Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: Remove CVE-2022-3517 vulnerability #4699

Merged
merged 2 commits into from
Jun 28, 2024

Conversation

JhontSouth
Copy link
Collaborator

@JhontSouth JhontSouth commented Jun 28, 2024

Addresses #4684
#minor

Description

This PR updates the version of the package minimatch to avoid the CVE-2022-3517 vulnerability.

Specific Changes

  • Updated minimatch 3.0.2 to 3.1.2.

Testing

The following image shows the minimatch versions installed after the update.
image

@JhontSouth JhontSouth requested a review from a team as a code owner June 28, 2024 16:01
@coveralls
Copy link

coveralls commented Jun 28, 2024

Pull Request Test Coverage Report for Build 9715602020

Details

  • 0 of 0 changed or added relevant lines in 0 files are covered.
  • No unchanged relevant lines lost coverage.
  • Overall coverage decreased (-0.4%) to 84.075%

Totals Coverage Status
Change from base Build 9702757048: -0.4%
Covered Lines: 20343
Relevant Lines: 22900

💛 - Coveralls

@tracyboehrer tracyboehrer merged commit 2474044 into main Jun 28, 2024
12 checks passed
@tracyboehrer tracyboehrer deleted the southworks/fix/minimatch-vulnerability branch June 28, 2024 16:14
@coveralls
Copy link

coveralls commented Jun 28, 2024

Pull Request Test Coverage Report for Build 9715602020

Details

  • 0 of 0 changed or added relevant lines in 0 files are covered.
  • No unchanged relevant lines lost coverage.
  • Overall coverage remained the same at 84.431%

Totals Coverage Status
Change from base Build 9702757048: 0.0%
Covered Lines: 20425
Relevant Lines: 22900

💛 - Coveralls

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants