From 6ed6b90840ce099611d738782bf1903fefb7bcc5 Mon Sep 17 00:00:00 2001 From: "dependabot-preview[bot]" <27856297+dependabot-preview[bot]@users.noreply.github.com> Date: Thu, 24 Dec 2020 17:45:16 +0000 Subject: [PATCH] [Security] Bump ini from 1.3.5 to 1.3.7 Bumps [ini](https://github.com/isaacs/ini) from 1.3.5 to 1.3.7. **This update includes a security fix.** - [Release notes](https://github.com/isaacs/ini/releases) - [Commits](https://github.com/isaacs/ini/compare/v1.3.5...v1.3.7) Signed-off-by: dependabot-preview[bot] --- yarn.lock | 9 ++------- 1 file changed, 2 insertions(+), 7 deletions(-) diff --git a/yarn.lock b/yarn.lock index 581a4839..adb6dd91 100644 --- a/yarn.lock +++ b/yarn.lock @@ -3857,19 +3857,14 @@ inherits@^2.0.1, inherits@~2.0.0: ini@1.3.7: version "1.3.7" - resolved "https://registry.npmjs.org/ini/-/ini-1.3.7.tgz" + resolved "https://registry.yarnpkg.com/ini/-/ini-1.3.7.tgz#a09363e1911972ea16d7a8851005d84cf09a9a84" integrity sha512-iKpRpXP+CrP2jyrxvg1kMUpXDyRUFDWurxbnVT1vQPx+Wz9uCYsMIqYuSBLV+PAaZG/d7kRLKRFc9oDMsH+mFQ== -ini@^1.3.4, ini@~1.3.0: +ini@^1.3.4, ini@~1.3.0, ini@~1.3.4: version "1.3.8" resolved "https://registry.npmjs.org/ini/-/ini-1.3.8.tgz" integrity sha512-JV/yugV2uzW5iMRSiZAyDtQd+nxtUnjeLt0acNdw98kKLrvuRVyB80tsREOE7yvGVgalhZ6RNXCmEHkUKBKxew== -ini@~1.3.4: - version "1.3.4" - resolved "https://registry.npmjs.org/ini/-/ini-1.3.4.tgz" - integrity sha1-BTfLedr1m1mhpRff9wbIbsA5Fi4= - init-package-json@~1.10.1: version "1.10.1" resolved "https://registry.npmjs.org/init-package-json/-/init-package-json-1.10.1.tgz"