From 5934c26d4862e2688e150d43a4eb25b15f0d0d7b Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Mon, 1 Jan 2024 15:00:13 +0000
Subject: [PATCH 1/2] fix: package.json & package-lock.json to reduce
 vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-AXIOS-6124857
---
 package-lock.json | 38 +++++++++++++++++++++++++-------------
 package.json      |  2 +-
 2 files changed, 26 insertions(+), 14 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 1bce4e3..efa1b52 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,15 +1,15 @@
 {
     "name": "@eclipsejs/cli",
-    "version": "0.8.1",
+    "version": "1.1.0",
     "lockfileVersion": 2,
     "requires": true,
     "packages": {
         "": {
             "name": "@eclipsejs/cli",
-            "version": "0.8.1",
+            "version": "1.1.0",
             "license": "MIT",
             "dependencies": {
-                "axios": "^0.27.2",
+                "axios": "^1.6.3",
                 "cli-table": "^0.3.11",
                 "color-support": "^1.1.3",
                 "commander": "^9.4.1",
@@ -4092,12 +4092,13 @@
             "integrity": "sha512-Oei9OH4tRh0YqU3GxhX79dM/mwVgvbZJaSNaRk+bshkj0S5cfHcgYakreBjrHwatXKbz+IoIdYLxrKim2MjW0Q=="
         },
         "node_modules/axios": {
-            "version": "0.27.2",
-            "resolved": "https://registry.npmjs.org/axios/-/axios-0.27.2.tgz",
-            "integrity": "sha512-t+yRIyySRTp/wua5xEr+z1q60QmLq8ABsS5O9Me1AsE5dfKqgnCFzwiCZZ/cGNd1lq4/7akDWMxdhVlucjmnOQ==",
+            "version": "1.6.3",
+            "resolved": "https://registry.npmjs.org/axios/-/axios-1.6.3.tgz",
+            "integrity": "sha512-fWyNdeawGam70jXSVlKl+SUNVcL6j6W79CuSIPfi6HnDUmSCH6gyUys/HrqHeA/wU0Az41rRgean494d0Jb+ww==",
             "dependencies": {
-                "follow-redirects": "^1.14.9",
-                "form-data": "^4.0.0"
+                "follow-redirects": "^1.15.0",
+                "form-data": "^4.0.0",
+                "proxy-from-env": "^1.1.0"
             }
         },
         "node_modules/babel-jest": {
@@ -9902,6 +9903,11 @@
                 "react-is": "^16.13.1"
             }
         },
+        "node_modules/proxy-from-env": {
+            "version": "1.1.0",
+            "resolved": "https://registry.npmjs.org/proxy-from-env/-/proxy-from-env-1.1.0.tgz",
+            "integrity": "sha512-D+zkORCbA9f1tdWRK0RaCR3GPv50cMxcrz4X8k5LTSUD1Dkw47mKJEZQNunItRTkWwgtaUSo1RVFRIG9ZXiFYg=="
+        },
         "node_modules/pump": {
             "version": "3.0.0",
             "resolved": "https://registry.npmjs.org/pump/-/pump-3.0.0.tgz",
@@ -14343,12 +14349,13 @@
             "integrity": "sha512-Oei9OH4tRh0YqU3GxhX79dM/mwVgvbZJaSNaRk+bshkj0S5cfHcgYakreBjrHwatXKbz+IoIdYLxrKim2MjW0Q=="
         },
         "axios": {
-            "version": "0.27.2",
-            "resolved": "https://registry.npmjs.org/axios/-/axios-0.27.2.tgz",
-            "integrity": "sha512-t+yRIyySRTp/wua5xEr+z1q60QmLq8ABsS5O9Me1AsE5dfKqgnCFzwiCZZ/cGNd1lq4/7akDWMxdhVlucjmnOQ==",
+            "version": "1.6.3",
+            "resolved": "https://registry.npmjs.org/axios/-/axios-1.6.3.tgz",
+            "integrity": "sha512-fWyNdeawGam70jXSVlKl+SUNVcL6j6W79CuSIPfi6HnDUmSCH6gyUys/HrqHeA/wU0Az41rRgean494d0Jb+ww==",
             "requires": {
-                "follow-redirects": "^1.14.9",
-                "form-data": "^4.0.0"
+                "follow-redirects": "^1.15.0",
+                "form-data": "^4.0.0",
+                "proxy-from-env": "^1.1.0"
             }
         },
         "babel-jest": {
@@ -18580,6 +18587,11 @@
                 "react-is": "^16.13.1"
             }
         },
+        "proxy-from-env": {
+            "version": "1.1.0",
+            "resolved": "https://registry.npmjs.org/proxy-from-env/-/proxy-from-env-1.1.0.tgz",
+            "integrity": "sha512-D+zkORCbA9f1tdWRK0RaCR3GPv50cMxcrz4X8k5LTSUD1Dkw47mKJEZQNunItRTkWwgtaUSo1RVFRIG9ZXiFYg=="
+        },
         "pump": {
             "version": "3.0.0",
             "resolved": "https://registry.npmjs.org/pump/-/pump-3.0.0.tgz",
diff --git a/package.json b/package.json
index 05f5fb5..4a267c2 100644
--- a/package.json
+++ b/package.json
@@ -41,7 +41,7 @@
         "nodejs"
     ],
     "dependencies": {
-        "axios": "^0.27.2",
+        "axios": "^1.6.3",
         "cli-table": "^0.3.11",
         "color-support": "^1.1.3",
         "commander": "^9.4.1",

From 3d41aac4dc6acdf068c2b2265b43fb8abfd54a29 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Mon, 1 Jan 2024 15:01:41 +0000
Subject: [PATCH 2/2] [skip ci] adding coverage badge

---
 badges/coverage.svg | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/badges/coverage.svg b/badges/coverage.svg
index 6366df0..a803cee 100644
--- a/badges/coverage.svg
+++ b/badges/coverage.svg
@@ -1,14 +1,14 @@
 <svg width="114.3" height="20" viewBox="0 0 1143 200" xmlns="http://www.w3.org/2000/svg" role="img" aria-label="coverage: 88.62%">
   <title>coverage: 88.62%</title>
-  <linearGradient id="a" x2="0" y2="100%">
+  <linearGradient id="CUvlG" x2="0" y2="100%">
     <stop offset="0" stop-opacity=".1" stop-color="#EEE"/>
     <stop offset="1" stop-opacity=".1"/>
   </linearGradient>
-  <mask id="m"><rect width="1143" height="200" rx="30" fill="#FFF"/></mask>
-  <g mask="url(#m)">
+  <mask id="ptMTs"><rect width="1143" height="200" rx="30" fill="#FFF"/></mask>
+  <g mask="url(#ptMTs)">
     <rect width="603" height="200" fill="#555"/>
     <rect width="540" height="200" fill="#a0a127" x="603"/>
-    <rect width="1143" height="200" fill="url(#a)"/>
+    <rect width="1143" height="200" fill="url(#CUvlG)"/>
   </g>
   <g aria-hidden="true" fill="#fff" text-anchor="start" font-family="Verdana,DejaVu Sans,sans-serif" font-size="110">
     <text x="60" y="148" textLength="503" fill="#000" opacity="0.25">coverage</text>