Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: add override to ensure ansi-regex is ^5.0.1 #2114

Merged
merged 2 commits into from
Aug 18, 2022
Merged

Conversation

davidjgoss
Copy link
Contributor

@davidjgoss davidjgoss commented Aug 15, 2022

πŸ€” What's changed?

Override dependency ansi-regex to ensure we get a version that fixes a security issue.

⚑️ What's your motivation?

Fixes #2109.

🏷️ What kind of change is this?

  • πŸ› Bug fix (non-breaking change which fixes a defect)

πŸ“‹ Checklist:

  • I agree to respect and uphold the Cucumber Community Code of Conduct
  • I've changed the behaviour of the code
    • I have added/updated tests to cover my changes.
  • My change requires a change to the documentation.
    • I have updated the documentation accordingly.
  • Users should know about my change
    • I have added an entry to the "Unreleased" section of the CHANGELOG, linking to this pull request.

This text was originally generated from a template, then edited by hand. You can modify the template here.

@coveralls
Copy link

coveralls commented Aug 15, 2022

Coverage Status

Coverage remained the same at 98.236% when pulling b727ae8 on fix/CVE-2021-3807 into 104c375 on main.

@davidjgoss davidjgoss merged commit 223e9c4 into main Aug 18, 2022
@davidjgoss davidjgoss deleted the fix/CVE-2021-3807 branch August 18, 2022 04:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

dependencies vulnerability CVE-2021-3807
3 participants