freerware / work

A compact library for tracking and committing changes to your entities.
Apache License 2.0
59 stars 2 forks source link

Upgrade dependencies to ensure v2.2.8+ for gopkg.in/yaml.v2. #67

Closed fr33r closed 2 years ago

fr33r commented 2 years ago

Description

Upgrades various packages such that there are no longer any dependencies on gopkg.in/yaml.v2 < v2.2.8 to address Dependabot alerts.

Additionally upgrades v3 module version to 1.13 instead of 1.12, as it was required to eliminate the problematic dependency.

Rationale

To address the aforementioned security alerts (surfaced via Dependabot).

Suggested Version(s)

v3.2.1 & v4.0.0-beta-3

Example Usage

N/A

codecov[bot] commented 2 years ago

Codecov Report

Base: 96.45% // Head: 96.45% // No change to project coverage :thumbsup:

Coverage data is based on head (bcf4d3e) compared to base (655d065). Patch has no changes to coverable lines.

Additional details and impacted files ```diff @@ Coverage Diff @@ ## master #67 +/- ## ======================================= Coverage 96.45% 96.45% ======================================= Files 13 13 Lines 1296 1296 ======================================= Hits 1250 1250 Misses 34 34 Partials 12 12 ``` | Flag | Coverage Δ | | |---|---|---| | v3 | `98.71% <ø> (ø)` | | | v4 | `94.34% <ø> (ø)` | | Flags with carried forward coverage won't be shown. [Click here](https://docs.codecov.io/docs/carryforward-flags?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=freerware#carryforward-flags-in-the-pull-request-comment) to find out more. Help us with your feedback. Take ten seconds to tell us [how you rate us](https://about.codecov.io/nps?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=freerware). Have a feature suggestion? [Share it here.](https://app.codecov.io/gh/feedback/?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=freerware)

:umbrella: View full report at Codecov.
:loudspeaker: Do you have feedback about the report comment? Let us know in this issue.