From 2157f5a19d30a5abe3be7281032602181fb30c0e Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 11 Sep 2024 05:59:16 +0000 Subject: [PATCH] fix: react-native-redux-sample/ReactNativeWithSendBird/package.json & react-native-redux-sample/ReactNativeWithSendBird/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-PATHTOREGEXP-7925106 - https://snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908 - https://snyk.io/vuln/SNYK-JS-MINIMIST-559764 - https://snyk.io/vuln/SNYK-JS-WS-1296835 - https://snyk.io/vuln/SNYK-JS-NODEFETCH-2342118 - https://snyk.io/vuln/SNYK-JS-NODEFETCH-674311 - https://snyk.io/vuln/SNYK-JS-MINIMIST-2429795 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- .../ReactNativeWithSendBird/.snyk | 10 ++++++++++ .../ReactNativeWithSendBird/package.json | 14 +++++++++----- 2 files changed, 19 insertions(+), 5 deletions(-) create mode 100644 react-native-redux-sample/ReactNativeWithSendBird/.snyk diff --git a/react-native-redux-sample/ReactNativeWithSendBird/.snyk b/react-native-redux-sample/ReactNativeWithSendBird/.snyk new file mode 100644 index 00000000..3338b392 --- /dev/null +++ b/react-native-redux-sample/ReactNativeWithSendBird/.snyk @@ -0,0 +1,10 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - react-native-cached-image > lodash: + patched: '2024-09-11T05:59:12.851Z' + id: SNYK-JS-LODASH-567746 + path: react-native-cached-image > lodash diff --git a/react-native-redux-sample/ReactNativeWithSendBird/package.json b/react-native-redux-sample/ReactNativeWithSendBird/package.json index ed90445f..c6cd8d43 100644 --- a/react-native-redux-sample/ReactNativeWithSendBird/package.json +++ b/react-native-redux-sample/ReactNativeWithSendBird/package.json @@ -8,13 +8,15 @@ "test": "jest --verbose --coverage", "test:update": "jest --verbose --coverage --updateSnapshot", "test:watch": "jest --verbose --watch", - "coverage": "jest --verbose --coverage && open ./coverage/lcov-report/index.html" + "coverage": "jest --verbose --coverage && open ./coverage/lcov-report/index.html", + "prepublish": "npm run snyk-protect", + "snyk-protect": "snyk-protect" }, "dependencies": { "react": "16.8.3", "react-native": "0.59.3", "react-native-cached-image": "1.4.3", - "react-native-elements": "0.19.0", + "react-native-elements": "1.0.0", "react-native-fetch-blob": "0.10.8", "react-native-firebase": "~5.5.3", "react-native-gesture-handler": "1.3.0", @@ -26,11 +28,12 @@ "react-native-swipeout": "2.3.6", "react-native-vector-icons": "6.5.0", "react-native-video": "4.4.2", - "react-navigation": "3.3.2", + "react-navigation": "5.0.0", "react-redux": "7.1.0", "redux": "4.0.1", "redux-thunk": "2.3.0", - "sendbird": "3.0.99" + "sendbird": "3.0.156", + "@snyk/protect": "latest" }, "devDependencies": { "babel-jest": "24.8.0", @@ -63,5 +66,6 @@ "modulePathIgnorePatterns": [ "/ios" ] - } + }, + "snyk": true }