fix: .snyk & package.json to reduce vulnerabilities

The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/SNYK-JS-LODASH-450202
This commit is contained in:
snyk-bot 2020-02-21 02:41:09 +00:00
parent 2b2794d675
commit 42660d084b
2 changed files with 4 additions and 2 deletions

4
.snyk
View file

@ -1,5 +1,5 @@
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
version: v1.14.0
version: v1.14.1
# ignores vulnerabilities until expiry date; change duration by modifying expiry date
ignore:
SNYK-JS-AWESOMPLETE-174474:
@ -18,3 +18,5 @@ patch:
SNYK-JS-LODASH-450202:
- frappe-datatable > lodash:
patched: '2020-01-31T01:33:09.889Z'
- snyk > snyk-nuget-plugin > dotnet-deps-parser > lodash:
patched: '2020-02-21T02:41:07.568Z'

View file

@ -46,7 +46,7 @@
"touch": "^3.1.0",
"vue": "^2.6.8",
"vue-router": "^2.0.0",
"snyk": "^1.288.0"
"snyk": "^1.294.1"
},
"devDependencies": {
"babel-runtime": "^6.26.0",