-
-
Notifications
You must be signed in to change notification settings - Fork 62
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[Snyk] Security upgrade marked from 0.7.0 to 1.1.1 #377
Conversation
BREAKING CHANGE New minimum Node version supported is 10.x. Also, new Prettier minimum version is 2.0.2
Update tools dependencies and improve their readmes
BREAKING CHANGE New minimum Prettier version is 2.0.4, to avoid regressions from v1
Snyk has created this PR to upgrade jsdom from 16.2.1 to 16.2.2. See this package in NPM: https://www.npmjs.com/package/jsdom See this project in Snyk: https://app.snyk.io/org/juanpicado/project/078b04c1-9bef-4d55-ba1e-fb5587471796?utm_source=github&utm_medium=upgrade-pr
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-LODASH-567746
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-MARKED-584281
Rerunning CI jobs to see if we can get all running. |
I guess we are not affected by the breaking changes from 1.0.0: https://github.com/markedjs/marked/releases |
I'd need to update manually, our master branch here |
Codecov Report
@@ Coverage Diff @@
## 9.x #377 +/- ##
===========================================
+ Coverage 68.14% 78.87% +10.73%
===========================================
Files 29 7 -22
Lines 1400 445 -955
Branches 204 74 -130
===========================================
- Hits 954 351 -603
+ Misses 406 53 -353
- Partials 40 41 +1
Flags with carried forward coverage won't be shown. Click here to find out more.
Continue to review full report at Codecov.
|
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
Vulnerabilities that will be fixed
With an upgrade:
SNYK-JS-MARKED-584281
Commit messages
Package name: marked
The new version differs by 250 commits.See the full diff
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic