From 62dfe7ce4f0232d42ba63681d2acd053f8a0fcc4 Mon Sep 17 00:00:00 2001 From: alishahahmed <88002475+alishahahmed@users.noreply.github.com> Date: Thu, 13 Jan 2022 17:08:47 -0600 Subject: [PATCH] Fix Dependabot Alert (#1275) * As per the alert [https://github.com/microsoft/dicom-server/security/dependabot/tools/dicom-web-electron/package-lock.json/follow-redirects/open], follow-redirects has been updated to 1.14.7. * Added electrol tool to dependabot config. --- .github/dependabot.yml | 8 ++++++++ tools/dicom-web-electron/package-lock.json | 4 ++-- 2 files changed, 10 insertions(+), 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 91bce802c2..a27ca92b45 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -73,3 +73,11 @@ updates: time: "09:00" timezone: "America/Los_Angeles" open-pull-requests-limit: 30 + + - package-ecosystem: "npm" + directory: "/tools/dicom-web-electron" + schedule: + interval: "daily" + time: "09:00" + timezone: "America/Los_Angeles" + open-pull-requests-limit: 30 diff --git a/tools/dicom-web-electron/package-lock.json b/tools/dicom-web-electron/package-lock.json index 6a6eb69d36..90cd1b4a78 100644 --- a/tools/dicom-web-electron/package-lock.json +++ b/tools/dicom-web-electron/package-lock.json @@ -1648,8 +1648,8 @@ }, "node_modules/follow-redirects": { "version": "1.14.4", - "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.14.4.tgz", - "integrity": "sha512-zwGkiSXC1MUJG/qmeIFH2HBJx9u0V46QGUe3YR1fXG8bXQxq7fLj0RjLZQ5nubr9qNJUZrH+xUcwXEoXNpfS+g==", + "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.14.7.tgz", + "integrity": "sha512-+hbxoLbFMbRKDwohX8GkTataGqO6Jb7jGwpAlwgy2bIz25XtRm7KEzJM76R1WiNT5SwZkX4Y75SwBolkpmE7iQ==", "funding": [ { "type": "individual",