search

bpmn-io / bpmn-to-image

Convert BPMN 2.0 diagrams to PDF documents or PNG files.
62 stars 38 forks source link

Release a new Version including the trim-newlines security fix #27

Closed jethroo closed 2 years ago

jethroo commented 2 years ago

What should we do?

With https://github.com/bpmn-io/bpmn-to-image/pull/26 you merged a fix for https://github.com/advisories/GHSA-7p7h-4mm5-852v. But there is no tag yet for this version.

Why should we do it?

Please release with a new version tag so one can pull in this version like 

"bpmn-to-image": "^0.6.2"

currently we pull in the master directly which works but is not preferrable

🙇

jethroo commented 2 years ago

closing since I thought it will pull in the new dependency but it actually isn't, sorry