From 6e411918c58bb757b6e28ad5899f345cd9ecc002 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 15 Jun 2025 06:59:03 +0000 Subject: [PATCH] fix: upgrade cross-fetch from 4.0.0 to 4.1.0 Snyk has created this PR to upgrade cross-fetch from 4.0.0 to 4.1.0. See this package in npm: cross-fetch See this project in Snyk: https://app.snyk.io/org/omercnet/project/402e48f0-147c-410b-80f4-42b30654e9e2?utm_source=github&utm_medium=referral&page=upgrade-pr --- package-lock.json | 11 ++++++----- package.json | 2 +- 2 files changed, 7 insertions(+), 6 deletions(-) diff --git a/package-lock.json b/package-lock.json index 4f0a2a97eb..b4626d4507 100644 --- a/package-lock.json +++ b/package-lock.json @@ -10,7 +10,7 @@ "license": "MIT", "dependencies": { "@descope/core-js-sdk": "2.44.3", - "cross-fetch": "^4.0.0", + "cross-fetch": "^4.1.0", "jose": "5.2.2", "tslib": "^2.0.0" }, @@ -4159,11 +4159,12 @@ "dev": true }, "node_modules/cross-fetch": { - "version": "4.0.0", - "resolved": "https://registry.npmjs.org/cross-fetch/-/cross-fetch-4.0.0.tgz", - "integrity": "sha512-e4a5N8lVvuLgAWgnCrLr2PP0YyDOTHa9H/Rj54dirp61qXnNq46m82bRhNqIA5VccJtWBvPTFRV3TtvHUKPB1g==", + "version": "4.1.0", + "resolved": "https://registry.npmjs.org/cross-fetch/-/cross-fetch-4.1.0.tgz", + "integrity": "sha512-uKm5PU+MHTootlWEY+mZ4vvXoCn4fLQxT9dSc1sXVMSFkINTJVN8cAQROpwcKm8bJ/c7rgZVIBWzH5T78sNZZw==", + "license": "MIT", "dependencies": { - "node-fetch": "^2.6.12" + "node-fetch": "^2.7.0" } }, "node_modules/cross-spawn": { diff --git a/package.json b/package.json index 40ee44d0ee..3e70b519a3 100644 --- a/package.json +++ b/package.json @@ -101,7 +101,7 @@ }, "dependencies": { "@descope/core-js-sdk": "2.44.3", - "cross-fetch": "^4.0.0", + "cross-fetch": "^4.1.0", "jose": "5.2.2", "tslib": "^2.0.0" }