Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: Update cheerio dependency to rc.4 #456

Closed
wants to merge 3 commits into from
Closed

Conversation

jcesarmobile
Copy link
Member

@jcesarmobile jcesarmobile commented Jul 6, 2021

cheerio rc 3 depends on css-select which depends on a vulnerable version of css-what
cheerio rc 4 no longer depends on css-select, so the vulnerability should be gone

latest cheerio is rc 10, so we might want to update to that version instead, but I just updated to the following version that shouldn't have the problem

closes #455

@jcesarmobile jcesarmobile deleted the update-cheerio branch July 8, 2021 14:07
Ionitron added a commit that referenced this pull request Oct 28, 2021
# [5.0.0](v4.0.0...v5.0.0) (2021-10-28)

### Bug Fixes

* bump cheerio to rc4 ([905cff2](905cff2)), closes [#456](#456)
* update deps to match latest angular ([0100b8b](0100b8b)), closes [#455](#455) [#452](#452)

### Features

* update to support angular 12.0 ([671bfba](671bfba)), closes [#459](#459) [#460](#460)

### BREAKING CHANGES

* Apps must use Angular 12.0
@Ionitron
Copy link
Collaborator

🎉 This issue has been resolved in version 5.0.0 🎉

The release is available on:

Your semantic-release bot 📦🚀

wand1252 added a commit to wand1252/angular-toolkit-develop that referenced this pull request Aug 31, 2022
# [5.0.0](ionic-team/angular-toolkit@v4.0.0...v5.0.0) (2021-10-28)

### Bug Fixes

* bump cheerio to rc4 ([905cff2](ionic-team/angular-toolkit@905cff2)), closes [#456](ionic-team/angular-toolkit#456)
* update deps to match latest angular ([0100b8b](ionic-team/angular-toolkit@0100b8b)), closes [#455](ionic-team/angular-toolkit#455) [#452](ionic-team/angular-toolkit#452)

### Features

* update to support angular 12.0 ([671bfba](ionic-team/angular-toolkit@671bfba)), closes [#459](ionic-team/angular-toolkit#459) [#460](ionic-team/angular-toolkit#460)

### BREAKING CHANGES

* Apps must use Angular 12.0
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

fix vulnerability
2 participants