From 3a44383c07998af3a9e02bd99be34b7b0657027e Mon Sep 17 00:00:00 2001 From: Andre Rosot Date: Thu, 20 May 2021 10:44:36 +1000 Subject: [PATCH 1/2] Bumping versions of axios (dev) and systeminformation to address security vulnerabilities --- package.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/package.json b/package.json index 7e40c1f6015..c76bbd66e2b 100644 --- a/package.json +++ b/package.json @@ -79,7 +79,7 @@ "require-in-the-middle": "^2.2.2", "semver": "^5.5.0", "shimmer": "^1.2.0", - "systeminformation": "^4.22.5", + "systeminformation": "^5.6.22", "tar": "^4.4.8", "url-parse": "^1.4.3", "whatwg-fetch": "^3.0.0" @@ -87,7 +87,7 @@ "devDependencies": { "@babel/core": "^7.6.4", "@babel/preset-env": "^7.6.3", - "axios": "^0.18.0", + "axios": "^0.21.1", "babel-loader": "^8.0.6", "benchmark": "^2.1.4", "body-parser": "^1.18.2", From 13ed4624f4e56c4fd9e2d82506b793458b88bc12 Mon Sep 17 00:00:00 2001 From: Andre Rosot Date: Mon, 26 Jul 2021 11:34:39 +1000 Subject: [PATCH 2/2] This library is no longer compatible with latest versions of tedious --- packages/datadog-plugin-tedious/src/index.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/datadog-plugin-tedious/src/index.js b/packages/datadog-plugin-tedious/src/index.js index 845ff456059..bca83a0d763 100644 --- a/packages/datadog-plugin-tedious/src/index.js +++ b/packages/datadog-plugin-tedious/src/index.js @@ -85,7 +85,7 @@ function addProcIdTags (span, request) { module.exports = [ { name: 'tedious', - versions: [ '>=1.0.0' ], + versions: [ '9.2.3' ], patch (tedious, tracer, config) { this.wrap(tedious.Connection.prototype, 'makeRequest', createWrapMakeRequest(tracer, config))