Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add yarn as devDependency and update the cache #73

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

trufae
Copy link
Contributor

@trufae trufae commented Jan 31, 2023

This PR fixes the git commit by adding the missing yarn devdependency (systemwide deps are a no-go), and also updates plist to the 3.0.6 because 3.0.5 have a critical vulnerability.

Funny or not npm audit cant find that issue.

More details here: GHSA-4cpg-3vgw-4877

@trufae
Copy link
Contributor Author

trufae commented Jan 31, 2023

i would appreciate if this pr gets merged and a new version of simple-plist is released

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants