vercel / storage

Vercel Postgres, KV, Blob, and Edge Config
https://vercel.com/storage
Apache License 2.0
517 stars 58 forks source link

Remove dependency pins in @vercel/blob's package.json #651

Closed greysteil closed 7 months ago

greysteil commented 7 months ago

There's currently a low-severity vulnerability in undici and this package's dependencies are making it harder for me to update to a patched version. Any objection to unpinning the dependencies?

vercel[bot] commented 7 months ago

@greysteil is attempting to deploy a commit to the Curated Tests Team on Vercel.

A member of the Team first needs to authorize it.

changeset-bot[bot] commented 7 months ago

🦋 Changeset detected

Latest commit: 17306713889116224964606262a2f99597605efe

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 2 packages | Name | Type | | ------------------------------------- | ----- | | @vercel/blob | Patch | | vercel-storage-integration-test-suite | Patch |

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

vvo commented 7 months ago

Thank you @greysteil, that's perfectly correct PR. 🙏

socket-security[bot] commented 7 months ago

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/undici@5.28.4 environment, network, unsafe +1 1.25 MB matteo.collina

🚮 Removed packages: npm/undici@5.28.3

View full report↗︎

vercel[bot] commented 7 months ago

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Updated (UTC)
vercel-storage-next-integration-test-suite ✅ Ready (Inspect) Visit Preview Apr 8, 2024 7:44am
greysteil commented 7 months ago

Thanks @vvo! :octocat: