Skip to content

deps: Bump ws to 3.3.2#3949

Merged
paulirish merged 1 commit intoGoogleChrome:masterfrom
crimeminister:fix/bump-dependency-ws
Nov 30, 2017
Merged

deps: Bump ws to 3.3.2#3949
paulirish merged 1 commit intoGoogleChrome:masterfrom
crimeminister:fix/bump-dependency-ws

Conversation

@crimeminister
Copy link
Contributor

@crimeminister crimeminister commented Nov 29, 2017

Remediate security vulnerability in ws@1.1.2 by updating to recent version. Here is the security advisory.

closes #3948

Remediate security vulnerability in ws@1.1.2 by updating to recent version.
Cf. https://nodesecurity.io/advisories/550
Copy link
Collaborator

@patrickhulce patrickhulce left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

went through the breaking changes since 1.x and didn't seem like we were using any of them, so lgtm! 👍

thanks again for finding and fixing @crimeminister! 🎉

@paulirish paulirish merged commit 3bdb56e into GoogleChrome:master Nov 30, 2017
@crimeminister crimeminister deleted the fix/bump-dependency-ws branch November 30, 2017 18:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Node security advisory for ws@1.1.2

3 participants