.2" } diff --git a/package.json b/package.json index 7fad7ccb..f0127398 100644 --- a/package.json +++ b/package.json @@ -37,7 +37,7 @@ "popper.js": "^1.16.1", "postcss": "^8.4.41", "postcss-import": "^16.1.0", - "rollup": "^2.79.1", + "rollup": "^3.29.5", "rollup-plugin-babel": "^4.4.0", "vinyl-buffer": "^1.0.1", "vinyl-source-stream": "^2.0.0"