From 7bdd224ead61cf9fb547ddcdcd3f0a7095e3a5f1 Mon Sep 17 00:00:00 2001 From: Neil Date: Thu, 5 Dec 2024 15:35:19 +0100 Subject: [PATCH] fix: container package-lock v3 missing sub-dependencies --- package-lock.json | 196 ++++++++++++++++++++++++++++++++++++++++++---- package.json | 2 +- 2 files changed, 182 insertions(+), 16 deletions(-) diff --git a/package-lock.json b/package-lock.json index db658d81a8..8219147b59 100644 --- a/package-lock.json +++ b/package-lock.json @@ -68,7 +68,7 @@ "semver": "^6.0.0", "snyk-config": "^5.0.0", "snyk-cpp-plugin": "2.24.0", - "snyk-docker-plugin": "6.13.15", + "snyk-docker-plugin": "6.13.18", "snyk-go-plugin": "1.23.0", "snyk-gradle-plugin": "4.7.0", "snyk-module": "3.1.0", @@ -20280,9 +20280,9 @@ "integrity": "sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==" }, "node_modules/snyk-docker-plugin": { - "version": "6.13.15", - "resolved": "https://registry.npmjs.org/snyk-docker-plugin/-/snyk-docker-plugin-6.13.15.tgz", - "integrity": "sha512-r8Vh8EXyhF8YuU0Xda2Y9/H54PaH3P3etwLMmHsL+OA2FW2gld+K9GV2Kch4GaVDzKuZ2d+NgmW9rYlN8EkZGA==", + "version": "6.13.18", + "resolved": "https://registry.npmjs.org/snyk-docker-plugin/-/snyk-docker-plugin-6.13.18.tgz", + "integrity": "sha512-R/eKm8qgv+F1tLifuFt+8rMW5rkuaCbA1Swqc3jBITNg9+8e4NNnOPOYJNxxwwoBfDrsvGkQJZceBOs4qWlysQ==", "dependencies": { "@snyk/composer-lockfile-parser": "^1.4.1", "@snyk/dep-graph": "^2.8.1", @@ -20290,9 +20290,9 @@ "@snyk/rpm-parser": "3.1.0", "@snyk/snyk-docker-pull": "3.13.0", "@swimlane/docker-reference": "^2.0.1", - "adm-zip": "^0.5.12", + "adm-zip": "^0.5.16", "chalk": "^2.4.2", - "debug": "^4.1.1", + "debug": "^4.3.7", "docker-modem": "3.0.8", "dockerfile-ast": "0.6.1", "elfy": "^1.0.0", @@ -20300,9 +20300,9 @@ "gunzip-maybe": "^1.4.2", "mkdirp": "^1.0.4", "packageurl-js": "1.2.0", - "semver": "^7.6.2", + "semver": "^7.6.3", "shescape": "^1.7.4", - "snyk-nodejs-lockfile-parser": "^1.57.0", + "snyk-nodejs-lockfile-parser": "^1.58.14", "snyk-poetry-lockfile-parser": "^1.4.0", "snyk-resolve-deps": "^4.7.1", "tar-stream": "^2.1.0", @@ -20315,6 +20315,64 @@ "node": ">=12" } }, + "node_modules/snyk-docker-plugin/node_modules/@snyk/error-catalog-nodejs-public": { + "version": "5.34.2", + "resolved": "https://registry.npmjs.org/@snyk/error-catalog-nodejs-public/-/error-catalog-nodejs-public-5.34.2.tgz", + "integrity": "sha512-AhY04JfYZ1604Q/+umIROq3OSI3VfE4+EFMP4EVFowGpyO4PgIzJtVfSY6NTPPqP6GNoyXh1jSwsAulOExFjuw==", + "dependencies": { + "tslib": "^2.8.1", + "uuid": "^11.0.2" + } + }, + "node_modules/snyk-docker-plugin/node_modules/@snyk/error-catalog-nodejs-public/node_modules/tslib": { + "version": "2.8.1", + "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.8.1.tgz", + "integrity": "sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w==" + }, + "node_modules/snyk-docker-plugin/node_modules/@snyk/error-catalog-nodejs-public/node_modules/uuid": { + "version": "11.0.3", + "resolved": "https://registry.npmjs.org/uuid/-/uuid-11.0.3.tgz", + "integrity": "sha512-d0z310fCWv5dJwnX1Y/MncBAqGMKEzlBb1AOf7z9K8ALnd0utBX/msg/fA0+sbyN1ihbMsLhrBlnl1ak7Wa0rg==", + "funding": [ + "https://github.com/sponsors/broofa", + "https://github.com/sponsors/ctavan" + ], + "bin": { + "uuid": "dist/esm/bin/uuid" + } + }, + "node_modules/snyk-docker-plugin/node_modules/argparse": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/argparse/-/argparse-2.0.1.tgz", + "integrity": "sha512-8+9WqebbFzpX9OR+Wa6O29asIogeRMzcGtAINdpMHHyAg10f05aSFVBbcEqGf/PXw1EjAZ+q2/bEBg3DvurK3Q==" + }, + "node_modules/snyk-docker-plugin/node_modules/debug": { + "version": "4.3.7", + "resolved": "https://registry.npmjs.org/debug/-/debug-4.3.7.tgz", + "integrity": "sha512-Er2nc/H7RrMXZBFCEim6TCmMk02Z8vLC2Rbi1KEBggpo0fS6l0S1nnapwmIi3yW/+GOJap1Krg4w0Hg80oCqgQ==", + "dependencies": { + "ms": "^2.1.3" + }, + "engines": { + "node": ">=6.0" + }, + "peerDependenciesMeta": { + "supports-color": { + "optional": true + } + } + }, + "node_modules/snyk-docker-plugin/node_modules/js-yaml": { + "version": "4.1.0", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz", + "integrity": "sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==", + "dependencies": { + "argparse": "^2.0.1" + }, + "bin": { + "js-yaml": "bin/js-yaml.js" + } + }, "node_modules/snyk-docker-plugin/node_modules/mkdirp": { "version": "1.0.4", "resolved": "https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz", @@ -20326,6 +20384,11 @@ "node": ">=10" } }, + "node_modules/snyk-docker-plugin/node_modules/ms": { + "version": "2.1.3", + "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz", + "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==" + }, "node_modules/snyk-docker-plugin/node_modules/semver": { "version": "7.6.3", "resolved": "https://registry.npmjs.org/semver/-/semver-7.6.3.tgz", @@ -20348,6 +20411,37 @@ "node": "^10.13.0 || ^12 || ^14 || ^16 || ^18 || ^19 || ^20" } }, + "node_modules/snyk-docker-plugin/node_modules/snyk-nodejs-lockfile-parser": { + "version": "1.58.14", + "resolved": "https://registry.npmjs.org/snyk-nodejs-lockfile-parser/-/snyk-nodejs-lockfile-parser-1.58.14.tgz", + "integrity": "sha512-K6NmAQ9QoibQgJSEuGdA6914kleCPkWrYH+cUjJrzF9W9NI8ExdXr6KEp0mM0x1pFrJvchuxCQN4S9K8HvPkMA==", + "dependencies": { + "@snyk/dep-graph": "^2.3.0", + "@snyk/error-catalog-nodejs-public": "^5.16.0", + "@snyk/graphlib": "2.1.9-patch.3", + "@yarnpkg/core": "^2.4.0", + "@yarnpkg/lockfile": "^1.1.0", + "dependency-path": "^9.2.8", + "event-loop-spinner": "^2.0.0", + "js-yaml": "^4.1.0", + "lodash.clonedeep": "^4.5.0", + "lodash.flatmap": "^4.5.0", + "lodash.isempty": "^4.4.0", + "lodash.topairs": "^4.3.0", + "micromatch": "^4.0.8", + "p-map": "^4.0.0", + "semver": "^7.6.0", + "snyk-config": "^5.2.0", + "tslib": "^1.9.3", + "uuid": "^8.3.0" + }, + "bin": { + "parse-nodejs-lockfile": "bin/index.js" + }, + "engines": { + "node": ">=10" + } + }, "node_modules/snyk-docker-plugin/node_modules/tmp": { "version": "0.2.3", "resolved": "https://registry.npmjs.org/tmp/-/tmp-0.2.3.tgz", @@ -39713,9 +39807,9 @@ } }, "snyk-docker-plugin": { - "version": "6.13.15", - "resolved": "https://registry.npmjs.org/snyk-docker-plugin/-/snyk-docker-plugin-6.13.15.tgz", - "integrity": "sha512-r8Vh8EXyhF8YuU0Xda2Y9/H54PaH3P3etwLMmHsL+OA2FW2gld+K9GV2Kch4GaVDzKuZ2d+NgmW9rYlN8EkZGA==", + "version": "6.13.18", + "resolved": "https://registry.npmjs.org/snyk-docker-plugin/-/snyk-docker-plugin-6.13.18.tgz", + "integrity": "sha512-R/eKm8qgv+F1tLifuFt+8rMW5rkuaCbA1Swqc3jBITNg9+8e4NNnOPOYJNxxwwoBfDrsvGkQJZceBOs4qWlysQ==", "requires": { "@snyk/composer-lockfile-parser": "^1.4.1", "@snyk/dep-graph": "^2.8.1", @@ -39723,9 +39817,9 @@ "@snyk/rpm-parser": "3.1.0", "@snyk/snyk-docker-pull": "3.13.0", "@swimlane/docker-reference": "^2.0.1", - "adm-zip": "^0.5.12", + "adm-zip": "^0.5.16", "chalk": "^2.4.2", - "debug": "^4.1.1", + "debug": "^4.3.7", "docker-modem": "3.0.8", "dockerfile-ast": "0.6.1", "elfy": "^1.0.0", @@ -39733,9 +39827,9 @@ "gunzip-maybe": "^1.4.2", "mkdirp": "^1.0.4", "packageurl-js": "1.2.0", - "semver": "^7.6.2", + "semver": "^7.6.3", "shescape": "^1.7.4", - "snyk-nodejs-lockfile-parser": "^1.57.0", + "snyk-nodejs-lockfile-parser": "^1.58.14", "snyk-poetry-lockfile-parser": "^1.4.0", "snyk-resolve-deps": "^4.7.1", "tar-stream": "^2.1.0", @@ -39745,11 +39839,58 @@ "varint": "^6.0.0" }, "dependencies": { + "@snyk/error-catalog-nodejs-public": { + "version": "5.34.2", + "resolved": "https://registry.npmjs.org/@snyk/error-catalog-nodejs-public/-/error-catalog-nodejs-public-5.34.2.tgz", + "integrity": "sha512-AhY04JfYZ1604Q/+umIROq3OSI3VfE4+EFMP4EVFowGpyO4PgIzJtVfSY6NTPPqP6GNoyXh1jSwsAulOExFjuw==", + "requires": { + "tslib": "^2.8.1", + "uuid": "^11.0.2" + }, + "dependencies": { + "tslib": { + "version": "2.8.1", + "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.8.1.tgz", + "integrity": "sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w==" + }, + "uuid": { + "version": "11.0.3", + "resolved": "https://registry.npmjs.org/uuid/-/uuid-11.0.3.tgz", + "integrity": "sha512-d0z310fCWv5dJwnX1Y/MncBAqGMKEzlBb1AOf7z9K8ALnd0utBX/msg/fA0+sbyN1ihbMsLhrBlnl1ak7Wa0rg==" + } + } + }, + "argparse": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/argparse/-/argparse-2.0.1.tgz", + "integrity": "sha512-8+9WqebbFzpX9OR+Wa6O29asIogeRMzcGtAINdpMHHyAg10f05aSFVBbcEqGf/PXw1EjAZ+q2/bEBg3DvurK3Q==" + }, + "debug": { + "version": "4.3.7", + "resolved": "https://registry.npmjs.org/debug/-/debug-4.3.7.tgz", + "integrity": "sha512-Er2nc/H7RrMXZBFCEim6TCmMk02Z8vLC2Rbi1KEBggpo0fS6l0S1nnapwmIi3yW/+GOJap1Krg4w0Hg80oCqgQ==", + "requires": { + "ms": "^2.1.3" + } + }, + "js-yaml": { + "version": "4.1.0", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz", + "integrity": "sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==", + "requires": { + "argparse": "^2.0.1" + } + }, "mkdirp": { "version": "1.0.4", "resolved": "https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz", "integrity": "sha512-vVqVZQyf3WLx2Shd0qJ9xuvqgAyKPLAiqITEtqW0oIUjzo3PePDd6fW9iFz30ef7Ysp/oiWqbhszeGWW2T6Gzw==" }, + "ms": { + "version": "2.1.3", + "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz", + "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==" + }, "semver": { "version": "7.6.3", "resolved": "https://registry.npmjs.org/semver/-/semver-7.6.3.tgz", @@ -39763,6 +39904,31 @@ "which": "^2.0.0" } }, + "snyk-nodejs-lockfile-parser": { + "version": "1.58.14", + "resolved": "https://registry.npmjs.org/snyk-nodejs-lockfile-parser/-/snyk-nodejs-lockfile-parser-1.58.14.tgz", + "integrity": "sha512-K6NmAQ9QoibQgJSEuGdA6914kleCPkWrYH+cUjJrzF9W9NI8ExdXr6KEp0mM0x1pFrJvchuxCQN4S9K8HvPkMA==", + "requires": { + "@snyk/dep-graph": "^2.3.0", + "@snyk/error-catalog-nodejs-public": "^5.16.0", + "@snyk/graphlib": "2.1.9-patch.3", + "@yarnpkg/core": "^2.4.0", + "@yarnpkg/lockfile": "^1.1.0", + "dependency-path": "^9.2.8", + "event-loop-spinner": "^2.0.0", + "js-yaml": "^4.1.0", + "lodash.clonedeep": "^4.5.0", + "lodash.flatmap": "^4.5.0", + "lodash.isempty": "^4.4.0", + "lodash.topairs": "^4.3.0", + "micromatch": "^4.0.8", + "p-map": "^4.0.0", + "semver": "^7.6.0", + "snyk-config": "^5.2.0", + "tslib": "^1.9.3", + "uuid": "^8.3.0" + } + }, "tmp": { "version": "0.2.3", "resolved": "https://registry.npmjs.org/tmp/-/tmp-0.2.3.tgz", diff --git a/package.json b/package.json index 7b9aa3c4c6..080f6acfc3 100644 --- a/package.json +++ b/package.json @@ -116,7 +116,7 @@ "semver": "^6.0.0", "snyk-config": "^5.0.0", "snyk-cpp-plugin": "2.24.0", - "snyk-docker-plugin": "6.13.15", + "snyk-docker-plugin": "6.13.18", "snyk-go-plugin": "1.23.0", "snyk-gradle-plugin": "4.7.0", "snyk-module": "3.1.0",