Skip to content

Commit

Permalink
chore: override versions for axios and ws to fix vulnerabilities (#549)
Browse files Browse the repository at this point in the history
### **PR Type**
enhancement, dependencies


___

### **Description**
- Updated the `axios` package version constraints to `>=1.7.4` to
address security vulnerabilities.
- Modified the `ws` package version constraints to include specific
versions to fix vulnerabilities.



___



### **Changes walkthrough** 📝
<table><thead><tr><th></th><th align="left">Relevant
files</th></tr></thead><tbody><tr><td><strong>Dependencies</strong></td><td><table>
<tr>
  <td>
    <details>
<summary><strong>package.json</strong><dd><code>Override versions for
axios and ws to address vulnerabilities</code></dd></summary>
<hr>

package.json

<li>Updated the version constraints for <code>axios</code> to
<code>>=1.7.4</code>.<br> <li> Updated the version constraints for
<code>ws</code> to multiple specific versions.<br>


</details>


  </td>
<td><a
href="https://github.com/nhost/hasura-auth/pull/549/files#diff-7ae45ad102eab3b6d7e7896acd08c427a9b25b346470d7bc6507b6481575d519">+5/-3</a>&nbsp;
&nbsp; &nbsp; </td>

</tr>                    
</table></td></tr><tr><td><strong>Additional files
(token-limit)</strong></td><td><table>
<tr>
  <td>
    <details>
<summary><strong>pnpm-lock.yaml</strong><dd><code>...</code>&nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
&nbsp; &nbsp; &nbsp; </dd></summary>
<hr>

pnpm-lock.yaml

...



</details>


  </td>
<td><a
href="https://github.com/nhost/hasura-auth/pull/549/files#diff-32824c984905bb02bc7ffcef96a77addd1f1602cff71a11fbbfdd7f53ee026bb">+8010/-9737</a></td>

</tr>                    
</table></td></tr></tr></tbody></table>

___

> 💡 **PR-Agent usage**:
>Comment `/help` on the PR to get a list of all available PR-Agent tools
and their descriptions
  • Loading branch information
onehassan authored Aug 16, 2024
1 parent 189ea75 commit 74803d4
Show file tree
Hide file tree
Showing 2 changed files with 6,200 additions and 7,925 deletions.
8 changes: 5 additions & 3 deletions package.json
Original file line number Diff line number Diff line change
Expand Up @@ -154,8 +154,7 @@
"jsonwebtoken@<9.0.0": ">=9.0.0",
"jose@>=4.0.0 <=4.9.1": ">=4.9.2",
"qs@>=6.7.0 <6.7.3": ">=6.7.3",
"axios@>=0.8.1 <1.6.0": ">=1.6.0",
"axios@<0.21.2": ">=0.21.2",
"axios@<1.7.4": ">=1.7.4",
"semver@<5.7.2": ">=5.7.2",
"semver@>=7.0.0 <7.5.2": ">=7.5.2",
"jsrsasign@<11.0.0": ">=11.0.0",
Expand All @@ -167,7 +166,10 @@
"execa@<=0.10.0": ">=2.0.0",
"pug@<=3.0.2": ">=3.0.3",
"braces@<3.0.3": ">=3.0.3",
"ws@>=8.0.0 <8.17.1": ">=8.17.1"
"ws@^2.1.0 <5.2.4": "5.2.4",
"ws@^6.0.0 <6.2.3": "6.2.3",
"ws@^7.0.0 <7.5.10": "7.5.10",
"ws@^8.0.0 <8.17.1": "8.17.1"
}
}
}
Loading

0 comments on commit 74803d4

Please sign in to comment.