bencevans / node-sonos

🔈 Sonos Media Player Interface/Client
https://www.npmjs.com/package/sonos
MIT License
700 stars 146 forks source link

Axios severity issue #505

Closed EricAndrechek closed 3 years ago

EricAndrechek commented 3 years ago

In the latest release of this npm package, it has the dependency of Axios 0.19.0, which is marked as a high severity issue. I noticed that this Github repo has Axios 0.21.1 as a dependency, which is no longer a high severity issue.

Is it possible to release a patch update to the npm package to include the patched Axios dependency? I have software dependent on yours that is erroring out for my users to tell them that Axios needs an update.

Thanks!

github-actions[bot] commented 3 years ago

:tada: This issue has been resolved in version 1.14.1 :tada:

The release is available on:

Your semantic-release bot :package::rocket:

github-actions[bot] commented 3 years ago

:tada: This issue has been resolved in version 1.15.0-alpha.2 :tada:

The release is available on:

Your semantic-release bot :package::rocket: