Skip to content

Commit

Permalink
fix(security): update cross-fetch to >=3.1.5 (#2431)
Browse files Browse the repository at this point in the history 
This transitively updates node-fetch to v2.6.7 which no longer
suffers from  CVE-2022-0235.

Refs GHSA-r683-j2x4-v87g
  • Loading branch information
@char0n
char0n committed Jan 25, 2022
1 parent 1ddbf98 commit 275249f
Show file tree
Hide file tree
Showing 11 changed files with 81 additions and 51 deletions.
40 changes: 35 additions & 5 deletions package-lock.json
View file

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion package.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -108,7 +108,7 @@
"@babel/runtime-corejs3": "^7.11.2",
"btoa": "^1.2.1",
"cookie": "~0.4.1",
"cross-fetch": "^3.1.4",
"cross-fetch": "^3.1.5",
"deepmerge": "~4.2.2",
"fast-json-patch": "^3.0.0-1",
"form-data-encoder": "^1.4.3",
Expand Down
6 changes: 3 additions & 3 deletions test/specmap/data/cyclic/external/1.js
View file
Original file line number Diff line number Diff line change
Expand Up @@ -2,11 +2,11 @@ module.exports = {
name: 'link to a cyclic node',
spec: {
x: {
$ref: 'http://1/spec#/a',
$ref: 'http://0.0.0.1/spec#/a',
},
},
external: {
'http://1/spec': {
'http://0.0.0.1/spec': {
a: {
b: {
$ref: '#/a',
Expand All @@ -17,7 +17,7 @@ module.exports = {
output: {
x: {
b: {
$ref: 'http://1/spec#/a',
$ref: 'http://0.0.0.1/spec#/a',
},
},
},
Expand Down
6 changes: 3 additions & 3 deletions test/specmap/data/cyclic/external/10.js
View file
Original file line number Diff line number Diff line change
Expand Up @@ -2,11 +2,11 @@ module.exports = {
name: 'link to 2 cyclic nodes',
spec: {
x: {
$ref: 'http://2/spec#/a',
$ref: 'http://0.0.0.2/spec#/a',
},
},
external: {
'http://2/spec': {
'http://0.0.0.2/spec': {
a: {
$ref: '#/b',
},
Expand All @@ -17,7 +17,7 @@ module.exports = {
},
output: {
x: {
$ref: 'http://2/spec#/a',
$ref: 'http://0.0.0.2/spec#/a',
},
},
};
14 changes: 7 additions & 7 deletions test/specmap/data/cyclic/external/2.js
View file
Original file line number Diff line number Diff line change
Expand Up @@ -2,21 +2,21 @@ module.exports = {
name: 'a few hops to an internally cyclic doc',
spec: {
x: {
$ref: 'http://8/spec1#/a',
$ref: 'http://0.0.0.8/spec1#/a',
},
},
external: {
'http://8/spec1': {
'http://0.0.0.8/spec1': {
a: {
$ref: 'http://8/spec2#/b',
$ref: 'http://0.0.0.8/spec2#/b',
},
},
'http://8/spec2': {
'http://0.0.0.8/spec2': {
b: {
$ref: 'http://8/spec3#/c',
$ref: 'http://0.0.0.8/spec3#/c',
},
},
'http://8/spec3': {
'http://0.0.0.8/spec3': {
c: {
d: {
$ref: '#/c',
Expand All @@ -27,7 +27,7 @@ module.exports = {
output: {
x: {
d: {
$ref: 'http://8/spec3#/c',
$ref: 'http://0.0.0.8/spec3#/c',
},
},
},
Expand Down
6 changes: 3 additions & 3 deletions test/specmap/data/cyclic/external/20.js
View file
Original file line number Diff line number Diff line change
Expand Up @@ -2,11 +2,11 @@ module.exports = {
name: 'link to 3 cyclic nodes',
spec: {
x: {
$ref: 'http://3/spec#/defs/d1',
$ref: 'http://0.0.0.3/spec#/defs/d1',
},
},
external: {
'http://3/spec': {
'http://0.0.0.3/spec': {
defs: {
d1: {
d1k: {
Expand All @@ -31,7 +31,7 @@ module.exports = {
d1k: {
d2k: {
d3k: {
$ref: 'http://3/spec#/defs/d1',
$ref: 'http://0.0.0.3/spec#/defs/d1',
},
},
},
Expand Down
6 changes: 3 additions & 3 deletions test/specmap/data/cyclic/external/21.js
View file
Original file line number Diff line number Diff line change
Expand Up @@ -2,11 +2,11 @@ module.exports = {
