Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add yarn resolution for bl because of security vulnerability #5016

Merged
merged 1 commit into from
Sep 9, 2020

Conversation

jeanregisser
Copy link
Contributor

Description

Add yarn resolution for bl because of security vulnerability
See https://www.npmjs.com/advisories/1555

Other changes

None

Tested

Waiting for test to pass on CircleCI.

Related issues

Discussed on Slack

Backwards compatibility

Not entirely sure since there was some packages depending on different major versions of bl:

  • ^1.0.0
  • ^3.0.0
  • ^4.0.0

@jeanregisser jeanregisser added the automerge Have PR merge automatically when checks pass label Sep 9, 2020
@mergify mergify bot merged commit 24ecf65 into master Sep 9, 2020
@mergify mergify bot deleted the jeanregisser/fix-bl-security branch September 9, 2020 10:26
yorhodes pushed a commit that referenced this pull request Sep 9, 2020
### Description

Add yarn resolution for `bl` because of security vulnerability
See https://www.npmjs.com/advisories/1555

### Other changes

None

### Tested

Waiting for test to pass on CircleCI.

### Related issues

Discussed on Slack

### Backwards compatibility

Not entirely sure since there was some packages depending on different major versions of `bl`:
-  `^1.0.0`
-  `^3.0.0`
-  `^4.0.0`
jeanregisser added a commit that referenced this pull request Sep 15, 2020
### Description

Add yarn resolution for `bl` because of security vulnerability
See https://www.npmjs.com/advisories/1555

### Other changes

None

### Tested

Waiting for test to pass on CircleCI.

### Related issues

Discussed on Slack

### Backwards compatibility

Not entirely sure since there was some packages depending on different major versions of `bl`:
-  `^1.0.0`
-  `^3.0.0`
-  `^4.0.0`
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
automerge Have PR merge automatically when checks pass
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants