From 90b288b5761c1849cade09c65aef944bf83f17c5 Mon Sep 17 00:00:00 2001 From: muxator Date: Fri, 3 May 2019 23:27:35 +0200 Subject: [PATCH] dependencies: update nyc, 12.0.1 -> 14.1.0 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This is just a dev dependency, so no real risks, but it's better not to scare users. Reported vulnerability before this change: $ npm audit === npm audit security report === # Run npm install --save-dev nyc@14.1.0 to resolve 1 vulnerability SEMVER WARNING: Recommended action is a potentially breaking change ┌───────────────┬──────────────────────────────────────────────────────────────┐ │ High │ Prototype Pollution │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Package │ handlebars │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Dependency of │ nyc [dev] │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Path │ nyc > istanbul-reports > handlebars │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ More info │ https://nodesecurity.io/advisories/755 │ └───────────────┴──────────────────────────────────────────────────────────────┘ --- src/package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/package.json b/src/package.json index d8d792b22..6fb0b9c13 100644 --- a/src/package.json +++ b/src/package.json @@ -69,7 +69,7 @@ }, "devDependencies": { "mocha": "5.2.0", - "nyc": "^12.0.2", + "nyc": "14.1.0", "supertest": "3.0.0", "wd": "1.11.1" },