Merge pull request #524 from Mastermindzh/snyk-upgrade-278f4ec84db5f4ebc26d987909c6c73f

[Snyk] Upgrade hotkeys-js from 3.13.7 to 3.13.9
fix: upgrade hotkeys-js from 3.13.7 to 3.13.9
2025-09-10 13:54:41 +02:00 · 2025-01-06 17:48:43 +01:00 · 2025-01-04 01:22:24 +00:00 · 2024-12-28 12:45:52 +01:00 · 2024-12-27 23:17:27 +00:00 · 2024-12-09 11:05:23 +01:00
2 changed files with 25 additions and 19 deletions
--- a/package-lock.json
+++ b/package-lock.json
@@ -12,11 +12,11 @@
        "@electron/remote": "^2.1.2",
        "@types/swagger-jsdoc": "^6.0.4",
        "@xhayper/discord-rpc": "^1.2.0",
-        "axios": "^1.7.7",
+        "axios": "^1.7.9",
        "cors": "^2.8.5",
        "electron-store": "^8.2.0",
-        "express": "^4.21.1",
-        "hotkeys-js": "^3.13.7",
+        "express": "^4.21.2",
+        "hotkeys-js": "^3.13.9",
        "mpris-service": "^2.1.2",
        "request": "^2.88.2",
        "sass": "^1.79.4",
@@ -2364,9 +2364,9 @@
      "integrity": "sha512-NmWvPnx0F1SfrQbYwOi7OeaNGokp9XhzNioJ/CSBs8Qa4vxug81mhJEAVZwxXuBmYB5KDRfMq/F3RR0BIU7sWg=="
    },
    "node_modules/axios": {
-      "version": "1.7.7",
-      "resolved": "https://registry.npmjs.org/axios/-/axios-1.7.7.tgz",
-      "integrity": "sha512-S4kL7XrjgBmvdGut0sN3yJxqYzrDOnivkBiN0OFs6hLiUam3UPvswUo0kqGyhqUZGEOytHyumEdXsAkgCOUf3Q==",
+      "version": "1.7.9",
+      "resolved": "https://registry.npmjs.org/axios/-/axios-1.7.9.tgz",
+      "integrity": "sha512-LhLcE7Hbiryz8oMDdDptSrWowmB4Bl6RCt6sIJKpRB4XtVf0iEgewX3au/pJqm+Py1kCASkb/FFKjxQaLtxJvw==",
      "license": "MIT",
      "dependencies": {
        "follow-redirects": "^1.15.6",
@@ -4167,9 +4167,9 @@
      }
    },
    "node_modules/express": {
-      "version": "4.21.1",
-      "resolved": "https://registry.npmjs.org/express/-/express-4.21.1.tgz",
-      "integrity": "sha512-YSFlK1Ee0/GC8QaO91tHcDxJiE/X4FbpAyQWkxAvG6AXCuR65YzK8ua6D9hvi/TzUfZMpc+BwuM1IPw8fmQBiQ==",
+      "version": "4.21.2",
+      "resolved": "https://registry.npmjs.org/express/-/express-4.21.2.tgz",
+      "integrity": "sha512-28HqgMZAmih1Czt9ny7qr6ek2qddF4FclbMzwhCREB6OFfH+rXAnuNCwo1/wFvrtbgsQDb4kSbX9de9lFbrXnA==",
      "license": "MIT",
      "dependencies": {
        "accepts": "~1.3.8",
@@ -4191,7 +4191,7 @@
        "methods": "~1.1.2",
        "on-finished": "2.4.1",
        "parseurl": "~1.3.3",
-        "path-to-regexp": "0.1.10",
+        "path-to-regexp": "0.1.12",
        "proxy-addr": "~2.0.7",
        "qs": "6.13.0",
        "range-parser": "~1.2.1",
@@ -4206,6 +4206,10 @@
      },
      "engines": {
        "node": ">= 0.10.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
      }
    },
    "node_modules/express/node_modules/debug": {
@@ -5091,9 +5095,10 @@
      }
    },
    "node_modules/hotkeys-js": {
-      "version": "3.13.7",
-      "resolved": "https://registry.npmjs.org/hotkeys-js/-/hotkeys-js-3.13.7.tgz",
-      "integrity": "sha512-ygFIdTqqwG4fFP7kkiYlvayZppeIQX2aPpirsngkv1xM1lP0piDY5QEh68nQnIKvz64hfocxhBaD/uK3sSK1yQ==",
+      "version": "3.13.9",
+      "resolved": "https://registry.npmjs.org/hotkeys-js/-/hotkeys-js-3.13.9.tgz",
+      "integrity": "sha512-3TRCj9u9KUH6cKo25w4KIdBfdBfNRjfUwrljCLDC2XhmPDG0SjAZFcFZekpUZFmXzfYoGhFDcdx2gX/vUVtztQ==",
+      "license": "MIT",
      "funding": {
        "url": "https://jaywcjlove.github.io/#/sponsor"
      }
@@ -6685,9 +6690,10 @@
      }
    },
    "node_modules/path-to-regexp": {
-      "version": "0.1.10",
-      "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.10.tgz",
-      "integrity": "sha512-7lf7qcQidTku0Gu3YDPc8DJ1q7OOucfa/BSsIwjuh56VU7katFvuM8hULfkwB3Fns/rsVF7PwPKVw1sl5KQS9w=="
+      "version": "0.1.12",
+      "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.12.tgz",
+      "integrity": "sha512-RA1GjUVMnvYFxuqovrEqZoxxW5NUZqbwKtYz/Tt7nXerk0LbLblQmrsgdeOxV5SFHf0UDggjS/bSeOZwt1pmEQ==",
+      "license": "MIT"
    },
    "node_modules/path-type": {
      "version": "4.0.0",
--- a/package.json
+++ b/package.json
@@ -43,11 +43,11 @@
    "@electron/remote": "^2.1.2",
    "@types/swagger-jsdoc": "^6.0.4",
    "@xhayper/discord-rpc": "^1.2.0",
-    "axios": "^1.7.7",
+    "axios": "^1.7.9",
    "cors": "^2.8.5",
    "electron-store": "^8.2.0",
-    "express": "^4.21.1",
-    "hotkeys-js": "^3.13.7",
+    "express": "^4.21.2",
+    "hotkeys-js": "^3.13.9",
    "mpris-service": "^2.1.2",
    "request": "^2.88.2",
    "sass": "^1.79.4",
Author	SHA1	Message	Date
Rick van Lieshout	ff4c51234b	Merge pull request #524 from Mastermindzh/snyk-upgrade-278f4ec84db5f4ebc26d987909c6c73f [Snyk] Upgrade hotkeys-js from 3.13.7 to 3.13.9	2025-01-06 17:48:43 +01:00
snyk-bot	c4ee6b51b9	fix: upgrade hotkeys-js from 3.13.7 to 3.13.9 Snyk has created this PR to upgrade hotkeys-js from 3.13.7 to 3.13.9. See this package in npm: hotkeys-js See this project in Snyk: https://app.snyk.io/org/mastermindzh/project/dade8f03-2064-49a3-8957-edbacec3887c?utm_source=github&utm_medium=referral&page=upgrade-pr	2025-01-04 01:22:24 +00:00
Rick van Lieshout	45fe336598	Merge pull request #522 from Mastermindzh/snyk-upgrade-7f82ddec0efc65c72c6f7f2f182ace7c [Snyk] Upgrade axios from 1.7.8 to 1.7.9	2024-12-28 12:45:52 +01:00
snyk-bot	fe9f50aaf5	fix: upgrade axios from 1.7.8 to 1.7.9 Snyk has created this PR to upgrade axios from 1.7.8 to 1.7.9. See this package in npm: axios See this project in Snyk: https://app.snyk.io/org/mastermindzh/project/dade8f03-2064-49a3-8957-edbacec3887c?utm_source=github&utm_medium=referral&page=upgrade-pr	2024-12-27 23:17:27 +00:00
Rick van Lieshout	755be0ee30	Merge pull request #515 from Mastermindzh/snyk-fix-82857ea1745fc2cfbc5f06a87a8ff0b8 [Snyk] Security upgrade express from 4.21.1 to 4.21.2	2024-12-09 11:05:23 +01:00
snyk-bot	9d736b2bd9	fix: package.json & package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-PATHTOREGEXP-8482416	2024-12-06 20:33:54 +00:00
Rick van Lieshout	f4d4b1a1df	Merge pull request #508 from Mastermindzh/snyk-fix-a6630fbdb3c8f0161d0b939cf0ec3ca3 [Snyk] Security upgrade axios from 1.7.7 to 1.7.8	2024-12-02 09:03:11 +01:00
snyk-bot	0c27c815f5	fix: package.json & package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AXIOS-6671926	2024-11-30 06:57:38 +00:00