From b8d6a4e9a202327ecc7dd6c41b108e3ce3045c04 Mon Sep 17 00:00:00 2001 From: Matt Riedemann Date: Thu, 21 Oct 2021 15:22:26 -0400 Subject: [PATCH] Updates for ansi-regex 5.0.1 and CVE-2021-3807 This updates strip-ansi and mocha to pick up ansi-regex 5.0.1 for CVE-2021-3807 [1][2]. [1] https://nvd.nist.gov/vuln/detail/CVE-2021-3807 [2] https://github.com/advisories/GHSA-93q8-gq69-wqmw Closes #111 --- package.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/package.json b/package.json index 3426665..1eaac1b 100644 --- a/package.json +++ b/package.json @@ -50,7 +50,7 @@ "license": "ISC", "dependencies": { "string-width": "^4.2.0", - "strip-ansi": "^6.0.0", + "strip-ansi": "^6.0.1", "wrap-ansi": "^7.0.0" }, "devDependencies": { @@ -66,7 +66,7 @@ "eslint-plugin-import": "^2.22.0", "eslint-plugin-node": "^11.1.0", "gts": "^3.0.0", - "mocha": "^8.1.1", + "mocha": "^9.1.3", "rimraf": "^3.0.2", "rollup": "^2.23.1", "standardx": "^7.0.0",