From 7b7ec52eeedf9ed105614f3b64e6c490b85c44e5 Mon Sep 17 00:00:00 2001 From: Tom Moor Date: Tue, 12 Mar 2019 23:54:35 -0700 Subject: [PATCH] Bump production dependencies with open CVEs --- package.json | 6 ++-- server/api/middlewares/cache.js | 6 ++-- yarn.lock | 57 +++++++++++---------------------- 3 files changed, 24 insertions(+), 45 deletions(-) diff --git a/package.json b/package.json index fd2e1fef..17bca0fb 100644 --- a/package.json +++ b/package.json @@ -84,7 +84,7 @@ "copy-to-clipboard": "^3.0.6", "css-loader": "^0.28.7", "date-fns": "1.29.0", - "debug": "2.6.9", + "debug": "^4.1.1", "dotenv": "^4.0.0", "emoji-regex": "^6.5.1", "exports-loader": "^0.6.4", @@ -101,7 +101,7 @@ "isomorphic-fetch": "2.2.1", "js-search": "^1.4.2", "json-loader": "0.5.4", - "jsonwebtoken": "7.0.1", + "jsonwebtoken": "^8.5.0", "jszip": "3.1.5", "koa": "^2.2.0", "koa-bodyparser": "4.2.0", @@ -117,7 +117,7 @@ "koa-sendfile": "2.0.0", "koa-sslify": "2.1.2", "koa-static": "^4.0.1", - "lodash": "^4.17.4", + "lodash": "^4.17.11", "mobx": "4.6.0", "mobx-react": "^5.4.2", "natural-sort": "^1.0.0", diff --git a/server/api/middlewares/cache.js b/server/api/middlewares/cache.js index 7caf9ddd..b47008e6 100644 --- a/server/api/middlewares/cache.js +++ b/server/api/middlewares/cache.js @@ -2,7 +2,7 @@ import debug from 'debug'; import { type Context } from 'koa'; -const debugCache = debug('cache'); +const log = debug('cache'); export default function cache() { return async function cacheMiddleware(ctx: Context, next: () => Promise<*>) { @@ -14,9 +14,9 @@ export default function cache() { ctx.cache.get = async (id, def) => { if (ctx.cache[id]) { - debugCache(`hit: ${id}`); + log(`hit: ${id}`); } else { - debugCache(`miss: ${id}`); + log(`miss: ${id}`); ctx.cache.set(id, await def()); } return ctx.cache[id]; diff --git a/yarn.lock b/yarn.lock index daf4fed1..320d4f9f 100644 --- a/yarn.lock +++ b/yarn.lock @@ -2553,7 +2553,7 @@ dateformat@^2.0.0: version "2.2.0" resolved "https://registry.yarnpkg.com/dateformat/-/dateformat-2.2.0.tgz#4065e2013cf9fb916ddfd82efb506ad4c6769062" -debug@*, debug@^4.0.1, debug@^4.1.0: +debug@*, debug@^4.0.1, debug@^4.1.0, debug@^4.1.1: version "4.1.1" resolved "https://registry.yarnpkg.com/debug/-/debug-4.1.1.tgz#3b72260255109c6b589cee050f1d516139664791" dependencies: @@ -4419,10 +4419,6 @@ hmac-drbg@^1.0.0: minimalistic-assert "^1.0.0" minimalistic-crypto-utils "^1.0.1" -hoek@2.x.x: - version "2.16.3" - resolved "https://registry.yarnpkg.com/hoek/-/hoek-2.16.3.tgz#20bb7403d3cea398e91dc4710a8ff1b8274a25ed" - hoist-non-react-statics@^2.5.0: version "2.5.5" resolved "https://registry.yarnpkg.com/hoist-non-react-statics/-/hoist-non-react-statics-2.5.5.tgz#c5903cf409c0dfd908f388e619d86b9c1174cb47" @@ -5140,10 +5136,6 @@ isarray@1.0.0, isarray@^1.0.0, isarray@~1.0.0: version "1.0.0" resolved "https://registry.yarnpkg.com/isarray/-/isarray-1.0.0.tgz#bb935d48582cba168c06834957a54a3e07124f11" -isemail@1.x.x: - version "1.2.0" - resolved "https://registry.yarnpkg.com/isemail/-/isemail-1.2.0.tgz#be03df8cc3e29de4d2c5df6501263f1fa4595e9a" - isexe@^2.0.0: version "2.0.0" resolved "https://registry.yarnpkg.com/isexe/-/isexe-2.0.0.tgz#e8fbf374dc556ff8947a10dcb0572d633f2cfa10" @@ -5503,15 +5495,6 @@ jmespath@0.15.0: