-
Notifications
You must be signed in to change notification settings - Fork 91
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Pin path-to-regexp #1925
Pin path-to-regexp #1925
Conversation
"nth-check": "^2.1.1" | ||
"nth-check": "^2.1.1", | ||
"express/path-to-regexp": "0.1.10", | ||
"sinon": "~19.0.2" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Why do we need this resolution for sinon if we've updated the dependency?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Bardjs uses sinon version 18 which doesn't use the latest version of path-to-regexp. So had to pin sinon to ensure the latest version is used for this.
d7f7b91
to
4e5d951
Compare
af64374
to
f1d7438
Compare
I think you accidentaly removed the yarn.lock changes from this PR |
f1d7438
to
8a832a0
Compare
Yeah, it should be fixed now |
8a832a0
to
7427dcc
Compare
7427dcc
to
90e6a13
Compare
Checked commit GilbertCherrie@90e6a13 with ruby 3.1.5, rubocop 1.56.3, haml-lint 0.51.0, and yamllint |
Update sinon to ~19.0.2 and pinned path-to-regexp to 0.1.10 to ensure we are using either the latest version of path-to-regexp or a version with patched vulnerabilities.