From e6cca731385c82380d5ac386815385923ed11804 Mon Sep 17 00:00:00 2001 From: ilammy Date: Thu, 12 Mar 2020 12:54:03 +0200 Subject: [PATCH] Refresh dependencies "npm audit" started whining about moderate denial of service vulnerability in a dependency of dependency of dependency (eslint > espree > acorn). This is not really serious because we use "eslint" only for development. However, red builds are not good so bump the pinned version in package.lock. (Released versions are not affected because they do not include eslint.) --- package-lock.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/package-lock.json b/package-lock.json index 4826a1f..f2c38af 100644 --- a/package-lock.json +++ b/package-lock.json @@ -30,9 +30,9 @@ } }, "acorn": { - "version": "7.1.0", - "resolved": "https://registry.npmjs.org/acorn/-/acorn-7.1.0.tgz", - "integrity": "sha512-kL5CuoXA/dgxlBbVrflsflzQ3PAas7RYZB52NOm/6839iVYJgKMJ3cQJD+t2i5+qFa8h3MDpEOJiS64E8JLnSQ==", + "version": "7.1.1", + "resolved": "https://registry.npmjs.org/acorn/-/acorn-7.1.1.tgz", + "integrity": "sha512-add7dgA5ppRPxCFJoAGfMDi7PIBXq1RtGo7BhbLaxwrXPOmw8gq48Y9ozT01hUKy9byMjlR20EJhu5zlkErEkg==", "dev": true }, "acorn-jsx": {