Skip to content

[Dev Deps] move semver from Deps to Dev Deps#944

Merged
ljharb merged 1 commit intojsx-eslint:mainfrom
SukkaW:move-semver-to-devdeps
Aug 11, 2023
Merged

[Dev Deps] move semver from Deps to Dev Deps#944
ljharb merged 1 commit intojsx-eslint:mainfrom
SukkaW:move-semver-to-devdeps

Conversation

@SukkaW
Copy link
Copy Markdown
Contributor

@SukkaW SukkaW commented Jul 5, 2023

Closes #943

I noticed that semver is actually only used in the unit test cases, so it is safe to move semver to the devDependencies.

image

Copy link
Copy Markdown
Member

@ljharb ljharb left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good catch!

@ljharb
Copy link
Copy Markdown
Member

ljharb commented Jul 5, 2023

This will be merged as part of #941.

@ljharb ljharb self-assigned this Jul 5, 2023
@ljharb ljharb force-pushed the move-semver-to-devdeps branch from 7def298 to 4da13e7 Compare August 11, 2023 22:37
@ljharb
Copy link
Copy Markdown
Member

ljharb commented Aug 11, 2023

I ended up removing the change from #941, so now I've rebased this, and will land it shortly.

@codecov
Copy link
Copy Markdown

codecov Bot commented Aug 11, 2023

Codecov Report

Merging #944 (4da13e7) into main (5999555) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##             main     #944   +/-   ##
=======================================
  Coverage   99.29%   99.29%           
=======================================
  Files         104      104           
  Lines        1554     1554           
  Branches      522      522           
=======================================
  Hits         1543     1543           
  Misses         11       11           

@ljharb ljharb merged commit 4da13e7 into jsx-eslint:main Aug 11, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

semver vulnerable to Regular Expression Denial of Service

2 participants