From 3c0446cd2d2320d6e3482933a1b3b20cc6c33de6 Mon Sep 17 00:00:00 2001 From: Joey Perrott Date: Wed, 12 Jan 2022 10:39:24 -0800 Subject: [PATCH] build: update shelljs dependencies to "^0.8.5" (#44697) Update shelljs dependencies to ^0.8.5 to fix a vulnerability reported to shelljs. PR Close #44697 --- aio/aio-builds-setup/dockerbuild/scripts-js/package.json | 2 +- aio/aio-builds-setup/dockerbuild/scripts-js/yarn.lock | 8 ++++---- aio/package.json | 2 +- aio/yarn.lock | 8 ++++---- package.json | 2 +- packages/bazel/package.json | 2 +- yarn.lock | 8 ++++---- 7 files changed, 16 insertions(+), 16 deletions(-) diff --git a/aio/aio-builds-setup/dockerbuild/scripts-js/package.json b/aio/aio-builds-setup/dockerbuild/scripts-js/package.json index 859f137a863..d7ea44278ac 100644 --- a/aio/aio-builds-setup/dockerbuild/scripts-js/package.json +++ b/aio/aio-builds-setup/dockerbuild/scripts-js/package.json @@ -30,7 +30,7 @@ "jasmine": "^3.6.1", "nock": "^13.0.4", "node-fetch": "^2.6.1", - "shelljs": "^0.8.4", + "shelljs": "^0.8.5", "source-map-support": "^0.5.19", "tar-stream": "^2.1.3", "tslib": "^2.3.0" diff --git a/aio/aio-builds-setup/dockerbuild/scripts-js/yarn.lock b/aio/aio-builds-setup/dockerbuild/scripts-js/yarn.lock index 2344c634914..1027df4c78c 100644 --- a/aio/aio-builds-setup/dockerbuild/scripts-js/yarn.lock +++ b/aio/aio-builds-setup/dockerbuild/scripts-js/yarn.lock @@ -2209,10 +2209,10 @@ shell-quote@^1.6.1: array-reduce "~0.0.0" jsonify "~0.0.0" -shelljs@^0.8.4: - version "0.8.4" - resolved "https://registry.yarnpkg.com/shelljs/-/shelljs-0.8.4.tgz#de7684feeb767f8716b326078a8a00875890e3c2" - integrity sha512-7gk3UZ9kOfPLIAbslLzyWeGiEqx9e3rxwZM0KE6EL8GlGwjym9Mrlx5/p33bWTu9YG6vcS4MBxYZDHYr5lr8BQ== +shelljs@^0.8.5: + version "0.8.5" + resolved "https://registry.yarnpkg.com/shelljs/-/shelljs-0.8.5.tgz#de055408d8361bed66c669d2f000538ced8ee20c" + integrity sha512-TiwcRcrkhHvbrZbnRcFYMLl30Dfov3HKqzp5tO5b4pt6G/SezKcYhmDg15zXVBswHmctSAQKznqNW2LO5tTDow== dependencies: glob "^7.0.0" interpret "^1.0.0" diff --git a/aio/package.json b/aio/package.json index bf59b5f87b6..bca126e6775 100644 --- a/aio/package.json +++ b/aio/package.json @@ -168,7 +168,7 @@ "remark-html": "^13.0.0", "rimraf": "^3.0.2", "semver": "^7.3.5", - "shelljs": "^0.8.4", + "shelljs": "^0.8.5", "stemmer": "^2.0.0", "timezone-mock": "^1.1.3", "tree-kill": "^1.1.0", diff --git a/aio/yarn.lock b/aio/yarn.lock index c470bb18421..e610f15d816 100644 --- a/aio/yarn.lock +++ b/aio/yarn.lock @@ -10932,10 +10932,10 @@ shell-quote@^1.6.1: resolved "https://registry.yarnpkg.com/shell-quote/-/shell-quote-1.7.3.tgz#aa40edac170445b9a431e17bb62c0b881b9c4123" integrity sha512-Vpfqwm4EnqGdlsBFNmHhxhElJYrdfcxPThu+ryKS5J8L/fhAwLazFZtq+S+TWZ9ANj2piSQLGj6NQg+lKPmxrw== -shelljs@^0.8.4: - version "0.8.4" - resolved "https://registry.yarnpkg.com/shelljs/-/shelljs-0.8.4.tgz#de7684feeb767f8716b326078a8a00875890e3c2" - integrity sha512-7gk3UZ9kOfPLIAbslLzyWeGiEqx9e3rxwZM0KE6EL8GlGwjym9Mrlx5/p33bWTu9YG6vcS4MBxYZDHYr5lr8BQ== +shelljs@^0.8.5: + version "0.8.5" + resolved "https://registry.yarnpkg.com/shelljs/-/shelljs-0.8.5.tgz#de055408d8361bed66c669d2f000538ced8ee20c" + integrity sha512-TiwcRcrkhHvbrZbnRcFYMLl30Dfov3HKqzp5tO5b4pt6G/SezKcYhmDg15zXVBswHmctSAQKznqNW2LO5tTDow== dependencies: glob "^7.0.0" interpret "^1.0.0" diff --git a/package.json b/package.json index f4f6820235f..3dec95ab3f7 100644 --- a/package.json +++ b/package.json @@ -142,7 +142,7 @@ "rollup-plugin-sourcemaps": "^0.6.3", "rxjs": "^6.6.7", "selenium-webdriver": "3.5.0", - "shelljs": "^0.8.4", + "shelljs": "^0.8.5", "source-map": "^0.6.1", "source-map-support": "0.5.21", "sourcemap-codec": "^1.4.8", diff --git a/packages/bazel/package.json b/packages/bazel/package.json index baebbaa429c..8a7cb63ed65 100644 --- a/packages/bazel/package.json +++ b/packages/bazel/package.json @@ -23,7 +23,7 @@ }, "dependencies": { "@microsoft/api-extractor": "7.19.4", - "shelljs": "0.8.4", + "shelljs": "^0.8.5", "tsickle": "^0.38.0", "tslib": "^2.3.0" }, diff --git a/yarn.lock b/yarn.lock index 922375f440e..bed3312176e 100644 --- a/yarn.lock +++ b/yarn.lock @@ -12973,10 +12973,10 @@ shebang-regex@^3.0.0: resolved "https://registry.yarnpkg.com/shebang-regex/-/shebang-regex-3.0.0.tgz#ae16f1644d873ecad843b0307b143362d4c42172" integrity sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A== -shelljs@^0.8.4: - version "0.8.4" - resolved "https://registry.yarnpkg.com/shelljs/-/shelljs-0.8.4.tgz#de7684feeb767f8716b326078a8a00875890e3c2" - integrity sha512-7gk3UZ9kOfPLIAbslLzyWeGiEqx9e3rxwZM0KE6EL8GlGwjym9Mrlx5/p33bWTu9YG6vcS4MBxYZDHYr5lr8BQ== +shelljs@^0.8.5: + version "0.8.5" + resolved "https://registry.yarnpkg.com/shelljs/-/shelljs-0.8.5.tgz#de055408d8361bed66c669d2f000538ced8ee20c" + integrity sha512-TiwcRcrkhHvbrZbnRcFYMLl30Dfov3HKqzp5tO5b4pt6G/SezKcYhmDg15zXVBswHmctSAQKznqNW2LO5tTDow== dependencies: glob "^7.0.0" interpret "^1.0.0"