From cd1ef37e1ffbe3483036fcc54e7584e0a51d4ab5 Mon Sep 17 00:00:00 2001 From: "Grot (@grafanabot)" <43478413+grafanabot@users.noreply.github.com> Date: Mon, 1 Mar 2021 18:12:47 +0000 Subject: [PATCH] Grafana-data: bump markedjs to v2.x to resolve vulnerability (#31036) (#31547) * chore(grafana-data): bump marked to v2.x to resolve vulnerability * chore(grafana-data): bump marked to v2.0.1 (cherry picked from commit 5dc000d6b0bf5e2313b2d15f0521212963099caa) Co-authored-by: Jack Westbrook --- packages/grafana-data/package.json | 2 +- yarn.lock | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/packages/grafana-data/package.json b/packages/grafana-data/package.json index 8c8aad46ff7..a267dae754e 100644 --- a/packages/grafana-data/package.json +++ b/packages/grafana-data/package.json @@ -27,7 +27,7 @@ "apache-arrow": "0.16.0", "eventemitter3": "4.0.7", "lodash": "4.17.20", - "marked": "1.2.2", + "marked": "2.0.1", "rxjs": "6.6.3", "xss": "1.0.6" }, diff --git a/yarn.lock b/yarn.lock index a130b3c2c01..cb45aa6b1fd 100644 --- a/yarn.lock +++ b/yarn.lock @@ -17666,10 +17666,10 @@ markdown-to-jsx@^6.11.4: prop-types "^15.6.2" unquote "^1.1.0" -marked@1.2.2: - version "1.2.2" - resolved "https://registry.yarnpkg.com/marked/-/marked-1.2.2.tgz#5d77ffb789c4cb0ae828bfe76250f7140b123f70" - integrity sha512-5jjKHVl/FPo0Z6ocP3zYhKiJLzkwJAw4CZoLjv57FkvbUuwOX4LIBBGGcXjAY6ATcd1q9B8UTj5T9Umauj0QYQ== +marked@2.0.1: + version "2.0.1" + resolved "https://registry.yarnpkg.com/marked/-/marked-2.0.1.tgz#5e7ed7009bfa5c95182e4eb696f85e948cefcee3" + integrity sha512-5+/fKgMv2hARmMW7DOpykr2iLhl0NgjyELk5yn92iE7z8Se1IS9n3UsFm86hFXIkvMBmVxki8+ckcpjBeyo/hw== material-colors@^1.2.1: version "1.2.6"