commitizen / cz-cli

The commitizen command line utility. #BlackLivesMatter
http://commitizen.github.io/cz-cli/
MIT License
16.58k stars 552 forks source link

fix(deps): update all non-major dependencies #913

Closed renovate[bot] closed 2 years ago

renovate[bot] commented 2 years ago

WhiteSource Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
inquirer 8.2.1 -> 8.2.2 age adoption passing confidence
minimist 1.2.5 -> 1.2.6 age adoption passing confidence

Release Notes

SBoudrias/Inquirer.js ### [`v8.2.2`](https://togithub.com/SBoudrias/Inquirer.js/releases/inquirer@8.2.2) [Compare Source](https://togithub.com/SBoudrias/Inquirer.js/compare/inquirer@8.2.1...inquirer@8.2.2) Fix bugs with the `rawlist`
substack/minimist ### [`v1.2.6`](https://togithub.com/substack/minimist/compare/1.2.5...1.2.6) [Compare Source](https://togithub.com/substack/minimist/compare/1.2.5...1.2.6)

Configuration

šŸ“… Schedule: At any time (no schedule defined).

šŸš¦ Automerge: Enabled.

ā™» Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

šŸ‘» Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.



This PR has been generated by WhiteSource Renovate. View repository job log here.

alexzerah commented 2 years ago

I am a teacher and some of my student use commitizen locally.

It appears commitizen have a message from GitHub Bot : "We found potential security vulnerabilities in your dependencies."

We have the latest possible version (4.2.4) and minimist is still 1.2.5.

What can we do ?

Have a nice day šŸ‘‹

micalevisk commented 2 years ago

@alexzerah you can use your package manager to replace the old minimist: https://github.com/commitizen/cz-cli/issues/914#issuecomment-1089502700

github-actions[bot] commented 1 year ago

:tada: This PR is included in version 4.2.5 :tada:

The release is available on:

Your semantic-release bot :package::rocket: