From 8f43cd091a6dbc5e03b0973d346a583b38e558a3 Mon Sep 17 00:00:00 2001 From: KeYu Date: Thu, 30 Sep 2021 16:13:06 +0800 Subject: [PATCH 1/2] Fix CG by updating strip-ansi from 5.2.0 to 6.0.1 Detail: Component and governance pipeline detect security vulnerability alert about ansi-regex(v4.1.0). To update ansi-regex to v5.0.1, I update strip-ansi to v6.0.1 --- package.json | 4 ++-- yarn.lock | 12 ------------ 2 files changed, 2 insertions(+), 14 deletions(-) diff --git a/package.json b/package.json index 31ab209..a3a16a2 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "jest-junit", - "version": "12.3.0", + "version": "12.3.1", "description": "A jest reporter that generates junit xml files", "main": "index.js", "repository": "https://github.com/jest-community/jest-junit", @@ -19,7 +19,7 @@ }, "dependencies": { "mkdirp": "^1.0.4", - "strip-ansi": "^5.2.0", + "strip-ansi": "^6.0.1", "uuid": "^8.3.2", "xml": "^1.0.1" }, diff --git a/yarn.lock b/yarn.lock index 1a368ac..19ff174 100644 --- a/yarn.lock +++ b/yarn.lock @@ -649,11 +649,6 @@ ansi-regex@^3.0.0: resolved "https://registry.yarnpkg.com/ansi-regex/-/ansi-regex-3.0.0.tgz#ed0317c322064f79466c02966bddb605ab37d998" integrity sha1-7QMXwyIGT3lGbAKWa922Bas32Zg= -ansi-regex@^4.1.0: - version "4.1.0" - resolved "https://registry.yarnpkg.com/ansi-regex/-/ansi-regex-4.1.0.tgz#8b9f8f08cf1acb843756a839ca8c7e3168c51997" - integrity sha512-1apePfXM1UOSqw0o9IiFAovVz9M5S1Dg+4TrDwfMewQ6p/rmMueb7tWZjQ1rx4Loy1ArBggoqGpfqqdI4rondg== - ansi-regex@^5.0.1: version "5.0.1" resolved "https://registry.yarnpkg.com/ansi-regex/-/ansi-regex-5.0.1.tgz#082cb2c89c9fe8659a311a53bd6a4dc5301db304" @@ -2593,13 +2588,6 @@ strip-ansi@^4.0.0: dependencies: ansi-regex "^3.0.0" -strip-ansi@^5.2.0: - version "5.2.0" - resolved "https://registry.yarnpkg.com/strip-ansi/-/strip-ansi-5.2.0.tgz#8c9a536feb6afc962bdfa5b104a5091c1ad9c0ae" - integrity sha512-DuRs1gKbBqsMKIZlrffwlug8MHkcnpjs5VPmL1PAh+mA30U0DTotfDZ0d2UUsXpPmPmMMJ6W773MaA3J+lbiWA== - dependencies: - ansi-regex "^4.1.0" - strip-ansi@^6.0.0, strip-ansi@^6.0.1: version "6.0.1" resolved "https://registry.yarnpkg.com/strip-ansi/-/strip-ansi-6.0.1.tgz#9e26c63d30f53443e9489495b2105d37b67a85d9" From 2b6c131f43cb997f98ef8476c196a2838f29f795 Mon Sep 17 00:00:00 2001 From: Simen Bekkhus Date: Thu, 30 Sep 2021 10:28:03 +0200 Subject: [PATCH 2/2] Update package.json --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index a3a16a2..ace4ede 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "jest-junit", - "version": "12.3.1", + "version": "12.3.0", "description": "A jest reporter that generates junit xml files", "main": "index.js", "repository": "https://github.com/jest-community/jest-junit",