NPM update
Observed this security vulnerability in the phosphor-webui
repo on GitHub:
"We found a potential security vulnerability in one of your
dependencies.
lodash vulnerability found in package-lock.json
Upgrade lodash to version 4.17.11 or later."
See https://nvd.nist.gov/vuln/detail/CVE-2018-16487 for more
information.
Ran "NPM update" && "npm install lodash@latest --save".
Tested: Built the GUI and loaded it on a Witherspoon. No
regressions observed
Change-Id: I0b848a6aedea699a1b1a26f58c342ff781618a3d
Signed-off-by: Gunnar Mills <gmills@us.ibm.com>
diff --git a/package.json b/package.json
index b4db876..93126fe 100644
--- a/package.json
+++ b/package.json
@@ -38,14 +38,14 @@
"angular-ui-bootstrap": "^2.5.0",
"angular-ui-router": "^1.0.20",
"angular-websocket": "^2.0.1",
- "bootstrap": "^4.2.1",
+ "bootstrap": "^4.3.1",
"ng-toast": "^2.0.0",
"xterm": "^3.10.1"
},
"peerDependencies": {},
"devDependencies": {
"@babel/core": "^7.2.2",
- "@babel/preset-env": "^7.2.3",
+ "@babel/preset-env": "^7.3.1",
"angular-mocks": "1.7.3",
"assets-webpack-plugin": "3.9.6",
"autoprefixer": "9.1.5",
@@ -73,8 +73,8 @@
"style-loader": "^0.23.1",
"svg-inline-loader": "^0.8.0",
"uglifyjs-webpack-plugin": "^1.3.0",
- "webpack": "^4.28.3",
- "webpack-cli": "^3.2.1",
+ "webpack": "^4.29.3",
+ "webpack-cli": "^3.2.3",
"webpack-dev-server": "^3.1.11"
},
"license": "MIT",