Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency grunt to v1.3.0 #38

Open
wants to merge 1 commit into
base: develop
Choose a base branch
from

Conversation

mend-for-jackfan.us.kg[bot]
Copy link

@mend-for-jackfan.us.kg mend-for-jackfan.us.kg bot commented Oct 30, 2020

This PR contains the following updates:

Package Type Update Change
grunt (source) devDependencies minor 1.0.4 -> 1.3.0

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
High 7.1 CVE-2020-7729 #37

Release Notes

gruntjs/grunt

v1.3.0

Compare Source

  • Merge pull request #​1720 from gruntjs/update-changelog-deps faab6be
  • Update Changelog and legacy-util dependency 520fedb
  • Merge pull request #​1719 from gruntjs/yaml-refactor 7e669ac
  • Switch to use safeLoad for loading YML files via file.readYAML. e350cea
  • Merge pull request #​1718 from gruntjs/legacy-log-bumo 7125f49
  • Bump legacy-log 00d5907

v1.2.1

Compare Source

v1.2.0

Compare Source

  • Allow usage of grunt plugins that are located in any location that
    is visible to Node.js and NPM, instead of node_modules directly
    inside package that have a dev dependency to these plugins.
    (PR: #​1677)
  • Removed coffeescript from dependencies. To ease transition, if
    coffeescript is still around, Grunt will attempt to load it.
    If it is not, and the user loads a CoffeeScript file,
    Grunt will print a useful error indicating that the
    coffeescript package should be installed as a dev dependency.
    This is considerably more user-friendly than dropping the require entirely,
    but doing so is feasible with the latest grunt-cli as users
    may simply use grunt --require coffeescript/register.
    (PR: #​1675)
  • Exposes Grunt Option keys for ease of use.
    (PR: #​1570)
  • Avoiding infinite loop on very long command names.
    (PR: #​1697)

v1.1.0

Compare Source

  • Update to mkdirp ~1.0.3
  • Only support versions of Node >= 8

  • If you want to rebase/retry this PR, check this box

@mend-for-jackfan.us.kg mend-for-jackfan.us.kg bot added the security fix Security fix generated by WhiteSource label Oct 30, 2020
@mend-for-jackfan.us.kg mend-for-jackfan.us.kg bot force-pushed the whitesource-remediate/grunt-1.x-lockfile branch from 4a179f3 to 9bf8588 Compare December 8, 2020 23:29
@mend-for-jackfan.us.kg mend-for-jackfan.us.kg bot force-pushed the whitesource-remediate/grunt-1.x-lockfile branch from 9bf8588 to 2d6ae7c Compare February 20, 2021 18:26
@mend-for-jackfan.us.kg mend-for-jackfan.us.kg bot force-pushed the whitesource-remediate/grunt-1.x-lockfile branch from 2d6ae7c to 778090f Compare April 21, 2021 11:12
@mend-for-jackfan.us.kg mend-for-jackfan.us.kg bot force-pushed the whitesource-remediate/grunt-1.x-lockfile branch from 778090f to 070dd0a Compare April 22, 2021 18:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by WhiteSource
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants