diff --git a/.snyk b/.snyk index f348695..c0b8292 100644 --- a/.snyk +++ b/.snyk @@ -1,5 +1,5 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.7.0 +version: v1.13.5 # ignores vulnerabilities until expiry date; change duration by modifying expiry date ignore: 'npm:ws:20160920': @@ -12,4 +12,10 @@ ignore: - socket.io > socket.io-client > engine.io-client > ws: reason: None given expires: '2017-03-18T14:30:25.299Z' -patch: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-HTTPSPROXYAGENT-469131: + - snyk > proxy-agent > https-proxy-agent: + patched: '2019-10-10T01:32:15.059Z' + - snyk > proxy-agent > pac-proxy-agent > https-proxy-agent: + patched: '2019-10-10T01:32:15.059Z' diff --git a/package.json b/package.json index 691a90c..6d5e53d 100644 --- a/package.json +++ b/package.json @@ -11,7 +11,7 @@ "mqtt": "^1.7.2", "socket.io": "^1.4.5", "socket.io-client": "^1.4.5", - "snyk": "^1.25.0" + "snyk": "^1.234.0" }, "devDependencies": {}, "scripts": {