Skip to content

Commit 0d0d05d

Browse files
[1.x backport] Bump joi to v14 to avoid the possibility of prototype poisoning in a nested dependency (#4211)
Backport PR #3952 Signed-off-by: Miki <miki@amazon.com> Co-authored-by: Miki <miki@amazon.com> (cherry picked from commit 4626066) Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com> # Conflicts: # CHANGELOG.md
1 parent 82594e6 commit 0d0d05d

File tree

4 files changed

+16
-7
lines changed

4 files changed

+16
-7
lines changed

package.json

+1-1
Original file line numberDiff line numberDiff line change
@@ -206,7 +206,7 @@
206206
"inert": "^5.1.0",
207207
"inline-style": "^2.0.0",
208208
"ip-cidr": "^2.1.0",
209-
"joi": "^13.5.2",
209+
"joi": "^14.3.1",
210210
"js-yaml": "^3.14.0",
211211
"json-stable-stringify": "^1.0.1",
212212
"json-stringify-safe": "5.0.1",

packages/osd-config-schema/package.json

+1-1
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@
1616
},
1717
"peerDependencies": {
1818
"lodash": "^4.17.21",
19-
"joi": "^13.5.2",
19+
"joi": "^14.3.1",
2020
"moment": "^2.24.0",
2121
"type-detect": "^4.0.8"
2222
}

packages/osd-test/package.json

+1-1
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,7 @@
3131
"exit-hook": "^2.2.0",
3232
"getopts": "^2.2.5",
3333
"glob": "^7.1.7",
34-
"joi": "^13.5.2",
34+
"joi": "^14.3.1",
3535
"lodash": "^4.17.21",
3636
"parse-link-header": "^2.0.0",
3737
"rxjs": "^6.5.5",

yarn.lock

+13-4
Original file line numberDiff line numberDiff line change
@@ -11130,9 +11130,9 @@ hoek@5.x.x, hoek@^5.0.4:
1113011130
integrity sha512-Alr4ZQgoMlnere5FZJsIyfIjORBqZll5POhDsF4q64dPuJR6rNxXdDxtHSQq8OXRurhmx+PWYEE8bXRROY8h0w==
1113111131

1113211132
hoek@6.x.x:
11133-
version "6.0.3"
11134-
resolved "https://registry.yarnpkg.com/hoek/-/hoek-6.0.3.tgz#7884360426d927865a0a1251fc9c59313af5b798"
11135-
integrity sha512-TU6RyZ/XaQCTWRLrdqZZtZqwxUVr6PDMfi6MlWNURZ7A6czanQqX4pFE1mdOUQR9FdPCsZ0UzL8jI/izZ+eBSQ==
11133+
version "6.1.3"
11134+
resolved "https://registry.yarnpkg.com/hoek/-/hoek-6.1.3.tgz#73b7d33952e01fe27a38b0457294b79dd8da242c"
11135+
integrity sha512-YXXAAhmF9zpQbC7LEcREFtXfGq5K1fmd+4PHkBq8NUqmzW3G+Dq10bI/i0KucLRwss3YYFQ0fSfoxBZYiGUqtQ==
1113611136

1113711137
hoist-non-react-statics@^2.5.5, hoist-non-react-statics@^3.0.0, hoist-non-react-statics@^3.1.0, hoist-non-react-statics@^3.3.0, hoist-non-react-statics@^3.3.2:
1113811138
version "3.3.2"
@@ -13248,7 +13248,7 @@ jju@~1.4.0:
1324813248
resolved "https://registry.yarnpkg.com/jju/-/jju-1.4.0.tgz#a3abe2718af241a2b2904f84a625970f389ae32a"
1324913249
integrity sha1-o6vicYryQaKykE+EpiWXDzia4yo=
1325013250

13251-
joi@13.x.x, joi@^13.5.2:
13251+
joi@13.x.x:
1325213252
version "13.7.0"
1325313253
resolved "https://registry.yarnpkg.com/joi/-/joi-13.7.0.tgz#cfd85ebfe67e8a1900432400b4d03bbd93fb879f"
1325413254
integrity sha512-xuY5VkHfeOYK3Hdi91ulocfuFopwgbSORmIwzcwHKESQhC7w1kD5jaVSPnqDxS2I8t3RZ9omCKAxNwXN5zG1/Q==
@@ -13257,6 +13257,15 @@ joi@13.x.x, joi@^13.5.2:
1325713257
isemail "3.x.x"
1325813258
topo "3.x.x"
1325913259

13260+
joi@^14.3.1:
13261+
version "14.3.1"
13262+
resolved "https://registry.yarnpkg.com/joi/-/joi-14.3.1.tgz#164a262ec0b855466e0c35eea2a885ae8b6c703c"
13263+
integrity sha512-LQDdM+pkOrpAn4Lp+neNIFV3axv1Vna3j38bisbQhETPMANYRbFJFUyOZcOClYvM/hppMhGWuKSFEK9vjrB+bQ==
13264+
dependencies:
13265+
hoek "6.x.x"
13266+
isemail "3.x.x"
13267+
topo "3.x.x"
13268+
1326013269
jpeg-js@^0.4.0:
1326113270
version "0.4.4"
1326213271
resolved "https://registry.yarnpkg.com/jpeg-js/-/jpeg-js-0.4.4.tgz#a9f1c6f1f9f0fa80cdb3484ed9635054d28936aa"

0 commit comments

Comments
 (0)