aethant / aethant/merino

An in-range update of dot is breaking the build 🚨

Ouverte
#511 1 commentaire 0 réactions 0 personnes assignées Voir sur GitHub
greenkeeper
Langage dominant
Aucune donnée de langage
Étoiles
3
Forks
1
Métriques de merge des PR
Aucune PR mergée en 30 j

Description

## The dependency [dot](https://github.com/olado/doT) was updated from `1.1.2` to `1.1.3`.

🚨 [View failing branch](https://github.com/aethant/merino/compare/master...aethant:greenkeeper%2Fdot-1.1.3).

This version is **covered** by your **current version range** and after updating it in your project **the build failed**.

dot is a direct dependency of this project, and **it is very likely causing it to break**. If other packages depend on yours, this update is probably also breaking those in turn.

Status Details

- ❌ **continuous-integration/travis-ci/push:** The Travis CI build failed ([Details](https://travis-ci.org/aethant/merino/builds/622037251?utm_source=github_status&utm_medium=notification)).

---

Release Notes for v1.1.3

Tests for doT.process

Patch code injection via prototype pollution (#291)

Commits

The new version differs by 12 commits.



  • 6adbd81 docs: note

  • d00300e 1.1.3

  • 87ccef3 test: update travis versions

  • 4cc3253 chore: update dependencies

  • 320e847 test: missing test files

  • ef5f353 docs: security considerations

  • c531369 test: exclude unused code from coverage

  • b4fd211 test: doT.process

  • fa3890d test: use doT required via the main module

  • 2cf2226 fix: prevent possibility of execution of the code injected via prototype pollution when undefined is passed to compiled template function, closes #291

  • 299b4da Merge pull request #237 from EdwardBetts/spelling

  • 2dfe1af correct spelling mistake


See the full diff

FAQ and help

There is a collection of [frequently asked questions](https://greenkeeper.io/faq.html). If those don’t help, you can always [ask the humans behind Greenkeeper](https://github.com/greenkeeperio/greenkeeper/issues/new).

---

Your [Greenkeeper](https://greenkeeper.io) Bot :palm_tree:

Guide de contribution

Aucun guide de contribution indexé pour ce dépôt

Évaluation

Cette issue n'a pas encore été évaluée.

Recevez les nouvelles issues par e-mail

Un résumé court des issues GitHub adaptées aux débutants.