Skip to content

Conversation

@KliemannNoah
Copy link

Updated glob, lodash, and proxyquire to their latest patch version, which is also their latest version overall.

Updated glob, lodash, and proxyquire to their latest patch version, which is also their latest version overall.
@KliemannNoah
Copy link
Author

Note that Bluebird, jshint, and testdouble all have minor versions that could be updated as well, but I am not knowledgeable enough to know for certain. Per my understanding, semantic versioning says those should be fine to update to and I can add them as well, but I am not aware of how to test for these things.
lodash

3 minor security bugs related to the usage of minimist in the mocha library exist, but this would have significant breaking changes. https://www.npmjs.com/advisories/1179

@KliemannNoah KliemannNoah marked this pull request as ready for review December 10, 2020 21:34
Lodash dependency updated to most recent version
@KliemannNoah
Copy link
Author

Coming back as a new version of Lodash has been released, in addition to the previous changes made. @pchudzik Attaching an image of the outdated packages with current changes
cacheoutdated

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant