Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update @storybook/cli dependency on simple-update-notifier #23545

Conversation

jtbandes
Copy link

Closes #23544 (GHSA-c2qf-rxjj-qqgw)

What I did

Updated simple-update-notifier dependency from ^1.0.0 to ^2.0.0.

The only breaking change in this release was the minimum Node version changing to v10.

How to test

CI

Checklist

  • Make sure your changes are tested (stories and/or unit, integration, or end-to-end tests)
  • Make sure to add/update documentation regarding your changes
  • If you are deprecating/removing a feature, make sure to update
    MIGRATION.MD

Maintainers

  • When this PR is ready for testing, make sure to add ci:normal, ci:merged or ci:daily GH label to it to run a specific set of sandboxes. The particular set of sandboxes can be found in code/lib/cli/src/sandbox-templates.ts
  • Make sure this PR contains one of the labels below.

["cleanup", "BREAKING CHANGE", "feature request", "bug", "build", "documentation", "maintenance", "dependencies", "other"]

@socket-security
Copy link

New dependencies detected. Learn more about Socket for GitHub ↗︎

Packages Version New capabilities Transitives Size Publisher
simple-update-notifier 2.0.0 None +0 25.8 kB aejbrazier

@valentinpalkovic
Copy link
Contributor

Closing. Duplicate of #23396

@jtbandes jtbandes deleted the jacob/upgrade-simple-update-notifier branch July 21, 2023 07:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[Bug]: semver vulnerability due to simple-update-notifier@^1.0.0 dependency
3 participants