ansi-align icon indicating copy to clipboard operation
ansi-align copied to clipboard

Release version 3.0.1 with updated dependencies

Open amitzur opened this issue 5 years ago • 5 comments

Along the past 2 years greenkeeper has updated many dependencies. Since this package has 5.7M weekly downloads, it makes sense to release a new patch version with these updated dependencies. I encountered this when inspecting boxen's dependency tree, and string-width can't be deduped because of this.

Thanks!

amitzur avatar Nov 19 '19 16:11 amitzur

I'm trying to fix a vulnerability with that needs me to bump to ansi-regex@^5.0.1.

From the npm package my ansi-align package had a "string-width": "^3.0.0". I had to manually bump it in my yarn.lock to "string-width": "^4.1.0" to fix it (which also matched this repos package.json).

So yeah we need to release v3.0.1 with the current dependencies in package.json.

mobeigi avatar Sep 24 '21 09:09 mobeigi

@nexdrew - Any chance this can be looked at? Is this package still being maintained?

petewalker avatar Sep 27 '21 09:09 petewalker

@amitzur @kpkonghk01 @mobeigi @petewalker Apologies for the long delay, just published [email protected] that bumps the string-width dependency to semver range ^4.1.0, which will install version 4.2.3 at the time of this writing.

Please let me know if this does or does not satisfy your concerns with either de-duping or patching a security vulnerability.

I realize the current latest version of string-width is 5.0.1, but that will require a major version bump for the next release of ansi-align, so I will attempt to tackle that later.

nexdrew avatar Sep 27 '21 12:09 nexdrew

Hi, when the update to string-width 5.0.1 will come? There is vulnerability in ansi-regex. Thanks

opravil-jan avatar Nov 02 '21 03:11 opravil-jan

Also having issues here when using string-width 6.1.0

node_modules/ansi-align/index.js:3
const stringWidth = require('string-width')
                    ^

Error [ERR_REQUIRE_ESM]: require() of ES Module node_modules/string-width/index.js from node_modules/ansi-align/index.js not supported.
Instead change the require of node_modules/string-width/index.js in node_modules/ansi-align/index.js to a dynamic import() which is available in all CommonJS modules.
    at Object.<anonymous> (node_modules/ansi-align/index.js:3:21) {
  code: 'ERR_REQUIRE_ESM'
}

Node.js v20.4.0

platzhersh avatar Sep 18 '23 15:09 platzhersh