Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update braces sub-dependency #169

Merged
merged 1 commit into from
Jun 17, 2024
Merged

Update braces sub-dependency #169

merged 1 commit into from
Jun 17, 2024

Conversation

MorisR
Copy link
Contributor

@MorisR MorisR commented Jun 17, 2024

Resolves vulnerability https://github.com/intercom/intercom/issues/341621 found in braces@3.0.2 and fixed in version 3.0.3.

Note: We're also relying on braces@2.x, but this specific vulnerability is found in v3


After changes

yarn why braces


=> Found "braces@2.3.2"
info Reasons this module exists
   - "micromatch" depends on it
   - Hoisted from "micromatch#braces"
info Disk size without dependencies: "76KB"
info Disk size with unique dependencies: "480KB"
info Disk size with transitive dependencies: "3.05MB"
info Number of shared dependencies: 31

=> Found "fast-glob#braces@3.0.3"
info Reasons this module exists
   - "fast-glob#micromatch" depends on it
   - Hoisted from "fast-glob#micromatch#braces"
info Disk size without dependencies: "72KB"
info Disk size with unique dependencies: "100KB"
info Disk size with transitive dependencies: "248KB"
info Number of shared dependencies: 7

=> Found "ember-template-lint#braces@3.0.3"
info Reasons this module exists
   - "ember-template-lint#micromatch" depends on it
   - Hoisted from "ember-template-lint#micromatch#braces"
info Disk size without dependencies: "72KB"
info Disk size with unique dependencies: "100KB"
info Disk size with transitive dependencies: "248KB"
info Number of shared dependencies: 7

=> Found "findup-sync#braces@3.0.3"
info Reasons this module exists
   - "ember-cli#broccoli#findup-sync#micromatch" depends on it
   - Hoisted from "ember-cli#broccoli#findup-sync#micromatch#braces"
info Disk size without dependencies: "72KB"
info Disk size with unique dependencies: "100KB"
info Disk size with transitive dependencies: "248KB"
info Number of shared dependencies: 7
✨  Done in 0.42s.

@MorisR MorisR enabled auto-merge (squash) June 17, 2024 09:19
@MorisR MorisR merged commit e7c5256 into master Jun 17, 2024
1 check passed
@MorisR MorisR deleted the MorisR/update-dep branch June 17, 2024 09:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants