diff --git a/.snyk b/.snyk index ed91a10..f48e3e1 100644 --- a/.snyk +++ b/.snyk @@ -1,9 +1,12 @@ -version: v1.5.0 +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.7.0 +# ignores vulnerabilities until expiry date; change duration by modifying expiry date ignore: 'npm:shell-quote:20160621': - laravel-elixir > browserify > shell-quote: reason: None given expires: '2016-10-01T19:17:18.705Z' +# patches apply the minimum changes required to fix a vulnerability patch: 'npm:minimatch:20160620': - laravel-elixir > browserify > glob > minimatch: @@ -18,3 +21,6 @@ patch: patched: '2016-09-01T19:17:18.824Z' - laravel-elixir > gulp-phpunit > gulp > vinyl-fs > glob-watcher > gaze > globule > glob > minimatch: patched: '2016-09-01T19:17:18.824Z' + 'npm:qs:20170213': + - laravel-elixir > browser-sync > qs: + patched: '2017-03-20T09:33:42.999Z' diff --git a/package.json b/package.json index bbfb527..ba5b62e 100644 --- a/package.json +++ b/package.json @@ -7,7 +7,7 @@ "gulp-jscs": "2.0.0", "laravel-elixir": "4.0.1", "gulp-notify": "^2.2.0", - "snyk": "^1.19.1" + "snyk": "^1.25.2" }, "devDependencies": {}, "scripts": {