diff --git a/.snyk b/.snyk index cc78294f51..a63d428662 100644 --- a/.snyk +++ b/.snyk @@ -1,4 +1,9 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.13.3 +version: v1.13.4 patch: {} -ignore: {} +# ignores vulnerabilities until expiry date; change duration by modifying expiry date +ignore: + SNYK-JS-JSYAML-174129: + - '@reactioncommerce/components > react-select > emotion > babel-plugin-emotion > babel-plugin-macros > cosmiconfig > js-yaml': + reason: No easy update path near term + expires: '2019-05-09T16:47:09.529Z'