Time for a release candidate 4?

[eklem]

Wouldn't it be good to create a 1.0.0-rc.4 branch and publish to NPM? This way we could get the security updates even if 1.0.0 is not finished yet.

[jessbowers-DSS]

is there an issue tracking the 1.0.0 release? What is left to be done?

[eklem]

Here it is, @jessbowers-DSS: https://github.com/cheeriojs/cheerio/projects/1
Or, it's a project =)

[eklem]

@matthewmueller, @fb55 or @jugglinmike ?

[eklem]

Made a pull request: #1499
Updated lodash to safe version and added the two working Dependabot updates too, from these PR's:

#1498
#1497

[eklem]

Thanks for the merging the PR @fb55! Would it be possible to push a new version to NPM too?

[TrySound]

Btw we can try to get rid of lodash
#1500

[eklem]

I was thinking that just get security fixes out now, and then continue the work on final v1.0.0 without any hasty changes =)

[eklem]

Seems it's going to be a bit more substantial stuff added to rc.4: #1499 (comment), @TrySound =)

[fb55]

Quick update here: I just opened #1564 and #1565. I'll keep them open for a few days to allow people to review. Once they are merged, I will cut a new RC.

[fb55]

Published 1.0.0-rc.4!