Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
2.1.0
->2.2.2
By merging this PR, the below vulnerabilities will be automatically resolved:
Release Notes
json5/json5
v2.2.2
Compare Source
__proto__
are added to objects and arrays.([#199]) This also fixes a prototype pollution vulnerability reported by
Jonathan Gregson! ([#295]).
v2.2.1
Compare Source
v2.2.0
Compare Source
is no need to install
@types/json5
. ([#236], [#244])v2.1.3
Compare Source
[#229])
v2.1.2
Compare Source
minimist
tov1.2.5
. ([#222])v2.1.1
Compare Source
package.json
andpackage.json5
include amodule
property sobundlers like webpack, rollup and parcel can take advantage of the ES Module
build. ([#208])
stringify
outputs\0
as\\x00
when followed by a digit. ([#210])