-
Notifications
You must be signed in to change notification settings - Fork 9.4k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
deps: update outdated transitive deps #9347
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
version "0.18.0" | ||
resolved "https://registry.yarnpkg.com/axios/-/axios-0.18.0.tgz#32d53e4851efdc0a11993b6cd000789d70c05102" | ||
integrity sha1-MtU+SFHv3AoRmTts0AB4nXDAUQI= | ||
version "0.18.1" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
😱 what no we can't use 0.18.1
!!!
:)
version "3.2.6" | ||
resolved "https://registry.yarnpkg.com/debug/-/debug-3.2.6.tgz#e83d17de16d8a7efb7717edbe5fb10135eee629b" | ||
integrity sha512-mel+jf7nrtEl5Pn1Qx46zARXKDpBbvzezse7p7LqINmdoIk8PYP5SySaxEmYv6TZ0JyEKA1hsCId6DIhgITtWQ== | ||
debug@=3.1.0, debug@^3.1.0: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
interesting that follow-redirects dropped down to 3.1.0 of debug and can only use 3.1.0...
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
interesting that follow-redirects dropped down to 3.1.0 of debug and can only use 3.1.0...
oh yeah, really weird. I'm almost curious enough to dig into it, but not quite :)
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
ah, the answer was not that interesting and makes sense:
"Fix to debug 3.1.0 for Node 4 compatibility."
(they updated to 3.2.6 and then to 4.something in releases in the months after that, but axios hasn't kept up)
fixes some security alert noise