From fc1682f80f9bc26cf445a1a9db9e186c320dee64 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 3 Sep 2021 02:40:05 +0000 Subject: [PATCH] fix: examples/with-reason-relay/package.json & examples/with-reason-relay/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-GRAPHQLPLAYGROUNDHTML-571775 - https://snyk.io/vuln/SNYK-JS-YARGSPARSER-560381 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- examples/with-reason-relay/.snyk | 8 ++++++++ examples/with-reason-relay/package.json | 12 ++++++++---- 2 files changed, 16 insertions(+), 4 deletions(-) create mode 100644 examples/with-reason-relay/.snyk diff --git a/examples/with-reason-relay/.snyk b/examples/with-reason-relay/.snyk new file mode 100644 index 0000000000000..eed2a534ad89b --- /dev/null +++ b/examples/with-reason-relay/.snyk @@ -0,0 +1,8 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.21.5 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - graphql-cli > graphql-cli-prepare > lodash: + patched: '2021-09-03T02:40:02.780Z' diff --git a/examples/with-reason-relay/package.json b/examples/with-reason-relay/package.json index 08b0b7bab1e29..1b4320917e17a 100644 --- a/examples/with-reason-relay/package.json +++ b/examples/with-reason-relay/package.json @@ -8,7 +8,9 @@ "next": "next", "start": "next start", "relay": "reason-relay-compiler", - "schema": "graphql get-schema -e dev" + "schema": "graphql get-schema -e dev", + "prepublish": "npm run snyk-protect", + "snyk-protect": "snyk-protect" }, "author": "arnarkari93@gmail.com", "license": "MIT", @@ -27,16 +29,18 @@ "reason-react": "0.7.0", "reason-relay": "0.8.2", "relay-config": "9.0.0", - "relay-runtime": "9.0.0" + "relay-runtime": "9.0.0", + "@snyk/protect": "latest" }, "devDependencies": { "babel-plugin-relay": "^9.0.0", - "graphql-cli": "^3.0.14", + "graphql-cli": "^4.0.0", "relay-compiler": "9.0.0" }, "resolutions": { "graphql": "15.0.0", "react": "0.0.0-experimental-e5d06e34b", "react-dom": "0.0.0-experimental-e5d06e34b" - } + }, + "snyk": true }