From 5e0850b0c5cfb551305c08badc0ddd4baef4984c Mon Sep 17 00:00:00 2001 From: "dependabot-preview[bot]" <27856297+dependabot-preview[bot]@users.noreply.github.com> Date: Tue, 11 Aug 2020 17:48:13 +0000 Subject: [PATCH] [Security] Bump serialize-javascript from 1.5.0 to 3.1.0 Bumps [serialize-javascript](https://github.com/yahoo/serialize-javascript) from 1.5.0 to 3.1.0. **This update includes security fixes.** - [Release notes](https://github.com/yahoo/serialize-javascript/releases) - [Commits](https://github.com/yahoo/serialize-javascript/compare/v1.5.0...v3.1.0) Signed-off-by: dependabot-preview[bot] --- package.json | 2 +- yarn.lock | 18 +++++++++++++++--- 2 files changed, 16 insertions(+), 4 deletions(-) diff --git a/package.json b/package.json index 07097b1..2a238cb 100644 --- a/package.json +++ b/package.json @@ -19,7 +19,7 @@ "dependencies": { "@raha/api-shared": "^0.1.7", "firebase": "^5.0.3", - "serialize-javascript": "^1.5.0", + "serialize-javascript": "^3.1.0", "ts-node": "^6.0.3" }, "scripts": { diff --git a/yarn.lock b/yarn.lock index ae8c9d5..4801314 100644 --- a/yarn.lock +++ b/yarn.lock @@ -2185,6 +2185,12 @@ qs@~6.5.1: version "6.5.2" resolved "https://registry.npmjs.org/qs/-/qs-6.5.2.tgz#cb3ae806e8740444584ef154ce8ee98d403f3e36" +randombytes@^2.1.0: + version "2.1.0" + resolved "https://registry.yarnpkg.com/randombytes/-/randombytes-2.1.0.tgz#df6f84372f0270dc65cdf6291349ab7a473d4f2a" + dependencies: + safe-buffer "^5.1.0" + rc@^1.1.7: version "1.2.7" resolved "https://registry.npmjs.org/rc/-/rc-1.2.7.tgz#8a10ca30d588d00464360372b890d06dacd02297" @@ -2291,6 +2297,10 @@ safe-buffer@^5.0.1, safe-buffer@^5.1.1, safe-buffer@^5.1.2, safe-buffer@~5.1.0, version "5.1.2" resolved "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz#991ec69d296e0313747d59bdfd2b745c35f8828d" +safe-buffer@^5.1.0: + version "5.2.1" + resolved "https://registry.yarnpkg.com/safe-buffer/-/safe-buffer-5.2.1.tgz#1eaf9fa9bdb1fdd4ec75f58f9cdb4e6b7827eec6" + safe-regex@^1.1.0: version "1.1.0" resolved "https://registry.yarnpkg.com/safe-regex/-/safe-regex-1.1.0.tgz#40a3669f3b077d1e943d44629e157dd48023bf2e" @@ -2309,9 +2319,11 @@ semver@^5.3.0: version "5.5.0" resolved "https://registry.npmjs.org/semver/-/semver-5.5.0.tgz#dc4bbc7a6ca9d916dee5d43516f0092b58f7b8ab" -serialize-javascript@^1.5.0: - version "1.5.0" - resolved "https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-1.5.0.tgz#1aa336162c88a890ddad5384baebc93a655161fe" +serialize-javascript@^3.1.0: + version "3.1.0" + resolved "https://registry.yarnpkg.com/serialize-javascript/-/serialize-javascript-3.1.0.tgz#8bf3a9170712664ef2561b44b691eafe399214ea" + dependencies: + randombytes "^2.1.0" set-blocking@~2.0.0: version "2.0.0"