update st to fix known vulnerability

[zkamvar]

I was alerted to a known vulnerability in the st package:
https://nvd.nist.gov/vuln/detail/CVE-2017-16224

GitHub's suggestion was to update st to version 1.2.2

PR task list:

• Update NEWS
• Add tests (if appropriate)
• Update documentation with devtools::document()

[schloerke]

Good news is that the warning is a false positive as far as rstudio/leaflet is concerned. We are only taking the distributed files from leaflet-omnivore. We are not building anything nor using st directly.

leaflet-omnivore only uses st within their test suite.

But I also like notification bubbles to go away.

[schloerke]

Hi @zkamvar

Could you ...

2. Ensure that you have signed the individual or corporate contributor agreement as appropriate. You can send the signed copy to jj@rstudio.com.

Excerpt from rstudio/httpuv package, which you had no reason to know existed.

Please let me know when you've sent the email. Thank you for your help!

Best,
Barret

[zkamvar]

Hi @schloerke,

I sent the email just before I made the pull request, hopefully it should be in the mailbox by now :)

[zkamvar]

Bump