From 6a73aa412533b05b3e06d7f464caa3fb279fe00c Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 29 Sep 2025 08:09:43 +0000 Subject: [PATCH] fix: package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-FORMDATA-10841150 - https://snyk.io/vuln/SNYK-JS-SHAJS-12089400 - https://snyk.io/vuln/SNYK-JS-PATHTOREGEXP-7925106 - https://snyk.io/vuln/SNYK-JS-PATHTOREGEXP-8482416 - https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116 - https://snyk.io/vuln/SNYK-JS-BODYPARSER-7926860 - https://snyk.io/vuln/SNYK-JS-COOKIE-8163060 - https://snyk.io/vuln/SNYK-JS-EXPRESS-6474509 - https://snyk.io/vuln/SNYK-JS-EXPRESS-7926867 - https://snyk.io/vuln/SNYK-JS-BRACEEXPANSION-9789073 - https://snyk.io/vuln/SNYK-JS-SEND-7926862 - https://snyk.io/vuln/SNYK-JS-SERVESTATIC-7926865 --- package.json | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/package.json b/package.json index 7fc4975..17e7166 100644 --- a/package.json +++ b/package.json @@ -32,7 +32,7 @@ "test:watch": "jest --watch" }, "dependencies": { - "@apollo/server": "^4.9.3", + "@apollo/server": "^5.0.0", "@nestjs/apollo": "^12.0.7", "@nestjs/bull": "^0.6.3", "@nestjs/cache-manager": "^1.0.0", @@ -53,14 +53,14 @@ "@prisma/client": "^4.12.0", "@socket.io/redis-adapter": "^8.0.1", "@types/graphql-fields": "^1.3.4", - "bcrypt": "^5.0.1", + "bcrypt": "^6.0.0", "bull": "^4.10.2", "cache-manager": "^5.2.0", "cache-manager-redis-store": "^3.0.1", "class-transformer": "0.5.1", "class-validator": "0.14.0", "dotenv": "^16.0.3", - "express": "^4.18.2", + "express": "^4.21.2", "fs-extra": "^11.1.0", "graphql": "^16.8.1", "graphql-fields": "^2.0.3", @@ -74,7 +74,7 @@ "map-series-async": "^0.0.1", "mime-types": "^2.1.35", "moment": "^2.29.4", - "mqtt": "^4.3.7", + "mqtt": "^5.3.5", "multer": "1.4.5-lts.1", "nestjs-prisma": "^0.20.0", "passport": "0.6.0", @@ -83,12 +83,12 @@ "pluralize": "^8.0.0", "redis": "^4.5.1", "reflect-metadata": "0.1.13", - "rimraf": "^4.0.0", + "rimraf": "^4.3.1", "rxjs": "^7.5.5", - "socket.io": "^4.5.4", + "socket.io": "^4.8.0", "ts-mixer": "^6.0.2", "tslib": "^2.4.1", - "typeorm": "^0.3.11" + "typeorm": "^0.3.18" }, "devDependencies": { "@compodoc/compodoc": "^1.1.19",