Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency grunt to v1.3.0 #133

Open
wants to merge 1 commit into
base: v2
Choose a base branch
from

Conversation

mend-for-github-com[bot]
Copy link

@mend-for-github-com mend-for-github-com bot commented Oct 30, 2020

This PR contains the following updates:

Package Type Update Change
grunt (source) devDependencies minor 1.0.3 -> 1.3.0

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
High 7.1 CVE-2020-7729 #132

Release Notes

gruntjs/grunt

v1.3.0

Compare Source

  • Merge pull request #​1720 from gruntjs/update-changelog-deps faab6be
  • Update Changelog and legacy-util dependency 520fedb
  • Merge pull request #​1719 from gruntjs/yaml-refactor 7e669ac
  • Switch to use safeLoad for loading YML files via file.readYAML. e350cea
  • Merge pull request #​1718 from gruntjs/legacy-log-bumo 7125f49
  • Bump legacy-log 00d5907

v1.2.1

Compare Source

v1.2.0

Compare Source

  • Allow usage of grunt plugins that are located in any location that
    is visible to Node.js and NPM, instead of node_modules directly
    inside package that have a dev dependency to these plugins.
    (PR: #​1677)
  • Removed coffeescript from dependencies. To ease transition, if
    coffeescript is still around, Grunt will attempt to load it.
    If it is not, and the user loads a CoffeeScript file,
    Grunt will print a useful error indicating that the
    coffeescript package should be installed as a dev dependency.
    This is considerably more user-friendly than dropping the require entirely,
    but doing so is feasible with the latest grunt-cli as users
    may simply use grunt --require coffeescript/register.
    (PR: #​1675)
  • Exposes Grunt Option keys for ease of use.
    (PR: #​1570)
  • Avoiding infinite loop on very long command names.
    (PR: #​1697)

v1.1.0

Compare Source

  • Update to mkdirp ~1.0.3
  • Only support versions of Node >= 8

v1.0.4

Compare Source


  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by WhiteSource label Oct 30, 2020
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/grunt-1.x-lockfile branch from 5d1b4b3 to 27b0c8e Compare December 9, 2020 03:32
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/grunt-1.x-lockfile branch from 27b0c8e to 8a3e292 Compare February 20, 2021 17:22
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/grunt-1.x-lockfile branch from 8a3e292 to 9e2a2ac Compare April 21, 2021 12:40
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/grunt-1.x-lockfile branch from 9e2a2ac to 41d262f Compare April 22, 2021 18:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by WhiteSource
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants