Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade ora from 4.0.0 to 4.0.3 #37

Closed

Conversation

snyk-bot
Copy link
Contributor

Snyk has created this PR to upgrade ora from 4.0.0 to 4.0.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
  • The recommended version is 3 versions ahead of your current version.
  • The recommended version was released 4 months ago, on 2019-11-13.

The recommended version fixes:

Severity Issue Exploit Maturity
Prototype Pollution
SNYK-JS-LODASH-450202
Proof of Concept
Denial of Service (DoS)
SNYK-JS-NODESASS-542662
No Known Exploit
Release notes
Package name: ora
  • 4.0.3 - 2019-11-13
    • Fix discardStdin option (#135) a4b2253
      It's now also a noop on Windows as it turns out it's impossible to reliably discard stdin there without affecting other things.

    v4.0.2...v4.0.3

  • 4.0.2 - 2019-09-29
    • Fix handling of Ctrl+C on spinners beyond first one (#131) 17761e9

    v4.0.1...v4.0.2

  • 4.0.1 - 2019-09-23
    • Set the correct interval when changing spinner by name (#128) 4a8cd09

    v4.0.0...v4.0.1

  • 4.0.0 - 2019-09-22

    Breaking

    • Require Node.js 8 6459090
    • Discard stdin by default (#112) b1f140b
      This prevents the spinner from twitching on input, outputting broken lines on Enter key presses, and prevents buffering of input while the spinner is running.

    Breaking for TypeScript users

    • Only use a CommonJS export for the TypeScript definition
      You need to change import ora from 'ora'; to import ora = require('ora');

    Fixes

    • Set the correct interval when changing spinner (#125) ad324dc
    • Hide prefixText when it's an empty string (#124) 8bcde17
    • Fix Typescript definition for the frame method (#126) b653b5a

    v3.4.0...v4.0.0

from ora GitHub release notes
Commit messages
Package name: ora

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@shaundon shaundon closed this Mar 13, 2020
@shaundon shaundon deleted the snyk-upgrade-bbebb21f2ab2a6f447f95d24669ff1c8 branch March 13, 2020 08:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants