stoeffel / elm-verify-examples

BSD 3-Clause "New" or "Revised" License
167 stars 14 forks source link

Update version of yargs to address security issue #86

Closed jwoudenberg closed 5 years ago

jwoudenberg commented 5 years ago

This addresses a security issue with mem, which is a dependency of os-locale, which is a dependency of yargs, which is a dependency of elm-verify-examples. Unfortunately addressing the issue requires us to update yargs two major versions.

Luckily the major versions don't seem to introduce a whole bunch of breaking changes and, as far as I can see, none relevant for elm-verify-examples.

Related issue in the yargs repo: https://github.com/yargs/yargs/pull/1270

Yargs changelog: https://github.com/yargs/yargs/blob/master/CHANGELOG.md

Breaking changes in version 13.x

Breaking changes in version 12.x:

jwoudenberg commented 5 years ago

Thank you! Would it be possible to do a release with these changes? I want to move a project to this version to get rid of a security warning.

stoeffel commented 5 years ago

Published with elm-verify-examples@4.0.1.