Ben Smith

Documentation of assets

2

**Is your feature request related to a problem? Please describe.** `docs/assets/js/vendor/lunr.min.js` was not being served from GitHub pages. **Describe the solution you'd like** The problem was on my end; I...

LWRP "version" property is being ignored

1

I was thinking I could use `@version` to set the desired version of Logstash using this cookbook because of https://github.com/lusis/chef-logstash/blob/master/resources/instance.rb#L17, which says: ``` Ruby # Encoding: utf-8 # Cookbook Name::...

Upgrade the version of JUnit vintage gradle used

1

Again for CVE-2020-15250. testImplementation 'org.junit.vintage:junit-vintage-engine:5.3.1' imports `junit:junit:4.12`... gotta move to `org.junit.vintage:junit-vintage-engine:5.10.2` to get to `junit:junit:4.13.2`.

A few remaining vulnerable dependencies

1

@bestbeforetoday thanks in advance for your time on this. Two PRs open that have both passed the checks. Should be helpful for keeping us up-to-snuff on the security/dependency side of...

@glynnbird -- I find that the `.insert()` call in the nano npm, documented here: https://www.npmjs.com/package/nano#dbinsertdoc-params-callback doesn't work when you **just** pass it a document. So yes, that would mean their...

micromatch vulnerable at v4.0.5

2

### Describe the feature you'd love to see https://github.com/chimurai/http-proxy-middleware/blob/master/package.json#L93 `micromatch` is vulnerable at v4.0.5 as per https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4067. To me, it doesn't look like they are going to cut a new...