search

sindresorhus / meow

🐈 CLI app helper
MIT License
3.53k stars 150 forks source link

Upgrade dependencies #185

Closed resynthesize closed 3 years ago

resynthesize commented 3 years ago

trim-newlines 4.0.0 has a high severity CVE vulnerability noted here: https://www.npmjs.com/advisories/1753 - this PR updates to the version mentioned in the CVE.

sindresorhus commented 3 years ago

To be clear, it doesn't affect meow at all.

pitgrap commented 3 years ago

Afaik "^" with semver already covered this update and I don't see any lock file in this repository. But anyways thanks you for the update and release!

voxpelli commented 3 years ago

@pitgrap This way users of meow will get the subdependency update for free when they update meow, else they need to do a lock-file update as well