Bump jimp 0.10.2 -> 0.14.0 #9
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
jimp -> @jimp/types -> @jimp/jpeg depends on jpeg-js, and bumping jimp bumps jpeg-js 0.3.7 -> 0.4.1 jpeg-js 0.4.0 fixes CVE-2020-8175 (GHSA-w7q9-p3jq-fmhm)
|
Looks good. 4 major versions in Jimp seems like a lot to jump through but doesn't seem like all that much changed. |
|
Published as v2.1.8 |
karlhorky
added a commit
to gatsbyjs/gatsby
that referenced
this pull request
Jul 30, 2020
Vulnerability: GHSA-w7q9-p3jq-fmhm Jimp Pull Request: jimp-dev/jimp#892 Potrace Pull Request: tooolbox/node-potrace#9
karlhorky
added a commit
to gatsbyjs/gatsby
that referenced
this pull request
Jul 30, 2020
Vulnerability: GHSA-w7q9-p3jq-fmhm Jimp Pull Request: jimp-dev/jimp#892 Potrace Pull Request: tooolbox/node-potrace#9
karlhorky
added a commit
to gatsbyjs/gatsby
that referenced
this pull request
Jul 30, 2020
Vulnerability: GHSA-w7q9-p3jq-fmhm Jimp Pull Request: jimp-dev/jimp#892 Potrace Pull Request: tooolbox/node-potrace#9
|
Thanks! Upgraded the Gatsby plugins and transformers here: gatsbyjs/gatsby#26122 |
ascorbic
pushed a commit
to gatsbyjs/gatsby
that referenced
this pull request
Jul 30, 2020
* Address vulnerability in jpeg-js Vulnerability: GHSA-w7q9-p3jq-fmhm Jimp Pull Request: jimp-dev/jimp#892 Potrace Pull Request: tooolbox/node-potrace#9 * Address vulnerability in jpeg-js Vulnerability: GHSA-w7q9-p3jq-fmhm Jimp Pull Request: jimp-dev/jimp#892 Potrace Pull Request: tooolbox/node-potrace#9 * Address vulnerability in jpeg-js Vulnerability: GHSA-w7q9-p3jq-fmhm Jimp Pull Request: jimp-dev/jimp#892 Potrace Pull Request: tooolbox/node-potrace#9 * Update lockfile
gatsbybot
added a commit
to gatsbyjs/gatsby-starter-blog-theme-core
that referenced
this pull request
Jul 30, 2020
* Address vulnerability in jpeg-js Vulnerability: GHSA-w7q9-p3jq-fmhm Jimp Pull Request: jimp-dev/jimp#892 Potrace Pull Request: tooolbox/node-potrace#9 * Address vulnerability in jpeg-js Vulnerability: GHSA-w7q9-p3jq-fmhm Jimp Pull Request: jimp-dev/jimp#892 Potrace Pull Request: tooolbox/node-potrace#9 * Address vulnerability in jpeg-js Vulnerability: GHSA-w7q9-p3jq-fmhm Jimp Pull Request: jimp-dev/jimp#892 Potrace Pull Request: tooolbox/node-potrace#9 * Update lockfile
gatsbybot
added a commit
to gatsbyjs/gatsby-starter-minimal
that referenced
this pull request
Jul 30, 2020
* Address vulnerability in jpeg-js Vulnerability: GHSA-w7q9-p3jq-fmhm Jimp Pull Request: jimp-dev/jimp#892 Potrace Pull Request: tooolbox/node-potrace#9 * Address vulnerability in jpeg-js Vulnerability: GHSA-w7q9-p3jq-fmhm Jimp Pull Request: jimp-dev/jimp#892 Potrace Pull Request: tooolbox/node-potrace#9 * Address vulnerability in jpeg-js Vulnerability: GHSA-w7q9-p3jq-fmhm Jimp Pull Request: jimp-dev/jimp#892 Potrace Pull Request: tooolbox/node-potrace#9 * Update lockfile
gatsbybot
added a commit
to gatsbyjs/gatsby-starter-notes-theme
that referenced
this pull request
Jul 30, 2020
* Address vulnerability in jpeg-js Vulnerability: GHSA-w7q9-p3jq-fmhm Jimp Pull Request: jimp-dev/jimp#892 Potrace Pull Request: tooolbox/node-potrace#9 * Address vulnerability in jpeg-js Vulnerability: GHSA-w7q9-p3jq-fmhm Jimp Pull Request: jimp-dev/jimp#892 Potrace Pull Request: tooolbox/node-potrace#9 * Address vulnerability in jpeg-js Vulnerability: GHSA-w7q9-p3jq-fmhm Jimp Pull Request: jimp-dev/jimp#892 Potrace Pull Request: tooolbox/node-potrace#9 * Update lockfile
gatsbybot
added a commit
to gatsbyjs/gatsby-starter-theme
that referenced
this pull request
Jul 30, 2020
* Address vulnerability in jpeg-js Vulnerability: GHSA-w7q9-p3jq-fmhm Jimp Pull Request: jimp-dev/jimp#892 Potrace Pull Request: tooolbox/node-potrace#9 * Address vulnerability in jpeg-js Vulnerability: GHSA-w7q9-p3jq-fmhm Jimp Pull Request: jimp-dev/jimp#892 Potrace Pull Request: tooolbox/node-potrace#9 * Address vulnerability in jpeg-js Vulnerability: GHSA-w7q9-p3jq-fmhm Jimp Pull Request: jimp-dev/jimp#892 Potrace Pull Request: tooolbox/node-potrace#9 * Update lockfile
gatsbybot
added a commit
to gatsbyjs/gatsby-starter-hello-world
that referenced
this pull request
Jul 30, 2020
* Address vulnerability in jpeg-js Vulnerability: GHSA-w7q9-p3jq-fmhm Jimp Pull Request: jimp-dev/jimp#892 Potrace Pull Request: tooolbox/node-potrace#9 * Address vulnerability in jpeg-js Vulnerability: GHSA-w7q9-p3jq-fmhm Jimp Pull Request: jimp-dev/jimp#892 Potrace Pull Request: tooolbox/node-potrace#9 * Address vulnerability in jpeg-js Vulnerability: GHSA-w7q9-p3jq-fmhm Jimp Pull Request: jimp-dev/jimp#892 Potrace Pull Request: tooolbox/node-potrace#9 * Update lockfile
fumierkm
added a commit
to fumierkm/gatsbyjs
that referenced
this pull request
Nov 27, 2021
* Address vulnerability in jpeg-js Vulnerability: GHSA-w7q9-p3jq-fmhm Jimp Pull Request: jimp-dev/jimp#892 Potrace Pull Request: tooolbox/node-potrace#9 * Address vulnerability in jpeg-js Vulnerability: GHSA-w7q9-p3jq-fmhm Jimp Pull Request: jimp-dev/jimp#892 Potrace Pull Request: tooolbox/node-potrace#9 * Address vulnerability in jpeg-js Vulnerability: GHSA-w7q9-p3jq-fmhm Jimp Pull Request: jimp-dev/jimp#892 Potrace Pull Request: tooolbox/node-potrace#9 * Update lockfile
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
jimp -> @jimp/types -> @jimp/jpeg depends on jpeg-js, and bumping jimp
bumps jpeg-js 0.3.7 -> 0.4.1
jpeg-js 0.4.0 fixes CVE-2020-8175
(GHSA-w7q9-p3jq-fmhm)