Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update Jest to no longer take a dependency on 'merge' #1108

Closed
eljefe223 opened this issue Nov 1, 2018 · 1 comment
Closed

Update Jest to no longer take a dependency on 'merge' #1108

eljefe223 opened this issue Nov 1, 2018 · 1 comment
Labels
bug A bug status:blocked Any issue blocked by another warning:stale No recent activity within a reasonable amount of time

Comments

@eljefe223
Copy link
Contributor

jest takes a devDependency on exec-sh which takes a dependency on merge.

merge has a security vulnerability in versions before 1.2.0.

exec-sh has removed the dependency on merge here

Here is the the issue on Jest to update their dependency on exec-sh.

Once available we will need to version bump jest

@eljefe223 eljefe223 added bug A bug status:blocked Any issue blocked by another labels Nov 1, 2018
@stale
Copy link

stale bot commented Jan 31, 2019

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

@stale stale bot added the warning:stale No recent activity within a reasonable amount of time label Jan 31, 2019
@stale stale bot closed this as completed Feb 10, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug A bug status:blocked Any issue blocked by another warning:stale No recent activity within a reasonable amount of time
Projects
None yet
Development

No branches or pull requests

1 participant