Skip to content

v1.2.5-corrected: Removing Security Vulnerabilities

Latest
Latest
Compare
Choose a tag to compare
@niwong niwong released this 28 Apr 19:33
v1.2.5-corrected
3a9e462

Release v1.2.5-corrected adds support for:

  • Removing security vulnerabilities identified by NPM using npm audit fix --force to update dependencies.
  • Axios -- one of the two paubox-node main dependencies -- was updated to v0.21.1 and should not introduce any breaking changes to the public API according to the Axios Changelog.
  • Mocha our javascript testing framework was also updated and introduces breaking changes for those that want to test the API. Mocha v8.3.2 requires at least Node v10.12.0 or newer. I did not consider this a breaking change of the paubox-node repo because Mocha is only used as a developer dependency for the purposes of testing.
  • papaparse, which is only used by our test suite to read testing data from a CSV, was also updated to v5.3.0 to patch a security vulnerability. According to PapaParse's Changelog, as of v5.0.0 support for Node 6.x has been dropped.
  • We've also created a Changelog to monitor updates
  • Adopting Semantic Versioning naming conventions for paubox-node.
Assets 2
Loading