search

afitiskin / redux-saga-routines

Routines for redux-saga
MIT License
249 stars 33 forks source link

upgrade redux-actions to fix CVE-2019-10744 for redux-saga-routines@2x #67

Open darcusfenix opened 4 years ago

darcusfenix commented 4 years ago

hi guys can we upgrade redux-actions in 2x to fix this vulnerability issue ?

redux-actions@2.6.5 is not using lodash anymore

in this moment i cannot upgrade to 3x.

how can i make the pull request ?

https://github.com/darcusfenix/redux-saga-routines/commit/0e31740b19e643cf21f62cf8e40cf3b502ba56ea

shapkarin commented 4 years ago

Hello. I guess it possible if @afitiskin will create a special brunch for version2 and replace the tag 2.2.5 with last commit from that branch. @darcusfenix can you please tell why you need version 2x?

afitiskin commented 4 years ago

Version 2.2.6 has been released and published to npm