fix(host-metrics): bump minimum systeminformation version to 5.21.20 …

…(security) (open-telemetry#1868) * chore: bump system info version to address arbitrary command injection vulnerability in systeminformation Signed-off-by: yyomba <yyomba@salesforce.com> * chore: sync package-lock.json --------- Signed-off-by: yyomba <yyomba@salesforce.com> Co-authored-by: Marc Pichler <marc.pichler@dynatrace.com>
david-luna · Dec 27, 2023 · d569bda · d569bda
1 parent 216d73d
commit d569bda
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 9 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/packages/opentelemetry-host-metrics/package.json b/packages/opentelemetry-host-metrics/package.json
@@ -56,7 +56,7 @@
   },
   "dependencies": {
     "@opentelemetry/sdk-metrics": "^1.8.0",
-    "systeminformation": "^5.0.0"
+    "systeminformation": "^5.21.20"
   },
   "homepage": "https://github.com/open-telemetry/opentelemetry-js-contrib/tree/main/packages/opentelemetry-host-metrics#readme"
 }