Update dependencies to resolve lodash vulnerability

dciccale / grunt-processhtml

Process html files at build time to modify them depending on the release environment

MIT License

407 stars 30 forks source link

Update dependencies to resolve lodash vulnerability #126

Closed delfuego closed 2 years ago

delfuego commented 2 years ago

bump lodash from 4.17.5 to 4.17.21 (to resolve CVE-2021-23337) bump htmlprocessor from 0.2.4 to 0.3.1

delfuego commented 2 years ago

Note that the test suite runs without error, so it does not appear that there are any breaking changes introduced.

delfuego commented 2 years ago

@dciccale Is there any way to get this pull request integrated? It'd be nice to finally clear all the dependency vulnerability alerts that come along with the old version of htmlprocessor and lodash... just let me know if there's any help I can provide.

dciccale commented 2 years ago

sorry for the delay, let me run tests locally, do a few checks and should probably be good to merge. i'll come back in 1-2 days

delfuego commented 2 years ago

@dciccale Any luck with this? Thanks for engaging on it!