From e2299132d8a240f040111c2e9e32bee1aadbd583 Mon Sep 17 00:00:00 2001 From: Theodore Aptekarev Date: Tue, 1 Feb 2022 16:23:11 +0300 Subject: [PATCH] Explicitly resolve marked package to a secure version (#1295) --- jupyterlab/documentation/package.json | 3 ++- jupyterlab/documentation/yarn.lock | 13 ++++--------- jupyterlab/gst-settings/package.json | 3 ++- jupyterlab/gst-settings/yarn.lock | 13 ++++--------- jupyterlab/gst/package.json | 3 ++- jupyterlab/gst/yarn.lock | 13 ++++--------- 6 files changed, 18 insertions(+), 30 deletions(-) diff --git a/jupyterlab/documentation/package.json b/jupyterlab/documentation/package.json index a6997e7bc67..f5afdad7a51 100644 --- a/jupyterlab/documentation/package.json +++ b/jupyterlab/documentation/package.json @@ -67,7 +67,8 @@ "typescript": "<4.4" }, "resolutions": { - "json-schema": "^0.4.0" + "json-schema": "^0.4.0", + "marked": "^4.0.10" }, "sideEffects": [ "style/*.css", diff --git a/jupyterlab/documentation/yarn.lock b/jupyterlab/documentation/yarn.lock index 2f17e6877bb..c27a1634636 100644 --- a/jupyterlab/documentation/yarn.lock +++ b/jupyterlab/documentation/yarn.lock @@ -3688,15 +3688,10 @@ make-dir@^3.0.2: dependencies: semver "^6.0.0" -marked@2.1.3, marked@^2.0.0: - version "2.1.3" - resolved "https://registry.yarnpkg.com/marked/-/marked-2.1.3.tgz#bd017cef6431724fd4b27e0657f5ceb14bff3753" - integrity sha512-/Q+7MGzaETqifOMWYEA7HVMaZb4XbcRfaOzcSsHZEith83KGlvaSG33u0SKu89Mj5h+T8V2hM+8O45Qc5XTgwA== - -marked@4.0.10: - version "4.0.10" - resolved "https://registry.yarnpkg.com/marked/-/marked-4.0.10.tgz#423e295385cc0c3a70fa495e0df68b007b879423" - integrity sha512-+QvuFj0nGgO970fySghXGmuw+Fd0gD2x3+MqCWLIPf5oxdv1Ka6b2q+z9RP01P/IaKPMEramy+7cNy/Lw8c3hw== +marked@2.1.3, marked@4.0.10, marked@^2.0.0, marked@^4.0.10: + version "4.0.12" + resolved "https://registry.yarnpkg.com/marked/-/marked-4.0.12.tgz#2262a4e6fd1afd2f13557726238b69a48b982f7d" + integrity sha512-hgibXWrEDNBWgGiK18j/4lkS6ihTe9sxtV4Q1OQppb/0zzyPSzoFANBa5MfsG/zgsWklmNnhm0XACZOH/0HBiQ== media-typer@0.3.0: version "0.3.0" diff --git a/jupyterlab/gst-settings/package.json b/jupyterlab/gst-settings/package.json index 62496925d2d..037b9aac417 100644 --- a/jupyterlab/gst-settings/package.json +++ b/jupyterlab/gst-settings/package.json @@ -70,7 +70,8 @@ "typescript": "<4.4" }, "resolutions": { - "json-schema": "^0.4.0" + "json-schema": "^0.4.0", + "marked": "^4.0.10" }, "sideEffects": [ "style/*.css", diff --git a/jupyterlab/gst-settings/yarn.lock b/jupyterlab/gst-settings/yarn.lock index 2f17e6877bb..c27a1634636 100644 --- a/jupyterlab/gst-settings/yarn.lock +++ b/jupyterlab/gst-settings/yarn.lock @@ -3688,15 +3688,10 @@ make-dir@^3.0.2: dependencies: semver "^6.0.0" -marked@2.1.3, marked@^2.0.0: - version "2.1.3" - resolved "https://registry.yarnpkg.com/marked/-/marked-2.1.3.tgz#bd017cef6431724fd4b27e0657f5ceb14bff3753" - integrity sha512-/Q+7MGzaETqifOMWYEA7HVMaZb4XbcRfaOzcSsHZEith83KGlvaSG33u0SKu89Mj5h+T8V2hM+8O45Qc5XTgwA== - -marked@4.0.10: - version "4.0.10" - resolved "https://registry.yarnpkg.com/marked/-/marked-4.0.10.tgz#423e295385cc0c3a70fa495e0df68b007b879423" - integrity sha512-+QvuFj0nGgO970fySghXGmuw+Fd0gD2x3+MqCWLIPf5oxdv1Ka6b2q+z9RP01P/IaKPMEramy+7cNy/Lw8c3hw== +marked@2.1.3, marked@4.0.10, marked@^2.0.0, marked@^4.0.10: + version "4.0.12" + resolved "https://registry.yarnpkg.com/marked/-/marked-4.0.12.tgz#2262a4e6fd1afd2f13557726238b69a48b982f7d" + integrity sha512-hgibXWrEDNBWgGiK18j/4lkS6ihTe9sxtV4Q1OQppb/0zzyPSzoFANBa5MfsG/zgsWklmNnhm0XACZOH/0HBiQ== media-typer@0.3.0: version "0.3.0" diff --git a/jupyterlab/gst/package.json b/jupyterlab/gst/package.json index 59e2acb71bb..b1544422f5f 100644 --- a/jupyterlab/gst/package.json +++ b/jupyterlab/gst/package.json @@ -76,7 +76,8 @@ "typescript": "<4.4" }, "resolutions": { - "json-schema": "^0.4.0" + "json-schema": "^0.4.0", + "marked": "^4.0.10" }, "sideEffects": [ "style/*.css", diff --git a/jupyterlab/gst/yarn.lock b/jupyterlab/gst/yarn.lock index dbeed42a09b..7c53fb37574 100644 --- a/jupyterlab/gst/yarn.lock +++ b/jupyterlab/gst/yarn.lock @@ -3763,15 +3763,10 @@ make-dir@^3.0.2: dependencies: semver "^6.0.0" -marked@2.1.3, marked@^2.0.0: - version "2.1.3" - resolved "https://registry.yarnpkg.com/marked/-/marked-2.1.3.tgz#bd017cef6431724fd4b27e0657f5ceb14bff3753" - integrity sha512-/Q+7MGzaETqifOMWYEA7HVMaZb4XbcRfaOzcSsHZEith83KGlvaSG33u0SKu89Mj5h+T8V2hM+8O45Qc5XTgwA== - -marked@4.0.10: - version "4.0.10" - resolved "https://registry.yarnpkg.com/marked/-/marked-4.0.10.tgz#423e295385cc0c3a70fa495e0df68b007b879423" - integrity sha512-+QvuFj0nGgO970fySghXGmuw+Fd0gD2x3+MqCWLIPf5oxdv1Ka6b2q+z9RP01P/IaKPMEramy+7cNy/Lw8c3hw== +marked@2.1.3, marked@4.0.10, marked@^2.0.0, marked@^4.0.10: + version "4.0.12" + resolved "https://registry.yarnpkg.com/marked/-/marked-4.0.12.tgz#2262a4e6fd1afd2f13557726238b69a48b982f7d" + integrity sha512-hgibXWrEDNBWgGiK18j/4lkS6ihTe9sxtV4Q1OQppb/0zzyPSzoFANBa5MfsG/zgsWklmNnhm0XACZOH/0HBiQ== media-typer@0.3.0: version "0.3.0"