⬆️ Upgrade vulnerable packages

frinyvonnick / gitmoji-changelog

A changelog generator for gitmoji 😜

MIT License

388 stars 49 forks source link

Closed horaklukas closed 2 years ago

horaklukas commented 2 years ago

Upgrade these packages to fix their vulnerabilities

lerna => v4
libnpm => 3.0.1 (sadly it's last published version and still have some moderate vulnerabilities in nested packages 😞)
jest => v26
git-semver-tags => v4
yargs => v17

Remove unusued get-pkg-repo dependency

Upgrade Node.js used in CI workflows to v12. According to Node.js release chart, v10 is not maintained anymore thus it's possibly vulnerable.

Relates #209

frinyvonnick commented 2 years ago

Hi @horaklukas 👋

Thank you for your contribution 🙏 I tested it everything looks fine 😄

frinyvonnick commented 2 years ago

@all-contributors please add horaklukas for code

allcontributors[bot] commented 2 years ago

@frinyvonnick

I've put up a pull request to add @horaklukas! :tada:

frinyvonnick commented 2 years ago

It was released in 2.3.0 🚀