apigee-127 / swagger-tools

A Node.js and browser module that provides tooling around Swagger.
MIT License
701 stars 374 forks source link

update superagent, supertest, and commander dependencies #517

Closed wickedest closed 6 years ago

wickedest commented 7 years ago

The swagger-tools were failing retirejs dependency checks because it was using an out of date superagent and supertest, which had a local, insecure version of jquery. This has been fixed in later versions, so I updated the dependencies. Also fixed unit tests that were failing because of a change in commander that changed the help usage. Also updated run-sequence.

NOTE: this builds/passes but older versions warn about incompatible node versions.

whitlockjc commented 7 years ago

Thanks for the PR. I'll get to it shortly.

alasdairhurst commented 7 years ago

@whitlockjc Had a chance to look yet?

whitlockjc commented 7 years ago

Sorry about the delay, I need to do a security patch release. I'll do that today and it will include these changes.

rcarroll380 commented 6 years ago

Any update on this PR? Superagent needs to be at 3.6.1 now because of vulnerability with https://nodesecurity.io/advisories/535

wickedest commented 6 years ago

Thanks for merging this. @whitlockjc, did you cut a release? The version is still at 0.10.1.

gobeyboy commented 6 years ago

@whitlockjc Jeremy, any kind of update or ETA on the patch release would be gratefully appreciated.

elankeeran commented 6 years ago

@whitlockjc Could you; please update the ETA otherwise we need to look for alternative solution.

whitlockjc commented 6 years ago

I'll try to get this done this week but I've said that before. Feel free to help out.

whitlockjc commented 6 years ago

Thanks a ton @wickedest!