Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build: update yarn.lock to fix audit output #174

Merged
merged 1 commit into from
Nov 28, 2023
Merged

build: update yarn.lock to fix audit output #174

merged 1 commit into from
Nov 28, 2023

Conversation

dsanders11
Copy link
Member

@dsanders11 dsanders11 commented Nov 27, 2023

We ran uuaw --audit and it resulted in a clean yarn audit.

Attempting to fix advisory: GHSA-gxpj-cx7g-858c - Regular Expression Denial of Service in debug
Scanning dependency chain:
     electron --> @electron/get --> sumchecker --> debug
[1/9] Trying from: debug@^4.1.0
    Resolving: debug@^4.1.0 --> 4.3.4
[1/9] Updating chain to latest starting at: debug@^4.1.0 results in a patched version: [email protected]
[1/9] Running yarn install now

Attempting to fix advisory: GHSA-gxpj-cx7g-858c - Regular Expression Denial of Service in debug
Scanning dependency chain:
     electron --> @electron/get --> debug
[1/8] Trying from: debug@^4.1.1
    Resolving: debug@^4.1.1 --> 4.3.4
[1/8] Updating chain to latest starting at: debug@^4.1.1 results in a patched version: [email protected]
[1/8] Running yarn install now

Attempting to fix advisory: GHSA-gxpj-cx7g-858c - Regular Expression Denial of Service in debug
Scanning dependency chain:
     mocha-multi-reporters --> debug
[1/2] Trying from: debug@^3.1.0
    Resolving: debug@^3.1.0 --> 3.2.7
[1/2] Updating chain to latest starting at: debug@^3.1.0 results in a patched version: [email protected]
[1/2] Running yarn install now

Audit is clean, looking good cap'n

@dsanders11 dsanders11 requested review from a team as code owners November 27, 2023 18:48
@up-up-and-away up-up-and-away bot changed the title chore: uuaw debug build: update yarn.lock to fix audit output Nov 28, 2023
@codebytere codebytere merged commit 5b1b794 into main Nov 28, 2023
6 checks passed
@codebytere codebytere deleted the uuaw-debug branch November 28, 2023 09:48
Copy link

🎉 This PR is included in version 2.1.1 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants