Skip to content

Update qs package to latest #2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

RMacfarlane
Copy link

Hi, thanks for your work!

I'd like to bump the version of qs here to fix this vulnerability: GHSA-hrpp-h998-j3pp

I've run the tests locally and also looked through the changelog for qs here.

@simov
Copy link
Owner

simov commented Jul 13, 2023

Thanks for contributing. I'm just curious though, how did you find out about it since the caret ^ range will install up to the latest minor. Meaning you will get qs version 6.11.2 on new install and when doing update with npm up for example.

@RMacfarlane
Copy link
Author

Ah, sorry, this is unnecessary, you're right. I have a project using [email protected] and my lockfile had qs at 6.10.1 from that. Updating to the latest version of grant fixes it. Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants