reg-viz / reg-cli

📷 Visual regression test tool.
https://reg-viz.github.io/reg-cli/
MIT License
352 stars 24 forks source link

Security: update meow to address vulnerability in trim-newlines #478

Open MH4GF opened 9 months ago

MH4GF commented 9 months ago

details

A vulnerability has been reported in trim-newlines in the following: https://github.com/advisories/GHSA-7p7h-4mm5-852v So, it looks like reg-cli is increasing the version of trim-newlines in yarn resolutions: https://github.com/reg-viz/reg-cli/blob/c6f6aa5392f9eb00c14b6a3cedea1378c4048e49/package.json#L51

However, the latest version of meow, which reg-cli depend on, has resolved the version of trim-newlines: https://github.com/sindresorhus/meow/blob/fd0bc62ce47781e11da506b8e38e8668eb78a584/package.json#L84

Therefore, I thought that we could eliminate the resolutions by updating the version of meow. If you need to check the behavior, etc., I will be glad to assist you.

thanks.