Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Dependabot alert - Vulnerability on yarn.lock #86

Closed
aelnonym opened this issue Jun 27, 2023 · 0 comments · Fixed by #87
Closed

Dependabot alert - Vulnerability on yarn.lock #86

aelnonym opened this issue Jun 27, 2023 · 0 comments · Fixed by #87

Comments

@aelnonym
Copy link
Collaborator

Context

The full issue can be read in

https://github.com/profusion/android-enhanced-video-player/security/dependabot/1
ricardodalarme added a commit that referenced this issue Jun 27, 2023
@ricardodalarme
chore(deps): update commitlint package
d669edf 
- Dependabot found a vulnerability in the semver package that commitlint
  depends on. This PR updates commitlint to the latest version, which
  uses a patched version of semver that fixes the vulnerability.

Closes #86
@ricardodalarme ricardodalarme mentioned this issue Jun 27, 2023
Merged
3 tasks
ricardodalarme added a commit that referenced this issue Jun 28, 2023
@ricardodalarme
chore(deps): update commitlint package
d31658f 
- Dependabot found a vulnerability in the semver package that commitlint
  depends on. This PR updates commitlint to the latest version, which
  uses a patched version of semver that fixes the vulnerability.

Closes #86
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

chore(deps): update commitlint package profusion/android-enhanced-video-player
1 participant
@aelnonym