Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency forever to v4 #140

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

mend-for-github-com[bot]
Copy link
Contributor

@mend-for-github-com mend-for-github-com bot commented Apr 14, 2022

This PR contains the following updates:

Package Type Update Change
forever dependencies major ^2.0.0 -> ^4.0.0

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
High 7.5 CVE-2021-3820 #17
High 7.5 CVE-2022-21803 #139
High 7.5 CVE-2022-21803 #139

Release Notes

foreverjs/forever

v4.0.0

Compare Source

=========================

  • [security] Replace nconf with configstore [#​1112]
  • [security] Replace yargs with getopts [#​1110]

v3.0.4

Compare Source

=========================

  • [security] Update forever-monitor and remove utile to get rid of vulnerabilities

v3.0.3

Compare Source

=========================

  • [security] Update forever-monitor and remove broadway to get rid of vulnerable minimist version [#​1098]

v3.0.2

Compare Source

=========================

  • [doc] Add project deprecation warning

v3.0.1

Compare Source

=========================

  • [security] Replaced optimist with yargs [#​1093]

v3.0.0

Compare Source

=========================

  • [security] Update forever-monitor [#​1081]

  • If you want to rebase/retry this PR, click this checkbox.

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by WhiteSource label Apr 14, 2022
@mend-for-github-com mend-for-github-com bot changed the title Update dependency forever to v4 Update dependency forever to v4 - autoclosed May 12, 2022
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/forever-4.x branch May 12, 2022 01:52
@mend-for-github-com mend-for-github-com bot changed the title Update dependency forever to v4 - autoclosed Update dependency forever to v4 May 13, 2022
@mend-for-github-com mend-for-github-com bot reopened this May 13, 2022
@mend-for-github-com mend-for-github-com bot restored the whitesource-remediate/forever-4.x branch May 13, 2022 09:48
@mend-for-github-com mend-for-github-com bot changed the title Update dependency forever to v4 Update dependency forever to v4 - autoclosed May 19, 2022
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/forever-4.x branch May 19, 2022 14:19
@mend-for-github-com mend-for-github-com bot changed the title Update dependency forever to v4 - autoclosed Update dependency forever to v4 May 20, 2022
@mend-for-github-com mend-for-github-com bot reopened this May 20, 2022
@mend-for-github-com mend-for-github-com bot restored the whitesource-remediate/forever-4.x branch May 20, 2022 06:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by WhiteSource
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants