Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: better handling of whitespace (backport to v5) #585

Merged
merged 1 commit into from
Jul 10, 2023

Conversation

joaomoreno
Copy link

This backports the security fix #564 to v5.

@wraithgar
Copy link
Member

#580 should be fixed before we go backporting anything so we don't bring new bugs along.

@wraithgar
Copy link
Member

#587 Also needs to be fixed

@lukekarrys lukekarrys force-pushed the release/v5 branch 2 times, most recently from b67c2f8 to deb5ad5 Compare July 7, 2023 17:50
@lukekarrys
Copy link
Contributor

the latest template-oss changes have been applied to release/v5. @joaomoreno can you rebase your branch so it only includes the semver.js and test/ changes?

@lukekarrys
Copy link
Contributor

The full set of changes that should be backported are:

This is a backport of the following commits squashed to land on
`release/v5`:

- 717534e
- abdd93d
- cc6fde2
- 99d8287

Ref: npm#564

Co-authored-by: joaomoreno <mail@joaomoreno.com>
@lukekarrys
Copy link
Contributor

@joaomoreno i was able to push to your branch with the relevant commits. waiting on CI to see if tests pass in older versions of node

@lukekarrys lukekarrys changed the title Backport to v5: fix: better handling of whitespace fix: better handling of whitespace (backport to v5) Jul 7, 2023
@joaomoreno
Copy link
Author

Sounds good, thanks @lukekarrys!

@lukekarrys lukekarrys merged commit 2f8fd41 into npm:release/v5 Jul 10, 2023
@github-actions github-actions bot mentioned this pull request Jul 10, 2023
@G-Rath
Copy link

G-Rath commented Jul 10, 2023

I've opened github/advisory-database#2483 updating the advisory for v5

@G-Rath
Copy link

G-Rath commented Jul 10, 2023

and I've opened github/advisory-database#2484 updating the advisory again for v6 and v5.

@lukekarrys
Copy link
Contributor

Thanks @G-Rath!

@joaomoreno
Copy link
Author

Thanks all!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants