Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Updated mockery and mocha because of vulnerabilities #875

Merged

Conversation

Roman-Shchukin
Copy link
Contributor

Description:
Upgraded versions of mocha and mockery due to vulnerabilities

Changelog:

  • mockery version bumped up from 1.7.0 to 2.1.0
  • mocha version bumped up from 5.2.0 to 9.2.2
  • types/mocha version bumped up from 5.0.0 to 5.2.7
  • bumped up version of library

Documentation changes required: No

Added unit tests: No

Attached related issue: #874

@Roman-Shchukin Roman-Shchukin requested review from a team as code owners October 27, 2022 10:31
@kirill-ivlev kirill-ivlev merged commit 22ba7dd into master Nov 1, 2022
@@ -1,6 +1,6 @@
{
"name": "azure-pipelines-task-lib",
"version": "3.3.1",
"version": "3.3.2",
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for addressing these vulns. Is there an ETA for this to drop in NPM registry?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

8 participants