update latest version dependency to 7

yeoman / update-notifier

Update notifications for your CLI app

BSD 2-Clause "Simplified" License

1.76k stars 132 forks source link

update latest version dependency to 7 #224

Closed slaytr closed 2 years ago

slaytr commented 2 years ago

There is a vulnerability in latest-version's dependency that needs it to be upgraded to 7.0.0

I've forked and branched off v5.1.0 and updated the latest-version package version there to 7.0.0 and created this PR

@sindresorhus I would merge this PR, release it as v5.1.1, then revert it as needed to go back. This would be a patch version increase to fix the audit/security error for modules who are still stuck with require eg. nodemon

sindresorhus commented 2 years ago

It cannot be upgraded as the required Node.js version of the latest-version dependency does not match v5 of update-notifier.