From 91f9a75bb735c5bd2dd6765fe052b605c22fd701 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 25 Nov 2023 15:31:00 +0000 Subject: [PATCH] fix: package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908 - https://snyk.io/vuln/SNYK-JS-GLOBPARENT-1016905 - https://snyk.io/vuln/SNYK-JS-REQUEST-3361831 - https://snyk.io/vuln/SNYK-JS-TOUGHCOOKIE-5672873 - https://snyk.io/vuln/SNYK-JS-UNSETVALUE-2400660 --- package.json | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/package.json b/package.json index ce3fd6a1ab..3dcb5db7b9 100644 --- a/package.json +++ b/package.json @@ -35,11 +35,11 @@ "archy": "^1.0.0", "bluebird": "^3.4.0", "chalk": "^1.1.3", - "cheerio": "^0.20.0", + "cheerio": "^0.22.0", "deep-assign": "^2.0.0", - "hexo-cli": "^1.0.2", + "hexo-cli": "^3.0.0", "hexo-front-matter": "^0.2.2", - "hexo-fs": "^0.2.0", + "hexo-fs": "^2.0.0", "hexo-i18n": "^0.2.1", "hexo-log": "^0.1.2", "hexo-util": "^0.6.0", @@ -48,7 +48,7 @@ "minimatch": "^3.0.0", "moment": "~2.13.0", "moment-timezone": "^0.5.4", - "nunjucks": "^2.4.2", + "nunjucks": "^3.2.1", "pretty-hrtime": "^1.0.2", "strip-indent": "^1.0.1", "swig": "1.4.2",