From 713472e9a287484e435b82b4b36fa62a19c5ff4f Mon Sep 17 00:00:00 2001 From: "dependabot-preview[bot]" <27856297+dependabot-preview[bot]@users.noreply.github.com> Date: Mon, 14 Dec 2020 12:25:37 +0000 Subject: [PATCH] [Security] Bump ini from 1.3.4 to 1.3.8 Bumps [ini](https://github.com/isaacs/ini) from 1.3.4 to 1.3.8. **This update includes a security fix.** - [Release notes](https://github.com/isaacs/ini/releases) - [Commits](https://github.com/isaacs/ini/compare/v1.3.4...v1.3.8) Signed-off-by: dependabot-preview[bot] --- yarn.lock | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/yarn.lock b/yarn.lock index 226c149..ea0b176 100644 --- a/yarn.lock +++ b/yarn.lock @@ -884,8 +884,8 @@ inherits@2, inherits@^2.0.1, inherits@~2.0.0, inherits@~2.0.3: resolved "https://registry.yarnpkg.com/inherits/-/inherits-2.0.3.tgz#633c2c83e3da42a502f52466022480f4208261de" ini@~1.3.0: - version "1.3.4" - resolved "https://registry.yarnpkg.com/ini/-/ini-1.3.4.tgz#0537cb79daf59b59a1a517dff706c86ec039162e" + version "1.3.8" + resolved "https://registry.yarnpkg.com/ini/-/ini-1.3.8.tgz#a29da425b48806f34767a4efce397269af28432c" invariant@^2.2.2: version "2.2.2"