search

modernweb-dev / web

Guides, tools and libraries for modern web development.
https://modern-web.dev
MIT License
2.15k stars 271 forks source link

fix: replace ip dependency due to security bug CVE-2024-29415 #2752

Closed bashmish closed 1 week ago

bashmish commented 3 weeks ago

What I did

Fixes #2747

ip package is now archived on GitHub https://github.com/indutny/node-ip/ PRs with a fix won't be released image

changeset-bot[bot] commented 3 weeks ago

🦋 Changeset detected

Latest commit: 39ff6ffb1b42011c3f081036b267f553c1c441d5

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 4 packages | Name | Type | | ----------------------------- | ----- | | @web/test-runner-browserstack | Patch | | @web/test-runner-saucelabs | Patch | | @web/test-runner-core | Patch | | @web/dev-server | Patch |

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

mgriffin-scottlogic commented 1 week ago

Thanks for addressing this, does anyone know how long it might take to make it into a release? I'd like to update my dependencies to avoid this security bug as well.