Upgrade yarn packages to avoid vulnerabilities in Docker image

66 views Asked by At

I have a node dependency tree that looks like this:

$:app user1$ npm ls d3-color
[email protected] /Users/user1/workspace/fe/app
├─┬ @ant-design/[email protected]
│ └─┬ @ant-design/[email protected]
│   └─┬ @antv/[email protected]
│     └─┬ @antv/[email protected]
│       ├─┬ @antv/[email protected]
│       │ └── [email protected]
│       └─┬ @antv/[email protected]
│         └── [email protected]
├─┬ @antv/[email protected]
│ └─┬ @antv/[email protected]
│   └─┬ @antv/[email protected]
│     └─┬ [email protected]
│       └── [email protected]
├─┬ @nivo/[email protected]
│ ├── [email protected]
│ ├─┬ [email protected]
│ │ └── [email protected] deduped
│ ├─┬ [email protected]
│ │ ├── [email protected]
│ │ └─┬ [email protected]
│ │   └── [email protected] deduped
│ └─┬ [email protected]
│   └─┬ [email protected]
│     └── [email protected]
├─┬ @nivo/[email protected]
│ └─┬ @nivo/[email protected]
│   └── [email protected]
└── [email protected]

I want to update the [email protected] which is 5th level down from the top to [email protected]

I've tried doing yarn upgrade [email protected] but it doesn't work. It just updates some but not all and for some other packages, it doesn't upgrade at all.

I need to do this in order to avoid High classified vulnerabilities in my Docker image being caused by this particular (and other similar) packages.

Any help would be greatly appreciated!

0

There are 0 answers