npm update
Have a security vulnerability around lodash.
This partially addresses.
See https://github.com/lodash/lodash/pull/4336
for more information.
Opened to address the remaining vulnerability:
https://github.com/openbmc/phosphor-webui/issues/91
Tested: Built image and loaded on a Witherspoon.
Change-Id: I071c916058bc6ce7dd2032bf1af5b5c8e6545dec
Signed-off-by: Gunnar Mills <gmills@us.ibm.com>
diff --git a/package.json b/package.json
index db7976e..904a86d 100644
--- a/package.json
+++ b/package.json
@@ -40,12 +40,12 @@
"angular-ui-router": "^1.0.22",
"bootstrap": "^4.3.1",
"ng-toast": "^2.0.0",
- "xterm": "^3.13.1"
+ "xterm": "^3.14.5"
},
"peerDependencies": {},
"devDependencies": {
- "@babel/core": "^7.4.4",
- "@babel/preset-env": "^7.4.4",
+ "@babel/core": "^7.5.5",
+ "@babel/preset-env": "^7.5.5",
"angular-mocks": "1.7.3",
"assets-webpack-plugin": "3.9.6",
"autoprefixer": "9.1.5",
@@ -74,9 +74,9 @@
"style-loader": "^0.23.1",
"svg-inline-loader": "^0.8.0",
"uglifyjs-webpack-plugin": "^1.3.0",
- "webpack": "^4.32.0",
- "webpack-cli": "^3.3.2",
- "webpack-dev-server": "^3.4.1"
+ "webpack": "^4.37.0",
+ "webpack-cli": "^3.3.6",
+ "webpack-dev-server": "^3.7.2"
},
"license": "MIT",
"engines": {