Skip to content
This repository has been archived by the owner on Sep 22, 2021. It is now read-only.

Upgrade deps to address security alerts #862

Merged
merged 3 commits into from Jun 10, 2020
Merged

Upgrade deps to address security alerts #862

merged 3 commits into from Jun 10, 2020

Conversation

Tbaut
Copy link
Collaborator

@Tbaut Tbaut commented Jun 9, 2020 •
edited

there was an issue open in graphql-yoga repo: dotansimha/graphql-yoga#642

yarn audit
yarn audit v1.22.4
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ moderate      │ Tmp files readable by other users                            │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ sync-exec                                                    │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ No patch available                                           │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ prisma                                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ prisma > prisma-cli-core > npm-run > sync-exec               │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/310                         │
└───────────────┴──────────────────────────────────────────────────────────────┘
1 vulnerabilities found - Packages audited: 706
Severity: 1 Moderate

@Tbaut Tbaut requested a review from niklabh June 9, 2020 09:12
@Tbaut Tbaut changed the title Upgrade deps to security alerts Upgrade deps to address security alerts Jun 9, 2020
Tbaut
Tbaut commented Jun 9, 2020
View reviewed changes
chain-db-open-server/src/index.ts
@@ -12,6 +12,11 @@ import { Selectors } from './types';
const resolvers = {
Subscription,
Query,
Node: {
Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This removes a warning in the console.

@Tbaut Tbaut merged commit d8f2c20 into master Jun 10, 2020
@Tbaut Tbaut deleted the tbaut-fix-security-alerts branch June 10, 2020 07:37
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Reviewers

@niklabh niklabh niklabh approved these changes

@w3bdesign w3bdesign w3bdesign approved these changes

Assignees
No one assigned
Labels
x- changelog-chore
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
3 participants
@Tbaut @niklabh @w3bdesign