Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update NPM registry to have latest dependencies (specifically yargs/y18n) #10897

Closed
jef1771 opened this issue Dec 1, 2020 · 2 comments
Closed

Comments

@jef1771
Copy link

jef1771 commented Dec 1, 2020

🐛 Bug Report

npm jest has outdated dependencies

To Reproduce

npm i --save jest
check package lock to see outdated yargs and subsequently y18n

Expected behavior

installing jest should have latest dependencies

Link to repl or repo (highly encouraged)

y18n has fixed a potential security issue with the current version that comes with jest. This issue also pops up on vulnerability scans

yargs/y18n#96

envinfo

System:
OS: Windows 10 10.0.18363
CPU: (12) x64 Intel(R) Core(TM) i7-8850H CPU @ 2.60GHz
Binaries:
Node: 12.14.1 - C:\Program Files\nodejs\node.EXE
npm: 6.13.4 - C:\Program Files\nodejs\npm.CMD
npmPackages:
jest: ^26.6.3 => 26.6.3

@jef1771
Copy link
Author

jef1771 commented Dec 11, 2020

looks like ya'll published a version with the patched y18n 4.0.1 so I'll close this issue.

@jef1771 jef1771 closed this as completed Dec 11, 2020
@github-actions
Copy link

This issue has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.
Please note this issue tracker is not a help forum. We recommend using StackOverflow or our discord channel for questions.

@github-actions github-actions bot locked as resolved and limited conversation to collaborators May 11, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

1 participant