flat 2.0.1 is deprecated

[eberttc]

Hi,

flat 2.0.1 is used as a dependency in package.json.

Currently our scan in fortify show us flat as a dependency with vulnerability https://www.npmjs.com/package/flat/v/2.0.1

is there any plan to upgrade version of that dependency.?

[aarongranick-okta]

@eberttc Thanks for reporting this issue. We will update this dependency. Internal ref: OKTA-323250

[eberttc]

thanks @aarongranick-okta for quick response. Do you know when will be next release approx?

[rdegges]

Hey @aarongranick-okta, is this issue safe to close since your update was merged?

[aarongranick-okta]

@rdegges @eberttc Update has been pushed, closing this issue.

[eberttc]

Hi @aarongranick-okta , I don't find a 3.3.x with this fix. and the last release 4.1.1 don't have this fix as well . When do you plan to release this changes?

[aarongranick-okta]

@eberttc Looks like an oversight. We will release a new version 4.2 with this update. internal ref: OKTA-334579

[eberttc]

Due to 4.2 is breaking changes, is possible to have this fix in release 3.3.1 ?

[aarongranick-okta]

@eberttc Fix was released in version 3.3.2

[eberttc]

Great @aarongranick-okta