Merge pull request #236 from yangyao/master

yarn audit fix

assets/frontend/package.json

@@ -11,7 +11,7 @@
   },
   "license": "MIT",
   "devDependencies": {
-    "@types/crypto-js": "^4.1.0",
+    "@types/crypto-js": "^4.2.0",
     "@types/lodash-es": "^4.17.5",
     "@types/node": "^17.0.7",
     "lint-staged": "^12.1.2",
@@ -22,10 +22,11 @@
     "vite-plugin-solid": "^2.10.2"
   },
   "dependencies": {
-    "crypto-js": "^4.1.1",
+    "crypto-js": "^4.2.0",
     "lodash-es": "^4.17.21",
     "normalize.css": "^8.0.1",
     "query-string": "^7.1.0",
-    "solid-js": "^1.8.21"
+    "solid-js": "^1.8.21",
+    "uuid": "^10.0.0"
   }
 }

assets/frontend/yarn.lock

@@ -441,7 +441,7 @@
   dependencies:
     "@babel/types" "^7.20.7"
 
-"@types/crypto-js@^4.1.0":
+"@types/crypto-js@^4.2.0":
   version "4.2.2"
   resolved "https://registry.yarnpkg.com/@types/crypto-js/-/crypto-js-4.2.2.tgz#771c4a768d94eb5922cc202a3009558204df0cea"
   integrity sha512-sDOLlVbHhXpAUAL0YHDUUwDZf3iN4Bwi4W6a0W0b+QcAezUbRtH4FVb+9J4h+XFPW7l/gQ9F8qC7P+Ec4k8QVQ==
@@ -670,7 +670,7 @@ cross-spawn@^7.0.3:
     shebang-command "^2.0.0"
     which "^2.0.1"
 
-crypto-js@^4.1.1:
+crypto-js@^4.2.0:
   version "4.2.0"
   resolved "https://registry.yarnpkg.com/crypto-js/-/crypto-js-4.2.0.tgz#4d931639ecdfd12ff80e8186dba6af2c2e856631"
   integrity sha512-KALDyEYgpY+Rlob/iriUtjV6d5Eq+Y191A5g4UqLAi8CyGP9N1+FdVbkc1SxKc2r4YAYqG8JzO2KGL+AizD70Q==
@@ -1321,6 +1321,11 @@ update-browserslist-db@^1.1.0:
     escalade "^3.1.2"
     picocolors "^1.0.1"
 
+uuid@^10.0.0:
+  version "10.0.0"
+  resolved "https://registry.yarnpkg.com/uuid/-/uuid-10.0.0.tgz#5a95aa454e6e002725c79055fd42aaba30ca6294"
+  integrity sha512-8XkAphELsDnEGrDxUOHB3RGvXz6TeuYSGEZBOjtTtPm2lwhGBjLgOzLHB63IUWfBpNucQjND6d3AOudO+H3RWQ==
+
 validate-html-nesting@^1.2.1:
   version "1.2.2"
   resolved "https://registry.yarnpkg.com/validate-html-nesting/-/validate-html-nesting-1.2.2.tgz#2d74de14b598a0de671fad01bd71deabb93b8aca"