From d490b6b7037763e1139e958b39df03c016db4c87 Mon Sep 17 00:00:00 2001 From: DeepSource Bot Date: Mon, 10 Feb 2025 18:56:30 +0000 Subject: [PATCH] =?UTF-8?q?fix(deps):=20update=20npm/semver=20from=206.3.0?= =?UTF-8?q?=20=E2=86=92=206.3.1=20fix(deps):=20update=20npm/semver=20from?= =?UTF-8?q?=206.3.0=20=E2=86=92=206.3.1?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This pull request addresses security vulnerabilities in this repository by updating dependencies to a safe version. We recommend manually auditing the package manifest files to verify the fixes. ### Upgrade Summary **semver**: 6.3.0 → 6.3.1 - Fixes [CVE-2022-25883](https://nvd.nist.gov/vuln/detail/CVE-2022-25883) (High severity) - References: - [https://nvd.nist.gov/vuln/detail/CVE-2022-25883](https://nvd.nist.gov/vuln/detail/CVE-2022-25883) - [https://github.com/npm/node-semver/pull/564](https://github.com/npm/node-semver/pull/564) - [https://github.com/npm/node-semver/pull/585](https://github.com/npm/node-semver/pull/585) - [https://github.com/npm/node-semver/pull/593](https://github.com/npm/node-semver/pull/593) - [https://github.com/npm/node-semver/commit/2f8fd41487acf380194579ecb6f8b1bbfe116be0](https://github.com/npm/node-semver/commit/2f8fd41487acf380194579ecb6f8b1bbfe116be0) - [https://github.com/npm/node-semver/commit/717534ee353682f3bcf33e60a8af4292626d4441](https://github.com/npm/node-semver/commit/717534ee353682f3bcf33e60a8af4292626d4441) - [https://github.com/npm/node-semver/commit/928e56d21150da0413a3333a3148b20e741a920c](https://github.com/npm/node-semver/commit/928e56d21150da0413a3333a3148b20e741a920c) - [https://github.com/npm/node-semver](https://github.com/npm/node-semver) - [https://github.com/npm/node-semver/blob/main/classes/range.js#L97-L104](https://github.com/npm/node-semver/blob/main/classes/range.js#L97-L104) - [https://github.com/npm/node-semver/blob/main/classes/range.js%23L97-L104](https://github.com/npm/node-semver/blob/main/classes/range.js%23L97-L104) - [https://github.com/npm/node-semver/blob/main/internal/re.js#L138](https://github.com/npm/node-semver/blob/main/internal/re.js#L138) - [https://github.com/npm/node-semver/blob/main/internal/re.js#L160](https://github.com/npm/node-semver/blob/main/internal/re.js#L160) - [https://github.com/npm/node-semver/blob/main/internal/re.js%23L138](https://github.com/npm/node-semver/blob/main/internal/re.js%23L138) - [https://github.com/npm/node-semver/blob/main/internal/re.js%23L160](https://github.com/npm/node-semver/blob/main/internal/re.js%23L160) - [https://security.netapp.com/advisory/ntap-20241025-0004](https://security.netapp.com/advisory/ntap-20241025-0004) - [https://security.snyk.io/vuln/SNYK-JS-SEMVER-3247795](https://security.snyk.io/vuln/SNYK-JS-SEMVER-3247795) --- 🤖 This pull request was automatically generated by DeepSource SCA. To view all vulnerabilities in this repository, please visit the [dashboard](https://app.deepsource.one/gh/NewProfoundOrigin/phaser/dependencies/). --- package-lock.json | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/package-lock.json b/package-lock.json index 7ee8342abe..bc8cf62174 100644 --- a/package-lock.json +++ b/package-lock.json @@ -2763,9 +2763,9 @@ } }, "node_modules/semver": { - "version": "6.3.0", - "resolved": "https://registry.npmjs.org/semver/-/semver-6.3.0.tgz", - "integrity": "sha512-b39TBaTSfV6yBrapU89p5fKekE2m/NwnDocOVruQFS1/veMgdzuPcnOM34M6CwxW8jH/lxEa5rBoDeUwu5HHTw==", + "version": "6.3.1", + "resolved": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz", + "integrity": "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==", "dev": true, "bin": { "semver": "bin/semver.js" @@ -5503,9 +5503,9 @@ } }, "semver": { - "version": "6.3.0", - "resolved": "https://registry.npmjs.org/semver/-/semver-6.3.0.tgz", - "integrity": "sha512-b39TBaTSfV6yBrapU89p5fKekE2m/NwnDocOVruQFS1/veMgdzuPcnOM34M6CwxW8jH/lxEa5rBoDeUwu5HHTw==", + "version": "6.3.1", + "resolved": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz", + "integrity": "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==", "dev": true }, "serialize-javascript": {