Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

patch vulnerability bump pug to 3.0.3 #350

Merged
merged 1 commit into from
Oct 23, 2024
Merged

patch vulnerability bump pug to 3.0.3 #350

merged 1 commit into from
Oct 23, 2024

Conversation

FuhuXia
Copy link
Member

@FuhuXia FuhuXia commented Oct 23, 2024

Fix https://github.com/GSA/datagov-11ty/security/dependabot/41

Changes proposed in this pull request:

  • add pug 3.0.3 in package.json
  • run npm i --package-lock-only to update package-lock.json

@FuhuXia FuhuXia requested a review from a team October 23, 2024 13:50
@FuhuXia FuhuXia merged commit 77cf3e7 into main Oct 23, 2024
6 checks passed
@FuhuXia FuhuXia deleted the update-pug branch October 23, 2024 14:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants