From 33b8eb4de6a8b7571f40af2a4623eb92ff2ce5d9 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 3 Oct 2020 04:50:55 +0000 Subject: [PATCH] fix: packages/artifact/package.json & packages/artifact/package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-ACTIONSCORE-1015402 --- packages/artifact/package-lock.json | 6 +++--- packages/artifact/package.json | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/packages/artifact/package-lock.json b/packages/artifact/package-lock.json index ba9dcfbc8f..4c1ae6116c 100644 --- a/packages/artifact/package-lock.json +++ b/packages/artifact/package-lock.json @@ -5,9 +5,9 @@ "requires": true, "dependencies": { "@actions/core": { - "version": "1.2.3", - "resolved": "https://registry.npmjs.org/@actions/core/-/core-1.2.3.tgz", - "integrity": "sha512-Wp4xnyokakM45Uuj4WLUxdsa8fJjKVl1fDTsPbTEcTcuu0Nb26IPQbOtjmnfaCPGcaoPOOqId8H9NapZ8gii4w==" + "version": "1.2.6", + "resolved": "https://registry.npmjs.org/@actions/core/-/core-1.2.6.tgz", + "integrity": "sha512-ZQYitnqiyBc3D+k7LsgSBmMDVkOVidaagDG7j3fOym77jNunWRuYx7VSHa9GNfFZh+zh61xsCjRj4JxMZlDqTA==" }, "@actions/http-client": { "version": "1.0.8", diff --git a/packages/artifact/package.json b/packages/artifact/package.json index 42891a153a..1e8437d86e 100644 --- a/packages/artifact/package.json +++ b/packages/artifact/package.json @@ -37,7 +37,7 @@ "url": "https://github.com/actions/toolkit/issues" }, "dependencies": { - "@actions/core": "^1.2.1", + "@actions/core": "^1.2.6", "@actions/http-client": "^1.0.7", "@types/tmp": "^0.1.0", "tmp": "^0.1.0",