Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency grunt to v1 #3

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

mend-for-github-com[bot]
Copy link

This PR contains the following updates:

Package Type Update Change
grunt (source) devDependencies major ~0.4.1 -> ~1.3.0

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score CVE
High High 9.8 CVE-2020-28282
High High 9.1 CVE-2019-10744
High High 9.1 CVE-2019-10744
High High 8.1 WS-2019-0063
High High 7.5 CVE-2016-10540
High High 7.5 CVE-2016-10540
High High 7.5 WS-2019-0032
High High 7.4 CVE-2020-8203
High High 7.4 CVE-2020-8203
High High 7.2 CVE-2021-23358
High High 7.2 CVE-2021-23337
High High 7.2 CVE-2021-23337
High High 7.1 CVE-2020-7729
Medium Medium 6.5 CVE-2019-1010266
Medium Medium 6.5 CVE-2019-1010266
Medium Medium 6.5 CVE-2018-3721
Medium Medium 6.5 CVE-2018-3721
Medium Medium 5.6 CVE-2018-16487
Medium Medium 5.6 CVE-2018-16487

Release Notes

gruntjs/grunt

v1.3.0

Compare Source

  • Merge pull request #​1720 from gruntjs/update-changelog-deps faab6be
  • Update Changelog and legacy-util dependency 520fedb
  • Merge pull request #​1719 from gruntjs/yaml-refactor 7e669ac
  • Switch to use safeLoad for loading YML files via file.readYAML. e350cea
  • Merge pull request #​1718 from gruntjs/legacy-log-bumo 7125f49
  • Bump legacy-log 00d5907

v1.2.1

Compare Source

v1.2.0

Compare Source

v1.1.0

Compare Source

  • Update to mkdirp ~1.0.3
  • Only support versions of Node >= 8

v1.0.4

Compare Source

v1.0.3

Compare Source

v1.0.2

Compare Source

v1.0.1

Compare Source

v1.0.0

Compare Source

v0.4.5

Compare Source

v0.4.4

Compare Source

v0.4.3

Compare Source

v0.4.2

Compare Source


  • If you want to rebase/retry this PR, click this checkbox.

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by WhiteSource label Feb 4, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by WhiteSource
Development

Successfully merging this pull request may close these issues.

0 participants