Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency rewire to v4 #298

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

mend-for-github-com[bot]
Copy link
Contributor

@mend-for-github-com mend-for-github-com bot commented Dec 31, 2022

This PR contains the following updates:

Package Type Update Change
rewire devDependencies major ^3.0.2 -> ^4.0.0

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
High 8.8 CVE-2022-46175 #297

Release Notes

jhnns/rewire (rewire)

v4.0.0

Compare Source

  • Breaking: Remove official node v4 support. It probably still works with node v4, but no guarantees anymore.
  • Potentially breaking: Replace babel with regex-based transformation 9b77ed9a293c538ec3eb5160bcb933e012ce517f.
    This should not break, but it has been flagged as major version bump as the regex might not catch all cases reliably and thus fail for some users.
  • Improve runtime performance #​132
  • Use coffeescript package in favor of deprecated coffee-script #​134

  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by WhiteSource label Dec 31, 2022
@mend-for-github-com mend-for-github-com bot changed the title Update dependency rewire to v4 Update dependency rewire to v4 - autoclosed Mar 27, 2023
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/rewire-4.x branch March 27, 2023 03:20
@mend-for-github-com mend-for-github-com bot changed the title Update dependency rewire to v4 - autoclosed Update dependency rewire to v4 Mar 31, 2023
@mend-for-github-com mend-for-github-com bot reopened this Mar 31, 2023
@mend-for-github-com mend-for-github-com bot restored the whitesource-remediate/rewire-4.x branch March 31, 2023 01:33
@mend-for-github-com mend-for-github-com bot changed the title Update dependency rewire to v4 Update dependency rewire to v4 - autoclosed Jun 15, 2023
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/rewire-4.x branch June 15, 2023 15:03
@mend-for-github-com mend-for-github-com bot changed the title Update dependency rewire to v4 - autoclosed Update dependency rewire to v4 Jun 19, 2023
@mend-for-github-com mend-for-github-com bot reopened this Jun 19, 2023
@mend-for-github-com mend-for-github-com bot restored the whitesource-remediate/rewire-4.x branch June 19, 2023 04:53
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/rewire-4.x branch from 9e70a20 to e2d7262 Compare June 19, 2023 04:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by WhiteSource
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

0 participants