diff --git a/.snyk b/.snyk index 6205333..52bec0c 100644 --- a/.snyk +++ b/.snyk @@ -1,16 +1,26 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.12.0 +version: v1.13.3 # ignores vulnerabilities until expiry date; change duration by modifying expiry date ignore: 'npm:chownr:20180731': - bcrypt > node-pre-gyp > tar > chownr: expires: '2018-10-14T14:59:55.757Z' - '@google-cloud/datastore > google-gax > grpc > node-pre-gyp > tar > chownr': - reason: '' - expires: '2018-11-22T18:34:44.794Z' - '@google-cloud/datastore > google-gax > grpc > node-pre-gyp > tar > chownr': expires: '2018-10-14T14:59:55.757Z' - bcrypt > node-pre-gyp > tar > chownr: + - '@google-cloud/datastore > google-gax > grpc > node-pre-gyp > tar > chownr': + reason: '' + expires: '2018-11-22T18:34:44.794Z' + - bcrypt > node-pre-gyp > tar > chownr: reason: '' expires: '2018-11-22T18:34:44.794Z' -patch: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-AXIOS-174505: + - '@google-cloud/datastore > google-auth-library > axios': + patched: '2019-05-06T05:17:41.480Z' + - '@google-cloud/datastore > google-auth-library > gcp-metadata > axios': + patched: '2019-05-06T05:17:41.480Z' + - '@google-cloud/datastore > google-gax > google-auth-library > axios': + patched: '2019-05-06T05:17:41.480Z' + - '@google-cloud/datastore > google-gax > google-auth-library > gcp-metadata > axios': + patched: '2019-05-06T05:17:41.480Z' diff --git a/package.json b/package.json index 949951f..12fc682 100644 --- a/package.json +++ b/package.json @@ -26,7 +26,7 @@ "jsonwebtoken": "^8.1.0", "route-parser": "0.0.5", "slugify": "^1.2.6", - "snyk": "^1.69.10" + "snyk": "^1.161.1" }, "snyk": true }