name: 'link to 3 cyclic nodes (in array)',
spec: {
x: {
$ref: 'http://4/spec#/defs/0',
$ref: 'http://0.0.0.4/spec#/defs/0',
},
},
external: {
'http://4/spec': {
'http://0.0.0.4/spec': {
defs: [
{
d1k: {
Expand All @@ -31,7 +31,7 @@ module.exports = {
d1k: {
d2k: {
d3k: {
$ref: 'http://4/spec#/defs/0',
$ref: 'http://0.0.0.4/spec#/defs/0',
},
},
},
Expand Down
12 changes: 6 additions & 6 deletions test/specmap/data/cyclic/external/30.js
View file
Original file line number Diff line number Diff line change
Expand Up @@ -2,21 +2,21 @@ module.exports = {
name: 'link to cyclic nodes that use absolute reference',
spec: {
x: {
$ref: 'http://5/spec1#/a',
$ref: 'http://0.0.0.5/spec1#/a',
},
},
external: {
'http://5/spec1': {
'http://0.0.0.5/spec1': {
a: {
b: {
$ref: 'http://5/spec2#/c',
$ref: 'http://0.0.0.5/spec2#/c',
},
},
},
'http://5/spec2': {
'http://0.0.0.5/spec2': {
c: {
d: {
$ref: 'http://5/spec1#/a',
$ref: 'http://0.0.0.5/spec1#/a',
},
},
},
Expand All @@ -25,7 +25,7 @@ module.exports = {
x: {
b: {
d: {
$ref: 'http://5/spec1#/a',
$ref: 'http://0.0.0.5/spec1#/a',
},
},
},
Expand Down
16 changes: 8 additions & 8 deletions test/specmap/data/cyclic/external/31.js
View file
Original file line number Diff line number Diff line change
Expand Up @@ -2,28 +2,28 @@ module.exports = {
name: 'link to 3 cyclic nodes that use absolute reference',
spec: {
x: {
$ref: 'http://6/spec1#/a',
$ref: 'http://0.0.0.6/spec1#/a',
},
},
external: {
'http://6/spec1': {
'http://0.0.0.6/spec1': {
a: {
b: {
$ref: 'http://6/spec2#/c',
$ref: 'http://0.0.0.6/spec2#/c',
},
},
},
'http://6/spec2': {
'http://0.0.0.6/spec2': {
c: {
d: {
$ref: 'http://6/spec3#/e',
$ref: 'http://0.0.0.6/spec3#/e',
},
},
},
'http://6/spec3': {
'http://0.0.0.6/spec3': {
e: {
f: {
$ref: 'http://6/spec1#/a',
$ref: 'http://0.0.0.6/spec1#/a',
},
},
},
Expand All @@ -33,7 +33,7 @@ module.exports = {
b: {
d: {
f: {
$ref: 'http://6/spec1#/a',
$ref: 'http://0.0.0.6/spec1#/a',
},
},
},
Expand Down
16 changes: 8 additions & 8 deletions test/specmap/data/cyclic/external/32.js
View file
Original file line number Diff line number Diff line change
Expand Up @@ -2,32 +2,32 @@ module.exports = {
name: 'absolute path to itself',
spec: {
x: {
$ref: 'http://9/spec1#/a',
$ref: 'http://0.0.0.9/spec1#/a',
},
},
external: {
'http://9/spec1': {
'http://0.0.0.9/spec1': {
a: {
$ref: 'http://9/spec2#/b',
$ref: 'http://0.0.0.9/spec2#/b',
},
},
'http://9/spec2': {
'http://0.0.0.9/spec2': {
b: {
$ref: 'http://9/spec3#/c',
$ref: 'http://0.0.0.9/spec3#/c',
},
},
'http://9/spec3': {
'http://0.0.0.9/spec3': {
c: {
d: {
$ref: 'http://9/spec3#/c',
$ref: 'http://0.0.0.9/spec3#/c',
},
},
},
},
output: {
x: {
d: {
$ref: 'http://9/spec3#/c',
$ref: 'http://0.0.0.9/spec3#/c',
},
},
},
Expand Down
8 changes: 4 additions & 4 deletions test/specmap/data/cyclic/external/40.js
View file
Original file line number Diff line number Diff line change
Expand Up @@ -2,18 +2,18 @@ module.exports = {
name: 'link to 2 cyclic nodes that use relative reference',
spec: {
x: {
$ref: 'http://7/spec1#/a',
$ref: 'http://0.0.0.7/spec1#/a',
},
},
external: {
'http://7/spec1': {
'http://0.0.0.7/spec1': {
a: {
b: {
$ref: '../spec2#/c',
},
},
},
'http://7/spec2': {
'http://0.0.0.7/spec2': {
c: {
d: {
$ref: '../spec1#/a',
Expand All @@ -25,7 +25,7 @@ module.exports = {
x: {
b: {
d: {
$ref: 'http://7/spec1#/a',
$ref: 'http://0.0.0.7/spec1#/a',
},
},
},
Expand Down

0 comments on commit 275249f

Please sign in to comment.