From fe20ffa2029f3ec4687ca015c3bad7b19eba4ea6 Mon Sep 17 00:00:00 2001 From: muxator Date: Wed, 28 Nov 2018 18:49:12 +0100 Subject: [PATCH] dependencies: update wd, 1.10.3 -> 1.11.1 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This is just a dev dependency, so no real risks, but it's better not to scare users. Reported vulnerability before this change: $ npm audit === npm audit security report === # Run npm update cryptiles --depth 4 to resolve 1 vulnerability ┌───────────────┬──────────────────────────────────────────────────────────────┐ │ High │ Insufficient Entropy │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Package │ cryptiles │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Dependency of │ wd [dev] │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Path │ wd > request > hawk > cryptiles │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ More info │ https://nodesecurity.io/advisories/720 │ └───────────────┴──────────────────────────────────────────────────────────────┘ --- src/package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/package.json b/src/package.json index a9dd839f8..3768e4c9d 100644 --- a/src/package.json +++ b/src/package.json @@ -67,7 +67,7 @@ "mocha": "5.2.0", "nyc": "^12.0.2", "supertest": "3.0.0", - "wd": "1.10.3" + "wd": "1.11.1" }, "engines": { "node": ">=6.9.0",