From: Lucas Di Pentima <lucas.dipentima@curii.com>
Date: Tue, 8 Jun 2021 12:46:24 +0000 (-0300)
Subject: 17653: Upgrades ssri.
X-Git-Tag: 2.2.1~2^2~15
X-Git-Url: https://git.arvados.org/arvados-workbench2.git/commitdiff_plain/ac42a0ffef1f49d026eb9a7633c5e8a6925ba380

17653: Upgrades ssri.

Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas.dipentima@curii.com>
---

diff --git a/package.json b/package.json
index bb3c5878..92ee1a3a 100644
--- a/package.json
+++ b/package.json
@@ -121,17 +121,18 @@
     }
   },
   "resolutions": {
+    "cypress/minimist": "1.2.5",
+    "fbjs/ua-parser-js": "0.7.24",
+    "react-rte/**/ua-parser-js": "0.7.24",
     "react-scripts-ts/webpack-dev-server": "^2.11.4",
     "react-scripts-ts/**/**/**/**/js-yaml": "^3.13.1",
     "react-scripts-ts/uglifyjs-webpack-plugin/serialize-javascript": "^3.1.0",
+    "react-scripts-ts/uglifyjs-webpack-plugin/cacache/ssri": "6.0.2",
     "react-scripts-ts/**/handlebars": "^4.7.7",
     "react-scripts-ts/**/merge": "^2.1.1",
-    "fbjs/ua-parser-js": "0.7.24",
-    "react-rte/**/ua-parser-js": "0.7.24",
-    "webpack/terser-webpack-plugin/serialize-javascript": "^3.1.0",
-    "webpack/node-libs-browser/crypto-browserify/*/elliptic": "6.5.4",
     "webpack-dev-server/http-proxy-middleware/http-proxy": "^1.18.1",
     "webpack-dev-server/selfsigned/node-forge": "0.10.0",
-    "cypress/minimist": "1.2.5"
+    "webpack/node-libs-browser/crypto-browserify/*/elliptic": "6.5.4",
+    "webpack/terser-webpack-plugin/serialize-javascript": "^3.1.0"
   }
 }
diff --git a/yarn.lock b/yarn.lock
index c62863d9..a90c9dbd 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -10402,12 +10402,12 @@ sshpk@^1.7.0:
     safer-buffer "^2.0.2"
     tweetnacl "~0.14.0"
 
-ssri@^5.2.4:
-  version "5.3.0"
-  resolved "https://registry.yarnpkg.com/ssri/-/ssri-5.3.0.tgz#ba3872c9c6d33a0704a7d71ff045e5ec48999d06"
-  integrity sha512-XRSIPqLij52MtgoQavH/x/dU1qVKtWUAAZeOHsR9c2Ddi4XerFy3mc1alf+dLJKl9EUIm/Ht+EowFkTUOA6GAQ==
+ssri@6.0.2, ssri@^5.2.4:
+  version "6.0.2"
+  resolved "https://registry.yarnpkg.com/ssri/-/ssri-6.0.2.tgz#157939134f20464e7301ddba3e90ffa8f7728ac5"
+  integrity sha512-cepbSq/neFK7xB6A50KHN0xHDotYzq58wWCa5LeWqnPrHG8GzfEjO/4O8kpmcGW+oaxkvhEJCWgbgNk4/ZV93Q==
   dependencies:
-    safe-buffer "^5.1.1"
+    figgy-pudding "^3.5.1"
 
 ssri@^6.0.1:
   version "6.0.1"