From ad4535faf6d5c48ddaecbfd5c51d00b6cfed28dc Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 24 May 2021 19:59:33 +0000 Subject: [PATCH] fix: upgrade helmet from 4.4.1 to 4.6.0 Snyk has created this PR to upgrade helmet from 4.4.1 to 4.6.0. See this package in npm: See this project in Snyk: https://app.snyk.io/org/danny900714/project/04ee905e-3dce-49ca-aa71-bc6afa602e42?utm_source=github&utm_medium=upgrade-pr --- api/package.json | 2 +- api/yarn.lock | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/api/package.json b/api/package.json index baa5168..df7875d 100644 --- a/api/package.json +++ b/api/package.json @@ -38,7 +38,7 @@ "graphql": "^15.5.0", "graphql-middleware": "^6.0.4", "graphql-shield": "^7.5.0", - "helmet": "^4.4.1", + "helmet": "^4.6.0", "jsonwebtoken": "^8.5.1", "lodash": "^4.17.21", "nconf": "^0.11.2", diff --git a/api/yarn.lock b/api/yarn.lock index 592c203..7e8445b 100644 --- a/api/yarn.lock +++ b/api/yarn.lock @@ -1793,10 +1793,10 @@ has@^1.0.3: dependencies: function-bind "^1.1.1" -helmet@^4.4.1: - version "4.4.1" - resolved "https://registry.yarnpkg.com/helmet/-/helmet-4.4.1.tgz#a17e1444d81d7a83ddc6e6f9bc6e2055b994efe7" - integrity sha512-G8tp0wUMI7i8wkMk2xLcEvESg5PiCitFMYgGRc/PwULB0RVhTP5GFdxOwvJwp9XVha8CuS8mnhmE8I/8dx/pbw== +helmet@^4.6.0: + version "4.6.0" + resolved "https://registry.yarnpkg.com/helmet/-/helmet-4.6.0.tgz#579971196ba93c5978eb019e4e8ec0e50076b4df" + integrity sha512-HVqALKZlR95ROkrnesdhbbZJFi/rIVSoNq6f3jA/9u6MIbTsPh3xZwihjeI5+DO/2sOV6HMHooXcEOuwskHpTg== hosted-git-info@^2.1.4: version "2.8.8"