Vulnerability Issue With bl < 2.2.1

[wu-json]

Issue

Just got a message from one of my repos about a security vulnerability with bl below version 2.2.1. It seems like this repo still uses v2.2.0. Would be great if this could be updated.

[hasezoey]

package bl is not installed directly in one of the packages here, so it will depend on when the other packages are upgraded

[wu-json]

Ah understood - thank you!

[hasezoey]

#348 got merged, next version will include it

[nodkz]

Please let us know when this PR be accepted mongodb/node-mongodb-native#2536 and the new package mongodb be published.

Only after that, we can eliminate this warning.

[kylepeeler]

Anything I (first-time contributor 😄) can do to help get this moved along? Merging the above and this one would help to resolve a high npm vulnerability currently blocking CI on another project of mine

[hasezoey]

@kylepeeler the fix on this package already got applied #348, but because this package uses yarn, its only yarn.lock which got updated, otherwise we need to wait for mongodb to merge the mentioned PR and release it

[kylepeeler]

mongodb/node-mongodb-native#2536 seems to have been merged and the issue resolved, should we close this issue?