Update vulnerable dependencies - Githubissues

github / vscode-github-actions

GitHub Actions extension for VS Code

https://marketplace.visualstudio.com/items?itemName=GitHub.vscode-github-actions

MIT License

475 stars 72 forks source link

Update vulnerable dependencies #302

Closed cdb closed 4 months ago

cdb commented 4 months ago

Replaces https://github.com/github/vscode-github-actions/pull/301

Updates a few packages that were causing security vulnerabilities:

Update @babel/traverse from 7.20.12 to 7.24.0
Update browserify-sign from 4.2.1 to 4.2.3
Update semver from 5.7.1 to 5.7.2, 6.3.0 to 6.3.1, and 7.3.8 to 7.6.0
Update word-wrap from 1.2.3 to 1.2.5

There is one more remaining package from npm audit that is forcing a bit more complex update, so I'll do that in a separate PR