Skip to content

Conversation

joaomoreno
Copy link

This backports the security fix #564 to v5.

@joaomoreno joaomoreno requested a review from a team as a code owner July 7, 2023 13:45
@joaomoreno joaomoreno force-pushed the joao/backport-564-to-v5 branch from 0572517 to 57bfd39 Compare July 7, 2023 13:47
@wraithgar
Copy link
Member

#580 should be fixed before we go backporting anything so we don't bring new bugs along.

@wraithgar
Copy link
Member

#587 Also needs to be fixed

@lukekarrys lukekarrys force-pushed the release/v5 branch 2 times, most recently from b67c2f8 to deb5ad5 Compare July 7, 2023 17:50
@lukekarrys
Copy link
Contributor

the latest template-oss changes have been applied to release/v5. @joaomoreno can you rebase your branch so it only includes the semver.js and test/ changes?

@lukekarrys
Copy link
Contributor

The full set of changes that should be backported are:

This is a backport of the following commits squashed to land on `release/v5`: - 717534e - abdd93d - cc6fde2 - 99d8287 Ref: npm#564 Co-authored-by: joaomoreno <mail@joaomoreno.com>
@lukekarrys lukekarrys force-pushed the joao/backport-564-to-v5 branch from 74351cf to d4530b8 Compare July 7, 2023 22:37
@lukekarrys
Copy link
Contributor

@joaomoreno i was able to push to your branch with the relevant commits. waiting on CI to see if tests pass in older versions of node

@lukekarrys lukekarrys changed the title Backport to v5: fix: better handling of whitespace fix: better handling of whitespace (backport to v5) Jul 7, 2023
@joaomoreno
Copy link
Author

Sounds good, thanks @lukekarrys!

@lukekarrys lukekarrys merged commit 2f8fd41 into npm:release/v5 Jul 10, 2023
@github-actions github-actions bot mentioned this pull request Jul 10, 2023
@G-Rath
Copy link

G-Rath commented Jul 10, 2023

I've opened github/advisory-database#2483 updating the advisory for v5

@G-Rath
Copy link

G-Rath commented Jul 10, 2023

and I've opened github/advisory-database#2484 updating the advisory again for v6 and v5.

@lukekarrys
Copy link
Contributor

Thanks @G-Rath!

@joaomoreno
Copy link
Author

Thanks all!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
4 participants