From 0386c964b5ce1ea697ffd0885a2da587395ceb30 Mon Sep 17 00:00:00 2001 From: Adrien Crivelli Date: Thu, 18 Jul 2019 17:34:37 -0700 Subject: [PATCH] build: secure yarn lock files (#31640) See https://yarnpkg.com/blog/2019/07/12/recommended-security-update/ PR Close #31640 --- aio/tools/examples/shared/yarn.lock | 8 ++++---- integration/cli-hello-world/yarn.lock | 2 +- yarn.lock | 6 +++--- 3 files changed, 8 insertions(+), 8 deletions(-) diff --git a/aio/tools/examples/shared/yarn.lock b/aio/tools/examples/shared/yarn.lock index fe79b99e41..9b0771d7fa 100644 --- a/aio/tools/examples/shared/yarn.lock +++ b/aio/tools/examples/shared/yarn.lock @@ -471,7 +471,7 @@ "@types/node@~8.9.4": version "8.9.5" - resolved "http://registry.npmjs.org/@types/node/-/node-8.9.5.tgz#162b864bc70be077e6db212b322754917929e976" + resolved "https://registry.npmjs.org/@types/node/-/node-8.9.5.tgz#162b864bc70be077e6db212b322754917929e976" "@types/q@^0.0.32": version "0.0.32" @@ -2820,7 +2820,7 @@ express@2.5.x: express@^4.14.1: version "4.16.3" - resolved "http://registry.npmjs.org/express/-/express-4.16.3.tgz#6af8a502350db3246ecc4becf6b5a34d22f7ed53" + resolved "https://registry.npmjs.org/express/-/express-4.16.3.tgz#6af8a502350db3246ecc4becf6b5a34d22f7ed53" dependencies: accepts "~1.3.5" array-flatten "1.1.1" @@ -3039,7 +3039,7 @@ finalhandler@1.0.6: finalhandler@1.1.1: version "1.1.1" - resolved "http://registry.npmjs.org/finalhandler/-/finalhandler-1.1.1.tgz#eebf4ed840079c83f4249038c9d703008301b105" + resolved "https://registry.npmjs.org/finalhandler/-/finalhandler-1.1.1.tgz#eebf4ed840079c83f4249038c9d703008301b105" dependencies: debug "2.6.9" encodeurl "~1.0.2" @@ -5592,7 +5592,7 @@ p-finally@^1.0.0: p-is-promise@^1.1.0: version "1.1.0" - resolved "http://registry.npmjs.org/p-is-promise/-/p-is-promise-1.1.0.tgz#9c9456989e9f6588017b0434d56097675c3da05e" + resolved "https://registry.npmjs.org/p-is-promise/-/p-is-promise-1.1.0.tgz#9c9456989e9f6588017b0434d56097675c3da05e" p-limit@^2.0.0: version "2.0.0" diff --git a/integration/cli-hello-world/yarn.lock b/integration/cli-hello-world/yarn.lock index a71a671f36..3bc7d7f38f 100644 --- a/integration/cli-hello-world/yarn.lock +++ b/integration/cli-hello-world/yarn.lock @@ -8084,7 +8084,7 @@ through2@^2.0.0: "through@>=2.2.7 <3", through@X.X.X, through@^2.3.6: version "2.3.8" - resolved "http://registry.npmjs.org/through/-/through-2.3.8.tgz#0dd4c9ffaabc357960b1b724115d7e0e86a2e1f5" + resolved "https://registry.npmjs.org/through/-/through-2.3.8.tgz#0dd4c9ffaabc357960b1b724115d7e0e86a2e1f5" integrity sha1-DdTJ/6q8NXlgsbckEV1+Doai4fU= thunkify@~2.1.1: diff --git a/yarn.lock b/yarn.lock index 16dbe8c4a7..d6b1cf083f 100644 --- a/yarn.lock +++ b/yarn.lock @@ -956,7 +956,7 @@ ansi-align@^2.0.0: ansi-colors@^1.0.1: version "1.1.0" - resolved "http://registry.npmjs.org/ansi-colors/-/ansi-colors-1.1.0.tgz#6374b4dd5d4718ff3ce27a671a3b1cad077132a9" + resolved "https://registry.npmjs.org/ansi-colors/-/ansi-colors-1.1.0.tgz#6374b4dd5d4718ff3ce27a671a3b1cad077132a9" integrity sha512-SFKX67auSNoVR38N3L+nvsPjOE0bybKTYbkf5tRvushrAPQ9V75huw0ZxBkKVeRU9kqH3d6HA4xTckbwZ4ixmA== dependencies: ansi-wrap "^0.1.0" @@ -2507,7 +2507,7 @@ compression@^1.7.0: compression@~1.5.2: version "1.5.2" - resolved "http://registry.npmjs.org/compression/-/compression-1.5.2.tgz#b03b8d86e6f8ad29683cba8df91ddc6ffc77b395" + resolved "https://registry.npmjs.org/compression/-/compression-1.5.2.tgz#b03b8d86e6f8ad29683cba8df91ddc6ffc77b395" integrity sha1-sDuNhub4rSloPLqN+R3cb/x3s5U= dependencies: accepts "~1.2.12" @@ -3717,7 +3717,7 @@ event-emitter@^0.3.5, event-emitter@~0.3.5: event-stream@^3.1.5, event-stream@^3.3.2: version "3.3.4" - resolved "http://registry.npmjs.org/event-stream/-/event-stream-3.3.4.tgz#4ab4c9a0f5a54db9338b4c34d86bfce8f4b35571" + resolved "https://registry.npmjs.org/event-stream/-/event-stream-3.3.4.tgz#4ab4c9a0f5a54db9338b4c34d86bfce8f4b35571" integrity sha1-SrTJoPWlTbkzi0w02Gv86PSzVXE= dependencies: duplexer "~0.1.1"