Skip to content

Commit ee1d646

Browse files
vilattometa-codesync[bot]
authored andcommitted
Upgrade vulnerable dependencies
Summary: In the previous diff, bumping the version of docusaurus packages did not resolve the vulnerable packages issue since the latest 2.x of docusaurus still depend on the vulnerable versions of these packages. This diff switches to use resolution to force bump the version these packages. Reviewed By: genevievehelsel Differential Revision: D90137962 fbshipit-source-id: fb6ddc4c37921c8afb812f140724367093f8f896
1 parent fe64c41 commit ee1d646

2 files changed

Lines changed: 2272 additions & 1683 deletions

File tree

third-party/watchman/src/website/package.json

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -40,5 +40,11 @@
4040
"node": ">=16",
4141
"npm": "use yarn instead",
4242
"yarn": "^1.5"
43+
},
44+
"resolutions": {
45+
"node-forge": "^1.3.2",
46+
"axios": "^0.30.2",
47+
"cookie": "^0.7.0",
48+
"follow-redirects": "^1.15.6"
4349
}
4450
}

0 commit comments

Comments
 (0)