Skip to content

Commit

Permalink
chore: use resolutions to use shell-quote 1.7.3 (#807)
Browse files Browse the repository at this point in the history
react-dev-utils 11.0.3 specifies shell-quote 1.7.2 precisely which is
preventing dependabot automated security PRs for it. react-dev-utils
didn't change this to ^1.7.3 until 12.0.1. Use a resolution to resolve
to 1.7.3.
  • Loading branch information
jdstrand authored Sep 16, 2022
1 parent 8e72a58 commit 4b61d6b
Show file tree
Hide file tree
Showing 2 changed files with 6 additions and 5 deletions.
3 changes: 2 additions & 1 deletion package.json
Original file line number Diff line number Diff line change
Expand Up @@ -12,6 +12,7 @@
},
"resolutions": {
"immer": "^9.0.6",
"jsprim": "^1.4.2"
"jsprim": "^1.4.2",
"shell-quote": "1.7.3"
}
}
8 changes: 4 additions & 4 deletions yarn.lock
Original file line number Diff line number Diff line change
Expand Up @@ -11739,10 +11739,10 @@ shebang-regex@^3.0.0:
resolved "https://registry.yarnpkg.com/shebang-regex/-/shebang-regex-3.0.0.tgz#ae16f1644d873ecad843b0307b143362d4c42172"
integrity sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==

[email protected]:
version "1.7.2"
resolved "https://registry.yarnpkg.com/shell-quote/-/shell-quote-1.7.2.tgz#67a7d02c76c9da24f99d20808fcaded0e0e04be2"
integrity sha512-mRz/m/JVscCrkMyPqHc/bczi3OQHkLTqXHEFu0zDhK/qfv3UcOA4SVmRCLmos4bhjr9ekVQubj/R7waKapmiQg==
[email protected], [email protected]:
version "1.7.3"
resolved "https://registry.yarnpkg.com/shell-quote/-/shell-quote-1.7.3.tgz#aa40edac170445b9a431e17bb62c0b881b9c4123"
integrity sha512-Vpfqwm4EnqGdlsBFNmHhxhElJYrdfcxPThu+ryKS5J8L/fhAwLazFZtq+S+TWZ9ANj2piSQLGj6NQg+lKPmxrw==

shelljs@^0.8.1:
version "0.8.5"
Expand Down

0 comments on commit 4b61d6b

Please sign in to comment.