Closed aukevanleeuwen closed 1 year ago
I was alerted by dependabot of a vulnerability because of a transitive dependency on yaml@2.2.1 (via @cucumber/cucumber-js).
yaml@2.2.1
@cucumber/cucumber-js
Update to yaml@2.2.2.
yaml@2.2.2
@davidjgoss is there a plan for a release to npm with this fix soon? Thanks
Released in https://github.com/cucumber/cucumber-js/releases/tag/v9.1.1 - sorry for the delay.
🤔 What's the problem you've observed?
I was alerted by dependabot of a vulnerability because of a transitive dependency on
yaml@2.2.1
(via@cucumber/cucumber-js
).✨ Do you have a proposal for making it better?
Update to
yaml@2.2.2
.📚 Any additional context?