Skip to content

Update of dependencies + Support of file in command - #10

Open
nicolasventer wants to merge 3 commits into
lepikhinb:masterfrom
nicolasventer:master
Open

Update of dependencies + Support of file in command#10
nicolasventer wants to merge 3 commits into
lepikhinb:masterfrom
nicolasventer:master

Conversation

@nicolasventer

Copy link
Copy Markdown

Hello,

This PR contains 2 modifications (in 2 different commits), you can tell me if you need a split.

Update of dependencies (build)

I used the command npm-check-updates except for eslint (that has breaking changes).

I also used micromatch - npm instead of minimatch - NPM since it is more up to date.

I removed the ^ in the package.json to ensure the version of installed package.

Support of file in command (feat)

I add the file in the command that is a feature pretty convenient when the command depends on the changed file.

I also make the console.info("Running", ...) (from line 53 to line 25) executed only when options.silent is false.

I updated the documentation according to the modification.

@bretto36

Copy link
Copy Markdown

@lepikhinb Could we revisit this, the minimatch has a security issue through brace-expansion. Switching to the micro match version will fix this

brace-expansion can't be automatically updated to a non-vulnerable version. The following top-level dependencies still require a vulnerable brace-expansion and need to be updated:

  • vite-plugin-watch: requires brace-expansion@^2.0.1 (via minimatch@5.1.9)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants