Skip to content

Commit 78b9978

Browse files
Feiyang1Feiyang1
authored
update npm-run-all to avoid potential exploit (#1406)
1 parent 0b42ff8 commit 78b9978

File tree

12 files changed

+45
-75
lines changed

12 files changed

+45
-75
lines changed

‎integration/typescript/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@
2424
"karma-spec-reporter": "0.0.32",
2525
"karma-typescript": "3.0.12",
2626
"mocha": "5.2.0",
27-
"npm-run-all": "4.1.2",
27+
"npm-run-all": "4.1.5",
2828
"typescript": "2.8.1"
2929
}
3030
}

‎packages/app/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,7 @@
4343
"karma-spec-reporter": "0.0.32",
4444
"karma-webpack": "2.0.9",
4545
"mocha": "5.2.0",
46-
"npm-run-all": "4.1.2",
46+
"npm-run-all": "4.1.5",
4747
"nyc": "11.6.0",
4848
"rollup": "0.57.1",
4949
"rollup-plugin-replace": "2.0.0",

‎packages/database/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -45,7 +45,7 @@
4545
"karma-spec-reporter": "0.0.32",
4646
"karma-webpack": "2.0.9",
4747
"mocha": "5.2.0",
48-
"npm-run-all": "4.1.2",
48+
"npm-run-all": "4.1.5",
4949
"nyc": "11.6.0",
5050
"rollup": "0.57.1",
5151
"rollup-plugin-typescript2": "0.12.0",

‎packages/firestore/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -56,7 +56,7 @@
5656
"long": "3.2.0",
5757
"mkdirp": "0.5.1",
5858
"mocha": "5.2.0",
59-
"npm-run-all": "4.1.2",
59+
"npm-run-all": "4.1.5",
6060
"nyc": "11.6.0",
6161
"prettier": "1.12.0",
6262
"rollup": "0.57.1",

‎packages/functions/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,7 @@
4040
"karma-spec-reporter": "0.0.32",
4141
"karma-webpack": "2.0.9",
4242
"mocha": "5.2.0",
43-
"npm-run-all": "4.1.2",
43+
"npm-run-all": "4.1.5",
4444
"nyc": "11.6.0",
4545
"rollup": "0.57.1",
4646
"rollup-plugin-typescript2": "0.12.0",

‎packages/logger/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@
3232
"karma-spec-reporter": "0.0.32",
3333
"karma-webpack": "2.0.9",
3434
"mocha": "5.2.0",
35-
"npm-run-all": "4.1.2",
35+
"npm-run-all": "4.1.5",
3636
"nyc": "11.6.0",
3737
"rollup": "0.57.1",
3838
"rollup-plugin-typescript2": "0.12.0",

‎packages/messaging/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -44,7 +44,7 @@
4444
"karma-sourcemap-loader": "0.3.7",
4545
"karma-spec-reporter": "0.0.32",
4646
"mocha": "5.2.0",
47-
"npm-run-all": "4.1.2",
47+
"npm-run-all": "4.1.5",
4848
"rollup": "0.57.1",
4949
"rollup-plugin-typescript2": "0.12.0",
5050
"sinon": "4.5.0",

‎packages/rxfire/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -58,7 +58,7 @@
5858
"karma-spec-reporter": "0.0.32",
5959
"karma-webpack": "2.0.9",
6060
"mocha": "5.2.0",
61-
"npm-run-all": "4.1.2",
61+
"npm-run-all": "4.1.5",
6262
"nyc": "11.6.0",
6363
"sinon": "4.5.0",
6464
"source-map-loader": "0.2.3",

‎packages/storage/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@
3838
"karma-sourcemap-loader": "0.3.7",
3939
"karma-spec-reporter": "0.0.32",
4040
"karma-webpack": "2.0.9",
41-
"npm-run-all": "4.1.2",
41+
"npm-run-all": "4.1.5",
4242
"rollup": "0.57.1",
4343
"rollup-plugin-typescript2": "0.12.0",
4444
"sinon": "4.5.0",

‎packages/template/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,7 @@
4141
"karma-spec-reporter": "0.0.32",
4242
"karma-webpack": "2.0.9",
4343
"mocha": "5.2.0",
44-
"npm-run-all": "4.1.2",
44+
"npm-run-all": "4.1.5",
4545
"nyc": "11.6.0",
4646
"rollup": "0.57.1",
4747
"rollup-plugin-typescript2": "0.12.0",

‎packages/util/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@
3535
"karma-spec-reporter": "0.0.32",
3636
"karma-webpack": "2.0.9",
3737
"mocha": "5.2.0",
38-
"npm-run-all": "4.1.2",
38+
"npm-run-all": "4.1.5",
3939
"nyc": "11.6.0",
4040
"rollup": "0.57.1",
4141
"rollup-plugin-typescript2": "0.12.0",

‎yarn.lock

Lines changed: 34 additions & 64 deletions
Original file line numberDiff line numberDiff line change
@@ -1232,7 +1232,7 @@ ansi-styles@^2.2.1:
12321232
resolved "https://registry.npmjs.org/ansi-styles/-/ansi-styles-2.2.1.tgz#b432dd3358b634cf75e1e4664368240533c1ddbe"
12331233
integrity sha1-tDLdM1i2NM914eRmQ2gkBTPB3b4=
12341234

1235-
ansi-styles@^3.2.0, ansi-styles@^3.2.1:
1235+
ansi-styles@^3.2.1:
12361236
version "3.2.1"
12371237
resolved "https://registry.npmjs.org/ansi-styles/-/ansi-styles-3.2.1.tgz#41fbb20243e50b12be0f04b8dedbf07520ce841d"
12381238
integrity sha512-VT0ZI6kZRdTh8YyJw3SMbYm/u+NqfsAxEpWO0Pf9sq8/e94WxxOpPKx9FR1FlyCtOVDNOQ+8ntlqFxiRc+r5qA==
@@ -2617,7 +2617,7 @@ chalk@^1.0.0, chalk@^1.1.0, chalk@^1.1.1, chalk@^1.1.3:
26172617
strip-ansi "^3.0.0"
26182618
supports-color "^2.0.0"
26192619

2620-
"chalk@^1.1.3 || 2.x":
2620+
"chalk@^1.1.3 || 2.x", chalk@^2.4.1:
26212621
version "2.4.1"
26222622
resolved "https://registry.npmjs.org/chalk/-/chalk-2.4.1.tgz#18c49ab16a037b6eb0152cc83e3471338215b66e"
26232623
integrity sha512-ObN6h1v2fTJSmUXoS3nMQ92LbDK9be4TV+6G+omQlGJFdcUX5heKi1LZ1YnRMIgwTLEj3E24bT6tYni50rlCfQ==
@@ -3575,6 +3575,17 @@ cross-spawn@^5.0.1, cross-spawn@^5.1.0:
35753575
shebang-command "^1.2.0"
35763576
which "^1.2.9"
35773577

3578+
cross-spawn@^6.0.5:
3579+
version "6.0.5"
3580+
resolved "https://registry.npmjs.org/cross-spawn/-/cross-spawn-6.0.5.tgz#4a5ec7c64dfae22c3a14124dbacdee846d80cbc4"
3581+
integrity sha512-eTVLrBSt7fjbDygz805pMnstIs2VTBNkRm0qxZd+M7A5XDdxVRWO5MxGBXZhjY4cqLYLdtrGqRf8mBPmzwSpWQ==
3582+
dependencies:
3583+
nice-try "^1.0.4"
3584+
path-key "^2.0.1"
3585+
semver "^5.5.0"
3586+
shebang-command "^1.2.0"
3587+
which "^1.2.9"
3588+
35783589
[email protected]:
35793590
version "2.0.5"
35803591
resolved "https://registry.npmjs.org/cryptiles/-/cryptiles-2.0.5.tgz#3bdfecdc608147c1c67202fa291e7dca59eaa3b8"
@@ -4155,7 +4166,7 @@ duplexer3@^0.1.4:
41554166
resolved "https://registry.npmjs.org/duplexer3/-/duplexer3-0.1.4.tgz#ee01dd1cac0ed3cbc7fdbea37dc0a8f1ce002ce2"
41564167
integrity sha1-7gHdHKwO08vH/b6jfcCo8c4ALOI=
41574168

