From 14d996e3426be3ec62ae4b0f236ebc0d7e96375b Mon Sep 17 00:00:00 2001 From: J_Cat Date: Mon, 14 Feb 2022 08:47:55 -0500 Subject: [PATCH] Upgraded underscore to fix vulnerability. --- package.json | 8 ++++---- yarn.lock | 8 ++++---- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/package.json b/package.json index 02ae187..cdc02c0 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "i2c", - "version": "0.2.5", + "version": "0.2.6", "description": "Native bindings for i2c-dev. Plays well with Raspberry Pi and BeagleBone.", "main": "main.js", "author": "Kelly Korevec", @@ -11,10 +11,10 @@ "license": "BSD-3-Clause-Attribution", "dependencies": { "bindings": "1.5.0", - "underscore": "1.11.0", "coffeescript": "2.5.1", - "repl":"0.1.3", - "nan": "~2.14.0" + "nan": "~2.14.0", + "repl": "0.1.3", + "underscore": "^1.13.2" }, "engine": "node >= 0.12.0" } diff --git a/yarn.lock b/yarn.lock index bbe9ce2..c3699a9 100644 --- a/yarn.lock +++ b/yarn.lock @@ -29,7 +29,7 @@ repl@0.1.3: resolved "https://registry.yarnpkg.com/repl/-/repl-0.1.3.tgz#2f05d42b0c88b43d05ccbda10ed14aeff5699b60" integrity sha1-LwXUKwyItD0FzL2hDtFK7/Vpm2A= -underscore@1.11.0: - version "1.11.0" - resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.11.0.tgz#dd7c23a195db34267186044649870ff1bab5929e" - integrity sha512-xY96SsN3NA461qIRKZ/+qox37YXPtSBswMGfiNptr+wrt6ds4HaMw23TP612fEyGekRE6LNRiLYr/aqbHXNedw== +underscore@^1.13.2: + version "1.13.2" + resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.13.2.tgz#276cea1e8b9722a8dbed0100a407dda572125881" + integrity sha512-ekY1NhRzq0B08g4bGuX4wd2jZx5GnKz6mKSqFL4nqBlfyMGiG10gDFhDTMEfYmDL6Jy0FUIZp7wiRB+0BP7J2g==