version "0.15.0" resolved "https://registry.yarnpkg.com/jmespath/-/jmespath-0.15.0.tgz#a3f222a9aae9f966f5d27c796510e28091764217" -joi@~6.10.1: - version "6.10.1" - resolved "https://registry.yarnpkg.com/joi/-/joi-6.10.1.tgz#4d50c318079122000fe5f16af1ff8e1917b77e06" - dependencies: - hoek "2.x.x" - isemail "1.x.x" - moment "2.x.x" - topo "1.x.x" - js-base64@^2.1.9: version "2.5.1" resolved "https://registry.yarnpkg.com/js-base64/-/js-base64-2.5.1.tgz#1efa39ef2c5f7980bb1784ade4a8af2de3291121" @@ -5669,15 +5652,6 @@ jsonify@~0.0.0: version "0.0.0" resolved "https://registry.yarnpkg.com/jsonify/-/jsonify-0.0.0.tgz#2c74b6ee41d93ca51b7b5aaee8f503631d252a73" -jsonwebtoken@7.0.1: - version "7.0.1" - resolved "https://registry.yarnpkg.com/jsonwebtoken/-/jsonwebtoken-7.0.1.tgz#4aba9fea3552c8f1d415d4117ab80aa09d6af55e" - dependencies: - joi "~6.10.1" - jws "^3.0.0" - ms "^0.7.1" - xtend "^4.0.1" - jsonwebtoken@8.3.0: version "8.3.0" resolved "https://registry.yarnpkg.com/jsonwebtoken/-/jsonwebtoken-8.3.0.tgz#056c90eee9a65ed6e6c72ddb0a1d325109aaf643" @@ -5692,6 +5666,21 @@ jsonwebtoken@8.3.0: lodash.once "^4.0.0" ms "^2.1.1" +jsonwebtoken@^8.5.0: + version "8.5.0" + resolved "https://registry.yarnpkg.com/jsonwebtoken/-/jsonwebtoken-8.5.0.tgz#ebd0ca2a69797816e1c5af65b6c759787252947e" + dependencies: + jws "^3.2.1" + lodash.includes "^4.3.0" + lodash.isboolean "^3.0.3" + lodash.isinteger "^4.0.4" + lodash.isnumber "^3.0.3" + lodash.isplainobject "^4.0.6" + lodash.isstring "^4.0.1" + lodash.once "^4.0.0" + ms "^2.1.1" + semver "^5.6.0" + jsprim@^1.2.2: version "1.4.1" resolved "https://registry.yarnpkg.com/jsprim/-/jsprim-1.4.1.tgz#313e66bc1e5cc06e438bc1b7499c2e5c56acb6a2" @@ -5725,7 +5714,7 @@ jwa@^1.2.0: ecdsa-sig-formatter "1.0.11" safe-buffer "^5.0.1" -jws@^3.0.0, jws@^3.1.5: +jws@^3.1.5, jws@^3.2.1: version "3.2.1" resolved "https://registry.yarnpkg.com/jws/-/jws-3.2.1.tgz#d79d4216a62c9afa0a3d5e8b5356d75abdeb2be5" dependencies: @@ -6523,7 +6512,7 @@ moment-timezone@^0.5.23, moment-timezone@^0.5.4: dependencies: moment ">= 2.9.0" -moment@2.x.x, "moment@>= 2.9.0", moment@^2.13.0, moment@^2.16.0, moment@^2.17.1: +"moment@>= 2.9.0", moment@^2.13.0, moment@^2.16.0, moment@^2.17.1: version "2.24.0" resolved "https://registry.yarnpkg.com/moment/-/moment-2.24.0.tgz#0d055d53f5052aa653c9f6eb68bb5d12bf5c2b5b" @@ -6560,10 +6549,6 @@ ms@2.0.0: version "2.0.0" resolved "https://registry.yarnpkg.com/ms/-/ms-2.0.0.tgz#5608aeadfc00be6c2901df5f9861788de0d597c8" -ms@^0.7.1: - version "0.7.3" - resolved "https://registry.yarnpkg.com/ms/-/ms-0.7.3.tgz#708155a5e44e33f5fd0fc53e81d0d40a91be1fff" - ms@^2.1.1: version "2.1.1" resolved "https://registry.yarnpkg.com/ms/-/ms-2.1.1.tgz#30a5864eb3ebb0a66f2ebe6d727af06a09d86e0a" @@ -9687,12 +9672,6 @@ toidentifier@1.0.0: version "1.0.0" resolved "https://registry.yarnpkg.com/toidentifier/-/toidentifier-1.0.0.tgz#7e1be3470f1e77948bc43d94a3c8f4d7752ba553" -topo@1.x.x: - version "1.1.0" - resolved "https://registry.yarnpkg.com/topo/-/topo-1.1.0.tgz#e9d751615d1bb87dc865db182fa1ca0a5ef536d5" - dependencies: - hoek "2.x.x" - toposort-class@^1.0.1: version "1.0.1" resolved "https://registry.yarnpkg.com/toposort-class/-/toposort-class-1.0.1.tgz#7ffd1f78c8be28c3ba45cd4e1a3f5ee193bd9988"