From c9675292deed5219586cf8964902ce9e7e4965ba Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 6 Apr 2019 05:45:26 +0000 Subject: [PATCH] fix: .snyk & package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/npm:fresh:20170908 - https://snyk.io/vuln/npm:mime:20170907 - https://snyk.io/vuln/npm:qs:20170213 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:mime:20170907 --- .snyk | 5 ++++- package.json | 4 ++-- 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/.snyk b/.snyk index 928fc15..bb04a35 100644 --- a/.snyk +++ b/.snyk @@ -1,5 +1,5 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.7.1 +version: v1.13.3 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: @@ -62,3 +62,6 @@ patch: patched: '2017-10-11T14:00:55.397Z' - hubot > express > connect > serve-index > accepts > negotiator: patched: '2017-10-11T14:00:55.397Z' + 'npm:mime:20170907': + - hubot > express > connect > serve-static > send > mime: + patched: '2019-04-06T05:45:25.010Z' diff --git a/package.json b/package.json index 95e659b..0b0d41d 100644 --- a/package.json +++ b/package.json @@ -5,7 +5,7 @@ "author": "Stanley Zheng ", "description": "Grow's helpful robot", "dependencies": { - "hubot": "^2.11.0", + "hubot": "^3.1.0", "hubot-diagnostics": "0.0.1", "hubot-google-images": "^0.1.2", "hubot-google-translate": "^0.1.0", @@ -20,7 +20,7 @@ "hubot-slack": "^4.0.0", "hubot-youtube": "^0.1.2", "nodepie": "^0.6.6", - "snyk": "^1.42.6" + "snyk": "^1.147.4" }, "engines": { "node": "0.10.x"