Update mkdirp - Githubissues

michaelleeallen / mocha-junit-reporter

A JUnit XML reporter for mocha.

MIT License

144 stars 153 forks source link

Update mkdirp #168

Closed nied closed 1 year ago

nied commented 2 years ago

Hi! 👋 This PR does two things:

Updates the lock file to version 2
Updates mkdirp which drops a dependency on minimist v.1.2.5 which is vulnerable to https://github.com/advisories/GHSA-xvch-5gv4-984h.

Let me know if you need anything else!

clayreimann commented 2 years ago

Thanks @nied, would you mind rebasing this PR? Also, do we need to upgrade npm versions in our CI or something else to ensure that we can use a v2 lockfile?

clayreimann commented 1 year ago

Addressed in another PR