chore: fix audit fail (#592)

shopware · Feb 20, 2024 · e85ab6f · e85ab6f
1 parent 71ad484
commit e85ab6f
Show file tree

Hide file tree

Showing 3 changed files with 26 additions and 10 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -11,9 +11,13 @@ updates:
       interval: 'weekly'
     open-pull-requests-limit: 10
     versioning-strategy: 'increase'
-    # Possible ignores to update
-    # ignore:
-      # - dependency-name: 'PACKAGE_NAME'
+    ignore:
+      # used in old client, not upgrading
+      - dependency-name: 'axios'
+      # not upgrading until we move to new docs
+      - dependency-name: 'vitepress'
+      # until https://github.com/nuxt-modules/i18n/issues/2215 is resolved
+      - dependency-name: '@nuxtjs/i18n'
     groups:
       astro:
         patterns:

diff --git a/package.json b/package.json
@@ -66,6 +66,7 @@
       "lodash.pick@>=3.7.0 <4.17.19": "https://github.com/lodash/lodash/archive/f299b52f39486275a9e6483b60a410e06520c538.tar.gz",
       "postcss": "^8.4.33",
       "semver": "^7.5.4",
+      "socks": "^2.7.3",
       "sharp": "^0.33.2",
       "vite@4>docs": "^4.5.2",
       "vite@5": "^5.0.12",

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml