search

mithi / hexapod

Blazing fast hexapod robot simulator for the web.
https://hexapod.netlify.app
Apache License 2.0
579 stars 70 forks source link

chore: Bump selfsigned to 1.10.8, node-forge to 0.10.0 #142

Closed mikong closed 3 years ago

mikong commented 3 years ago

Bump node-forge from 0.9.0 to 0.10.0 by upgrading selfsigned. This addresses CVE-2020-7720.

To patch node-forge, temporarily add the following dependency in package.json:

"selfsigned": "^1.10.7"

Run:

$ yarn upgrade selfsigned

Then remove selfsigned from package.json.

codecov[bot] commented 3 years ago

Codecov Report

Merging #142 into master will not change coverage. The diff coverage is n/a.

Impacted file tree graph

@@           Coverage Diff           @@
##           master     #142   +/-   ##
=======================================
  Coverage   75.75%   75.75%           
=======================================
  Files          58       58           
  Lines        1452     1452           
  Branches      178      178           
=======================================
  Hits         1100     1100           
  Misses        306      306           
  Partials       46       46

Continue to review full report at Codecov.

Legend - Click here to learn more Δ = absolute <relative> (impact), ø = not affected, ? = missing data Powered by Codecov. Last update 6b2cd51...c11e123. Read the comment docs.