Merge pull request #799 from microsoft/copilot/resolve-prototype-pollution-vulnerability

Patch transitive JSON5 prototype pollution vulnerability

package-lock.json

@@ -1370,10 +1370,14 @@
 			"dev": true
 		},
 		"node_modules/json5": {
-			"version": "0.5.1",
-			"resolved": "https://registry.npmjs.org/json5/-/json5-0.5.1.tgz",
-			"integrity": "sha1-Hq3nrMASA0rYTiOWdn6tn6VJWCE=",
+			"version": "1.0.2",
+			"resolved": "https://registry.npmjs.org/json5/-/json5-1.0.2.tgz",
+			"integrity": "sha512-g1MWMLBiz8FKi1e4w0UyVL3w+iJceWAFBAaBnnGKOpNa5f8TLktkbre1+s6oICydWAm+HRUGTmI+//xv2hvXYA==",
 			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"minimist": "^1.2.0"
+			},
 			"bin": {
 				"json5": "lib/cli.js"
 			}
@@ -3965,10 +3969,13 @@
 			"dev": true
 		},
 		"json5": {
-			"version": "0.5.1",
-			"resolved": "https://registry.npmjs.org/json5/-/json5-0.5.1.tgz",
-			"integrity": "sha1-Hq3nrMASA0rYTiOWdn6tn6VJWCE=",
-			"dev": true
+			"version": "1.0.2",
+			"resolved": "https://registry.npmjs.org/json5/-/json5-1.0.2.tgz",
+			"integrity": "sha512-g1MWMLBiz8FKi1e4w0UyVL3w+iJceWAFBAaBnnGKOpNa5f8TLktkbre1+s6oICydWAm+HRUGTmI+//xv2hvXYA==",
+			"dev": true,
+			"requires": {
+				"minimist": "^1.2.0"
+			}
 		},
 		"jsonfile": {
 			"version": "4.0.0",
@@ -4450,7 +4457,7 @@
 			"requires": {
 				"debug": "^2.2.0",
 				"js-yaml": "^3.6.1",
-				"json5": "^0.5.0",
+				"json5": "1.0.2",
 				"object-assign": "^4.1.0",
 				"object-keys": "^1.0.9",
 				"path-exists": "^2.1.0",

package.json

@@ -25,5 +25,10 @@
 	"homepage": "https://github.com/microsoft/Data-Science-For-Beginners#readme",
 	"devDependencies": {
 		"docsify-to-pdf": "0.0.5"
+	},
+	"overrides": {
+		"rcfile": {
+			"json5": "1.0.2"
+		}
 	}
 }