fix: package.json & package-lock.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AXIOS-6144788
2025-09-01 19:16:51 +01:00 · 2024-01-05 18:57:24 +00:00
2 changed files with 53 additions and 71 deletions
--- a/package-lock.json
+++ b/package-lock.json
@@ -8,10 +8,10 @@
      "name": "pastel.codes",
      "version": "0.0.0",
      "dependencies": {
-        "@sendgrid/mail": "^7.4.4",
+        "@sendgrid/mail": "^8.0.0",
        "app-root-path": "^3.0.0",
        "autoprefixer": "^10.3.4",
-        "axios": "^1.6.0",
+        "axios": "^1.6.4",
        "cookie-parser": "^1.4.5",
        "express": "^4.17.1",
        "express-rate-limit": "^5.2.6",
@@ -166,46 +166,38 @@
      }
    },
    "node_modules/@sendgrid/client": {
-      "version": "7.4.3",
-      "resolved": "https://registry.npmjs.org/@sendgrid/client/-/client-7.4.3.tgz",
-      "integrity": "sha512-tTaHx893w5iqG0sVtUnMyRchuwYF95k4UOkmov1MouMIeMUbNvbalITo7cG7YSXUTY9rT2t4eBY6HcEBCVeqfg==",
+      "version": "8.1.0",
+      "resolved": "https://registry.npmjs.org/@sendgrid/client/-/client-8.1.0.tgz",
+      "integrity": "sha512-Kp2kKLr307v/HnR3uGuySt0AbCkeG7naDVOzfPOtWvKHVZIEHmKidQjJjzytVZNYWtoRdYgNfBw6GyUznGqa6w==",
      "dependencies": {
-        "@sendgrid/helpers": "^7.4.3",
-        "axios": "^0.21.1"
+        "@sendgrid/helpers": "^8.0.0",
+        "axios": "^1.6.0"
      },
      "engines": {
-        "node": "6.* || 8.* || >=10.*"
-      }
-    },
-    "node_modules/@sendgrid/client/node_modules/axios": {
-      "version": "0.21.4",
-      "resolved": "https://registry.npmjs.org/axios/-/axios-0.21.4.tgz",
-      "integrity": "sha512-ut5vewkiu8jjGBdqpM44XxjuCjq9LAKeHVmoVfHVzy8eHgxxq8SbAVQNovDA8mVi05kP0Ea/n/UzcSHcTJQfNg==",
-      "dependencies": {
-        "follow-redirects": "^1.14.0"
+        "node": ">=12.*"
      }
    },
    "node_modules/@sendgrid/helpers": {
-      "version": "7.4.3",
-      "resolved": "https://registry.npmjs.org/@sendgrid/helpers/-/helpers-7.4.3.tgz",
-      "integrity": "sha512-Wt+68g1sVEM5UspJh34O/cxtv6BBbtAIk7U9B3PB2ySOtPs9e6hI1QkgYVwpNmkt7k2p86muUNyma/Aig25agg==",
+      "version": "8.0.0",
+      "resolved": "https://registry.npmjs.org/@sendgrid/helpers/-/helpers-8.0.0.tgz",
+      "integrity": "sha512-Ze7WuW2Xzy5GT5WRx+yEv89fsg/pgy3T1E3FS0QEx0/VvRmigMZ5qyVGhJz4SxomegDkzXv/i0aFPpHKN8qdAA==",
      "dependencies": {
        "deepmerge": "^4.2.2"
      },
      "engines": {
-        "node": ">= 6.0.0"
+        "node": ">= 12.0.0"
      }
    },
    "node_modules/@sendgrid/mail": {
-      "version": "7.4.4",
-      "resolved": "https://registry.npmjs.org/@sendgrid/mail/-/mail-7.4.4.tgz",
-      "integrity": "sha512-9+dyArajxbPY7eJJAd2eps7MVsXW9E4Y294gWeMYku0/Id/qAivexidjstvkkVlZdlrHbEsGDlnMEcw2eXOiFg==",
+      "version": "8.0.0",
+      "resolved": "https://registry.npmjs.org/@sendgrid/mail/-/mail-8.0.0.tgz",
+      "integrity": "sha512-ePir+LT6kzJ7yaWAFuo8R+N9Pjm3KQMV5NpJ9XuTaLwwuXrUBiPzFo953Qc7slsYf7AKhMurF4w+ta4v1nsJ7A==",
      "dependencies": {
-        "@sendgrid/client": "^7.4.3",
-        "@sendgrid/helpers": "^7.4.3"
+        "@sendgrid/client": "^8.0.0",
+        "@sendgrid/helpers": "^8.0.0"
      },
      "engines": {
-        "node": "6.* || 8.* || >=10.*"
+        "node": ">=12.*"
      }
    },
    "node_modules/@sindresorhus/is": {
@@ -462,11 +454,11 @@
