Snyk has created this PR to upgrade grunt from 1.1.0 to 1.2.0.
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 1 version ahead of your current version.
The recommended version was released 21 days ago, on 2020-07-03.
Allow usage of grunt plugins that are located in any location that
is visible to Node.js and NPM, instead of node_modules directly
inside package that have a dev dependency to these plugins.
(PR: #1677)
Removed coffeescript from dependencies. To ease transition, if
coffeescript is still around, Grunt will attempt to load it.
If it is not, and the user loads a CoffeeScript file,
Grunt will print a useful error indicating that the
coffeescript package should be installed as a dev dependency.
This is considerably more user-friendly than dropping the require entirely,
but doing so is feasible with the latest grunt-cli as users
may simply use grunt --require coffeescript/register.
(PR: #1675)
Exposes Grunt Option keys for ease of use.
(PR: #1570)
Avoiding infinite loop on very long command names.
(PR: #1697)
Snyk has created this PR to upgrade grunt from 1.1.0 to 1.2.0.
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
Release notes
Package name: grunt
-
1.2.0 - 2020-07-03
- Allow usage of grunt plugins that are located in any location that
- Removed coffeescript from dependencies. To ease transition, if
- Exposes Grunt Option keys for ease of use.
- Avoiding infinite loop on very long command names.
-
1.1.0 - 2020-03-17
- Update to mkdirp ~1.0.3
- Only support versions of Node >= 8
from grunt GitHub release notesis visible to Node.js and NPM, instead of node_modules directly
inside package that have a dev dependency to these plugins.
(PR: #1677)
coffeescript is still around, Grunt will attempt to load it.
If it is not, and the user loads a CoffeeScript file,
Grunt will print a useful error indicating that the
coffeescript package should be installed as a dev dependency.
This is considerably more user-friendly than dropping the require entirely,
but doing so is feasible with the latest grunt-cli as users
may simply use grunt --require coffeescript/register.
(PR: #1675)
(PR: #1570)
(PR: #1697)
Commit messages
Package name: grunt
- 27bc5d9 Merge pull request #1714 from gruntjs/release-1.2.0
- 64a3cf4 Release v1.2.0
- 0d23eff Merge pull request #1570 from bhldev/feature-options-keys
- ee70306 Merge pull request #1697 from philz/1696
- 05c0634 Merge pull request #1712 from gruntjs/fix-lint
- cdd1c19 fix lint in file.js
- bc168e3 Merge pull request #1283 from greglittlefield-wf/recognize-relative-links
- 5f16b5a Merge pull request #1675 from STRML/remove-coffeescript
- 58f80ae Merge pull request #1677 from micellius/monorepo-support
- 1f61427 Add CODE_OF_CONDUCT.md
- 4c6fcd9 Merge pull request #1709 from NotMoni/patch-1
- 169d496 add link to license
- 288ea76 add license link
- 7985b19 Avoiding infinite loop on very long command names.
- 5a0a02b support monorepo (relative path)
- 66fc8fa support monorepo (test case)
- f2b118a support monorepo (as fallback)
- d06ca51 support monorepos
- ba492b6 Remove coffeescript from dependencies.
- 85e5246 Expose option keys
- 2043b8e Fix issue where grunt.file.isLink() returned false for relative links
CompareNote: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs