Merge pull request #304 from Mastermindzh/snyk-fix-200f82c042bab393c56350118c69a58e

[Snyk] Security upgrade axios from 1.5.1 to 1.6.0
fix: package.json & package-lock.json to reduce vulnerabilities
2025-09-14 07:39:25 +02:00 · 2023-10-28 22:28:30 +02:00 · 2023-10-27 17:23:08 +00:00 · 2023-10-23 12:50:08 +02:00 · 2023-10-23 12:49:56 +02:00 · 2023-10-23 12:49:47 +02:00
2 changed files with 16 additions and 16 deletions
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,23 +1,23 @@
 {
-  "name": "TIDAL Hi-Fi",
+  "name": "tidal-hifi",
  "version": "5.7.1",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
-      "name": "TIDAL Hi-Fi",
+      "name": "tidal-hifi",
      "version": "5.7.1",
      "license": "MIT",
      "dependencies": {
        "@electron/remote": "^2.0.10",
-        "axios": "^1.4.0",
+        "axios": "^1.6.0",
        "discord-rpc": "^4.0.1",
        "electron-store": "^8.1.0",
        "express": "^4.18.2",
        "hotkeys-js": "^3.12.0",
        "mpris-service": "^2.1.2",
        "request": "^2.88.2",
-        "sass": "^1.64.1"
+        "sass": "^1.67.0"
      },
      "devDependencies": {
        "@mastermindzh/prettier-config": "^1.0.0",
@@ -1976,9 +1976,9 @@
      "integrity": "sha512-NmWvPnx0F1SfrQbYwOi7OeaNGokp9XhzNioJ/CSBs8Qa4vxug81mhJEAVZwxXuBmYB5KDRfMq/F3RR0BIU7sWg=="
    },
    "node_modules/axios": {
-      "version": "1.4.0",
-      "resolved": "https://registry.npmjs.org/axios/-/axios-1.4.0.tgz",
-      "integrity": "sha512-S4XCWMEmzvo64T9GfvQDOXgYRDJ/wsSZc7Jvdgx5u1sd0JwsuPLqb3SYmusag+edF6ziyMensPVqLTSc1PiSEA==",
+      "version": "1.6.0",
+      "resolved": "https://registry.npmjs.org/axios/-/axios-1.6.0.tgz",
+      "integrity": "sha512-EZ1DYihju9pwVB+jg67ogm+Tmqc6JmhamRN6I4Zt8DfZu5lbcQGw3ozH9lFejSJgs/ibaef3A9PMXPLeefFGJg==",
      "dependencies": {
        "follow-redirects": "^1.15.0",
        "form-data": "^4.0.0",
@@ -6977,9 +6977,9 @@
      }
    },
    "node_modules/postcss": {
-      "version": "8.4.25",
-      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.4.25.tgz",
-      "integrity": "sha512-7taJ/8t2av0Z+sQEvNzCkpDynl0tX3uJMCODi6nT3PfASC7dYCWV9aQ+uiCf+KBD4SEFcu+GvJdGdwzQ6OSjCw==",
+      "version": "8.4.31",
+      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.4.31.tgz",
+      "integrity": "sha512-PS08Iboia9mts/2ygV3eLpY5ghnUcfLV/EXTOW1E2qYxJKGGBUtNjN76FYHnMs36RmARn41bC0AZmn+rR0OVpQ==",
      "dev": true,
      "funding": [
        {
@@ -7794,9 +7794,9 @@
      }
    },
    "node_modules/sass": {
-      "version": "1.64.1",
-      "resolved": "https://registry.npmjs.org/sass/-/sass-1.64.1.tgz",
-      "integrity": "sha512-16rRACSOFEE8VN7SCgBu1MpYCyN7urj9At898tyzdXFhC+a+yOX5dXwAR7L8/IdPJ1NB8OYoXmD55DM30B2kEQ==",
+      "version": "1.67.0",
+      "resolved": "https://registry.npmjs.org/sass/-/sass-1.67.0.tgz",
+      "integrity": "sha512-SVrO9ZeX/QQyEGtuZYCVxoeAL5vGlYjJ9p4i4HFuekWl8y/LtJ7tJc10Z+ck1c8xOuoBm2MYzcLfTAffD0pl/A==",
      "dependencies": {
        "chokidar": ">=3.0.0 <4.0.0",
        "immutable": "^4.0.0",
@@ -9340,4 +9340,4 @@
      }
    }
  }
-}
+}
--- a/package.json
+++ b/package.json
@@ -39,14 +39,14 @@
  "license": "MIT",
  "dependencies": {
    "@electron/remote": "^2.0.10",
-    "axios": "^1.4.0",
+    "axios": "^1.6.0",
    "discord-rpc": "^4.0.1",
    "electron-store": "^8.1.0",
    "express": "^4.18.2",
    "hotkeys-js": "^3.12.0",
    "mpris-service": "^2.1.2",
    "request": "^2.88.2",
-    "sass": "^1.64.1"
+    "sass": "^1.67.0"
  },
  "devDependencies": {
    "@mastermindzh/prettier-config": "^1.0.0",
Author	SHA1	Message	Date
