From 6af6d1df6a8bc76a067a1fecf355297cd481559b Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 3 Oct 2025 10:13:54 +0000 Subject: [PATCH] fix: package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-FORMDATA-10841150 - https://snyk.io/vuln/SNYK-JS-SHAJS-12089400 - https://snyk.io/vuln/SNYK-JS-PATHTOREGEXP-7925106 - https://snyk.io/vuln/SNYK-JS-PATHTOREGEXP-8482416 - https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116 - https://snyk.io/vuln/SNYK-JS-BODYPARSER-7926860 - https://snyk.io/vuln/SNYK-JS-COOKIE-8163060 - https://snyk.io/vuln/SNYK-JS-EXPRESS-6474509 - https://snyk.io/vuln/SNYK-JS-EXPRESS-7926867 - https://snyk.io/vuln/SNYK-JS-BRACEEXPANSION-9789073 - https://snyk.io/vuln/SNYK-JS-SEND-7926862 - https://snyk.io/vuln/SNYK-JS-SERVESTATIC-7926865 --- package.json | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/package.json b/package.json index d769d54..cf67a37 100644 --- a/package.json +++ b/package.json @@ -35,7 +35,7 @@ "test:watch": "jest --watch" }, "dependencies": { - "@apollo/server": "^4.9.3", + "@apollo/server": "^5.0.0", "@nestjs/apollo": "^12.0.7", "@nestjs/bull": "^0.6.3", "@nestjs/cache-manager": "^1.0.0", @@ -56,14 +56,14 @@ "@prisma/client": "^4.12.0", "@socket.io/redis-adapter": "^8.0.1", "@types/graphql-fields": "^1.3.4", - "bcrypt": "^5.0.1", + "bcrypt": "^6.0.0", "bull": "^4.10.2", "cache-manager": "^5.2.0", "cache-manager-redis-store": "^3.0.1", "class-transformer": "0.5.1", "class-validator": "0.14.0", "dotenv": "^16.0.3", - "express": "^4.18.2", + "express": "^4.21.2", "fs-extra": "^11.1.0", "graphql": "^16.8.1", "graphql-fields": "^2.0.3", @@ -86,12 +86,12 @@ "pluralize": "^8.0.0", "redis": "^4.5.1", "reflect-metadata": "0.1.13", - "rimraf": "^4.0.0", + "rimraf": "^4.3.1", "rxjs": "^7.5.5", - "socket.io": "^4.5.4", + "socket.io": "^4.8.0", "ts-mixer": "^6.0.2", "tslib": "^2.4.1", - "typeorm": "^0.3.11" + "typeorm": "^0.3.18" }, "devDependencies": { "@compodoc/compodoc": "^1.1.19",