From b718eac70a4a5c87987b5d95427d1261e093440f Mon Sep 17 00:00:00 2001
From: Sheogorath
Date: Sat, 2 Mar 2019 19:14:04 +0100
Subject: Force upgrade of some outdated dependencies

I don't really like the way to go here, but I guess having those
forcefully upgraded is better than staying around with vulnerable
dependencies.

This patch fixes some vulnerbilities in dependencies that were
categories as high severity.

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
---
 package.json | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

(limited to 'package.json')

diff --git a/package.json b/package.json
index de2f6d21..0bb28d19 100644
--- a/package.json
+++ b/package.json
@@ -133,7 +133,9 @@
     "xss": "^1.0.3"
   },
   "resolutions": {
-    "**/tough-cookie": "~2.4.0"
+    "**/tough-cookie": "~2.4.0",
+    "**/minimatch": "^3.0.2",
+    "**/request": "^2.88.0"
   },
   "engines": {
     "node": ">=6.x"
-- 
cgit v1.2.3