Merge pull request #93 from rundeck-plugins/cve-fixes

RUN-4300: remediate npm dependency CVEs in docker rundeck-cli client

Author: fdevans

.gitignore

@@ -41,4 +41,6 @@ Thumbs.db
 # Local environment files
 .env
 .env.local
-.env.*.local
+.env.*.local
+
+/docker/client/rundeck-cli/node_modules

docker/client/rundeck-cli/package-lock.json

@@ -13,20 +13,23 @@
     "@types/node": "^13.13.5",
     "dotenv": "^10.0.0",
     "form-data": "^3.0.0",
-    "js-yaml": "^3.13.1",
+    "js-yaml": "^3.13.2",
     "node-fetch": "^2.6.1",
     "ts-node": "^8.10.1",
     "ts-rundeck": "^0.1.8",
     "tsconfig-paths": "^3.9.0",
     "typescript": "^3.8.3",
-    "yaml": "^1.10.0",
+    "yaml": "^1.10.3",
     "yargs": "^15.3.2-beta.0"
   },
   "devDependencies": {
     "@types/node-fetch": "^2.5.7",
     "@types/yargs": "^15.0.4"
   },
   "overrides": {
-    "axios": "1.12.0"
+    "axios": "1.15.0",
+    "tough-cookie": "4.1.3",
+    "xml-js": "0.5.1",
+    "diff": "4.0.4"
   }
 }