From c055ba3a4d5199553ef75990f750063eba8db6eb Mon Sep 17 00:00:00 2001 From: DeepSource Bot Date: Mon, 10 Feb 2025 17:32:09 +0000 Subject: [PATCH] =?UTF-8?q?fix(deps):=20update=20npm/node-sloc=20from=200.?= =?UTF-8?q?2.1=20=E2=86=92=200.2.1=20fix(deps):=20update=20npm/node-sloc?= =?UTF-8?q?=20from=200.2.1=20=E2=86=92=200.2.1?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This pull request addresses security vulnerabilities in this repository by updating dependencies to a safe version. We recommend manually auditing the package manifest files to verify the fixes. ### Upgrade Summary **node-sloc**: 0.2.1 → 0.2.1 - Fixes [CVE-2024-4068](https://nvd.nist.gov/vuln/detail/CVE-2024-4068) (High severity) - References: - [https://nvd.nist.gov/vuln/detail/CVE-2024-4068](https://nvd.nist.gov/vuln/detail/CVE-2024-4068) - [https://github.com/micromatch/braces/issues/35](https://github.com/micromatch/braces/issues/35) - [https://github.com/micromatch/braces/pull/37](https://github.com/micromatch/braces/pull/37) - [https://github.com/micromatch/braces/pull/40](https://github.com/micromatch/braces/pull/40) - [https://github.com/micromatch/braces/commit/415d660c3002d1ab7e63dbf490c9851da80596ff](https://github.com/micromatch/braces/commit/415d660c3002d1ab7e63dbf490c9851da80596ff) - [https://devhub.checkmarx.com/cve-details/CVE-2024-4068](https://devhub.checkmarx.com/cve-details/CVE-2024-4068) - [https://github.com/micromatch/braces](https://github.com/micromatch/braces) - [https://github.com/micromatch/braces/blob/98414f9f1fabe021736e26836d8306d5de747e0d/lib/parse.js#L308](https://github.com/micromatch/braces/blob/98414f9f1fabe021736e26836d8306d5de747e0d/lib/parse.js#L308) --- 🤖 This pull request was automatically generated by DeepSource SCA. To view all vulnerabilities in this repository, please visit the [dashboard](https://app.deepsource.one/gh/NewProfoundOrigin/phaser/dependencies/). --- package-lock.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/package-lock.json b/package-lock.json index 7ee8342abe..ff837a9151 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "phaser", - "version": "3.80.0-beta.3", + "version": "3.87.0", "lockfileVersion": 2, "requires": true, "packages": { "": { "name": "phaser", - "version": "3.80.0-beta.3", + "version": "3.87.0", "license": "MIT", "dependencies": { "eventemitter3": "^5.0.1"