From 267dbf7572507dc7aa96e44e1a33f1ea0a1cc939 Mon Sep 17 00:00:00 2001 From: "dependabot-preview[bot]" <27856297+dependabot-preview[bot]@users.noreply.github.com> Date: Tue, 1 Jun 2021 06:20:17 +0000 Subject: [PATCH] [Security] Bump ws from 7.3.1 to 7.4.6 Bumps [ws](https://github.com/websockets/ws) from 7.3.1 to 7.4.6. **This update includes security fixes.** - [Release notes](https://github.com/websockets/ws/releases) - [Commits](https://github.com/websockets/ws/compare/7.3.1...7.4.6) Signed-off-by: dependabot-preview[bot] --- package.json | 2 +- yarn.lock | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/package.json b/package.json index 1960dae3..1674d436 100644 --- a/package.json +++ b/package.json @@ -110,7 +110,7 @@ "webpack-cli": "3.3.5", "webpack-messages": "^2.0.4", "withstyles": "^1.0.3", - "ws": "^7.3.1", + "ws": "^7.4.6", "yargs": "^12.0.2" }, "devDependencies": { diff --git a/yarn.lock b/yarn.lock index dc91bf99..24a2f0e9 100644 --- a/yarn.lock +++ b/yarn.lock @@ -11843,10 +11843,10 @@ ws@^5.2.0: dependencies: async-limiter "~1.0.0" -ws@^7.3.1: - version "7.3.1" - resolved "https://registry.yarnpkg.com/ws/-/ws-7.3.1.tgz#d0547bf67f7ce4f12a72dfe31262c68d7dc551c8" - integrity sha512-D3RuNkynyHmEJIpD2qrgVkc9DQ23OrN/moAwZX4L8DfvszsJxpjQuUq3LMx6HoYji9fbIOBY18XWBsAux1ZZUA== +ws@^7.4.6: + version "7.4.6" + resolved "https://registry.yarnpkg.com/ws/-/ws-7.4.6.tgz#5654ca8ecdeee47c33a9a4bf6d28e2be2980377c" + integrity sha512-YmhHDO4MzaDLB+M9ym/mDA5z0naX8j7SIlT8f8z+I0VtzsRbekxEutHSme7NPS2qE8StCYQNUnfWdXta/Yu85A== x256@>=0.0.1, x256@~0.0.1: version "0.0.2"