16029: Force cypress to request minimist 1.2.5 instead of vulnerable 1.2.0

Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas@di-pentima.com.ar>

diff --git a/package.json b/package.json
index bbbd6bf44c835049c4ab28d16536c16f159ad3f3..9a68f9e8f9030d76d042ecd0a01f157e763a010c 100644 (file)
--- a/package.json
+++ b/package.json
@@ -110,6 +110,7 @@
     "react-scripts-ts/webpack-dev-server": "^2.11.4",
     "react-scripts-ts/**/**/**/**/js-yaml": "^3.13.1",
     "react-scripts-ts/uglifyjs-webpack-plugin/serialize-javascript": "^2.1.1",
-    "webpack/terser-webpack-plugin/serialize-javascript": "^2.1.1"
+    "webpack/terser-webpack-plugin/serialize-javascript": "^2.1.1",
+    "cypress/minimist": "1.2.5"
   }
 }

diff --git a/yarn.lock b/yarn.lock
index 917a0b255c67681aac2a6777209d511afb739582..b78ab876d276a824d082cf55822a81dc824512e2 100644 (file)
--- a/yarn.lock
+++ b/yarn.lock
@@ -7161,7 +7161,7 @@ minimist@0.0.8:
   resolved "https://registry.yarnpkg.com/minimist/-/minimist-0.0.8.tgz#857fcabfc3397d2625b8228262e86aa7a011b05d"
   integrity sha1-hX/Kv8M5fSYluCKCYuhqp6ARsF0=
 
-minimist@^1.1.0, minimist@^1.1.1, minimist@^1.1.3, minimist@^1.2.0, minimist@^1.2.5:
+minimist@1.2.0, minimist@1.2.5, minimist@^1.1.0, minimist@^1.1.1, minimist@^1.1.3, minimist@^1.2.0, minimist@^1.2.5:
   version "1.2.5"
   resolved "https://registry.yarnpkg.com/minimist/-/minimist-1.2.5.tgz#67d66014b66a6a8aaa0c083c5fd58df4e4e97602"
   integrity sha512-FM9nNUYrRBAELZQT3xeZQ7fmMOBg6nWNmJKTcgsJeaLstP/UODVpGsr5OhXhhXg6f+qtJ8uiZ+PUxkDWcgIXLw==