Skip to content
This repository has been archived by the owner on Mar 30, 2022. It is now read-only.

[Snyk] Upgrade vuepress from 1.1.0 to 1.3.1 #11

Closed

Conversation

snyk-bot
Copy link

@snyk-bot snyk-bot commented Apr 6, 2020

Snyk has created this PR to upgrade vuepress from 1.1.0 to 1.3.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
  • The recommended version is 3 versions ahead of your current version.
  • The recommended version was released 2 months ago, on 2020-02-20.

The recommended version fixes:

Severity Issue Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-ACORN-559469
No Known Exploit
Cross-site Scripting (XSS)
SNYK-JS-SERIALIZEJAVASCRIPT-536840
No Known Exploit
Prototype Pollution
SNYK-JS-DOTPROP-543489
Proof of Concept
Timing Attack
SNYK-JS-ELLIPTIC-511941
No Known Exploit
Prototype Pollution
SNYK-JS-MINIMIST-559764
Proof of Concept
Prototype Pollution
SNYK-JS-MINIMIST-559764
Proof of Concept
Information Exposure
SNYK-JS-KINDOF-537849
Proof of Concept
Release notes
Package name: vuepress from vuepress GitHub release notes
Commit messages
Package name: vuepress
  • eef0d2f v1.3.1
  • c9e59af docs: fix broken link to deploy with ZEIT Now (#2185)
  • 0ca620f fix($core): transpile vuepress packages and md files (close #1606, #1990) (#2064)
  • 560b3c6 fix($plugin-pwa): popup component does not work (close #2172) (#2187)
  • 606ae4a docs: remove filip from core team for now (#2170)
  • ca3679c fix($theme-default): non-ASCII hash causes wrong sidebar highlight (close #2078)(#2166)
  • 0ae73cb build($core): bump babel and core-js version (close #2046) (#2165)
  • ffd45c2 refactor($core): use stylus conditional assignment (close #2127) (#2129)
  • 8b43598 build: bump cac from 6.5.5 to 6.5.6 (#2157)
  • 2d53fbb feat($core): support async enhanceApp (close #2074) (#2075)
  • 7037882 docs: use simplified Chinese
  • f083d8d fix($core): resolve jsx files by default (close #2058) (#2059)
  • 8df4ed7 Merge pull request #2160 from vuejs/update-readme-to-core-team
  • 537bc2c build: update command to be more semantic
  • c784730 docs: update meteorlxy in README
  • 699bbe1 build: add script to update core team
  • aa7ddc4 docs: add meteorlxy to core team
  • 53bb476 docs: give documentation a higher priority
  • 797dda7 docs: simplify language
  • ad49948 docs: update README to focus more on project and core team
  • 4bdca1c chore: 1.3.0 changelog
  • af092c4 v1.3.0
  • aa0dd20 docs: official blog plugin and theme (#2149)
  • 2b25740 fix: update known command list (#2146)

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@joe-dz
Copy link
Contributor

joe-dz commented Apr 9, 2020

Already upgraded as a part of #10

@joe-dz joe-dz closed this Apr 9, 2020
@joe-dz joe-dz deleted the snyk-upgrade-2b545587b685a34a72c7dec79fb460c1 branch April 9, 2020 12:43
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.