Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore!: security patches and ci improvement #1487

Open
wants to merge 94 commits into
base: main
Choose a base branch
from
Open

chore!: security patches and ci improvement #1487

wants to merge 94 commits into from

Conversation

cschanaj
Copy link

@cschanaj cschanaj commented Aug 26, 2022 •
edited
Loading

BREAKING CHANGE: See cschanaj#4

  • security fixes with package upgrade
  • dropped support for node version <16
  • github action nodejs workflow & dependabot

cschanaj and others added 30 commits August 26, 2022 22:14
@cschanaj
revert: chore: remove package-lock.json
ab34ca8 
Refs: ab7c53b
@cschanaj
chore(deps): run npm audit fix
31500bb
@cschanaj
chore(deps): upgrade tap and fix test script
1176f51
@cschanaj
ci: add node.js github workflow
1c9fc3b
@cschanaj
ci: disable npm update-notifier message
c0ad222
@cschanaj
ci: update .github/workflows/node.js.yml
dc08e96
@cschanaj
ci: get ride of tap deprecation warning
f4e8b72
@cschanaj
fix: add an empty ending newline
c6e20c3
@cschanaj
chore(deps-dev): bump deprecate package [email protected]
4e79f68
@cschanaj
fix: add an empty ending newline
bfa9f22
@cschanaj
ci: run test on node 10
96ff578
@cschanaj
revert: ci: run test on node 10
c25dbf1 
Refs: 05fa38f
@cschanaj
chore(deps): run npm audit fix --force
f4d6f9c
@cschanaj
ci: add .github/dependabot.yml
6e6d28c
@cschanaj
ci: update .github/dependabot.yml
151dc1a
@cschanaj
ci: run node workflow on node lts as well
9b827f4
@dependabot
chore(deps): bump istanbul-reports from 3.0.2 to 3.1.5 (#9)
c8f7efd
@dependabot
chore(deps): bump istanbul-lib-source-maps from 4.0.0 to 4.0.1 (#8)
88bcaa0
@dependabot
chore(deps): bump istanbul-lib-instrument from 4.0.3 to 5.2.0 (#7)
f32fc19
@dependabot
chore(deps): bump yargs from 15.3.1 to 17.5.1 (#5)
19bb979
@cschanaj
chore(deps): update standard from 14.3.1 to 17.0.0 (#10)
63c9578 
* chore(deps): update standard from 14.3.1 to 17.0.0

* ci: run standard --fix

* fix: replace unexpected var with let
@cschanaj
chore(deps): update decamelize from 1.2.0 to 5.0.1 (#11)
ea1bf96
@cschanaj
ci: update appveyor.yml (#12)
5b22d6d
@cschanaj
fix: update appveyor.yml (#13)
973a07b
@cschanaj
ci: update appveyor.yml (#15)
a72306d
@cschanaj
ci: nodejs workflow on macos-latest (#14)
a7258e3
@dependabot
chore(deps): bump glob from 7.1.6 to 8.0.3 (#20)
1e55d48
@dependabot
chore(deps): bump convert-source-map from 1.7.0 to 1.8.0 (#19)
43ee97e
@dependabot
chore(deps-dev): bump source-map-support from 0.5.19 to 0.5.21 (#17)
0fd7df6
@cschanaj
revert: "chore(deps): bump glob from 7.1.6 to 8.0.3 (#20)"
6490dba 
Refs: 1e55d48
@cschanaj cschanaj changed the title chore: security patches and ci improvement chore!: security patches and ci improvement Aug 6, 2023
@jackbridger
Copy link

Since there have been no sign of merging this PR, I published a scoped version of nyc on https://www.npmjs.com/package/@cschanaj/nyc . I will maintain this scoped package on a best-effort basis without any guarantee. Use it at your own risk.

Fwiw, I am still hoping this PR get merged, so I published my scoped version in another branch https://github.com/cschanaj/nyc/tree/%40cschanaj/nyc .

Hi @cschanaj I think this was approved. Would love to see the security patch

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@cjaltic-rgare cjaltic-rgare cjaltic-rgare approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
4 participants
@cschanaj @kirtan-desai @jackbridger @cjaltic-rgare