- feat: honour previous
created
andreason
fields for a vulnerability
- chore: upgrade snyk dependency
- build(deps): bump bl from 4.0.2 to 4.0.3 (#3)
- feat: upgrade snyk dependency
- fix: patch paths shouldn't include repo itself.
- feat: automatically apply available patches when outstanding vulnerabilities.
- fix: ensure
snyk ignore
is awaited properly before proceeding.
- fix: add handling of npm 5.0 EINTEGRITY problems with sha1.
- feat: use force with second
npm install
. - revert: logging of
snyk ignore
to inherited stdio.
- fix: remove duplicates from vulnerability listing and upgrade recommendation command.
- fix: use
module.id
as back-compatible API for old versions of Node. - feat: add
--ignore-engines
and--ignore-platform
so doesn't fail on Node 8 and 10 withyarn
.
- docs: add code of conduct, security doc and some other doc tidy-up.
- feat: bump snyk version to resolve truncated response issues.
- feat: bump up buffer size
- fix: snyk module path
- fix: up spawned process buffer size.
- feat: update snyker logging format.
- feat: yarn and npm installs logged to console.
- feat: log ignored vulnerabilities.
- feat: log recommended commands for manual upgrades (i.e. major upgrades).
snyk test
commands to make use of the--prune-repeated-dependencies
flag.
- Added Rollup for bundling / minification.
- Added
yarn snyker
andyarn snyker:npm
toyarn ci
to add integration testing. - Touch-ups to the Docs.
- Add auth token to CI.
- Added Changelog and updated Docs.