pghalliday / node-BrowserStackTunnel

https://www.npmjs.com/package/browserstacktunnel-wrapper
MIT License
17 stars 24 forks source link

Updated dependencies to latest versions to fix npm audit #32

Closed Havunen closed 6 years ago

Havunen commented 6 years ago

Hey

I updated all packages to latest versions and changed usage to match new APIs ( sinonjs )

https proxy agent has security issue which is resolved in latest version

┌───────────────┬──────────────────────────────────────────────────────────────┐
│ High          │ Denial of Service                                            │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ https-proxy-agent                                            │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=2.2.0                                                      │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ karma-browserstack-launcher [dev]                            │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ https-proxy-agent                                            │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://nodesecurity.io/advisories/593                       │
Pringels commented 6 years ago

@pghalliday please review this when you get a chance? The old proxy-agent is currently breaking our build chain so I would love to see this merged :)

Pringels commented 6 years ago

Is anyone else able to merge this PR?

pghalliday commented 6 years ago

hey, sorry - will release a new version in a few minutes

Pringels commented 6 years ago

Thanks! much appreciated 👍

pghalliday commented 6 years ago

ok published in version 2.0.3, thanks