diff --git a/.snyk b/.snyk index 3aefdd01..612bb890 100644 --- a/.snyk +++ b/.snyk @@ -1,5 +1,5 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.10.1 +version: v1.14.1 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: @@ -67,3 +67,16 @@ patch: 'npm:uglify-js:20151024': - harp > terraform > jade > transformers > uglify-js: patched: '2018-01-20T00:41:27.861Z' + SNYK-JS-LODASH-567746: + - harp > terraform > lodash: + patched: '2020-05-01T03:20:42.288Z' + - lodash: + patched: '2020-05-01T03:20:42.288Z' + - marky-markdown > highlights > first-mate-select-grammar > lodash: + patched: '2020-05-01T03:20:42.288Z' + - harp > terraform > node-sass > sass-graph > lodash: + patched: '2020-05-01T03:20:42.288Z' + - harp > terraform > jjade > constantinople > babel-types > lodash: + patched: '2020-05-01T03:20:42.288Z' + - harp > terraform > node-sass > gaze > globule > lodash: + patched: '2020-05-01T03:20:42.288Z' diff --git a/package.json b/package.json index 9044154b..ff64954d 100644 --- a/package.json +++ b/package.json @@ -46,7 +46,7 @@ "npm": "latest5.7.0", "strftime": "^0.10.0", "walkdir": "0.0.12", - "snyk": "^1.69.1" + "snyk": "^1.316.1" }, "devDependencies": { "cheerio": "^0.22.0",