-
Notifications
You must be signed in to change notification settings - Fork 786
New issue
Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? # to your account
Update fileset
dependency per https://nodesecurity.io/advisories/118
#653
Comments
Fileset 2.0.2 has now been released with this minimatch dependency update: |
Any updates here? |
Hi, is there any news on this? |
Bump. |
I've not had time to take a look and it is not a simple update since one of the tests fail and I need to figure out why. Will get to it soon, |
fileset has always ignored node_modules mklabs/node-fileset@c6593c0 So this testcase failed. |
+1 |
Looks, like there is an overall solution: #673 |
# for free
to join this conversation on GitHub.
Already have an account?
# to comment
The
minimatch
NPM module has been patched due to a regular expression denial of service:istanbul
uses thefileset
module which depends onminimatch
fileset
here: Update minimatch version mklabs/node-fileset#25Once this is merged and a new release of
fileset
is released then a pull request can be createdThe text was updated successfully, but these errors were encountered: