Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: Update node-util and is-generator-function dependencies to eliminate security violation #4159

Merged
merged 2 commits into from
Mar 21, 2022

Conversation

mrivera-ms
Copy link
Contributor

@mrivera-ms mrivera-ms commented Mar 15, 2022

Fixes #3889

Description

Security violations from package is-generator-function are fixed in version @1.0.10: inspect-js/is-generator-function@bce7ca6

Specific Changes

This change updates the versions of is-generator-function and node-util to include security fixes. It does not change the version of browserify.

Dependency graph before changes

image

image

After Changes

image

image

@mrivera-ms mrivera-ms requested a review from a team as a code owner March 15, 2022 03:12
@mrivera-ms mrivera-ms added this to the R16 milestone Mar 15, 2022
@mrivera-ms mrivera-ms changed the title Update node-util and is-generator-function dependencies to eliminate security violation fix: Update node-util and is-generator-function dependencies to eliminate security violation Mar 15, 2022
@coveralls
Copy link

coveralls commented Mar 15, 2022

Pull Request Test Coverage Report for Build 2001297783

  • 0 of 0 changed or added relevant lines in 0 files are covered.
  • No unchanged relevant lines lost coverage.
  • Overall coverage decreased (-0.003%) to 84.573%

Totals Coverage Status
Change from base Build 1995608014: -0.003%
Covered Lines: 19707
Relevant Lines: 22073

💛 - Coveralls

@mrivera-ms mrivera-ms merged commit 422030e into main Mar 21, 2022
@mrivera-ms mrivera-ms deleted the moniriv/up-isgeneratorfunction branch March 21, 2022 16:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[Rendering] Content Security Policy violations in adaptive-expressions npm library
3 participants