Skip to content
This repository was archived by the owner on Aug 29, 2025. It is now read-only.

refactor: updates dependencies to fix CVE-2015-8315 - #62

Merged
joshwiens merged 5 commits into
masterfrom
fix/security
Apr 30, 2018
Merged

joshwiens merged 5 commits into
masterfrom
fix/security

Conversation

@shellscape

@shellscape shellscape commented Apr 8, 2018 •

Copy link
Copy Markdown
Contributor
BREAKING CHANGE: Enforces `engines` of `"node": ">= 8.9.0"`

BREAKING CHANGE: Updates to `source-map@^0.7.2` which requires NodeJS >= 8

BREAKING CHANGE: Updates to `loader-utils@^1.1.0` &  `loderUtils.getOptions`

Comment thread package.json Outdated
"loader-utils": "~0.2.2",
"source-map": "~0.6.1"
"loader-utils": "^1.1.0",
"source-map": "^0.7.2"

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Btw for source-map@7 and above.

Breaking change: Drop support for Node < 8. If you want to support older versions of node, please use v0.6 or below.

Looks like breaking change for loader

@joshwiens joshwiens left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is breaking w/ the loader-utils upgrade as well

@joshwiens joshwiens changed the title fix(security): updates dependencies to fix CVE-2015-8315 refactor: updates dependencies to fix CVE-2015-8315 Apr 18, 2018

@joshwiens joshwiens left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Need to set engines to Minimum of Node 8.9.0

…ement

BREAKING CHANGE: Enforces `engines` of `"node": ">= 8.9.0"`
@joshwiens
joshwiens merged commit ac30677 into master Apr 30, 2018
@joshwiens
joshwiens deleted the fix/security branch April 30, 2018 12:33
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants