search

postcss / postcss-load-config

Autoload Config for PostCSS
MIT License
642 stars 72 forks source link

Update cosmiconfig to latest version #184

Closed followdarko closed 5 years ago

followdarko commented 5 years ago

Cosmiconfig below 5.0.0 hasjs-yaml deps package that has vulnerability issue. So please update it that postcss-load-config has no vulnerabilitiy too.

bmatcuk commented 5 years ago

I've got you covered in my PR =)

michael-ciniawsky commented 5 years ago

Released in v2.1.0 🎉

dskecse commented 5 years ago

@michael-ciniawsky it looks like it hasn't gotten to the v2.1.0 release https://github.com/michael-ciniawsky/postcss-load-config/blob/master/package.json#L20 as cosmiconfig is still at v5.0.0

michael-ciniawsky commented 5 years ago

@dskecse cosmiconfig: ^5.0.0 is the latest major version available? Note the ^ which should install the latest version in the minor/patch range according to semver e.g v5.2.1 (currently the latest release). Which specific issue do you have?

dskecse commented 4 years ago

@michael-ciniawsky my bad, I somehow slipped through the ^ symbol and only noticed the 5.0.0. I can confirm it worked when I updated the postcss-loader.