summaryrefslogtreecommitdiff
path: root/yarn.lock (unfollow)
Commit message (Collapse)AuthorFilesLines
2020-05-26Upgrade jquery to 3.5.1Sheogorath1-4/+4
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2020-04-14fix: package.json & yarn.lock to reduce vulnerabilitiessnyk-bot1-21/+5
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-JQUERY-565129
2020-02-16Update yarn.lockSheogorath1-2445/+206
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2020-02-09Update yarn.lockSheogorath1-2024/+1854
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2019-11-23Upgrade webpack & pluginsDavid Mehren1-685/+658
Signed-off-by: David Mehren <dmehren1@gmail.com>
2019-10-28Upgrade all ORM/database related packagesSheogorath1-167/+392
This patch provides some major upgrades to all database backend library. It also fixes an issues that appears since the change from sequelize v3 to v5 where mariadb was originally handled by mysql2 and is now handled by an own mariadb library. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2019-10-23Update yarn.lockSheogorath1-134/+164
2019-08-15Update yarn.lockSheogorath1-16/+49
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2019-08-15Update meta-marked to latest versionSheogorath1-8/+8
Meta-marked 0.4.4 which we used from our git repository contains a RegexDOS attack in the marked dependency. The dependency was already updated in our meta-marked repository, but not updated in yarn. This made us still vulnerable to this ReDOS which was able to cause a DOS attack on the server when updating a note. For Details: https://github.com/markedjs/marked/releases/tag/v0.7.0 https://github.com/markedjs/marked/pull/1515 What is a ReDOS? A ReDOS attack is a DOS attack where an attacker targets a not-well-written Regular Expression. Regular expressions try to build a tree of all possibilities it can match in order to figure out if the given statement is valid or not. A ReDOS attack abuses this concept by providing a statement that doesn't match but causes extremly huge trees that simply lead to exhausting CPU usage. For more details see: https://www.owasp.org/index.php/Regular_expression_Denial_of_Service_-_ReDoS Credit: Huge thanks to @bitinerant for finding this and handling it with a responsible disclosure. Also thanks to the `marked`-team for fixing things already. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2019-08-01Update yarn.lockSheogorath1-74/+2744
2019-06-22Update sequelize to latest versionSheogorath1-12/+15
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2019-06-22Update yarn.lockSheogorath1-923/+176
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2019-05-30Update yarn.lockSheogorath1-465/+466
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2019-05-06Update jQuery to version 3.4.1Sheogorath1-224/+22
2019-04-16Update yarn.lockSheogorath1-26/+12
2019-04-10Update yarn.lockSheogorath1-492/+209
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2019-03-23Update yarn.lockSheogorath1-222/+241
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2019-03-02Force upgrade of some outdated dependenciesSheogorath1-179/+9
I don't really like the way to go here, but I guess having those forcefully upgraded is better than staying around with vulnerable dependencies. This patch fixes some vulnerbilities in dependencies that were categories as high severity. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2019-03-02Update yarn.lockSheogorath1-377/+360
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2019-02-15Update yarn.lockSheogorath1-390/+379
2019-01-24Update yarn.lockSheogorath1-135/+96
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2019-01-18Update yarn.lockSheogorath1-504/+561
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2018-12-04Update yarn.lockSheogorath1-362/+499
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2018-11-21Update yarn.lockSheogorath1-1760/+1657
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2018-11-19Update yarn.lockSheogorath1-397/+383
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2018-11-12Update yarn.lockSheogorath1-26/+12
2018-10-16Fix #1016: webpack include defect for scripts and header files.MartB1-36/+45
Signed-off-by: MartB <mart.b@outlook.de>
2018-10-11Update yarn.lockSheogorath1-16/+22
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2018-10-10Update yarn.lockDavid Mehren1-0/+7
Signed-off-by: David Mehren <dmehren1@gmail.com>
2018-10-09Update yarn.lockSheogorath1-5/+5
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2018-10-06Update yarn.lockSheogorath1-5/+93
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2018-10-03Update yarn.lockSheogorath1-4/+1598
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2018-09-06Upgrade to Webpack 4 - clean dependenciesDavid Mehren1-774/+817
Signed-off-by: David Mehren <dmehren1@gmail.com>
2018-09-06Upgrade to Webpack 4 - first tryDavid Mehren1-1252/+2833
Signed-off-by: David Mehren <dmehren1@gmail.com>
2018-09-06Update yarn.lockSheogorath1-2/+2
2018-07-27Update markdown-pdfSheogorath1-3/+3
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2018-06-30Update yarn.lockSheogorath1-17/+34
2018-06-30Update yarn.lockSheogorath1-106/+286
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2018-06-17Update yarn.lockSheogorath1-1/+137
2018-06-05Update yarn.lockSheogorath1-2/+194
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2018-05-21Update yarn.lockSheogorath1-3/+3
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2018-04-17Update yarn.lockSheogorath1-1/+1
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2018-03-18Update yarn.lockSheogorath1-0/+4
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2018-03-07Update yarn.lockSheogorath1-77/+0
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2018-01-31Update yarn.lockSheogorath1-52/+96
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2018-01-29Update yarn.lockSheogorath1-0/+4
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2018-01-29Update yarn.lockSheogorath1-3/+3
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2018-01-24Update yarn.lockSheogorath1-7/+50
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2018-01-17Update yarn.lockSheogorath1-3/+69
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2017-11-27Update yarnSheogorath1-70/+75
generated by cgit v1.2.3 (git 2.25.1) at 2024-07-01 17:02:02 +0000