From ed82150c3f71ab0343bd87f558afe75abef5c755 Mon Sep 17 00:00:00 2001 From: Jack Westbrook Date: Tue, 26 Jan 2021 11:02:14 +0100 Subject: [PATCH] chore: bump react-popper to 1.3.4 to solve node-fetch vulnerability (#30610) --- package.json | 2 +- packages/grafana-ui/package.json | 2 +- yarn.lock | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package.json b/package.json index 3c9bf9e4544..f26005542b8 100644 --- a/package.json +++ b/package.json @@ -267,7 +267,7 @@ "react-grid-layout": "0.17.1", "react-highlight-words": "0.16.0", "react-loadable": "5.5.0", - "react-popper": "1.3.3", + "react-popper": "1.3.4", "react-redux": "7.2.0", "react-reverse-portal": "^2.0.1", "react-sizeme": "2.6.12", diff --git a/packages/grafana-ui/package.json b/packages/grafana-ui/package.json index b321e85ca17..e3d72bf4e98 100644 --- a/packages/grafana-ui/package.json +++ b/packages/grafana-ui/package.json @@ -64,7 +64,7 @@ "react-highlight-words": "0.16.0", "react-hook-form": "5.1.3", "react-monaco-editor": "0.36.0", - "react-popper": "1.3.3", + "react-popper": "1.3.4", "react-storybook-addon-props-combinations": "1.1.0", "react-table": "7.0.0", "react-transition-group": "4.3.0", diff --git a/yarn.lock b/yarn.lock index 0db9fb491b1..ece501c5173 100644 --- a/yarn.lock +++ b/yarn.lock @@ -22659,7 +22659,7 @@ react-popper@1.3.3: typed-styles "^0.0.7" warning "^4.0.2" -react-popper@^1.3.4: +react-popper@1.3.4, react-popper@^1.3.4: version "1.3.4" resolved "https://registry.yarnpkg.com/react-popper/-/react-popper-1.3.4.tgz#f0cd3b0d30378e1f663b0d79bcc8614221652ced" integrity sha512-9AcQB29V+WrBKk6X7p0eojd1f25/oJajVdMZkywIoAV6Ag7hzE1Mhyeup2Q1QnvFRtGQFQvtqfhlEoDAPfKAVA==