diff --git a/.snyk b/.snyk index d797660..aeba918 100644 --- a/.snyk +++ b/.snyk @@ -1,5 +1,5 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.13.5 +version: v1.14.1 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: @@ -20,3 +20,6 @@ patch: patched: '2019-10-29T19:39:02.354Z' - snyk > @snyk/snyk-cocoapods-plugin > @snyk/cocoapods-lockfile-parser > @snyk/dep-graph > graphlib > lodash: patched: '2019-10-29T19:39:02.354Z' + SNYK-JS-LODASH-567746: + - react-infinite > enzyme-adapter-react-16 > lodash: + patched: '2020-05-03T06:02:50.709Z' diff --git a/package.json b/package.json index 2c9776f..42f2f8e 100644 --- a/package.json +++ b/package.json @@ -45,7 +45,7 @@ "test:coverage": "nwb test-react --coverage", "test:watch": "nwb test-react --server", "snyk-protect": "snyk protect", - "prepublish": "npm run snyk-protect" + "prepublish": "yarn run snyk-protect" }, "husky": { "hooks": { @@ -61,7 +61,7 @@ }, "dependencies": { "react-infinite": "^0.13.0", - "snyk": "^1.239.5" + "snyk": "^1.316.2" }, "peerDependencies": { "material-ui": ">= 0.17 < 1",