Skip to content

Commit

Permalink
fix(@angular-devkit/build-angular): update minimatch dependency to …
Browse files Browse the repository at this point in the history
…`3.0.5`

Update build-angular's minimatch dependency to v3.0.5 as a result of VULNDB-282782. See: https://huntr.dev/bounties/e4e1393c-d590-4492-9f43-8be3f3321629/
  • Loading branch information
therek authored and clydin committed Apr 1, 2022
1 parent 6740dc7 commit c97c8e7
Show file tree
Hide file tree
Showing 3 changed files with 6 additions and 6 deletions.
2 changes: 1 addition & 1 deletion package.json
Original file line number Diff line number Diff line change
Expand Up @@ -172,7 +172,7 @@
"loader-utils": "3.2.0",
"magic-string": "0.25.7",
"mini-css-extract-plugin": "2.5.3",
"minimatch": "3.0.4",
"minimatch": "3.0.5",
"minimist": "1.2.6",
"ng-packagr": "13.1.3",
"node-fetch": "^2.2.0",
Expand Down
2 changes: 1 addition & 1 deletion packages/angular_devkit/build_angular/package.json
Original file line number Diff line number Diff line change
Expand Up @@ -42,7 +42,7 @@
"license-webpack-plugin": "4.0.2",
"loader-utils": "3.2.0",
"mini-css-extract-plugin": "2.5.3",
"minimatch": "3.0.4",
"minimatch": "3.0.5",
"open": "8.4.0",
"ora": "5.4.1",
"parse5-html-rewriting-stream": "6.0.1",
Expand Down
8 changes: 4 additions & 4 deletions yarn.lock
Original file line number Diff line number Diff line change
Expand Up @@ -7713,10 +7713,10 @@ minimalistic-assert@^1.0.0:
resolved "https://registry.yarnpkg.com/minimalistic-assert/-/minimalistic-assert-1.0.1.tgz#2e194de044626d4a10e7f7fbc00ce73e83e4d5c7"
integrity sha512-UtJcAD4yEaGtjPezWuO9wC4nwUnVH/8/Im3yEHQP4b67cXlD/Qr9hdITCU1xDbSEXg2XKNaP8jsReV7vQd00/A==

"minimatch@2 || 3", minimatch@3.0.4, minimatch@^3.0.2, minimatch@^3.0.4, minimatch@~3.0.4:
version "3.0.4"
resolved "https://registry.yarnpkg.com/minimatch/-/minimatch-3.0.4.tgz#5166e286457f03306064be5497e8dbb0c3d32083"
integrity sha512-yJHVQEhyqPLUTgt9B83PXu6W3rx4MvvHvSUvToogpwoGDOUQ+yDrR0HRot+yOCdCO7u4hX3pWft6kWBBcqh0UA==
"minimatch@2 || 3", minimatch@3.0.5, minimatch@^3.0.2, minimatch@^3.0.4, minimatch@~3.0.5:
version "3.0.5"
resolved "https://registry.yarnpkg.com/minimatch/-/minimatch-3.0.5.tgz#4da8f1290ee0f0f8e83d60ca69f8f134068604a3"
integrity sha512-tUpxzX0VAzJHjLu0xUfFv1gwVp9ba3IOuRAVH2EGuRW8a5emA2FlACLqiT/lDVtS1W+TGNwqz3sWaNyLgDJWuw==
dependencies:
brace-expansion "^1.1.7"

Expand Down

0 comments on commit c97c8e7

Please sign in to comment.