From cb49eaf6b61c1ba6a8e11eb3a855d75562c8b4e6 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 8 Jan 2023 11:39:26 +0000 Subject: [PATCH 1/2] fix: background/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-DEXIE-2607042 --- background/package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/background/package.json b/background/package.json index cb6fefb5c5..9510aec9d7 100644 --- a/background/package.json +++ b/background/package.json @@ -52,7 +52,7 @@ "assert": "^2.0.0", "bnc-sdk": "^3.4.1", "dayjs": "^1.10.7", - "dexie": "^3.0.3", + "dexie": "^3.0.4", "emittery": "^0.9.2", "ethers": "^5.5.1", "lodash": "^4.17.21", From 6f8fcbb07f37ab2076c1bdc6a270e210b8e08a7b Mon Sep 17 00:00:00 2001 From: hyphenized <28708889+hyphenized@users.noreply.github.com> Date: Mon, 30 Jan 2023 17:24:21 -0500 Subject: [PATCH 2/2] Update dexie.js to 3.0.4 --- background/package.json | 2 +- package.json | 2 +- yarn.lock | 8 ++++---- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/background/package.json b/background/package.json index f3ae912b48..5874cc9ad2 100644 --- a/background/package.json +++ b/background/package.json @@ -52,7 +52,7 @@ "assert": "^2.0.0", "bnc-sdk": "^3.4.1", "dayjs": "^1.10.7", - "dexie": "^3.0.4", + "dexie": "~3.0.4", "emittery": "^0.9.2", "ethers": "^5.5.1", "lodash": "^4.17.21", diff --git a/package.json b/package.json index 305a79a88b..56b898eeed 100644 --- a/package.json +++ b/package.json @@ -94,7 +94,7 @@ "archiver": "^5.3.0", "babel-loader": "^8.2.2", "copy-webpack-plugin": "^9.0.0", - "dexie": "^3.0.3", + "dexie": "~3.0.4", "dotenv-defaults": "^2.0.2", "dotenv-webpack": "^7.0.3", "eslint": "^7.28.0", diff --git a/yarn.lock b/yarn.lock index 547927ef83..d125e54ef2 100644 --- a/yarn.lock +++ b/yarn.lock @@ -6531,10 +6531,10 @@ detect-node@^2.0.4: resolved "https://registry.yarnpkg.com/detect-node/-/detect-node-2.1.0.tgz#c9c70775a49c3d03bc2c06d9a73be550f978f8b1" integrity sha512-T0NIuQpnTvFDATNuHN5roPwSBG83rFsuO+MXXH9/3N1eFbn4wcPjttvjMLEPWJ0RGUYgQE7cGgS3tNxbqCGM7g== -dexie@^3.0.3: - version "3.0.3" - resolved "https://registry.yarnpkg.com/dexie/-/dexie-3.0.3.tgz#ede63849dfe5f07e13e99bb72a040e8ac1d29dab" - integrity sha512-BSFhGpngnCl1DOr+8YNwBDobRMH0ziJs2vts69VilwetHYOtEDcLqo7d/XiIphM0tJZ2rPPyAGd31lgH2Ln3nw== +dexie@~3.0.4: + version "3.0.4" + resolved "https://registry.yarnpkg.com/dexie/-/dexie-3.0.4.tgz#18f5e124d525a413fa836716f2c37fbbc36a6662" + integrity sha512-rwS3k8BBstjGFJAS/yjYrsRZucqitnrP3NBhqghl9ihWcWABlT3I5f2dZV9T3pmXGAP7G9p1q00g/axcsuOT8A== dezalgo@^1.0.0: version "1.0.3"