Merge pull request #317 from coveo/fix/COM-65-snyk

[COM-65] bump cross-fetch to fix CVE-2022-0235
coveo · Jan 24, 2022 · e9e5ad6 · e9e5ad6
2 parents 7a5c50d + 4d18c60
commit e9e5ad6
Show file tree

Hide file tree

Showing 3 changed files with 103 additions and 25 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -23,12 +23,13 @@
     },
     "license": "MIT",
     "dependencies": {
-        "@react-native-async-storage/async-storage": "^1.15.8",
-        "cross-fetch": "^3.1.4"
+        "@react-native-async-storage/async-storage": "^1.15.16",
+        "cross-fetch": "^3.1.5"
     },
     "devDependencies": {
         "@rollup/plugin-alias": "^3.1.2",
         "@rollup/plugin-commonjs": "^19.0.0",
+        "@rollup/plugin-json": "^4.1.0",
         "@rollup/plugin-node-resolve": "^13.0.0",
         "@types/fetch-mock": "^7.3.2",
         "@types/jest": "^25.1.1",

diff --git a/rollup.config.js b/rollup.config.js
@@ -4,6 +4,7 @@ import serve from 'rollup-plugin-serve';
 import commonjs from '@rollup/plugin-commonjs';
 import {nodeResolve} from '@rollup/plugin-node-resolve';
 import alias from '@rollup/plugin-alias';
+import json from '@rollup/plugin-json';
 import {resolve} from 'path';
 
 const browserFetch = () =>
@@ -60,7 +61,7 @@ const nodeCJS = {
         file: './dist/library.js',
         format: 'cjs',
     },
-    plugins: [nodeResolve({mainFields: ['main']}), commonjs(), tsPlugin()],
+    plugins: [nodeResolve({mainFields: ['main']}), commonjs(), tsPlugin(), json()],
 };
 
 const browserESM = {