chore: update dset from 2.0.1 => 3.1.2 to fix a vulnerability in dset (robsontenorio#237)

jellehouwen1 · web-flow · commit 7bdff4534751 · 2022-07-02T13:17:21.000-03:00
diff --git a/package.json b/package.json
@@ -71,7 +71,7 @@
   "dependencies": {
     "defu": "^5.0.0",
     "dotprop": "^1.2.0",
-    "dset": "^2.0.1",
+    "dset": "^3.1.2",
     "object-to-formdata": "^4.1.0",
     "qs": "^6.9.4"
   }
diff --git a/src/Builder.js b/src/Builder.js
@@ -2,7 +2,7 @@
  * Prepare attributes to be parsed
  */
 
-import setProp from 'dset'
+import { dset as setProp } from 'dset'
 
 import Parser from './Parser'
 
diff --git a/src/Model.js b/src/Model.js
@@ -1,6 +1,6 @@
 import defu from 'defu'
 import getProp from 'dotprop'
-import setProp from 'dset'
+import { dset as setProp } from 'dset'
 import { serialize } from 'object-to-formdata'
 
 import Builder from './Builder'
diff --git a/yarn.lock b/yarn.lock
@@ -2712,10 +2712,10 @@ dotprop@^1.2.0:
   resolved "https://registry.yarnpkg.com/dotprop/-/dotprop-1.2.0.tgz#8fdf345c757da479ec8af218ae4239a73df721a7"
   integrity sha512-mVQb8y5u3UkzNua2Hc8Ut/uKyCjm9GG2MRk/0fxJ9Mxo8Nb8XyWqaP0wVXerMucmu0mQmlcZm3S1mjOdcbCwQA==
 
-dset@^2.0.1:
-  version "2.0.1"
-  resolved "https://registry.yarnpkg.com/dset/-/dset-2.0.1.tgz#a15fff3d1e4d60ac0c95634625cbd5441a76deb1"
-  integrity sha512-nI29OZMRYq36hOcifB6HTjajNAAiBKSXsyWZrq+VniusseuP2OpNlTiYgsaNRSGvpyq5Wjbc2gQLyBdTyWqhnQ==
+dset@^3.1.2:
+  version "3.1.2"
+  resolved "https://registry.yarnpkg.com/dset/-/dset-3.1.2.tgz#89c436ca6450398396dc6538ea00abc0c54cd45a"
+  integrity sha512-g/M9sqy3oHe477Ar4voQxWtaPIFw1jTdKZuomOjhCcBx9nHUNn0pu6NopuFFrTh/TRZIKEj+76vLWFu9BNKk+Q==
 
 duplexer2@~0.1.0:
   version "0.1.4"

Original file line number	Diff line number	Diff line change
`@@ -71,7 +71,7 @@`
`71`	`71`	`"dependencies": {`
`72`	`72`	`"defu": "^5.0.0",`
`73`	`73`	`"dotprop": "^1.2.0",`
`74`		`- "dset": "^2.0.1",`
	`74`	`+ "dset": "^3.1.2",`
`75`	`75`	`"object-to-formdata": "^4.1.0",`
`76`	`76`	`"qs": "^6.9.4"`
`77`	`77`	`}`