From e4563887a7f2435892307f7823bdc544e4c6c9b3 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 11 Feb 2024 14:56:38 +0000 Subject: [PATCH] fix: workspaces/libnpmpack/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-IP-6240864 --- workspaces/libnpmpack/package.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/workspaces/libnpmpack/package.json b/workspaces/libnpmpack/package.json index 86bec9ff1d618..8c75b5feab5c3 100644 --- a/workspaces/libnpmpack/package.json +++ b/workspaces/libnpmpack/package.json @@ -38,9 +38,9 @@ "bugs": "https://github.com/npm/libnpmpack/issues", "homepage": "https://npmjs.com/package/libnpmpack", "dependencies": { - "@npmcli/run-script": "^4.1.3", + "@npmcli/run-script": "^7.0.2", "npm-package-arg": "^9.0.1", - "pacote": "^13.6.1" + "pacote": "^17.0.4" }, "engines": { "node": "^12.13.0 || ^14.15.0 || >=16.0.0"