From 47bee44f5af4d5203a97b313ebaee9bc652c8a9f Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 26 Apr 2023 16:28:54 +0000 Subject: [PATCH] fix: package.json & package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-KEYCLOAKCONNECT-5462007 --- package-lock.json | 17 +++++++++-------- package.json | 2 +- 2 files changed, 10 insertions(+), 9 deletions(-) diff --git a/package-lock.json b/package-lock.json index f845ed9..26b4fe3 100644 --- a/package-lock.json +++ b/package-lock.json @@ -17,7 +17,7 @@ "express": "^4.17.1", "http-errors": "^1.7.2", "http-status-codes": "^2.1.4", - "keycloak-connect": "^15.0.2", + "keycloak-connect": "^21.0.1", "node-pg-migrate": "^6.0.0", "pg": "^8.7.1", "sequelize": "^6.14.1", @@ -6107,14 +6107,15 @@ } }, "node_modules/keycloak-connect": { - "version": "15.0.2", - "resolved": "https://registry.npmjs.org/keycloak-connect/-/keycloak-connect-15.0.2.tgz", - "integrity": "sha512-2P770zjsqce6CF3WLYn6BBaLWm2mFlY4G/bEyYmgIn+x/3okSCvXaQU3I1An5j9M4lDOmz0JlBrUaTPb4u77rA==", + "version": "21.0.1", + "resolved": "https://registry.npmjs.org/keycloak-connect/-/keycloak-connect-21.0.1.tgz", + "integrity": "sha512-jCLX1sYQpMb2TYK4H1gd2XOwMLXyzMd+ict+Z7295JtFs7GZ0kfBOT7St/RY/3xjen/zd2bHBlnuUBJVZZrciQ==", + "deprecated": "This package is deprecated and will be removed in the future. We will shortly provide more details on removal date, and recommended alternatives.", "dependencies": { "jwk-to-pem": "^2.0.0" }, "engines": { - "node": ">=4.6.2" + "node": ">=14" }, "optionalDependencies": { "chromedriver": "latest" @@ -13691,9 +13692,9 @@ } }, "keycloak-connect": { - "version": "15.0.2", - "resolved": "https://registry.npmjs.org/keycloak-connect/-/keycloak-connect-15.0.2.tgz", - "integrity": "sha512-2P770zjsqce6CF3WLYn6BBaLWm2mFlY4G/bEyYmgIn+x/3okSCvXaQU3I1An5j9M4lDOmz0JlBrUaTPb4u77rA==", + "version": "21.0.1", + "resolved": "https://registry.npmjs.org/keycloak-connect/-/keycloak-connect-21.0.1.tgz", + "integrity": "sha512-jCLX1sYQpMb2TYK4H1gd2XOwMLXyzMd+ict+Z7295JtFs7GZ0kfBOT7St/RY/3xjen/zd2bHBlnuUBJVZZrciQ==", "requires": { "chromedriver": "latest", "jwk-to-pem": "^2.0.0" diff --git a/package.json b/package.json index c109472..019e547 100644 --- a/package.json +++ b/package.json @@ -29,7 +29,7 @@ "express": "^4.17.1", "http-errors": "^1.7.2", "http-status-codes": "^2.1.4", - "keycloak-connect": "^15.0.2", + "keycloak-connect": "^21.0.1", "node-pg-migrate": "^6.0.0", "pg": "^8.7.1", "sequelize": "^6.14.1",