Rick van Lieshout	b3d9b187c1	Merge pull request #304 from Mastermindzh/snyk-fix-200f82c042bab393c56350118c69a58e [Snyk] Security upgrade axios from 1.5.1 to 1.6.0	2023-10-28 22:28:30 +02:00
snyk-bot	276632ea9d	fix: package.json & package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AXIOS-6032459	2023-10-27 17:23:08 +00:00
Rick van Lieshout	d14dbad9ea	Merge pull request #298 from Mastermindzh/snyk-upgrade-3e4ac8a7e4360e5de1c0538d47c8656a [Snyk] Upgrade sass from 1.66.1 to 1.67.0	2023-10-23 12:50:08 +02:00
Rick van Lieshout	9e8f6a61f3	Merge pull request #299 from Mastermindzh/dependabot/npm_and_yarn/postcss-8.4.31 chore(deps-dev): bump postcss from 8.4.25 to 8.4.31	2023-10-23 12:49:56 +02:00
Rick van Lieshout	387a544b0f	Merge pull request #301 from Mastermindzh/snyk-upgrade-1427d58228aba014cc2ab24ae2c5a2b0 [Snyk] Upgrade axios from 1.5.0 to 1.5.1	2023-10-23 12:49:47 +02:00
snyk-bot	76fa8de96c	fix: upgrade axios from 1.5.0 to 1.5.1 Snyk has created this PR to upgrade axios from 1.5.0 to 1.5.1. See this package in npm: https://www.npmjs.com/package/axios See this project in Snyk: https://app.snyk.io/org/mastermindzh/project/dade8f03-2064-49a3-8957-edbacec3887c?utm_source=github&utm_medium=referral&page=upgrade-pr	2023-10-18 04:44:56 +00:00
dependabot[bot]	fc2d5d20ca	chore(deps-dev): bump postcss from 8.4.25 to 8.4.31 Bumps [postcss](https://github.com/postcss/postcss) from 8.4.25 to 8.4.31. - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/postcss/postcss/compare/8.4.25...8.4.31) --- updated-dependencies: - dependency-name: postcss dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2023-10-07 22:57:03 +00:00
snyk-bot	9ba2d0fe26	fix: upgrade sass from 1.66.1 to 1.67.0 Snyk has created this PR to upgrade sass from 1.66.1 to 1.67.0. See this package in npm: https://www.npmjs.com/package/sass See this project in Snyk: https://app.snyk.io/org/mastermindzh/project/dade8f03-2064-49a3-8957-edbacec3887c?utm_source=github&utm_medium=referral&page=upgrade-pr	2023-10-05 04:01:35 +00:00
Rick van Lieshout	d94d42e2bd	Merge pull request #294 from Mastermindzh/snyk-upgrade-824dc5a15cb4adae0ec625cbc576dbfb [Snyk] Upgrade sass from 1.64.2 to 1.66.1	2023-09-20 13:51:08 +02:00
snyk-bot	00db9f753e	fix: upgrade sass from 1.64.2 to 1.66.1 Snyk has created this PR to upgrade sass from 1.64.2 to 1.66.1. See this package in npm: https://www.npmjs.com/package/sass See this project in Snyk: https://app.snyk.io/org/mastermindzh/project/dade8f03-2064-49a3-8957-edbacec3887c?utm_source=github&utm_medium=referral&page=upgrade-pr	2023-09-19 04:49:03 +00:00
Rick van Lieshout	696a2730be	Merge pull request #278 from Mastermindzh/snyk-upgrade-8ee3a208d13f6a6df49e7a13d3e6ac99 [Snyk] Upgrade sass from 1.64.1 to 1.64.2	2023-09-18 09:32:58 +02:00
Rick van Lieshout	6a5814c446	Merge pull request #293 from Mastermindzh/snyk-upgrade-9d38cbb1535d5013d209793378f2adbd [Snyk] Upgrade axios from 1.4.0 to 1.5.0	2023-09-18 09:32:40 +02:00
snyk-bot	2326c6dd6a	fix: upgrade axios from 1.4.0 to 1.5.0 Snyk has created this PR to upgrade axios from 1.4.0 to 1.5.0. See this package in npm: https://www.npmjs.com/package/axios See this project in Snyk: https://app.snyk.io/org/mastermindzh/project/dade8f03-2064-49a3-8957-edbacec3887c?utm_source=github&utm_medium=referral&page=upgrade-pr	2023-09-17 07:09:49 +00:00
snyk-bot	b3fffc78ec	fix: upgrade sass from 1.64.1 to 1.64.2 Snyk has created this PR to upgrade sass from 1.64.1 to 1.64.2. See this package in npm: https://www.npmjs.com/package/sass See this project in Snyk: https://app.snyk.io/org/mastermindzh/project/dade8f03-2064-49a3-8957-edbacec3887c?utm_source=github&utm_medium=referral&page=upgrade-pr	2023-08-22 17:35:19 +00:00