chore(dev-deps): upgrade mochify to 7.0.0

apiaryio / gavel2html

Renders HTML diff from Gavel.js output

MIT License

0 stars 0 forks source link

chore(dev-deps): upgrade mochify to 7.0.0 #29

Closed artem-zakharchenko closed 2 years ago

artem-zakharchenko commented 3 years ago

Upgrades the mochify package to version 7.0.0.

Fixes a security vulnerability introduces by a fourth-party elliptic package.

Resolution

gavel2html@2.0.2
└─┬ mochify@7.0.0
  └─┬ browserify@16.5.2
    └─┬ crypto-browserify@3.12.0
      ├─┬ browserify-sign@4.2.1
      │ └── elliptic@6.5.4 
      └─┬ create-ecdh@4.0.4
        └── elliptic@6.5.4  deduped

artem-zakharchenko commented 3 years ago

Need to look into the failing tests before merging this. We're bumping 2 major versions of mochify with no release notes.

artem-zakharchenko commented 2 years ago

Our CI is using node v8, which is quite outdated. I believe that the tooling we update uses the recent versions of node. I'm bumping the node used for CI to v12.