Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Manual backport 2.x][GHSA-x565-32qp-m3vf] Bump jimp to remove phin dependency (#6977) #6985

Merged
merged 1 commit into from
Jun 10, 2024

Commits on Jun 10, 2024

  1. [GHSA-x565-32qp-m3vf] Bump jimp to remove phin dependency (opensear…

    …ch-project#6977)
    
    `jimp@0.22.0` removed all the code that used phin.
    
    `load-bmfont`, a nested dependency of `jimp` imports `phin` but that is a functionality we don't use as we don't import AngleCode bitmap fonts. With an arbitrarily bump of `phin`, this commit avoids including an offending version in the dev-deps.
    
    Signed-off-by: Miki <miki@amazon.com>
    
    (cherry picked from commit 54cd2d0)
    Signed-off-by: Miki <miki@amazon.com>
    AMoo-Miki committed Jun 10, 2024
    Configuration menu
    Copy the full SHA
    36d6758 View commit details
    Browse the repository at this point in the history