Skip to content

Bump superstruct to at least 0.16.5#26

Merged
mcmire merged 1 commit intomainfrom
bump-superstruct
Sep 22, 2022
Merged

Bump superstruct to at least 0.16.5#26
mcmire merged 1 commit intomainfrom
bump-superstruct

Conversation

@mcmire
Copy link
Copy Markdown
Contributor

@mcmire mcmire commented Sep 22, 2022

Published versions of superstruct between 0.16.1 and 0.16.4 contained
syntax (??=) that Node did not support until v15. This effectively
changed the minimum required Node version for this package, and any
other package using this package, to v15. A fix for this issue
landed in superstruct 0.16.5, so this commit bumps that library
accordingly so as to restore compatibility with Node 14.

@mcmire mcmire requested a review from a team as a code owner September 22, 2022 20:54
Published versions of `superstruct` between 0.16.1 and 0.16.4 contained
syntax (`??=`) that Node did not support until v15. This effectively
changed the minimum required Node version for this package, and any
other package using this package, to v15. A [fix for this issue][1]
landed in `superstruct` 0.16.5, so this commit bumps that library
accordingly so as to restore compatibility with Node 14.

[1]: ianstormtaylor/superstruct#1112
@socket-security
Copy link
Copy Markdown

Socket Security Report

Dependency issues detected. If you merge this pull request, you will not be alerted to the instances of these issues again.

📜 New install scripts detected

A dependency change in this PR is introducing new install scripts to your install step.

Package Script field Location
@swc/core@1.3.2 (added) postinstall package.json via jest@28.1.3, @jest/core@28.1.3, jest-config@28.1.3, ts-node@10.9.1
Socket.dev scan summary
Issue Status
Did you mean? ✅ no new possible package typos
Install scripts ⚠️ 1 new install script detected
Telemetry ✅ no new telemetry
Troll package ✅ no new troll packages
Malware ✅ no new malware
Native code ✅ no new native modules
Bot Commands

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@2.4.2

  • @SocketSecurity ignore @swc/core@1.3.2

⚠️ Please accept the latest app permissions to ensure bot commands work properly. Accept the new permissions here.

Powered by socket.dev

Copy link
Copy Markdown
Member

@Gudahtt Gudahtt left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

@mcmire mcmire merged commit 5fb944a into main Sep 22, 2022
@mcmire mcmire deleted the bump-superstruct branch September 22, 2022 20:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants