Merge pull request #5356 from hypothesis/update-bootstrap

Update bootstrap to fix a vulnerability reported by GitHub
hypothesis · Oct 11, 2018 · af5ef8c · af5ef8c
2 parents d331dc3 + 1949abc
commit af5ef8c
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 4 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -10,7 +10,7 @@
     "autoprefixer": "^6.0.3",
     "babel-preset-es2015": "^6.14.0",
     "babelify": "^7.3.0",
-    "bootstrap": "3.3.5",
+    "bootstrap": "^4.1.3",
     "browserify": "^13.1.0",
     "browserify-shim": "^3.8.12",
     "commander": "^2.9.0",
@@ -34,6 +34,7 @@
     "keyboardevent-key-polyfill": "^1.0.2",
     "mkdirp": "^0.5.1",
     "node-sass": "^4.9.3",
+    "popper.js": "^1.14.4",
     "postcss": "^6.0.21",
     "postcss-url": "^7.3.1",
     "query-string": "^3.0.1",