Update acorn to the latest version 🚀

[greenkeeper]

The dependency acorn was updated from 6.3.0 to 7.0.0.

This version is not covered by your current version range.

If you don’t accept this pull request, your project will work just like it did before. However, you might be missing out on a bunch of new features, fixes and/or performance improvements from the dependency update.

---

Publisher: marijn
License: MIT

Find out more about this release.

---

FAQ and help

There is a collection of frequently asked questions. If those don’t help, you can always ask the humans behind Greenkeeper.

---

Your Greenkeeper bot 🌴

[greenkeeper]

• The dependency acorn was updated from 6.3.0 to 7.1.0.

Update to this version instead 🚀

[greenkeeper]

• The dependency acorn was updated from 6.4.0 to 7.1.1.

Update to this version instead 🚀

[dacevedoatfluid]

Hi @ForbesLindesay, please consider merging this asap, acorn was reported vulnerable https://npmjs.com/advisories/1488. Fixed in >= 7.1.1

[tunnckoCore]

For anyone having this

yarn add EmmaGoodliffe/acorn-globals#patch-1
# or if in monorepo setup
yarn add -W EmmaGoodliffe/acorn-globals#patch-1

# or npm
npm i EmmaGoodliffe/acorn-globals#patch-1

@dacevedoatfluid @technote-space @inlightmedia and others.

[inlightmedia]

@tunnckoCore When installing the EmmaGoodliffe/acorn-globals#patch-1 patch it just marks my package tree as invalid and I can't run npm audit after. Any idea why that would happen?

Looks like the repo no longer exists.

[tunnckoCore]

@inlightmedia yup, sadly... ;/ and i suggested it in several places...

Try with ForbesLindesay/acorn-globals#greenkeeper/acorn-7.1.1.

It works for me.

just marks my package tree as invalid and I can't run npm audit after.

I don't know, I'm not using npm since day 1 of Yarn and it works with it.