Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bumps the nested dependency of nth-check to v2.0.1 #1422

Merged
merged 1 commit into from
Apr 4, 2022

Conversation

AMoo-Miki
Copy link
Collaborator

@AMoo-Miki AMoo-Miki commented Apr 2, 2022

Signed-off-by: Miki miki@amazon.com

Description

nth-check is a dependency of cheerio > css-select. Even though our dependency on cheerio@0.22.0 pulls in nth-check@~1.0.1, its signature hasn't changed* in nth-check@2.0.1 and a resolution to bump works.

(*) The signature has changed but is backward compatible.

Issues Resolved

Resolves #1081

Check List

  • New functionality includes testing.
    • All tests pass
      • yarn test:jest
      • yarn test:jest_integration
      • yarn test:ftr
  • New functionality has been documented.
  • Commits are signed per the DCO using --signoff

`nth-check` is a dependency of `cheerio > css-select`. Even though our dependency on `cheerio@0.22.0` pulls in `nth-check@~1.0.1`, its signature hasn't changed in `nth-check@2.0.1` and a resolution to bump works.

Resolves opensearch-project#1081

Signed-off-by: Miki <miki@amazon.com>
@AMoo-Miki AMoo-Miki requested a review from a team as a code owner April 2, 2022 03:51
@@ -16970,7 +16963,7 @@ side-channel@^1.0.3, side-channel@^1.0.4:
get-intrinsic "^1.0.2"
object-inspect "^1.9.0"

signal-exit@^3.0.0, signal-exit@^3.0.2, signal-exit@^3.0.3:
signal-exit@^3.0.0, signal-exit@^3.0.2, signal-exit@^3.0.3, signal-exit@^3.0.7:
Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is a stylelint dep that was probably missing from an earlier commit.

@@ -17565,7 +17558,7 @@ string-width@^1.0.1:
is-fullwidth-code-point "^2.0.0"
strip-ansi "^4.0.0"

"string-width@^1.0.2 || 2 || 3 || 4", string-width@^4.0.0, string-width@^4.1.0, string-width@^4.2.0:
"string-width@^1.0.2 || 2 || 3 || 4", string-width@^4.0.0, string-width@^4.1.0, string-width@^4.2.0, string-width@^4.2.3:
Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is a stylelint dep that was probably missing from an earlier commit.

Copy link
Member

@ashwin-pc ashwin-pc left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

@AMoo-Miki AMoo-Miki merged commit a62dd96 into opensearch-project:main Apr 4, 2022
@tmarkley tmarkley added dependencies Pull requests that update a dependency file v2.0.0 cve Security vulnerabilities detected by Dependabot or Mend labels Apr 12, 2022
ananzh added a commit to ananzh/OpenSearch-Dashboards that referenced this pull request Mar 30, 2023
…to 2.0.1

Issue Resolve
opensearch-project#1081

Backport PR
opensearch-project#1422

Signed-off-by: Anan Zhuang <ananzh@amazon.com>
ananzh added a commit to ananzh/OpenSearch-Dashboards that referenced this pull request Mar 30, 2023
Issue Resolve
opensearch-project#1081

Backport PR
opensearch-project#1422

Signed-off-by: Anan Zhuang <ananzh@amazon.com>
ananzh added a commit to ananzh/OpenSearch-Dashboards that referenced this pull request Mar 30, 2023
Issue Resolve
opensearch-project#1081

Backport PR
opensearch-project#1422

Signed-off-by: Anan Zhuang <ananzh@amazon.com>
ananzh added a commit that referenced this pull request Mar 30, 2023
Issue Resolve
#1081

Backport PR
#1422

Signed-off-by: Anan Zhuang <ananzh@amazon.com>
opensearch-trigger-bot bot pushed a commit that referenced this pull request Mar 30, 2023
Issue Resolve
#1081

Backport PR
#1422

Signed-off-by: Anan Zhuang <ananzh@amazon.com>
(cherry picked from commit 430c93b)
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
ashwin-pc pushed a commit that referenced this pull request Apr 3, 2023
Issue Resolve
#1081

Backport PR
#1422


(cherry picked from commit 430c93b)

Signed-off-by: Anan Zhuang <ananzh@amazon.com>
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
cve Security vulnerabilities detected by Dependabot or Mend dependencies Pull requests that update a dependency file v2.0.0
Projects
None yet
Development

Successfully merging this pull request may close these issues.

CVE-2021-3803 (High) detected in nth-check-1.0.2.tgz
4 participants