mirror of
https://github.com/ether/etherpad-lite.git
synced 2026-05-09 22:26:18 +02:00
dependencies: update wd, 1.10.3 -> 1.11.1
This is just a dev dependency, so no real risks, but it's better not to scare
users.
Reported vulnerability before this change:
$ npm audit
=== npm audit security report ===
# Run npm update cryptiles --depth 4 to resolve 1 vulnerability
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ High │ Insufficient Entropy │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ cryptiles │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ wd [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ wd > request > hawk > cryptiles │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://nodesecurity.io/advisories/720 │
└───────────────┴──────────────────────────────────────────────────────────────┘
This commit is contained in:
parent
194697a960
commit
fe20ffa202
@ -67,7 +67,7 @@
|
||||
"mocha": "5.2.0",
|
||||
"nyc": "^12.0.2",
|
||||
"supertest": "3.0.0",
|
||||
"wd": "1.10.3"
|
||||
"wd": "1.11.1"
|
||||
},
|
||||
"engines": {
|
||||
"node": ">=6.9.0",
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user