From 4fc468d27e7344691199a1d11d27c77b2813b4fe Mon Sep 17 00:00:00 2001 From: Anton Drukh Date: Wed, 26 Dec 2018 10:30:24 +0200 Subject: [PATCH 1/2] Remove vulnerabilities by promoting deps' versions Using the `^` notation to allow the deps of this package to move forward as long as non-breaking changes are introduced to the dependencies. This will remove 9 out 10 vulnerabilities currently introduced by this package's dependencies. --- package.json | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/package.json b/package.json index 822cb28..aba9182 100644 --- a/package.json +++ b/package.json @@ -31,11 +31,11 @@ "lib" ], "dependencies": { - "bluebird": "3.0.6", - "protobufjs": "5.0.1", - "request": "2.67.0", - "restler": "3.4.0", - "ws": "1.1.1" + "bluebird": "^3.0.6", + "protobufjs": "^5.0.1", + "request": "^2.67.0", + "restler": "^3.4.0", + "ws": "^1.1.1" }, "devDependencies": { "archiver": "0.20.0", From 0e3569d1149f575022d933c486a31f284a8caad4 Mon Sep 17 00:00:00 2001 From: Anton Drukh Date: Wed, 26 Dec 2018 10:30:58 +0200 Subject: [PATCH 2/2] Bump version to 0.13.27 Allow a manual release with a newer version. --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index aba9182..cd3d2ff 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "cf-client", - "version": "0.13.26", + "version": "0.13.27", "description": "A Cloud Foundry Client for Node.js", "author": "Juan Antonio Breña Moral ", "license": "Apache-2.0",