Skip to content
This repository was archived by the owner on May 5, 2023. It is now read-only.

Update vulnerable dependencies #13

Merged
merged 4 commits into from
Oct 4, 2019
Merged

Update vulnerable dependencies #13

merged 4 commits into from
Oct 4, 2019

Conversation

psvet
Copy link
Contributor

@psvet psvet commented Dec 13, 2018

CHANGELOG

  • Updated dependencies with security vulnerabilities.

@TooTallNate
Copy link
Owner

Why this commit: 407282c ?

@NatalieWolfe
Copy link

Debug v4 is not backwards compatible to Node 4 or 5.

@TooTallNate
Copy link
Owner

I'm ok with dropping support for Node < 8.x

@aoberoi
Copy link

aoberoi commented Mar 8, 2019

i'm getting a warning in npm audit about a vuln in debug, would like to see this PR land 😄

┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Low           │ Regular Expression Denial of Service                         │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ debug                                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >= 2.6.9 < 3.0.0 || >= 3.1.0                                 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ proxy [dev]                                                  │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ proxy > debug                                                │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://npmjs.com/advisories/534                             │
└───────────────┴──────────────────────────────────────────────────────────────┘

@TooTallNate TooTallNate merged commit f90f189 into TooTallNate:master Oct 4, 2019
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Reviewers
1 more reviewer

@NatalieWolfe NatalieWolfe NatalieWolfe approved these changes

Reviewers whose approvals may not affect merge requirements
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
4 participants
@psvet @TooTallNate @NatalieWolfe @aoberoi