From 90208de8805dd762596c0028b8637ffbed23e371 Mon Sep 17 00:00:00 2001 From: Andrey Sitnik Date: Fri, 29 Sep 2023 00:14:19 +0200 Subject: [PATCH] Release 8.4.31 version --- CHANGELOG.md | 3 +++ lib/processor.js | 2 +- package.json | 2 +- 3 files changed, 5 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 4d6f078e5..05c9da70e 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,6 +1,9 @@ # Change Log This project adheres to [Semantic Versioning](https://semver.org/). +## 8.4.31 +* Fixed `\r` parsing to fix CVE-2023-44270. + ## 8.4.30 * Improved source map performance (by Romain Menke). diff --git a/lib/processor.js b/lib/processor.js index d9ed1ffa1..92842b699 100644 --- a/lib/processor.js +++ b/lib/processor.js @@ -7,7 +7,7 @@ let Root = require('./root') class Processor { constructor(plugins = []) { - this.version = '8.4.30' + this.version = '8.4.31' this.plugins = this.normalize(plugins) } diff --git a/package.json b/package.json index 55b94dd61..5c6e5fee4 100755 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "postcss", - "version": "8.4.30", + "version": "8.4.31", "description": "Tool for transforming styles with JS plugins", "engines": { "node": "^10 || ^12 || >=14"