node-bunyan icon indicating copy to clipboard operation
node-bunyan copied to clipboard

Published 20 hours ago • verified publisher icon trentm

fix: bump moment to 2.29.4 in optionalDependencies

Open richardkazuomiller opened this issue 2 years ago • 3 comments

Fixes #692

The order of the dependencies is changed because npm install --save-optional x puts dependencies in alphabetical order.

richardkazuomiller avatar Aug 24 '22 16:08 richardkazuomiller

@trentm Are you interested in this update or shall we close it?

richardkazuomiller avatar Oct 03 '22 17:10 richardkazuomiller

@trentm @richardkazuomiller , this might fix two SNYK issues: https://security.snyk.io/vuln/SNYK-JS-MOMENT-2440688 and https://security.snyk.io/vuln/SNYK-JS-MOMENT-2944238. Can't wait. Thanks.

hoangquanglam avatar Oct 10 '22 16:10 hoangquanglam

Hello, any update on this?

Thanks!

Edit: I found a workaround:

yarn remove bunyan --save
yarn add bunyan --save --ignore-optionals
yarn list v1.22.18
warning Filtering by arguments is deprecated. Please use the pattern option instead.
└─ [email protected]

eexit avatar Nov 06 '22 11:11 eexit