Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(security): Bump js-yaml package #167

Closed
wants to merge 1 commit into from

Conversation

abdsahin
Copy link

@abdsahin abdsahin commented May 3, 2023

js-yaml version 3.14.0 has a security vulnerability fixed in version 3.14.1

Reference:

Type of change:

  • Bug fix (non-breaking change which fixes an issue)

js-yaml version 3.14.0 has a security vulnerability which is fixed in version 3.14.0

Reference: https://github.com/nodeca/js-yaml/blob/9586ebe23298427d26b3479979bd6499bf3a14c2/CHANGELOG.md#3141---2020-12-07
@jkowalleck
Copy link
Contributor

duplicates #141

@codecov-commenter
Copy link

codecov-commenter commented May 9, 2023

Codecov Report

Merging #167 (7eb6c56) into master (9443dbf) will not change coverage.
The diff coverage is n/a.

📣 This organization is not using Codecov’s GitHub App Integration. We recommend you install it so Codecov can continue to function properly for your repositories. Learn more

@@           Coverage Diff           @@
##           master     #167   +/-   ##
=======================================
  Coverage   99.13%   99.13%           
=======================================
  Files          26       26           
  Lines        2184     2184           
  Branches      593      593           
=======================================
  Hits         2165     2165           
  Misses         19       19           

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

@universalhandle
Copy link
Collaborator

Thanks for raising this. I've addressed it in 97edf4d, as merge conflicts have been introduced since your pull request. The fix is released in v3.1.1.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants