search

animist-io / wowshuxkluh

Ionic / Ethereum module to help mobile Dapps run location contingent smart-contracts over Bluetooth LE.
http://animist.io
ISC License
6 stars 1 forks source link

An in-range update of bower is breaking the build 🚨 #48

Open greenkeeper[bot] opened 6 years ago

greenkeeper[bot] commented 6 years ago

Version 1.8.1 of bower just got published.

Branch Build failing 🚨
Dependency bower
Current Version 1.8.0
Type dependency

This version is covered by your current version range and after updating it in your project the build failed.

bower is a direct dependency of this project this is very likely breaking your project right now. If other packages depend on you it’s very likely also breaking them. I recommend you give this issue a very high priority. I’m sure you can resolve this :muscle:

Status Details - ❌ **continuous-integration/travis-ci/push** The Travis CI build could not complete due to an error [Details](https://travis-ci.org/animist-io/wowshuxkluh/builds/275120504?utm_source=github_status&utm_medium=notification)
Not sure how things should work exactly? There is a collection of [frequently asked questions](https://greenkeeper.io/faq.html) and of course you may always [ask my humans](https://github.com/greenkeeperio/greenkeeper/issues/new).

Your Greenkeeper Bot :palm_tree:

greenkeeper[bot] commented 6 years ago

After pinning to 1.8.0 your tests are passing again. Downgrade this dependency 📌.

greenkeeper[bot] commented 6 years ago

Version 1.8.2 just got published.

Your tests are passing again with this version. Explicitly upgrade to this version 🚀

greenkeeper[bot] commented 6 years ago

Version 1.8.3 just got published.

Your tests are still failing with this version. Compare the changes 🚨

greenkeeper[bot] commented 6 years ago

Version 1.8.4 just got published.

Your tests are passing again with this version. Explicitly upgrade to this version 🚀

Release Notes v1.8.4
  • Fixes release 1.8.3 by publishing with npm@3 instead of npm@5 (to include lib/node_modules)
greenkeeper[bot] commented 5 years ago

Your tests are passing again with this update. Explicitly upgrade to this version 🚀

Release Notes for v1.8.6

Fix Zip Slip Vulnerability of decompress-zip package: https://snyk.io/research/zip-slip-vulnerability

Note: v1.8.5 has been unpublished because of missing files

greenkeeper[bot] commented 5 years ago

Your tests are passing again with this update. Explicitly upgrade to this version 🚀

Release Notes for v1.8.7

Fixes side effect of fix from v1.8.6 that caused improper permissions for extracted folders

#2532

greenkeeper[bot] commented 5 years ago

Your tests are passing again with this update. Explicitly upgrade to this version 🚀

Release Notes for v1.8.8

Fix vulnerability related to extracting .tar.gz files that has similar effect to Zip Slip

Vulnerability is similar to Zip Slip allows for overriding and creating arbitrary files on filesystem

Needlessly to say, please upgrade this this version of Bower