New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update dependency nodemon to v3 - autoclosed #19

Closed

mend-for-github-com wants to merge 1 commit into main from whitesource-remediate/nodemon-3.x

mend-for-github-com bot commented Dec 5, 2023

This PR contains the following updates:

Package	Type	Update	Change
nodemon (source)	dependencies	major	`^2.0.4` -> `^3.0.0`

By merging this PR, the issue #13 will be automatically resolved and closed:

Severity	CVSS Score	CVE
Critical	9.8	CVE-2020-7788
Critical	9.8	CVE-2021-44906
High	7.5	CVE-2020-28469
High	7.5	CVE-2021-33502
High	7.5	CVE-2021-3807
High	7.5	CVE-2021-3807
High	7.5	CVE-2022-25881
High	7.5	CVE-2022-25883
High	7.5	CVE-2022-25883
Medium	5.3	CVE-2022-33987

Release Notes

remy/nodemon (nodemon)

`v3.0.0`

Bug Fixes

also watch cjs (86d5f40)
node@10 support back in (af3b9e2)
semver vuln dep (6bb8766), closes #2119

Features

always use polling on IBM i (3b58104)

BREAKING CHANGES

official support for node@8 dropped.

However there's no function being used in semver that breaks node 8,
so it's technically still possible to run with node 8, but it will
no longer be supported (or tested in CI).

`v2.0.22`

Bug Fixes

remove ts mapping if loader present (f7816e4), closes #2083

`v2.0.21`

Bug Fixes

remove ts mapping if loader present (1468397), closes #2083

`v2.0.20`

Bug Fixes

remove postinstall script (e099e91)

`v2.0.19`

Bug Fixes

Replace update notifier with simplified deps (#2033) (176c4a6), closes #1961 #2028

`v2.0.18`

Bug Fixes

revert update-notifier forcing esm (1b3bc8c)

`v2.0.17`

Bug Fixes

bump update-notifier to v6.0.0 (#2029) (0144e4f)
update packge-lock (27e91c3)

`v2.0.16`

Bug Fixes

support windows by using path.delimiter (e26aaa9)

`v2.0.15`

Bug Fixes

bump prod dep versions (54784ab)

`v2.0.14`

Bug Fixes

add windows signals SIGUSR2 & SIGUSR1 to terminate the process (#1938) (61e7abd), closes #1903 #1915 #1936 #1937 #1882 #1893

`v2.0.13`

Bug Fixes

bump update-notifier (90e7a3e), closes #1919
release process on main (9f82a48)

`v2.0.12`

Bug Fixes

windows: properly handle quoted args in event (0823f18), closes #1823

`v2.0.11`

Bug Fixes

ensure numerical OS version check (f523d0e)

`v2.0.10`

Bug Fixes

windows 8 doesn't support windows-kill (6c6cb65), closes #1876

`v2.0.9`

Bug Fixes

allow windows users to install globally again (#1874) (3242215), closes #1872

`v2.0.8`

Bug Fixes

add support for SIGINT on Windows (fixes issue #1720) (#1853) (500c1b0)

`v2.0.7`

Bug Fixes

postinstall hide message in CI (3d2320f)
redirect help (#1825) (ac0b55e), closes #1807

`v2.0.6`

Bug Fixes

ignore ./ on cwd (#1787) (03c4ed3), closes #1784

`v2.0.5`

Bug Fixes

package.main with -- arguments (#1773) (2967726), closes #1758
respect env.OPENCOLLECTIVE_HIDE (#1765) (273d774)
runOnChangeOnly=true (7e00a30), closes #1742 #1751

If you want to rebase/retry this PR, check this box


          Update dependency nodemon to v3

365b324

mend-for-github-com bot added the security fix label

mend-for-github-com bot changed the title ~~Update dependency nodemon to v3~~ Update dependency nodemon to v3 - autoclosed

mend-for-github-com bot closed this

mend-for-github-com bot deleted the whitesource-remediate/nodemon-3.x branch

March 11, 2024 09:45

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels