Skip to content
This repository has been archived by the owner on Jul 13, 2023. It is now read-only.

fix: urijs treats leading whitespaces differently #218

Merged
merged 1 commit into from
Jun 6, 2022

Conversation

P0lip
Copy link
Contributor

@P0lip P0lip commented Apr 6, 2022

Needed in order to release json-ref-resolver and close stoplightio/spectral#2017

Regressed in 265ae19
Unfortunately, the CI checks didn't run on that PR, so we couldn't catch that regression.
Luckily they were executed on the master branch, so no new release has been made.

@P0lip P0lip self-assigned this Apr 6, 2022
@P0lip P0lip requested a review from marbemac April 6, 2022 08:19
@P0lip P0lip marked this pull request as ready for review April 6, 2022 08:19
@P0lip P0lip requested a review from a team April 6, 2022 08:19
"@types/urijs": "^1.19.19",
"dependency-graph": "~0.11.0",
"fast-memoize": "^2.5.2",
"immer": "^9.0.6",
"lodash": "^4.17.21",
"tslib": "^2.3.1",
"urijs": "^1.19.10"
"urijs": "^1.19.11"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

do we even need urijs anymore? or do the node versions/browsers we target now all have proper support for URL?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

meh nvm, we're not really putting work towards maintaining this package in future in any case

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

we don't need urijs, but yeah, too much effort to rewrite it to use URL.

@P0lip P0lip merged commit 775dabf into master Jun 6, 2022
@P0lip P0lip deleted the fix/urijs/whitespaces branch June 6, 2022 17:26
@stoplight-bot
Copy link
Collaborator

🎉 This PR is included in version 3.1.4 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Snyk high security vulnerability in json-ref-resolver dependency
3 participants