4158-
duplexer@^0.1.1, duplexer@~0.1.1:
4169+
duplexer@^0.1.1:
41594170
version "0.1.1"
41604171
resolved "https://registry.npmjs.org/duplexer/-/duplexer-0.1.1.tgz#ace6ff808c1ce66b57d1ebf97977acb02334cfc1"
41614172
integrity sha1-rOb/gIwc5mtX0ev5eXessCM0z8E=
@@ -4535,19 +4546,6 @@ event-emitter@^0.3.5, event-emitter@~0.3.5:
45354546
d "1"
45364547
es5-ext "~0.10.14"
45374548

4538-
event-stream@~3.3.0:
4539-
version "3.3.4"
4540-
resolved "http://registry.npmjs.org/event-stream/-/event-stream-3.3.4.tgz#4ab4c9a0f5a54db9338b4c34d86bfce8f4b35571"
4541-
integrity sha1-SrTJoPWlTbkzi0w02Gv86PSzVXE=
4542-
dependencies:
4543-
duplexer "~0.1.1"
4544-
from "~0"
4545-
map-stream "~0.1.0"
4546-
pause-stream "0.0.11"
4547-
split "0.3"
4548-
stream-combiner "~0.0.4"
4549-
through "~2.3.1"
4550-
45514549
[email protected]:
45524550
version "1.2.0"
45534551
resolved "https://registry.npmjs.org/eventemitter3/-/eventemitter3-1.2.0.tgz#1c86991d816ad1e504750e73874224ecf3bec508"
@@ -5337,11 +5335,6 @@ from2@^2.1.1:
53375335
inherits "^2.0.1"
53385336
readable-stream "^2.0.0"
53395337

5340-
from@~0:
5341-
version "0.1.7"
5342-
resolved "https://registry.npmjs.org/from/-/from-0.1.7.tgz#83c60afc58b9c56997007ed1a768b3ab303a44fe"
5343-
integrity sha1-g8YK/Fi5xWmXAH7Rp2izqzA6RP4=
5344-
53455338
fs-access@^1.0.0:
53465339
version "1.0.1"
53475340
resolved "https://registry.npmjs.org/fs-access/-/fs-access-1.0.1.tgz#d6a87f262271cefebec30c553407fb995da8777a"
@@ -8698,11 +8691,6 @@ map-obj@^2.0.0:
86988691
resolved "https://registry.npmjs.org/map-obj/-/map-obj-2.0.0.tgz#a65cd29087a92598b8791257a523e021222ac1f9"
86998692
integrity sha1-plzSkIepJZi4eRJXpSPgISIqwfk=
87008693

8701-
map-stream@~0.1.0:
8702-
version "0.1.0"
8703-
resolved "https://registry.npmjs.org/map-stream/-/map-stream-0.1.0.tgz#e56aa94c4c8055a16404a0674b78f215f7c8e194"
8704-
integrity sha1-5WqpTEyAVaFkBKBnS3jyFffI4ZQ=
8705-
87068694
map-visit@^1.0.0:
87078695
version "1.0.0"
87088696
resolved "https://registry.npmjs.org/map-visit/-/map-visit-1.0.0.tgz#ecdca8f13144e660f1b5bd41f12f3479d98dfb8f"
@@ -9261,6 +9249,11 @@ next-tick@1:
92619249
resolved "https://registry.npmjs.org/next-tick/-/next-tick-1.0.0.tgz#ca86d1fe8828169b0120208e3dc8424b9db8342c"
92629250
integrity sha1-yobR/ogoFpsBICCOPchCS524NCw=
92639251

9252+
nice-try@^1.0.4:
9253+
version "1.0.5"
9254+
resolved "https://registry.npmjs.org/nice-try/-/nice-try-1.0.5.tgz#a3378a7696ce7d223e88fc9b764bd7ef1089e366"
9255+
integrity sha512-1nh45deeb5olNY7eX82BkPO7SSxR5SSYJiPTrTdFUVYwAl8CKMA5N9PjTYkHiRjisVcxcQ1HXdLhx2qxxJzLNQ==
9256+
92649257
nise@^1.2.0:
92659258
version "1.3.2"
92669259
resolved "https://registry.npmjs.org/nise/-/nise-1.3.2.tgz#fd6fd8dc040dfb3c0a45252feb6ff21832309b14"
@@ -9508,17 +9501,17 @@ npm-packlist@^1.1.6:
95089501
ignore-walk "^3.0.1"
95099502
npm-bundled "^1.0.1"
95109503

9511-
[email protected].2:
9512-
version "4.1.2"
9513-
resolved "https://registry.npmjs.org/npm-run-all/-/npm-run-all-4.1.2.tgz#90d62d078792d20669139e718621186656cea056"
9514-
integrity sha512-Z2aRlajMK4SQ8u19ZA75NZZu7wupfCNQWdYosIi8S6FgBdGf/8Y6Hgyjdc8zU2cYmIRVCx1nM80tJPkdEd+UYg==
9504+
[email protected].5:
9505+
version "4.1.5"
9506+
resolved "https://registry.npmjs.org/npm-run-all/-/npm-run-all-4.1.5.tgz#04476202a15ee0e2e214080861bff12a51d98fba"
9507+
integrity sha512-Oo82gJDAVcaMdi3nuoKFavkIHBRVqQ1qvMb+9LHk/cF4P6B2m8aP04hGf7oL6wZ9BuGwX1onlLhpuoofSyoQDQ==
95159508
dependencies:
9516-
ansi-styles "^3.2.0"
9517-
chalk "^2.1.0"
9518-
cross-spawn "^5.1.0"
9509+
ansi-styles "^3.2.1"
9510+
chalk "^2.4.1"
9511+
cross-spawn "^6.0.5"
95199512
memorystream "^0.3.1"
95209513
minimatch "^3.0.4"
9521-
ps-tree "^1.1.0"
9514+
pidtree "^0.3.0"
95229515
read-pkg "^3.0.0"
95239516
shell-quote "^1.6.1"
95249517
string.prototype.padend "^3.0.0"
@@ -10129,7 +10122,7 @@ path-is-inside@^1.0.1:
1012910122
resolved "https://registry.npmjs.org/path-is-inside/-/path-is-inside-1.0.2.tgz#365417dede44430d1c11af61027facf074bdfc53"
1013010123
integrity sha1-NlQX3t5EQw0cEa9hAn+s8HS9/FM=
1013110124

10132-
path-key@^2.0.0:
10125+
path-key@^2.0.0, path-key@^2.0.1:
1013310126
version "2.0.1"
1013410127
resolved "https://registry.npmjs.org/path-key/-/path-key-2.0.1.tgz#411cadb574c5a140d3a4b1910d40d80cc9f40b40"
1013510128
integrity sha1-QRyttXTFoUDTpLGRDUDYDMn0C0A=
@@ -10203,13 +10196,6 @@ pathval@^1.0.0:
1020310196
resolved "https://registry.npmjs.org/pathval/-/pathval-1.1.0.tgz#b942e6d4bde653005ef6b71361def8727d0645e0"
1020410197
integrity sha1-uULm1L3mUwBe9rcTYd74cn0GReA=
1020510198

10206-
[email protected]:
10207-
version "0.0.11"
10208-
resolved "https://registry.npmjs.org/pause-stream/-/pause-stream-0.0.11.tgz#fe5a34b0cbce12b5aa6a2b403ee2e73b602f1445"
10209-
integrity sha1-/lo0sMvOErWqaitAPuLnO2AvFEU=
10210-
dependencies:
10211-
through "~2.3"
10212-
1021310199
pbkdf2@^3.0.3:
1021410200
version "3.0.14"
1021510201
resolved "https://registry.npmjs.org/pbkdf2/-/pbkdf2-3.0.14.tgz#a35e13c64799b06ce15320f459c230e68e73bade"
@@ -10236,6 +10222,11 @@ performance-now@^2.1.0:
1023610222
resolved "https://registry.npmjs.org/performance-now/-/performance-now-2.1.0.tgz#6309f4e0e5fa913ec1c69307ae364b4b377c9e7b"
1023710223
integrity sha1-Ywn04OX6kT7BxpMHrjZLSzd8nns=
1023810224

10225+
pidtree@^0.3.0:
10226+
version "0.3.0"
10227+
resolved "https://registry.npmjs.org/pidtree/-/pidtree-0.3.0.tgz#f6fada10fccc9f99bf50e90d0b23d72c9ebc2e6b"
10228+
integrity sha512-9CT4NFlDcosssyg8KVFltgokyKZIFjoBxw8CTGy+5F38Y1eQWrt8tRayiUOXE+zVKQnYu5BR8JjCtvK3BcnBhg==
10229+
1023910230
pify@^2.0.0, pify@^2.3.0:
1024010231
version "2.3.0"
1024110232
resolved "https://registry.npmjs.org/pify/-/pify-2.3.0.tgz#ed141a6ac043a849ea588498e7dca8b15330e90c"
@@ -10493,13 +10484,6 @@ prr@~1.0.1:
1049310484
resolved "https://registry.npmjs.org/prr/-/prr-1.0.1.tgz#d3fc114ba06995a45ec6893f484ceb1d78f5f476"
1049410485
integrity sha1-0/wRS6BplaRexok/SEzrHXj19HY=
1049510486

10496-
ps-tree@^1.1.0:
10497-
version "1.1.0"
10498-
resolved "https://registry.npmjs.org/ps-tree/-/ps-tree-1.1.0.tgz#b421b24140d6203f1ed3c76996b4427b08e8c014"
10499-
integrity sha1-tCGyQUDWID8e08dplrRCewjowBQ=
10500-
dependencies:
10501-
event-stream "~3.3.0"
10502-
1050310487
pseudomap@^1.0.2:
1050410488
version "1.0.2"
1050510489
resolved "https://registry.npmjs.org/pseudomap/-/pseudomap-1.0.2.tgz#f052a28da70e618917ef0a8ac34c1ae5a68286b3"
@@ -12126,13 +12110,6 @@ split2@^2.0.0:
1212612110
dependencies:
1212712111
through2 "^2.0.2"
1212812112

12129-
[email protected]:
12130-
version "0.3.3"
12131-
resolved "https://registry.npmjs.org/split/-/split-0.3.3.tgz#cd0eea5e63a211dfff7eb0f091c4133e2d0dd28f"
12132-
integrity sha1-zQ7qXmOiEd//frDwkcQTPi0N0o8=
12133-
dependencies:
12134-
through "2"
12135-
1213612113
split@^1.0.0:
1213712114
version "1.0.1"
1213812115
resolved "https://registry.npmjs.org/split/-/split-1.0.1.tgz#605bd9be303aa59fb35f9229fbea0ddec9ea07d9"
@@ -12217,13 +12194,6 @@ stream-combiner2@^1.1.1:
1221712194
duplexer2 "~0.1.0"
1221812195
readable-stream "^2.0.2"
1221912196

12220-
stream-combiner@~0.0.4:
12221-
version "0.0.4"
12222-
resolved "https://registry.npmjs.org/stream-combiner/-/stream-combiner-0.0.4.tgz#4d5e433c185261dde623ca3f44c586bcf5c4ad14"
12223-
integrity sha1-TV5DPBhSYd3mI8o/RMWGvPXErRQ=
12224-
dependencies:
12225-
duplexer "~0.1.1"
12226-
1222712197
stream-events@^1.0.1:
1222812198
version "1.0.3"
1222912199
resolved "https://registry.npmjs.org/stream-events/-/stream-events-1.0.3.tgz#73502d794e9e03607682e0c21948406cc650e54c"
@@ -12802,7 +12772,7 @@ through2@^2.0.0, through2@^2.0.1, through2@^2.0.2, through2@^2.0.3, through2@~2.
1280212772
readable-stream "^2.1.5"
1280312773
xtend "~4.0.1"
1280412774

12805-
through@2, "through@>=2.2.7 <3", through@^2.3.4, through@^2.3.6, through@^2.3.8, through@~2.3, through@~2.3.1:
12775+
through@2, "through@>=2.2.7 <3", through@^2.3.4, through@^2.3.6, through@^2.3.8:
1280612776
version "2.3.8"
1280712777
resolved "https://registry.npmjs.org/through/-/through-2.3.8.tgz#0dd4c9ffaabc357960b1b724115d7e0e86a2e1f5"
1280812778
integrity sha1-DdTJ/6q8NXlgsbckEV1+Doai4fU=

0 commit comments

Comments
 (0)