From 43f0c7d2098c0310bd4ff48a8ade87ecf845781b Mon Sep 17 00:00:00 2001
From: zkldi <20380519+zkldi@users.noreply.github.com>
Date: Sun, 30 Jan 2022 20:20:26 +0000
Subject: [PATCH] Bump tachi-common and patch npm "vulnerability"

---
 server/package.json   | 26 ++++++++++-----------
 server/pnpm-lock.yaml | 54 ++++++++++++++++++++++++++++++-------------
 2 files changed, 51 insertions(+), 29 deletions(-)

diff --git a/server/package.json b/server/package.json
index c81b30543..b59eb2167 100644
--- a/server/package.json
+++ b/server/package.json
@@ -49,13 +49,13 @@
 		"why-is-node-running": "2.2.0"
 	},
 	"dependencies": {
-		"@aws-sdk/client-s3": "^3.41.0",
-		"@aws-sdk/signature-v4-crt": "^3.41.0",
-		"@types/mocha": "^9.0.0",
-		"@valuabletouch/winston-seq": "^1.2.0",
-		"bcryptjs": "^2.4.3",
-		"bullmq": "^1.54.4",
-		"bunyan": "^1.8.15",
+		"@aws-sdk/client-s3": "3.41.0",
+		"@aws-sdk/signature-v4-crt": "3.41.0",
+		"@types/mocha": "9.0.0",
+		"@valuabletouch/winston-seq": "1.2.0",
+		"bcryptjs": "2.4.3",
+		"bullmq": "1.54.4",
+		"bunyan": "1.8.15",
 		"commander": "7.2.0",
 		"connect-redis": "6.0.0",
 		"csv-parse": "4.16.0",
@@ -73,22 +73,22 @@
 		"mongodb": "3.6.3",
 		"monk": "7.3.4",
 		"multer": "1.4.2",
-		"node-cache": "^5.1.2",
-		"node-fetch": "2.6.1",
-		"nodemailer": "^6.6.3",
+		"node-cache": "5.1.2",
+		"node-fetch": "2.6.7",
+		"nodemailer": "6.6.3",
 		"prudence": "0.9.7",
 		"rate-limit-redis": "2.1.0",
 		"redis": "3.1.2",
 		"rimraf": "3.0.2",
 		"safe-json-stringify": "1.2.0",
-		"seq-logging": "^1.1.1",
+		"seq-logging": "1.1.1",
 		"tachi-common": "0.5.8",
 		"ts-node": "10.0.0",
 		"tsconfig-paths": "3.10.1",
 		"typescript": "4.3.4",
 		"winston": "3.3.3",
-		"winston-daily-rotate-file": "^4.5.5",
-		"winston-transport": "^4.4.0"
+		"winston-daily-rotate-file": "4.5.5",
+		"winston-transport": "4.4.0"
 	},
 	"nyc": {
 		"reporter": [
diff --git a/server/pnpm-lock.yaml b/server/pnpm-lock.yaml
index 96932c04c..43e362341 100644
--- a/server/pnpm-lock.yaml
+++ b/server/pnpm-lock.yaml
@@ -1,8 +1,8 @@
 lockfileVersion: 5.3
 
