Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Dependency "ip" needs to be replaced #3623

Closed
muffl0n opened this issue Jun 8, 2024 · 2 comments
Closed

Dependency "ip" needs to be replaced #3623

muffl0n opened this issue Jun 8, 2024 · 2 comments
Labels
bug Something isn't working O: stale 🤖 This issue or pull request is stale, it will be closed if there is no activity

Comments

@muffl0n
Copy link

muffl0n commented Jun 8, 2024 •
edited
Loading

As described in #3619 we need to update the transitive dependency ip to a version without a known CVE or get rid of it completely.

Afterwards, e7a6125 and 8ae5f2d need to be reverted.
@muffl0n muffl0n added the bug Something isn't working label Jun 8, 2024
@muffl0n muffl0n mentioned this issue Jun 8, 2024
Closed
muffl0n added a commit to muffl0n/megalinter that referenced this issue Jun 10, 2024
@muffl0n
chore(deps): upgrade dependencies yeoman-environment to 4.4.1 and yeo…
fd08866 
…man-generator to 7.2.0

fixes oxsecurity#3623
@muffl0n muffl0n mentioned this issue Jun 10, 2024
Closed
@muffl0n
Copy link
Author

muffl0n commented Jun 10, 2024

#3647 upgrades yeoman-environment and yeoman-generator. This gets rid of the transitive dependency ip cause ip-address is used now.

@github-actions GitHub Actions
Copy link
Contributor

This issue has been automatically marked as stale because it has not had recent activity.
It will be closed in 14 days if no further activity occurs.
Thank you for your contributions.

If you think this issue should stay open, please remove the O: stale 🤖 label or comment on the issue.

@github-actions github-actions bot added the O: stale 🤖 This issue or pull request is stale, it will be closed if there is no activity label Jul 11, 2024
@github-actions github-actions bot closed this as not planned Won't fix, can't repro, duplicate, stale Jul 25, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug Something isn't working O: stale 🤖 This issue or pull request is stale, it will be closed if there is no activity
Projects
None yet
Milestone
No milestone
1 participant
@muffl0n