      }
    },
    "node_modules/axios": {
-      "version": "1.6.0",
-      "resolved": "https://registry.npmjs.org/axios/-/axios-1.6.0.tgz",
-      "integrity": "sha512-EZ1DYihju9pwVB+jg67ogm+Tmqc6JmhamRN6I4Zt8DfZu5lbcQGw3ozH9lFejSJgs/ibaef3A9PMXPLeefFGJg==",
+      "version": "1.6.4",
+      "resolved": "https://registry.npmjs.org/axios/-/axios-1.6.4.tgz",
+      "integrity": "sha512-heJnIs6N4aa1eSthhN9M5ioILu8Wi8vmQW9iHQ9NUvfkJb0lEEDUiIdQNAuBtfUt3FxReaKdpQA5DbmMOqzF/A==",
      "dependencies": {
-        "follow-redirects": "^1.15.0",
+        "follow-redirects": "^1.15.4",
        "form-data": "^4.0.0",
        "proxy-from-env": "^1.1.0"
      }
@@ -1035,9 +1027,9 @@
      }
    },
    "node_modules/deepmerge": {
-      "version": "4.2.2",
-      "resolved": "https://registry.npmjs.org/deepmerge/-/deepmerge-4.2.2.tgz",
-      "integrity": "sha512-FJ3UgI4gIl+PHZm53knsuSFpE+nESMr7M4v9QcgB7S63Kj/6WqMiFQJpBBYz1Pt+66bZpP3Q7Lye0Oo9MPKEdg==",
+      "version": "4.3.1",
+      "resolved": "https://registry.npmjs.org/deepmerge/-/deepmerge-4.3.1.tgz",
+      "integrity": "sha512-3sUqbMEc77XqpdNO7FRyRog+eW3ph+GYCbj+rK+uYyRMuwsVy0rMiVtPn+QJlKFvWP/1PYpapqYn0Me2knFn+A==",
      "engines": {
        "node": ">=0.10.0"
      }
@@ -1369,9 +1361,9 @@
      "integrity": "sha512-GRnmB5gPyJpAhTQdSZTSp9uaPSvl09KoYcMQtsB9rQoOmzs9dH6ffeccH+Z+cv6P68Hu5bC6JjRh4Ah/mHSNRw=="
    },
    "node_modules/follow-redirects": {
-      "version": "1.15.3",
-      "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.3.tgz",
-      "integrity": "sha512-1VzOtuEM8pC9SFU1E+8KfTjZyMztRsgEfwQl44z8A25uy13jSzTj6dyK2Df52iV0vgHCfBwLhDWevLn95w5v6Q==",
+      "version": "1.15.4",
+      "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.4.tgz",
+      "integrity": "sha512-Cr4D/5wlrb0z9dgERpUL3LrmPKVDsETIJhaCMeDfuFYcqa5bldGV6wBsAN6X/vxlXQtFBMrXdXxdL8CbDTGniw==",
      "funding": [
        {
          "type": "individual",
@@ -4013,39 +4005,29 @@
      }
    },
    "@sendgrid/client": {
-      "version": "7.4.3",
-      "resolved": "https://registry.npmjs.org/@sendgrid/client/-/client-7.4.3.tgz",
-      "integrity": "sha512-tTaHx893w5iqG0sVtUnMyRchuwYF95k4UOkmov1MouMIeMUbNvbalITo7cG7YSXUTY9rT2t4eBY6HcEBCVeqfg==",
+      "version": "8.1.0",
+      "resolved": "https://registry.npmjs.org/@sendgrid/client/-/client-8.1.0.tgz",
+      "integrity": "sha512-Kp2kKLr307v/HnR3uGuySt0AbCkeG7naDVOzfPOtWvKHVZIEHmKidQjJjzytVZNYWtoRdYgNfBw6GyUznGqa6w==",
      "requires": {
-        "@sendgrid/helpers": "^7.4.3",
-        "axios": "^0.21.1"
-      },
-      "dependencies": {
-        "axios": {
-          "version": "0.21.4",
-          "resolved": "https://registry.npmjs.org/axios/-/axios-0.21.4.tgz",
-          "integrity": "sha512-ut5vewkiu8jjGBdqpM44XxjuCjq9LAKeHVmoVfHVzy8eHgxxq8SbAVQNovDA8mVi05kP0Ea/n/UzcSHcTJQfNg==",
-          "requires": {
-            "follow-redirects": "^1.14.0"
-          }
-        }
+        "@sendgrid/helpers": "^8.0.0",
+        "axios": "^1.6.0"
      }
    },
    "@sendgrid/helpers": {
-      "version": "7.4.3",
-      "resolved": "https://registry.npmjs.org/@sendgrid/helpers/-/helpers-7.4.3.tgz",
-      "integrity": "sha512-Wt+68g1sVEM5UspJh34O/cxtv6BBbtAIk7U9B3PB2ySOtPs9e6hI1QkgYVwpNmkt7k2p86muUNyma/Aig25agg==",
+      "version": "8.0.0",
+      "resolved": "https://registry.npmjs.org/@sendgrid/helpers/-/helpers-8.0.0.tgz",
+      "integrity": "sha512-Ze7WuW2Xzy5GT5WRx+yEv89fsg/pgy3T1E3FS0QEx0/VvRmigMZ5qyVGhJz4SxomegDkzXv/i0aFPpHKN8qdAA==",
      "requires": {
        "deepmerge": "^4.2.2"
      }
    },
    "@sendgrid/mail": {
-      "version": "7.4.4",
-      "resolved": "https://registry.npmjs.org/@sendgrid/mail/-/mail-7.4.4.tgz",
-      "integrity": "sha512-9+dyArajxbPY7eJJAd2eps7MVsXW9E4Y294gWeMYku0/Id/qAivexidjstvkkVlZdlrHbEsGDlnMEcw2eXOiFg==",
+      "version": "8.0.0",
+      "resolved": "https://registry.npmjs.org/@sendgrid/mail/-/mail-8.0.0.tgz",
+      "integrity": "sha512-ePir+LT6kzJ7yaWAFuo8R+N9Pjm3KQMV5NpJ9XuTaLwwuXrUBiPzFo953Qc7slsYf7AKhMurF4w+ta4v1nsJ7A==",
      "requires": {
-        "@sendgrid/client": "^7.4.3",
-        "@sendgrid/helpers": "^7.4.3"
+        "@sendgrid/client": "^8.0.0",
+        "@sendgrid/helpers": "^8.0.0"
      }
    },
    "@sindresorhus/is": {
@@ -4239,11 +4221,11 @@
      }
    },
    "axios": {
-      "version": "1.6.0",
-      "resolved": "https://registry.npmjs.org/axios/-/axios-1.6.0.tgz",
-      "integrity": "sha512-EZ1DYihju9pwVB+jg67ogm+Tmqc6JmhamRN6I4Zt8DfZu5lbcQGw3ozH9lFejSJgs/ibaef3A9PMXPLeefFGJg==",
+      "version": "1.6.4",
+      "resolved": "https://registry.npmjs.org/axios/-/axios-1.6.4.tgz",
+      "integrity": "sha512-heJnIs6N4aa1eSthhN9M5ioILu8Wi8vmQW9iHQ9NUvfkJb0lEEDUiIdQNAuBtfUt3FxReaKdpQA5DbmMOqzF/A==",
      "requires": {
-        "follow-redirects": "^1.15.0",
+        "follow-redirects": "^1.15.4",
        "form-data": "^4.0.0",
        "proxy-from-env": "^1.1.0"
      }
@@ -4687,9 +4669,9 @@
      "integrity": "sha512-LOHxIOaPYdHlJRtCQfDIVZtfw/ufM8+rVj649RIHzcm/vGwQRXFt6OPqIFWsm2XEMrNIEtWR64sY1LEKD2vAOA=="
    },
    "deepmerge": {
-      "version": "4.2.2",
-      "resolved": "https://registry.npmjs.org/deepmerge/-/deepmerge-4.2.2.tgz",
-      "integrity": "sha512-FJ3UgI4gIl+PHZm53knsuSFpE+nESMr7M4v9QcgB7S63Kj/6WqMiFQJpBBYz1Pt+66bZpP3Q7Lye0Oo9MPKEdg=="
+      "version": "4.3.1",
+      "resolved": "https://registry.npmjs.org/deepmerge/-/deepmerge-4.3.1.tgz",
+      "integrity": "sha512-3sUqbMEc77XqpdNO7FRyRog+eW3ph+GYCbj+rK+uYyRMuwsVy0rMiVtPn+QJlKFvWP/1PYpapqYn0Me2knFn+A=="
    },
    "defer-to-connect": {
      "version": "1.1.3",
@@ -4973,9 +4955,9 @@
      "integrity": "sha512-GRnmB5gPyJpAhTQdSZTSp9uaPSvl09KoYcMQtsB9rQoOmzs9dH6ffeccH+Z+cv6P68Hu5bC6JjRh4Ah/mHSNRw=="
    },
    "follow-redirects": {
-      "version": "1.15.3",
-      "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.3.tgz",
-      "integrity": "sha512-1VzOtuEM8pC9SFU1E+8KfTjZyMztRsgEfwQl44z8A25uy13jSzTj6dyK2Df52iV0vgHCfBwLhDWevLn95w5v6Q=="
+      "version": "1.15.4",
+      "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.4.tgz",
+      "integrity": "sha512-Cr4D/5wlrb0z9dgERpUL3LrmPKVDsETIJhaCMeDfuFYcqa5bldGV6wBsAN6X/vxlXQtFBMrXdXxdL8CbDTGniw=="
    },
    "form-data": {
      "version": "4.0.0",
--- a/package.json
+++ b/package.json
@@ -17,9 +17,9 @@
    "build-tailwind": "npx postcss src/tailwind.css -o public/stylesheets/style.css"
  },
  "dependencies": {
-    "@sendgrid/mail": "^7.4.4",
+    "@sendgrid/mail": "^8.0.0",
    "app-root-path": "^3.0.0",
-    "axios": "^1.6.0",
+    "axios": "^1.6.4",
    "cookie-parser": "^1.4.5",
    "express": "^4.17.1",
    "express-rate-limit": "^5.2.6",