Skip to content
This repository has been archived by the owner on Oct 18, 2024. It is now read-only.

[Snyk] Upgrade grunt-bump from 0.1.0 to 0.8.0 #13

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

snyk-bot
Copy link

Snyk has created this PR to upgrade grunt-bump from 0.1.0 to 0.8.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 13 versions ahead of your current version.
  • The recommended version was released 7 years ago, on 2016-04-19.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Regular Expression Denial of Service (ReDoS)
npm:semver:20150403
479/1000
Why? Has a fix available, CVSS 5.3
No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: grunt-bump from grunt-bump GitHub release notes
Commit messages
Package name: grunt-bump
  • 54ed28e chore: Release v0.8.0
  • 63bf872 chore: Release v0.7.2
  • dc8c6ce chore: update contributors
  • 3ed87ad build: update release commands
  • 586f459 chore: Release v0.7.1
  • ef7914f build: add npm bump commands
  • 0965945 chore: update grunt and other deps
  • 5676b05 Merge pull request #178 from sparanoid/patch-1
  • 9754e60 fix(docs): typo
  • ed9e086 chore: fix typo
  • 4a23a03 chore: remove console.log line
  • f16394e chore: Release v0.7.0
  • fc869f8 chore: update contributors
  • b5c513b feat: add semver metadata option
  • 97145f1 chore: add line breaks between type and val
  • e255e47 chore: Release v0.6.0
  • 3e90e95 chore: update contributors
  • 2140be2 feat: allow to push to git defaults
  • cb6569f chore: remove unused line
  • bb82cd8 chore: Release v0.5.0
  • 69a288b chore: update contributors
  • 10db25c docs: update pushTo text
  • 0c8ab2c feat: option to push tag and/or branch only
  • 0fab670 feat: allow git commit options

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant