Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump Yargs to 16.1.1 #1278

Merged
merged 3 commits into from
Jan 18, 2021
Merged

Bump Yargs to 16.1.1 #1278

merged 3 commits into from
Jan 18, 2021

Conversation

denistsoi
Copy link
Contributor

Yargs 16.1.1 resolves y18n vulnerability that was fixed in y18n 5.0.5 (attached commit below)

Reference: https://snyk.io/vuln/SNYK-JS-Y18N-1021887

yargs/yargs@ae001f3#diff-7ae45ad102eab3b6d7e7896acd08c427a9b25b346470d7bc6507b6481575d519

Copy link
Owner

@oblador oblador left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Manually tested the new version of yargs and seems to work fine. Thanks 👍

@oblador oblador merged commit 9d2b77a into oblador:master Jan 18, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants