Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump fontkit and linebreak deps #1367

Open
wants to merge 6 commits into
base: master
Choose a base branch
from
Open

Bump fontkit and linebreak deps #1367

wants to merge 6 commits into from

Conversation

devongovett
Copy link
Member

Published new versions of fontkit and linebreak.

@davecarlson
Copy link

thanks for doing the fontkit updates - is there an ETA for this PR ?

@treylon
Copy link

treylon commented Sep 20, 2022

Would be great to have a new release with this dependency bump

@chris-gaona
Copy link

Is there a timeframe when this PR will be merged & eventually released? There is currently a CVE (link to CVE) for the package minimist that is used in the current released version of this package, 0.13.0. The package, minimist, is used in fontkit@1.8.1, but not in the latest release of fontkit, which would make this CVE an non issue I think.

Screen Shot 2022-10-06 at 4 13 25 PM

@demiankatz
Copy link

Any news on this PR? I'm trying to get rid of core-js deprecation warnings in my project, and I think this may be the key to everything. :-)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

6 participants