search

redgeoff / delta-pouch

Conflict-free collaborative editing for PouchDB
196 stars 13 forks source link

An in-range update of mocha is breaking the build 🚨 #109

Closed greenkeeper[bot] closed 6 years ago

greenkeeper[bot] commented 6 years ago

☝️ Greenkeeper’s updated Terms of Service will come into effect on April 6th, 2018.

Version 5.0.3 of mocha was just published.

Branch Build failing 🚨
Dependency mocha
Current Version 5.0.2
Type devDependency

This version is covered by your current version range and after updating it in your project the build failed.

mocha is a devDependency of this project. It might not break your production code or affect downstream projects, but probably breaks your build or test tools, which may prevent deploying or publishing.

Status Details - ❌ **ci/circleci** Your tests failed on CircleCI [Details](https://circleci.com/gh/redgeoff/delta-pouch/193?utm_campaign=vcs-integration-link&utm_medium=referral&utm_source=github-build-link)
Release Notes v5.0.3

5.0.3 / 2018-03-06

This patch features a fix to address a potential "low severity" ReDoS vulnerability in the diff package (a dependency of Mocha).

🔒 Security Fixes

🔩 Other

Commits

The new version differs by 6 commits.

  • da6e5c9 Release v5.0.3
  • 70d9262 update CHANGELOG.md for v5.0.3 [ci skip]
  • aaaa5ab fix: ReDoS vuln in mocha@5.0.2 › diff@3.3.1 (#3266)
  • 8df5727 Tidies up code after review
  • 660bccc adds unit tests covering Base.generateDiff
  • bdcb3c3 exposes generateDiff function from base reporter

See the full diff

FAQ and help There is a collection of [frequently asked questions](https://greenkeeper.io/faq.html). If those don’t help, you can always [ask the humans behind Greenkeeper](https://github.com/greenkeeperio/greenkeeper/issues/new).

Your Greenkeeper Bot :palm_tree:

greenkeeper[bot] commented 6 years ago

After pinning to 5.0.2 your tests are still failing. The reported issue might not affect your project. These imprecisions are caused by inconsistent test results.

greenkeeper[bot] commented 6 years ago

Version 5.0.4 just got published.

Your tests are still failing with this version. Compare the changes 🚨

Release Notes v5.0.4

5.0.4 / 2018-03-07

🐛 Fixes

  • #3265: Fixes regression in "watch" functionality introduced in v5.0.2 (@outsideris)
Commits

The new version differs by 3 commits.

  • 851ad29 Release v5.0.4
  • 868830a update CHANGELOG.md for v5.0.4 [ci skip]
  • eb09421 restore removed methods which still used

See the full diff

redgeoff commented 6 years ago

Replaced by https://github.com/redgeoff/delta-pouch/pull/112