fix: update fast-json-patch for security

package.json

@@ -35,7 +35,7 @@
   },
   "dependencies": {
     "ajv": "^8.0.0",
-    "fast-json-patch": "^2.0.0",
+    "fast-json-patch": "^3.1.1",
     "glob": "^7.1.0",
     "js-yaml": "^3.14.0",
     "json-schema-migrate": "^2.0.0",

src/commands/ajv.ts

@@ -86,9 +86,11 @@ export default function (argv: ParsedArgs): AjvCore {
       registerer = require("ts-node").register()
     } catch (err) {
       /* istanbul ignore next */
-      if (err.code === "MODULE_NOT_FOUND") {
+      if ((err as {code?: string; message: string}).code === "MODULE_NOT_FOUND") {
         throw new Error(
-          `'ts-node' is required for the TypeScript configuration files. Make sure it is installed\nError: ${err.message}`
+          `'ts-node' is required for the TypeScript configuration files. Make sure it is installed\nError: ${
+            (err as Error).message
+          }`
         )
       }
 

src/commands/util.ts

@@ -52,14 +52,14 @@
       json = require(file)
     }
   } catch (err) {
-    const msg: string = err.message
+    const msg: string = (err as Error).message
     console.error(`error:  ${msg.replace(" module", " " + suffix)}`)
     process.exit(2)
   }
   return json
 }
 
 export function logJSON(mode: string, data: any, ajv?: Ajv): string {
   switch (mode) {
     case "json":
       data = JSON.stringify(data, null, "  ")
@@ -82,7 +82,7 @@
     return ajv.compile(schema)
   } catch (err) {
     console.error(`schema ${schemaFile} is invalid`)
-    console.error(`error: ${err.message}`)
+    console.error(`error: ${(err as Error).message}`)
     process.exit(1)
   }
 }