Skip to content

fixture: Upgrations of some packages, with one typo error#2416

Merged
MylesBorins merged 1 commit into
masterfrom
unknown repository
Aug 16, 2019
Merged

fixture: Upgrations of some packages, with one typo error#2416
MylesBorins merged 1 commit into
masterfrom
unknown repository

Conversation

@ghost
Copy link
Copy Markdown

@ghost ghost commented Aug 16, 2019

  1. wont => won't.
  2. Update 'semver' from 6.0.0 to 6.3.0.
  3. Update 'marked' from 0.6.2 to 0.7.0, this is a fixture for some known
    vulnerability. Another will be fixed until fixture: Upgration of 'marked' package metalsmith/markdown#40 is merged.

See more at this,

=== npm audit security report ===

Run npm install marked@0.7.0 to resolve 1 vulnerability

Low Regular Expression Denial of Service

Package marked

Dependency of marked

Path marked

More info https://nodesecurity.io/advisories/1076

                             Manual Review                                  
         Some vulnerabilities require your attention to resolve             
                                                                            
      Visit https://go.npm.me/audit-guide for additional guidance           

Low Regular Expression Denial of Service

Package marked

Patched in >=0.7.0

Dependency of metalsmith-markdown

Path metalsmith-markdown > marked

More info https://nodesecurity.io/advisories/1076

found 2 low severity vulnerabilities in 4559 scanned packages

1. wont => won't.
2. Update 'semver' from 6.0.0 to 6.3.0.
3. Update 'marked' from 0.6.2 to 0.7.0, this is a fixture for some known
vulnerability. Another will be fixed until
metalsmith/markdown#40 is merged.
@ghost ghost requested a review from Trott August 16, 2019 06:48
@MylesBorins
Copy link
Copy Markdown
Contributor

@MaledongGit in future can you open separate PRs for update dependencies as changing typos

Copy link
Copy Markdown
Contributor

@MylesBorins MylesBorins left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@MylesBorins MylesBorins merged commit 9f4efd8 into nodejs:master Aug 16, 2019
@ghost
Copy link
Copy Markdown
Author

ghost commented Aug 17, 2019

@MylesBorins:Thanks, I see.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant