Merge pull request #123 from CollageLabs/snyk-fix-763bacbd2445af8156e…

…b51a5194b0690

[Snyk] Fix for 1 vulnerabilities

.snyk

@@ -1,4 +1,126 @@
 # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
-version: v1.13.5
+version: v1.14.1
 ignore: {}
-patch: {}
+# patches apply the minimum changes required to fix a vulnerability
+patch:
+  SNYK-JS-LODASH-567746:
+    - '@babel/core > lodash':
+        patched: '2020-05-05T22:34:58.296Z'
+    - browser-sync-webpack-plugin > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - concurrently > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - eslint > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - html-webpack-plugin > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - webpack-merge > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - node-sass > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - snyk > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - '@babel/preset-env > @babel/types > lodash':
+        patched: '2020-05-05T22:34:58.296Z'
+    - netlify-lambda > @babel/core > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - browser-sync > easy-extender > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - eslint > inquirer > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - eslint > table > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - favicons-webpack-plugin > html-webpack-plugin > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - html-critical-webpack-plugin > critical > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - netlify-lambda > webpack-merge > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - node-sass > sass-graph > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - svg-sprite-loader > html-webpack-plugin > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - svg-transform-loader > posthtml-transform > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - webpack-dev-server > http-proxy-middleware > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - snyk > graphlib > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - snyk > @snyk/ruby-semver > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - snyk > inquirer > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - snyk > snyk-config > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - snyk > snyk-mvn-plugin > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - snyk > snyk-nodejs-lockfile-parser > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - snyk > snyk-nuget-plugin > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - '@babel/preset-env > @babel/plugin-transform-classes > @babel/helper-define-map > lodash':
+        patched: '2020-05-05T22:34:58.296Z'
+    - netlify-lambda > @babel/preset-env > @babel/plugin-transform-block-scoping > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - html-critical-webpack-plugin > critical > group-args > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - http-server > portfinder > async > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - webpack-dev-server > portfinder > async > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - node-sass > gaze > globule > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - snyk > @snyk/dep-graph > graphlib > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - snyk > snyk-go-plugin > graphlib > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - snyk > snyk-nodejs-lockfile-parser > graphlib > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - snyk > @snyk/snyk-cocoapods-plugin > @snyk/dep-graph > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - snyk > snyk-nodejs-lockfile-parser > snyk-config > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - snyk > snyk-mvn-plugin > @snyk/java-call-graph-builder > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - snyk > snyk-nuget-plugin > dotnet-deps-parser > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - snyk > snyk-php-plugin > @snyk/composer-lockfile-parser > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - '@babel/preset-env > @babel/plugin-transform-classes > @babel/helper-function-name > @babel/types > lodash':
+        patched: '2020-05-05T22:34:58.296Z'
+    - netlify-lambda > @babel/preset-env > @babel/plugin-transform-classes > @babel/helper-define-map > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - snyk > snyk-docker-plugin > @snyk/rpm-parser > eslint > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - snyk > @snyk/snyk-cocoapods-plugin > @snyk/dep-graph > graphlib > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - snyk > snyk-mvn-plugin > @snyk/java-call-graph-builder > graphlib > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - snyk > @snyk/snyk-cocoapods-plugin > @snyk/cocoapods-lockfile-parser > @snyk/dep-graph > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - snyk > snyk-mvn-plugin > @snyk/java-call-graph-builder > snyk-config > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - '@babel/preset-env > @babel/preset-modules > @babel/plugin-transform-dotall-regex > @babel/helper-create-regexp-features-plugin > @babel/helper-regex > lodash':
+        patched: '2020-05-05T22:34:58.296Z'
+    - netlify-lambda > @babel/preset-env > @babel/plugin-transform-unicode-regex > @babel/helper-create-regexp-features-plugin > @babel/helper-regex > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - snyk > snyk-docker-plugin > @snyk/rpm-parser > eslint > inquirer > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - snyk > snyk-docker-plugin > @snyk/rpm-parser > eslint > table > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - snyk > @snyk/snyk-cocoapods-plugin > @snyk/cocoapods-lockfile-parser > @snyk/dep-graph > graphlib > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - '@babel/preset-env > @babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > @babel/generator > lodash':
+        patched: '2020-05-05T22:34:58.296Z'
+    - netlify-lambda > @babel/preset-env > @babel/preset-modules > @babel/plugin-transform-dotall-regex > @babel/helper-create-regexp-features-plugin > @babel/helper-regex > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - netlify-lambda > @babel/preset-env > @babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > @babel/generator > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - '@babel/preset-env > @babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > @babel/helper-split-export-declaration > @babel/types > lodash':
+        patched: '2020-05-05T22:34:58.296Z'
+    - netlify-lambda > @babel/preset-env > @babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > @babel/helper-split-export-declaration > @babel/types > lodash:
+        patched: '2020-05-05T22:34:58.296Z'
+    - '@babel/preset-env > @babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > @babel/helper-function-name > @babel/template > @babel/types > lodash':
+        patched: '2020-05-05T22:34:58.296Z'
+    - netlify-lambda > @babel/preset-env > @babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > @babel/helper-function-name > @babel/template > @babel/types > lodash:
+        patched: '2020-05-05T22:34:58.296Z'

package.json

@@ -28,8 +28,8 @@
     "build:pwa:optim": "yarn run clean:project && yarn run webpack:pwa && yarn run jekyll:pwa && yarn run build:lambda && yarn run webpack:optim && yarn run sw",
     "serve:dist": "yarn run clean:project && yarn run build:pwa:optim && http-server _site",
     "serve:dev": "yarn run clean:project && yarn run webpack:dev && yarn run jekyll:dev",
-    "snyk-protect": "npx snyk protect",
-    "prepare": "yarn run snyk-protect",
+    "snyk-protect": "snyk protect",
+    "prepare": "npm run snyk-protect && yarn run snyk-protect",
     "start:lambda": "netlify-lambda serve lambda",
     "build:lambda": "netlify-lambda build lambda"
   },
@@ -109,7 +109,7 @@
     "popper.js": "1.16.1",
     "puppeteer": "3.0.2",
     "slick-carousel": "1.8.1",
-    "snyk": "1.317.0"
+    "snyk": "^1.319.0"
   },
   "snyk": true
 }