Bump vm2 from 3.9.11 to 3.9.15 (#705)

* Bump vm2 from 3.9.11 to 3.9.15

Bumps [vm2](https://github.com/patriksimek/vm2) from 3.9.11 to 3.9.15.
- [Release notes](https://github.com/patriksimek/vm2/releases)
- [Changelog](https://github.com/patriksimek/vm2/blob/master/CHANGELOG.md)
- [Commits](https://github.com/patriksimek/vm2/compare/3.9.11...3.9.15)

---
updated-dependencies:
- dependency-name: vm2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* Create 705.misc

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Will Hunt <will@half-shot.uk>
This commit is contained in:
dependabot[bot] 2023-04-09 18:06:00 +00:00 committed by GitHub
parent 81b0bf57fe
commit 0b555b8073
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 6 additions and 5 deletions

1
changelog.d/705.misc Normal file
View File

@ -0,0 +1 @@
Update dependency used in Generic Webhook JS functions to fix a security flaw.

View File

@ -67,7 +67,7 @@
"source-map-support": "^0.5.21",
"string-argv": "^0.3.1",
"tiny-typed-emitter": "^2.1.0",
"vm2": "^3.9.11",
"vm2": "^3.9.15",
"winston": "^3.3.3",
"xml2js": "^0.4.23",
"yaml": "^1.10.2"

View File

@ -6037,10 +6037,10 @@ vite@^4.1.4:
optionalDependencies:
fsevents "~2.3.2"
vm2@^3.9.11:
version "3.9.11"
resolved "https://registry.yarnpkg.com/vm2/-/vm2-3.9.11.tgz#a880f510a606481719ec3f9803b940c5805a06fe"
integrity sha512-PFG8iJRSjvvBdisowQ7iVF580DXb1uCIiGaXgm7tynMR1uTBlv7UJlB1zdv5KJ+Tmq1f0Upnj3fayoEOPpCBKg==
vm2@^3.9.15:
version "3.9.15"
resolved "https://registry.yarnpkg.com/vm2/-/vm2-3.9.15.tgz#c544e6a9bc31e4e40d2e5f532342cf799ea56a6e"
integrity sha512-XqNqknHGw2avJo13gbIwLNZUumvrSHc9mLqoadFZTpo3KaNEJoe1I0lqTFhRXmXD7WkLyG01aaraXdXT0pa4ag==
dependencies:
acorn "^8.7.0"
acorn-walk "^8.2.0"