search

kevva / bin-build

Easily build binaries
MIT License
38 stars 13 forks source link

Bump dependencies and require Node.js 6 #14

Closed bbbco closed 5 years ago

bbbco commented 6 years ago

Bump download dependency in order to address vulnerability found in the tunnel-agent package downstream. See https://nodesecurity.io/advisories/598

Unfortunately, the download package decided to drop support for Node 4 as well. Considering the state of where we are in the evolution of Node, we might as well drop it here too and enable support for Node 10.

I also bumped the minor version of the package.

XhmikosR commented 6 years ago

Ping @kevva

rejas commented 6 years ago

Download v7.1.0 https://github.com/kevva/download/releases/tag/v7.1.0 got released, maybe you should update the dependencies accordingly?

rejas commented 6 years ago

Ping @kevva :-)

Chris3773 commented 6 years ago

Ping @kevva

stof commented 4 years ago

Any plan to release this ?

Looking at the image-webpack-loader dependency tree, I found out that optipng-bin (and other similar tool packages used by imagemin-* packages) depend on both bin-build and bin-wrapper, but end up installing 2 different versions of download (which has a large tree), because this migration to download 7 has never been released (with bin-wrapper uses version 7).

1000ch commented 2 years ago

@kevva @sindresorhus could you release the new version with this change? ideally #17 as well.

kumarrishav commented 2 years ago

Hi team, can we release this?