 specifiers:
-  '@aws-sdk/client-s3': ^3.41.0
-  '@aws-sdk/signature-v4-crt': ^3.41.0
+  '@aws-sdk/client-s3': 3.41.0
+  '@aws-sdk/signature-v4-crt': 3.41.0
   '@types/bcrypt': 5.0.0
   '@types/bcryptjs': ^2.4.2
   '@types/bunyan': ^1.8.7
@@ -11,7 +11,7 @@ specifiers:
   '@types/express-rate-limit': 5.1.2
   '@types/express-session': 1.17.3
   '@types/mkdirp': 1.0.1
-  '@types/mocha': ^9.0.0
+  '@types/mocha': 9.0.0
   '@types/multer': 1.4.6
   '@types/node': 15.12.4
   '@types/node-fetch': 2.5.10
@@ -25,10 +25,10 @@ specifiers:
   '@types/uuid': 8.3.0
   '@typescript-eslint/eslint-plugin': 4.28.0
   '@typescript-eslint/parser': 4.28.0
-  '@valuabletouch/winston-seq': ^1.2.0
-  bcryptjs: ^2.4.3
-  bullmq: ^1.54.4
-  bunyan: ^1.8.15
+  '@valuabletouch/winston-seq': 1.2.0
+  bcryptjs: 2.4.3
+  bullmq: 1.54.4
+  bunyan: 1.8.15
   commander: 7.2.0
   connect-redis: 6.0.0
   csv-parse: 4.16.0
@@ -51,17 +51,17 @@ specifiers:
   mongodb: 3.6.3
   monk: 7.3.4
   multer: 1.4.2
-  node-cache: ^5.1.2
-  node-fetch: 2.6.1
+  node-cache: 5.1.2
+  node-fetch: 2.6.7
   node-mocks-http: 1.10.1
-  nodemailer: ^6.6.3
+  nodemailer: 6.6.3
   prettier: 2.3.1
   prudence: 0.9.7
   rate-limit-redis: 2.1.0
   redis: 3.1.2
   rimraf: 3.0.2
   safe-json-stringify: 1.2.0
-  seq-logging: ^1.1.1
+  seq-logging: 1.1.1
   supertest: 6.1.3
   tachi-common: 0.5.8
   tap: 15.0.9
@@ -70,8 +70,8 @@ specifiers:
   typescript: 4.3.4
   why-is-node-running: 2.2.0
   winston: 3.3.3
-  winston-daily-rotate-file: ^4.5.5
-  winston-transport: ^4.4.0
+  winston-daily-rotate-file: 4.5.5
+  winston-transport: 4.4.0
 
 dependencies:
   '@aws-sdk/client-s3': 3.41.0_@aws-sdk+signature-v4-crt@3.41.0
@@ -99,7 +99,7 @@ dependencies:
   monk: 7.3.4
   multer: 1.4.2
   node-cache: 5.1.2
-  node-fetch: 2.6.1
+  node-fetch: 2.6.7
   nodemailer: 6.6.3
   prudence: 0.9.7
   rate-limit-redis: 2.1.0
@@ -4275,9 +4275,16 @@ packages:
       clone: 2.1.2
     dev: false
 
-  /node-fetch/2.6.1:
-    resolution: {integrity: sha512-V4aYg89jEoVRxRb2fJdAg8FHvI7cEyYdVAh94HH0UIK8oJxUfkjlDQN9RbMx+bEjP7+ggMiFRprSti032Oipxw==}
+  /node-fetch/2.6.7:
+    resolution: {integrity: sha512-ZjMPFEfVx5j+y2yF35Kzx5sF7kDzxuDj6ziH4FFbOp87zKDZNx8yExJIb05OGF4Nlt9IHFIMBkRl41VdvcNdbQ==}
     engines: {node: 4.x || >=6.0.0}
+    peerDependencies:
+      encoding: ^0.1.0
+    peerDependenciesMeta:
+      encoding:
+        optional: true
+    dependencies:
+      whatwg-url: 5.0.0
     dev: false
 
   /node-gyp-build/4.3.0:
@@ -5557,6 +5564,10 @@ packages:
       punycode: 2.1.1
     dev: true
 
+  /tr46/0.0.3:
+    resolution: {integrity: sha1-gYT9NH2snNwYWZLzpmIuFLnZq2o=}
+    dev: false
+
   /traverse/0.3.9:
     resolution: {integrity: sha1-cXuPIgzAu3tE5AUUwisui7xw2Lk=}
     dev: false
@@ -5773,6 +5784,17 @@ packages:
       extsprintf: 1.3.0
     dev: true
 
+  /webidl-conversions/3.0.1:
+    resolution: {integrity: sha1-JFNCdeKnvGvnvIZhHMFq4KVlSHE=}
+    dev: false
+
+  /whatwg-url/5.0.0:
+    resolution: {integrity: sha1-lmRU6HZUYuN2RNNib2dCzotwll0=}
+    dependencies:
+      tr46: 0.0.3
+      webidl-conversions: 3.0.1
+    dev: false
+
   /which-boxed-primitive/1.0.2:
     resolution: {integrity: sha512-bwZdv0AKLpplFY2KZRX6TvyuN7ojjr7lwkg6ml0roIy9YeuSr7JS372qlNW18UQYzgYK9ziGcerWqZOmEn9VNg==}
     dependencies: